Die Stromfritzen
Partner login Get in touch

Privacy

This is a courtesy translation. Only the German version is legally binding. Read the German original

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kay Braune
Die Stromfritzen GmbH
Ernst-Thälmann-Straße 42
15370 Fredersdorf-Vogelsdorf
Germany
Phone: +49 3343 9578526
Email: kontakt@die-stromfritzen.de

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 When you use our website purely for information, i.e. if you do not register or otherwise send us information, we only collect the data that your browser transmits to the server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (anonymised where applicable)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files subsequently should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser bar.

Cookies and tracking: this website does not set any cookies and does not use any third-party analytics or tracking services. No content is loaded from third-party providers; fonts, images and videos are stored on our own web space. Section 2.3 describes how we count page views on our server and, only with your consent, measure usage in more detail.

2.3 Counting page views and usage measurement with consent

Counting page views on our server: each time one of our pages is requested, our server evaluates information that your browser transmits anyway and stores only the following: the page requested; the day, full hour and weekday of the request; the page you came from (for third-party pages only their domain, for example google.com); campaign details and the code of a sales partner from the link (utm parameters and “?ref=”); a rough device class (smartphone, tablet or computer); the preferred language of your browser and the country that our hosting provider Cloudflare derives from your IP address. We do not store your IP address, the full identifier of your browser or any identifier that would allow several requests to be attributed to a person or a device. No script runs in your browser for this purpose, and nothing is stored on or read from your device. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not count the request; the same applies to recognisable search engines and automated requests.

The legal basis for this counting is Art. 6(1)(f) GDPR. Our legitimate interest is to recognise which pages and which routes to us are used and which sales partners refer visitors, so that we can align our offer and our advertising accordingly. You can object to this processing in accordance with section 5; the easiest way is to switch on “Global Privacy Control” or “Do Not Track” in your browser.

Usage measurement only with your consent: if you click “I agree” in the notice at the bottom of the screen, a script on our website additionally reports to our server during your visit how far you read a page (25, 50, 75 and 100 percent), whether and how far you watch a video and, for our forms, which fields you fill in, at which field a notice about missing or incomplete information appears, whether you submit the form or leave it beforehand and how many seconds have passed since you started. The measurement never records the content of your entries, only the name of the respective field. So that we can group the reports of one visit, our server creates a shortened checksum from your IP address, the identifier of your browser and a random value that is valid for one calendar day only and is deleted afterwards; it does not store the IP address or the browser identifier themselves. Once the day has ended, no entry can be attributed to a person any more, not even by us.

The legal basis for this measurement is your consent pursuant to Section 25(1) TDDDG (access to information in your terminal equipment) and Art. 6(1)(a) GDPR. Consent is voluntary: if you click “No, thanks” or do not decide, this measurement does not take place and our website works just the same. You can withdraw your consent at any time with effect for the future, via “Measurement” at the bottom of every page or via the button below this paragraph. We store your decision and its date in the local storage of your browser (entry “sf-messung”) so that the notice does not reappear on every page; after one year we ask again. This storage is strictly necessary for the purpose you requested (Section 25(2) No. 2 TDDDG). We do not set any cookies for this either.

Partner code: if you come via the link of a sales partner (with “?ref=”), our website carries the partner’s code in the address when you switch to other pages of ours, so that a site report can be attributed to the partner. Nothing is stored in your browser for this purpose.

We process the information from both stages in our database at Cloudflare (see section 7), evaluate it only in aggregated form and do not pass it on. We delete it after 13 months so that we can compare a month with the same month of the previous year; we delete the random value of the daily identifier on the following day.

3) Contacting us

When you contact us (e.g. by email or phone), personal data is collected. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations prevent this.

To receive and manage incoming emails to our @die-stromfritzen.de addresses, we use Microsoft 365 (Exchange Online, Microsoft Ireland Operations Limited) as a processor.

The forms on this website (contact form and charging station site form) transmit your details to our server in encrypted form when you send them. There they are stored in a database of our hosting provider Cloudflare (see section 7) with storage location in the European Union and at the same time forwarded by email to the responsible contact persons in our company. To protect against abusive mass enquiries, we also store for each enquiry the identifier of your browser and a shortened check value (hash) of your IP address that changes daily; we do not store the IP address itself. The legal basis is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR and, for enquiries aimed at concluding a contract, additionally Art. 6(1)(b) GDPR. We delete stored enquiries once they have been fully dealt with, at the latest after 24 months, unless statutory retention obligations prevent this. If the transfer to our server fails, your own email program opens instead with a prepared message; in this case the data only reaches us when you send this email yourself.

To send these notifications, we use the email delivery service Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA) as a processor within the meaning of Art. 28 GDPR. A transfer of personal data to the USA cannot be ruled out in this context. According to its own information, Resend is certified under the EU-U.S. Data Privacy Framework and additionally relies on EU standard contractual clauses. Further information can be found at: https://resend.com/legal/privacy-policy

In the site form you can additionally grant us a power of attorney for the grid operator. Your signature and the PDF created from it are generated in your browser; the PDF is transmitted to us and stored together with your other details in the way described above. We use it to submit the grid enquiry for the reported site and pass the details on only to the responsible grid operator and the partners named in the power of attorney, where this is necessary (Art. 6(1)(a) GDPR). If you own the land, you can also grant us a land register power of attorney; it is created in the same way as a separate PDF. We use it to inspect the land register at the competent land registry and to request a current extract for the reported site, and pass the details on only to the land registry and, where applicable, to a notary's office or service company commissioned by us, where this is necessary for that purpose (Art. 6(1)(a) GDPR). You can revoke any power of attorney and your consent at any time in text form.

If you open the site form via the link of one of our sales partners (recognisable by the addition “?ref=” with a partner code in the address), we transmit this code together with your site report so that we can assign the reported site to the partner who referred you to us. The legal basis is our legitimate interest in working with our sales partners in accordance with Art. 6(1)(f) GDPR. So that the code is kept if you visit another page of this website in between, your browser stores it in its session storage (sessionStorage). The code contains no information about you and is deleted as soon as you close the browser window or tab.

Site reports that reach us via a sales partner’s link are transferred to our partner portal (partner.die-stromfritzen.de). We operate the portal ourselves with our hosting provider Cloudflare, with the database stored in the European Union (see section 7). There, the sales partner whose link your report came through can see the details of the reported site, the contact details you provided and the processing status. This allows the partner to assist you with any questions and to keep track of their remuneration. If another person heads the partner’s sales line, that person can also see these details but cannot change them. If that person is in turn assigned to a further sales line, the heads of that line will only see the report number, municipality, report date, channel of receipt and processing status for your report, but not your name, the address of the site or your contact details. Sales partners cannot see your powers of attorney or your signature. The legal basis is our legitimate interest in working with our sales partners in accordance with Art. 6(1)(f) GDPR. Before first accessing the portal, our sales partners undertake to maintain confidentiality and may use the details only to support your site and to settle their remuneration. You can object to this disclosure at any time (section 5). After your objection, the sales partner and the head of their sales line will only see the report number, municipality, channel of receipt, report date and processing status with its date for your report, and where applicable the commissioning date and a note on a duplicate report, but no longer your name, the address of the site, your contact details or any documents.

For the initial assessment of a site, we transmit the address of the site, without your name and without your contact details, to the Nominatim map service of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom), which determines the coordinates from it. An adequacy decision of the European Commission exists for the United Kingdom. We then query the location, accessibility and existing charging facilities in the surrounding area from public OpenStreetMap services using only these coordinates. The legal basis is our legitimate interest in assessing the reported site in accordance with Art. 6(1)(f) GDPR.

4) Website functions: web fonts

This site uses so-called web fonts for the uniform display of fonts. The font files are not hosted by an external provider but are delivered together with the other page data from our own hosting (see section 7). When a page is called up, your browser therefore does not establish its own connection to a third-party font server, and no data, in particular no IP address, is transmitted to a font provider.

5) Rights of the data subject

5.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data:

  • Right of access under Art. 15 GDPR
  • Right to rectification under Art. 16 GDPR
  • Right to erasure under Art. 17 GDPR
  • Right to restriction of processing under Art. 18 GDPR
  • Right to notification under Art. 19 GDPR
  • Right to data portability under Art. 20 GDPR
  • Right to withdraw consent given under Art. 7(3) GDPR
  • Right to lodge a complaint with a supervisory authority under Art. 77 GDPR

5.2 Right to object

If we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.

6) Duration of storage of personal data

The duration of storage of personal data is based on the respective legal basis, the purpose of processing and, where relevant, statutory retention periods.

We store details of sites processed via our partner portal, notwithstanding the period stated in section 3, for as long as the site is being processed and our sales partners may have remuneration claims. We then delete them unless statutory retention obligations prevent this.

Otherwise, personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

7) Hosting and content delivery network (CDN)

Our website is hosted by the following provider and delivered via its content delivery network:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
USA

Cloudflare is used to provide our online offering securely, quickly and reliably through a professional provider (Art. 6(1)(f) GDPR). When you visit our website, Cloudflare collects server log files, including your IP address, for technical reasons in order to ensure operation and to be able to detect and fend off attacks. The data processed includes in particular:

  • website accessed
  • date and time of access
  • amount of data transferred
  • Source/referrer from which you reached the page
  • browser used
  • operating system used
  • IP address

Cloudflare processes this data on our behalf and according to our instructions as a processor within the meaning of Art. 28 GDPR, on the basis of the Cloudflare Data Processing Addendum.

As Cloudflare, Inc. is based in the USA, a transfer of personal data to this third country during processing cannot be ruled out. According to its own information, Cloudflare is self-certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. In the event that a certification does not take effect or is not applicable, Cloudflare additionally relies on EU standard contractual clauses.

Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/