General

Thank you for your interest in our website. The privacy of your data is our priority, and we want you to always feel safe and secure when visiting our website. For this purpose, we have taken some technical and organizational measures to ensure that all legal requirements are complied with. Please find out below what data we may collect and how we process them.

I. Who is the controller?

The controller responsible for the processing of your personal data is:

RWE Aktiengesellschaft
RWE Platz 1
45141 Essen
Germany
T +49(0)201-51790
F +49(0)201-51795005
KonzernkommunikationRWE(at)rwe.com

 

II. How can you contact the data protection officer?

You can contact the data protection officer as follows:

RWE Aktiengesellschaft
Data Protection Officer
RWE Platz 6
45141 Essen
Germany

Datenschutz(at)rwe.com

 

III. Provision of website and log files

Please find out below how we process your personal data in connection with the provision of our website and the creation of log files.

1. What personal data do we use?
Each time our website is requested, our system automatically collects the data and information of the computer used to request the website. In addition to general data (e.g., the domain of the website from which the visit was launched, the subsites visited on our site, the titles of the accessed files, date and time of a request, the name of your internet service provider and, if applicable, the operating system and browser version of your computer, the host name of the accessing computer and language setting), your IP address will also be processed.

2. Where do the data originate?
Your data will be collected via an automated transfer from your computer to our system.

3. For what purpose and on what legal basis do we process your data?
In addition, data are stored in log files in a pseudonymised manner for security purposes, in particular, for the identification of and defence against attacks on our website, for statistical purposes, and with a view to optimising our website.
Such processing is based on Art. 6 Clause 1 lit f GDPR. The aforementioned purposes represent our legitimate interest.

4. Who are your data transferred to?
As a general rule, your data will not be transferred to third parties, unless we are obliged to do so under legal or statutory requirements.

5. How long will your data be stored?
We will, generally, store your data for a period of six months.

6. Are you obliged to provide your data?
There is no legal or contractual obligation on your part to provide your data. However, should you choose not to provide your data, you will not be able to use our website.

IV. Cookies and legal basis

Cookies serve the purpose of making our offer more user-friendly, more effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser. We use session cookies, which are required to ensure the appropriate functioning of our website. They will be automatically deleted after your visit. Such processing is based on Art. 6 Clause 1 lit f GDPR. We have a legitimate interest in the storage of session cookies in order to ensure the technically correct and optimised provision of our website.

Depending on the cookie used, we collect different personal data. You can find a list of which data is involved in individual cases here.

V. Usercentrics

We use the consent management service Usercentrics, of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (Usercentrics). This allows us to obtain and manage the consent of website users for data processing. The processing is necessary for the fulfillment of a legal obligation (Art. 7 para. 1DSGVO) to which we are subject (Art. 6 para. 1 p. 1 lit. c DSGVO). The following data is processed for this purpose:

Date and time of access Browser information Device information Geographic location Cookie preferences URL of the visited page.
Usercentrics is a recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. For more information on objection and removal options vis-à-vis Usercentrics, please visit: https://usercentrics.com/de/datenschutzerklaerung/.
The data will be deleted after 3 years.

VI. Competition

Employees of the RWE Group have the opportunity to join a competition via our website. Participation in the competition is voluntary.

1. What personal data do we use?
Your personal data (name, address, e-mail address) will only be used for the purpose of the competition. They will not be processed for any other purpose.

2. Where do the data originate?
You enter the data in the respective form.

3. For what purpose and on what legal basis do we process your data?
The data are required for the implementation of the competition.
The legal basis of such processing is your consent, pursuant to Art. 6 Clause 1 lit. a GDPR, which you grant by entering the competition.

4. Who are your data transferred to? How long will your data be stored?
The winners’ data will be transferred to a service provider for the exclusive purpose of sending the prize. Upon termination of the competition, all personal data will be deleted.

5. Are you obliged to provide your data?
There is no obligation whatsoever to provide your personal data. If no data is provided, participation in the competition is not possible.

VII. Is there any automated decision-making, including profiling?

There is no automated decision-making, including profiling.

VIII. Will your data be transferred to countries outside the European Union or the European Economic Area (third countries)?

No personal data will be transferred to third countries.

IX. What are your rights in connection with the processing of your data?

1. Right to information
You are entitled ask the controller to confirm whether your personal data are being processed by us. You are further entitled to request information as to whether your personal data are transferred to a third country or an international organisation. In this connection, you have the right to be informed of what appropriate safeguards have been provided, pursuant to Art. 46 GDPR, in connection with the transfer of your personal data.

2. Right to rectification
You have the right to obtain from the controller the rectification and/or completion of your personal data if they are inaccurate or incomplete. The controller must carry out the rectification immediately.

3. Right to restriction of processing
Pursuant to the provisions of the GDPR, you have the right to obtain the restriction of processing of your personal data.

4. Right to erasure (“right to be forgotten")
You have the right to obtain from the controller the immediate erasure of your personal data, and the controller has the obligation to erase your personal data without undue delay, unless a legal exception applies.

5. Right to data portability
You have the right to receive your personal data, which you have provided to the controller and which are being processed subject to your consent or under a contract with you, in a structured, commonly used and machine-readable format. Furthermore, subject to the requirements stipulated in the GDPR, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This may not adversely affect the rights and freedoms of others.

6. Right to revoke your consent to the processing of your personal data
You have the right to revoke your consent to the processing of your personal data at any time. Such revocation of consent shall not affect the lawfulness of the processing carried out up to the time of revocation. All personal data that have been stored under the given consent will be erased, unless the law provides for another basis, on which further storage of your data is permissible. Should you wish to revoke your consent in connection with the participation in our competition, please indicate “revocation of participation in competition” in your request.

7. Exercise of your rights
In order to exercise your aforementioned rights, please contact us at the contact information indicated in sections I and II above.

8. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 Clause 1 lit. f) GDPR, including profiling based on those provisions.

In order to raise your objection, please contact us at the contact information indicated in sections I and II above.

9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the regulations of the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. To facilitate the exercise of your right, please find below the contact information of the competent supervisory authority:

North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information
Postfach 20 04 44
40102 Düsseldorf
Germany

T: +49 211 38424 -0
F: +49 211 38424 -10
poststelle(at)ldi.nrw.de