We believe that the protection of personal data is an important issue. That is why Iqony Renewables GmbH processes your data in accordance with the rules of the European Data Protection Regulation (GDPR) and other legal provisions on data protection and data security.

The following information applies to our internet presence (henceforth referred to only as "website"). It is an overview of what personal data we collect through our website, for what purposes, and how we use it. We also inform you about your rights towards us in relation to your personal data.

1. Data subject under the privacy legislation

Iqony Renewables GmbH
Rüttenscheider Str. 1-3
45128 Essen
renewables@iqony.energy

2. Person responsible for data protection

STEAG GmbH
Rüttenscheider Straße 1-3
45128 Essen
datenschutz@steag.com

3. Purpose and legal basis for processing

3.1 Purpose
You can use almost all offers on the Internet without providing us with any personal data. Only some offers and services on our website require you to enter your personal data for use. Personal data, such as name, address, email contact, etc., will only be stored with the completion of our contact form.

3.2 Legal basis
The legal basis is our legitimate interest in the publication of certain information about our company, the organization of our website in an interesting and usable manner, and the identification and correction of any technical problems (Art. 6, para. 1, ch. 1(f) GDPR).

The moment you get in touch with us through the contact form, you agree to our saving the data you provide (e.g., e-mail address, name, phone number) in order to answer your questions. Your data will be deleted after your request has been processed (Art. 6, para. 1, ch. 1(a) GDPR).

4. Features

4.1 Accessing and using the website
When you use the website, internet servers (web servers) automatically record and analyze technical access data.
These data include:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Meridian Time (GMT)
• Content of the request (concrete pages)
• Access status/HTTP status code
• Amount of data transmitted
• Web site from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

This data is partly transmitted automatically based on the settings of your device. It is partly necessary to display our website correctly and make it secure, as well as to detect and solve any technical problems (§ 25 para. 2 no. 2 TDDG). Insofar as we use this data to make our website more usable, secure and attractive, we invoke legitimate interest in accordance with § 6 para. 1 sentence 1 lit. f) GDPR.
Data from server log files are deleted after 7 days. No storage of this data together with other personal data of the user takes place.

4.2 Cookies
Precisely, we use cookies in some areas of our site. Cookies are data fragments that the server can send to your computer. Through cookies we store information about the specific activity you perform on our site.

This website uses cookies and similar functions to process information about the end device and personal data. The processing is for content integration, external services and third-party elements, statistical analysis/measurement, personalized advertising and social media integration. Depending on the function, data may be transmitted to and processed by third parties in countries where there is not an adequate level of data protection, such as the United States. Your consent is always voluntary, is not necessary for the use of our website and can be refused or revoked at any time on our website.

4.2.1 Cookie Consent Manager CCM19
When you first access our site, you will be asked if you wish to consent to the use of cookies.
Via the "Change Consent" link (see below this section) or via the icon in the lower left corner on all pages you can change your consent at any time.

4.3.2 Social networks and media

Icons
Our website has integrated social network icons from YouTube, LinkedIn and Instagram. You can only access these networks via an external link. These are not sharing buttons, but simple hyperlinks.

Social media presence
Social media presence We have a presence in "social media." You can find more information about it here.

4.2.3 Google Analytics.

The legal basis for the use of Google Analytics is your explicit consent pursuant to Article 6, para. 1, ch. 1(a) of the GDPR. If you have declared your consent, Google Analytics, a web analytics service of Google Inc. will be used on this website. The relevant service provider within the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Analytics uses cookies. Cookies are small text files that are saved on your computer and allow us to analyze how you use our website. Information about the way you use our website collected through cookies will be transmitted to and stored on a Google server in the United States.

Usage includes the Universal Analytics and Google Analytics 4 (GA4) mode of operation: this allows us to assign data, sessions and interactions on multiple devices to a pseudonymous user-ID and thus to analyze a user's activities on multiple devices.

We use the 'anonymizeIP' function (so-called IP-Masking): by activating IP-anonymization on this website, Google shortens its IP address within member states of the European Union or other states party to the Agreement on the European Economic Area. As part of Google Analytics, Google does not associate the IP address communicated by your browser with any other data.

During your visit to the website, the following data, among others, are collected:

• Achievement of "Website Goals" (conversions, e.g. newsletter subscriptions, downloads)
• His user behavior (e.g., clicks, dwell time, bounce rate)
• Its indicative location (city in country X)
• His IP address (in abbreviated form)
• Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
• Your internet provider
• Referral URL (through which website/advertising medium you arrived at our website)

Purpose of processing
Google will use this information on behalf of the operator of this website to evaluate how you use the website and to create reports on website activity. The reports created through Google Analytics are used to analyze the performance of our application and the results of our marketing campaigns.

Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the data controller. We have entered into a data processing agreement with Google for this purpose. Google is certified under the Data Privacy Framework. This certification confirms that Google is committed to the data protection standards and requirements of the Data Privacy Framework to ensure an adequate level of data protection.

Length of storage
Data are automatically deleted after 14 months. Deletion of data that have reached the storage duration occurs automatically once a month.

Legal basis and right of withdrawal/strong>
For such data processing is your consent, according to Art. 6, para. 1, ch. 1, lett. a of the GDPR, a prerequisite. You can withdraw your consent at any time with future effect. To do so, follow the link provided in section 4.2 "Cookies."

More information on Google Analytics terms of use and data protection can be found at marketingplatform.google.com/about/analytics/terms/de/ and at policies.google.com

4.2.4 Hosting

We use IT and support service providers to ensure the operation of the website. These service providers are carefully selected and work for us as data controllers.

A fim de operar o sítio na internet, utilizamos prestadores de serviços e apoio informático. Seleccionámos cuidadosamente estes prestadores de serviços, que trabalham para nós na qualidade de subcontratantes.

Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen.

Web site agency:
BOROS
Hofaue 63
42103 Wuppertal

5. Recipients of your data / Transfers to third countries.

The processing of your personal data generally takes place in a member state of the European Union (EU) or another contracting state of the European Economic Area Agreement (EEA). The transfer of personal data to a third country or access to such data from a third country occurs only if the special requirements set forth in Art. 44 et seq. GDPR (e.g., through the agreement of standard contractual clauses or if the recipient acts on the basis of a legal basis that the European Commission has decided pursuant to Art. 45 (1) GDPR (the so-called "personal data.) 45 (1) GDPR (the so-called adequacy decision)). However, we cannot exclude the possibility that providers based in the United States or other third countries and, where applicable, their authorities may access data stored by these providers. For more details, please refer to the individual providers mentioned in Chapter 4.

6. Your Rights

You have a right to information, i.e., you can request us to disclose to you all personal information that we have collected and stored over time (Art. 15 GDPR). In addition, you can also request rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR), and you have the right to lodge a complaint with a privacy supervisory authority (Art. 77 GDPR in conjunction with Art. 19 BDSG).

If we process your personal data on the basis of your consent, you may revoke this consent at any time. Revocation of consent has no effect on the lawfulness of the processing that took place on the basis of your consent up to the time of revocation, but no future processing will take place.

For revocation and other inquiries you can contact our data protection officer.

Of course, you can revoke your consent to the processing of your personal data for advertising and data analysis purposes at any time. You can notify us of your withdrawal of consent at the following contact details: renewables@iqony.energy.