Data protection

1. Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) The controller ("we") pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:
‍white energy GmbH
represented by the Managing Director Dr. Stephan Alberternst
Zielstattstraße 11
81379 Munich
Phone: +49 (0) 89 277 812 76 - 0
Email: info@white-energy.eu

You can contact our data protection officer at:
Dr. Stephan Alberternst
Zielstattstraße 11
81379 Munich
Phone: +49 (0) 89 277 812 76 - 0
Email: info@white-energy.eu

(3) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

2. Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to the processing,
  • Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.‍‍

3. Collection of personal data when visiting our website

‍(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address of the user
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Information about the browser type and version used
  • The user's operating system and its interface
  • Language and version of the browser software.

(2) When you contact us by e-mail or contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.

4. Use of cookies:‍

(1) We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

We use cookie technology for our website. Cookies are small text files that are sent from our web server to your browser when you visit our website and are stored on your device for later retrieval.

(2) The following types of cookies are used on our website:

  • ‍Necessary cookies
  • Web analysis cookies
  • Marketing cookies
  • Unclassified cookies

‍Cookies can be divided into first-party cookies and third-party cookies. First-party cookies are cookies that are set and accessed by the operator of the website as the controller or by a processor commissioned by the operator. Third-party cookies are cookies that are not set and accessed by the website operator or its processors.

‍Necessary cookies:

  • Necessary cookies are absolutely essential in order to enable you to move around the website, use basic functions and maintain the security of the website; they do not collect information about you for marketing purposes or remember which pages you have visited.
  • Necessary cookies ensure that the website is usable by enabling basic functions. Without these cookies, the website would not function properly. By setting cookies, personal data can be stored. This processing requires the legal basis pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in enabling the use of a functional website.
  • The storage period depends on the cookie used. Please refer to the following table for the exact storage period of the respective cookie.
  • The data collected is transmitted to the providers of the cookie services. These act as processors, which is why we have concluded a corresponding data processing agreement with them. The data is passed on due to the legitimate interest of ensuring the functionality and usability of the website in accordance with the legal basis of Art. 6 para. 1 lit. f GDPR. Please refer to the table below for the exact provider of the respective cookie.
  • Some of our providers may have servers outside the European Union, which is why your data may be transferred there.
  • If you deactivate the use of necessary cookies, the full functionality and usability of the website can no longer be guaranteed.

Web analysis cookies:

  • Web analytics cookies are used to compile anonymized user statistics and to adapt our website to the needs of our users, for example by placing the most frequently searched pages where they can be found most easily. Web analytics cookies also allow us to assess how attractive our website is, how many of our users visit it regularly and how we can improve it.
  • These cookies are used to show you personalized advertising. We can also collect data on how effective this advertising is. The legal basis is your express and active consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time. However, processing before this point in time is not affected by the withdrawal.
  • Alternatively, you can prevent the processing of your personal data by activating the "Do-not-track" option in your browser.
  • You can also opt out of Google Analytics cookies by installing the Google Analytics Opt-out Browser Add-on.
  • The storage period depends on the cookie used. Please refer to the following table for the exact storage period of the respective cookie.
  • The data collected is transmitted to the providers of the cookie services. We use the web analysis tool Google Analytics on our website, so that data is transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google acts as a processor, which is why we have concluded a corresponding data processing agreement.
  • When using the web analysis tool Google Analytics, usage data may be processed on the servers of Google LLC in the United States by the cookies used as part of Google Analytics. For cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
  • Google's certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

5. Google Fonts and Adobe Fonts

(1) We use Google Fonts and Adobe Fonts for the uniform display of fonts.

  • ‍The provider of Google Fonts is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
  • The provider of Adobe Fonts is Adobe Systems Software Ireland Ltd, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

When you call up a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Google and Adobe servers. This gives Google and Adobe knowledge that our website has been accessed via your IP address. Google Fonts and Adobe Fonts also process your personal data in the USA and have submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

‍You can view Google LLC's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information and Google's privacy policy can be found at https://policies.google.com/privacy?hl=de.

‍The certification of Adobe Systems Software can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG. Further information and the applicable data protection provisions of Adobe Fonts can be found at https://www.adobe.com/de/privacy/policy.html.

‍(2) The use of fonts from Google Fonts and Adobe Fonts is in the interest of a uniform and appealing presentation of our online offers. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. We have no knowledge of the storage period at Google and Adobe and have no influence on it. Further information on Google Fonts can be found at https://fonts.google.com/ and in the privacy policy at https://policies.google.com/privacy?hl=de. Further information on Adobe Fonts can be found at https://fonts.adobe.com and in Adobe's privacy policy at https://www.adobe.com/de/privacy/policy.html.

You can change the browser settings so that the browser does not support Google Fonts and Adobe Fonts fonts - a standard font will then be used by your computer.

6. Links to other websites

(1) Our online offer may contain links to other websites or other services such as Facebook, Twitter, Xing and LinkedIn. In this respect, the data protection provisions of the respective providers of the websites or services apply. We have no influence on whether they comply with the data protection regulations.

‍(2) The processing of personal data in this context is based on Art. 6 para. 1 lit. f GDPR and is carried out for the purpose of increasing the attractiveness of our website and thus the number of visitors and a higher visibility of our content and thus the promotion of the external image of our company. We do not store any personal data in this context. With regard to storage by the respective providers, please contact the relevant operator listed below:

Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").Xing is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany ("Xing").LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

(3) The links to the various social networks are not directly integrated on our website, but merely linked to the service. This means that when you access a page on our website that contains such a link, your browser does not establish a direct connection to the servers of the various providers. This means that no information (not even your IP address) can be transmitted to the providers in the USA.

Only if you log in to one of the services can the providers directly assign your visit to our website to your profile on the social networks. The information and data (including your IP address) are then transmitted directly from your browser to a server of the respective provider and stored there.

‍(4) The purpose and scope of the data collection and the further processing and use of the data by the respective providers as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of the respective providers at

7. Disclosure to third parties

(1) Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

  1. you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  2. this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR,
  3. in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR,
  4. the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data or
  5. this is carried out by a service provider acting on our behalf and on our exclusive instructions, whom we have carefully selected (Art. 28 para. 1 GDPR) and with whom we have concluded a corresponding contract for order processing (Art. 28 para. 3 GDPR), which obliges our contractor to implement appropriate security measures, among other things, and grants us comprehensive control powers.
  6. Transmission to service providers in accordance with letter e. for the purpose of order processing takes place in the following areas: technical provision and programming of the website, user communication, provision of software as a service.

‍(2) In some cases, we use external service providers with whom we have concluded a corresponding contract for order processing (Art. 28 para. 3 GDPR) to process your data. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer additional services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the respective offer.

(4) As part of our activities, your personal data may also be passed on or disclosed to external third parties located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively to fulfill our contractual obligations and to maintain your contractual relationship with us.

The European Commission certifies that some third countries have a level of data protection comparable to the EEA standard by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates, recognized codes of conduct or self-certification via the EU-US Privacy Shield (information on this can be found here: https://www.privacyshield.gov/welcome).

8. objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can withdraw this at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.

‍(2) You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

‍(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details:

white energy GmbH
represented by the Managing Director Dr. Andreas Seebach, Dr. Stephan Alberternst
Zielstattstraße 11, 81379 Munich
Phone: +49 (0) 89 277 812 76-0
E-mail: info@white-energy.eu

9. Updating this privacy policy

We reserve the right to update this privacy policy as necessary to adapt it to technical developments or in connection with the offer of new services or products. You can always view the current version on the website.