Privacy policy

We would like to inform you below about the processing of personal data in the context of the use of our website. Further information on data protection can be found below.

Information on the controller

The controller responsible for data processing on this website is
Sonnen Tiefbau GmbH
Kirchenpauerstraße 26
20457 Hamburg
Contact: Florian Gösch, Managing Director
Telephone: +49 (0)40 75 66 449-200
E-mail: info@sonnentiefbau.de

Further information about our company and the authorized representatives can be found in our imprint at www.sonnentiefbau.de/impressum.

Data protection officer

We have appointed an external data protection officer. This officer can be contacted at the above address of the controller with the address suffix “personal - confidential for the data protection officer” and at datenschutz@enerparc.com.

Legal basis for data processing

We only process personal data when operating this website if this is necessary to provide a functional website, our content and the associated services.
We rely on the following legal bases for this:  

• Consent pursuant to Art. 6 para. 1 lit. a) GDPR
• Fulfillment of contracts pursuant to Art. 6 para. 1 lit. b) GDPR
• Fulfilment of a legal obligation pursuant to Art. 6 para. 1 lit. c) GDPR
• Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR

We will state the relevant legal basis for the respective processing in this data protection notice.
If we process personal data on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future.
If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

Deletion of data

We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject, deletion will only be considered after expiry of the respective retention obligation.

Place of data processing

If personal data is processed outside the European Union, this can be found in the information on the corresponding processing activities.

Access data

You can visit our website without providing any personal data. However, when you access this website, the browser used on your device automatically sends information to the website server. This information is temporarily stored in a so-called log file.
The following information is recorded without any action on your part and stored until your website visit is automatically deleted:

• The access logs of the web servers record which page views have taken place at which time. They contain the following data: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, host name accessed.
• The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.* IPv6 addresses are also anonymized. The anonymized IP addresses are stored for 60 days. Details of the directory protection user used are anonymized after one day.
• Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.
• Access via FTP is logged with anonymized user name and IP address and stored for 60 days.
• The mail logs for sending e-mails from the web environment are anonymized after one day and then retained for 60 days. During anonymization, all data on the sender/recipient etc. is removed. Only the data on the time of sending and the information on how the e-mail was processed (queue ID or not sent) are retained. Mail logs for sending via our mail servers are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and to combat spam.

The legal basis for the processing of personal data is our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. The aforementioned information is used

• for the purpose of ensuring trouble-free operation of the site
• for evaluation in order to improve our offer
• to ensure a smooth connection setup
• to ensure convenient use of this website
• to evaluate the system security and stability of this website
• for other administrative purposes

In principle, we do not use the data collected for the purpose of drawing conclusions about your person.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Hosting by a third-party provider

This website is hosted by an external provider. We have concluded a hosting contract and a corresponding order processing contract with this provider. The hoster's server is located in Germany.
All data collected in the course of using this website or in the forms provided for this purpose are processed on the servers of this host. This may, for example, involve IP addresses, website access, meta and communication data, contact requests and other data generated via a website.
The hoster is used to safeguard our legitimate interests, which predominate in the context of a balancing of interests in accordance with Art. 6 para. 1 lit. f) GDPR, in the correct presentation of our offer and the secure, fast and efficient provision of our online offer.

Request by e-mail, telephone or fax

If you contact us by email, telephone or fax, we will store and process your request, including all resulting personal data (name, request) for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and / or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Forwarding of data

Data that we receive from you will not be passed on to third parties, in particular not for their advertising purposes. Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permitted on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent to do so.
However, we use service providers for the operation of this website, for example. It may happen that a service provider obtains knowledge of personal data. We select our service providers carefully - particularly with regard to data protection and data security - and take all measures required under data protection law to ensure permissible data processing.

Google Analytics

If you have given your consent, Google Analytics, a web analysis service of Google LLC, is used on this website. The controller for users in the EU, the EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Scope of the processing
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.
Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
Revocation
You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Third country transfer
Where data is processed outside the EU or the EEA and there is no level of data protection in line with the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU or the EEA. You may not be entitled to any legal remedies against access by authorities.
Recipients
Recipients of the data are or may be

1. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
2. Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
3. Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de
Demographic characteristics with Google Analytics
This website uses the “demographic characteristics” function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. The Google Tag Manager ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data.
The legal basis for the use of the technically necessary cookie is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
Further information can be found in the provider's terms of use at: https://www.google.com/intl/de/tagmanager/use-policy.html.
Deactivate Google Analytics

Cookies settings

Adjust cookie settings
We use cookies on our website. These serve to make our website more user-friendly, effective and secure. Cookies are text files that are stored on your computer and saved by your browser. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user's end device and access to this information is the European ePrivacy Directive in conjunction with the Act on the Regulation of Data Protection and the Protection of Privacy in Telecommunications and Telemedia (TTDSG).
The legal basis for the processing of the personal data collected in this context regularly results from Art. 6 para. 1 sentence 1 GDPR.
The primary legal basis for the storage of information in the end user's terminal equipment - and thus in particular for the storage of cookies - is your consent in accordance with Section 25 (1) sentence 1 TTDSG. Consent is given when you visit our website - although of course it does not have to be given - and can be revoked at any time in the cookie settings.
Pursuant to Section 25 (2) No. 2 TTDSG, consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user. In the cookie settings, you can see which cookies are to be classified as absolutely necessary and therefore fall under the exception rule of Section 25 (2) TTDSG and therefore do not require consent.

Cookie management

We use the consent management service Cookiebot, Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This enables us to obtain and manage the consent of website users for data processing. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The legitimate interest of the provider is the user-friendliness of the website and the fulfillment of the legal requirements of the GDPR. The following data is processed with the help of cookies:

• Your IP address (the last three digits are set to '0'),
• Date and time of consent,
• URL from which the consent was sent,
• User agent of the end user's browser,
• an anonymous, random and encrypted key and
• consent status of the end user as proof of consent.

The key and consent status are stored in the browser for 12 months using the “CookieConsent” cookie. This means that your cookie preference is retained for subsequent page requests. With the help of the key, your consent can be verified and tracked.
The functionality of the website is not guaranteed without this processing.
Cybot is the recipient of your personal data and acts as a processor for us.
The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Cybot can be found at: https://www.cookiebot.com/de/privacy-policy/
Your personal data will be deleted continuously after 12 months or immediately after termination of the contract between us and Cybot.

MyFonts Counter

On this website we use MyFonts Counter, a web analysis service of MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA. Due to the license terms, page view tracking is carried out by counting the number of visits to the website for statistical purposes and transmitting them to MyFonts. MyFonts only collects anonymized data. The data may be passed on by activating JavaScript code in your browser. To prevent the execution of Java Script code from MyFonts altogether, you can install a Java Script blocker (e.g. www.noscript.net). Further information on MyFonts Counter can be found in MyFonts' privacy policy at http://www.myfonts.com/info/terms-and-conditions/#Privacy

No automated decision-making / profiling

We do not use automated decision-making or profiling.

Rights of data subjects

You have the following rights with regard to the personal data concerning you:
You have the right to information about the personal data concerning you. You can contact us at any time for information. In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.
Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.
Finally, you have the right to object (see below) to processing within the scope of the statutory provisions.
You also have the right to data portability within the framework of the data protection regulations.

Right to object

Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time. If the processing is carried out for other purposes, you only have the right to object if there are grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

Right to lodge a complaint with the competent supervisory authority

You have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority.

Objection to advertising emails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Status: 01.11.2022