Data Protection

General

We would like to thank you for your interest in our website. Your privacy is important to us and you should always feel safe and comfortable when visiting our website. For this purpose, we have taken technical and organizational measures to ensure that the legal requirements are met. In the following, you will learn what information we may collect and how we handle it.

I. Data controller

RWE Supply & Trading GmbH ("RWEST")
RWE Platz 6
45141 Essen
Phone: +49 201 5179 1999
e-mail to RWEST_CommoditySolutions@rwe.com

is controller of your personal data pursuant to Art. 4 no. 7 General Data Protection Regulation (“GDPR”).

II. Contact details of the Data Protection Officer

You can reach our data protection officer at:

RWE Aktiengesellschaft
Datenschutzbeauftragter
RWE Platz 1
45141 Essen
e-mail to dataprotection@rwe.com

III. Provision of the website and log files

In the following, you will learn how we process your personal data in connection with the provision of the website and the creation of log files.

1. Which of your personal data do we use?

Each time you visit our website, our system automatically collects data and information from the computer system of your device. In addition to non-personal data (e. g. the domain name of the website you came from; the websites you have visited on our domain; the names of the files accessed; the date and time of an access; the name of your internet service provider; and, if applicable, the operating system and browser version of your device; the host name of the accessing device; language settings), your IP address is processed.

2. What are the sources of the data?

The data is collected from you by being automatically transmitted from your device to our system.

3. What do we process your data for and on what legal basis?

The data is primarily collected in order to be able to provide and operate the website.

In addition, we store the data - in pseudonymized form in log files - for security purposes, in particular to detect and counteract attacks on our website, for statistical purposes and to optimize our Internet presence.

In this respect, the processing is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to ensure the above-mentioned purposes.

4. Who will your data be passed on to?

Your data will not be passed on to third parties unless we are obliged to do so due to legal or official orders.

5. How long will your data be stored?

We generally store the data for a period of 6 months.

6. Is there an obligation to provide your data?

There is neither a legal nor a contractual obligation to provide the data. However, if you do not provide the data, you will not be able to use the website.

IV. Web analysis and web optimization using cookies and tracking pixels
 
We use cookies and tracking technologies on our websites. These serve to optimize our website, further develop services and for marketing purposes. In the following, we explain the technologies and how they work.

When you visit one of our websites, we store information in the form of a cookie on your device, which is automatically recognized during your next visit. Cookies are text files that are stored in the internet browser or by the internet browser on the user's device system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

Using cookies helps us to offer you unrestricted use of our website. They let us ensure your visit to our website is as convenient as possible. Cookies allow us, for example, to adapt a website to your interests.
 
We also use tracking pixels on our website. Tracking pixels are small graphics on websites that enable log files to be recorded and analyzed. When you visit a website, tracking pixels record information in the cookie file in your browser. Using pixels lets us show you targeted information and content.
 
Our websites provide you with the option of viewing and adjusting our cookie and pixel settings here. Please note that certain cookies and pixels are required for technical reasons to ensure our website continues to function properly. We make use of processors as per Art. 4 no. 8 GDPR for the operation and use of cookies. In some circumstances the processors may have access to your personal data that is gathered and processed using cookies and pixels. See here for a detailed overview of this data.
 
An overview of the cookies and pixels used on our websites, the data processed in each case and the corresponding recipients can be found here.

RWEST uses cookies and pixels from the following categories:

V. Contact form

Furthermore, you have the possibility to communicate your personal data to us by filling in a form provided for this purpose in order to be contacted in the desired way.

1. Which of your personal data do we use?

Depending on the desired communication channel, the following of your personal data will be processed: salutation, title, first and last name, company, address, e-mail address, phone number, inquiry details.

2. What are the sources of the data?

You enter the data in the form yourself.

3. What do we process your data for and on what legal basis?

We process your data in accordance with Art. 6 para. 1 lit. b) or f) GDPR in order to answer your enquiry, process your order or provide you with access to special information or offers. Processing for other purposes does not take place.

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis.

4. Who will the data be passed on to? How long will your data be stored?

In the context of processing and dealing with your contact request, it may be necessary to transfer your data to other group companies. Your data will not be transferred to third parties outside the group unless your enquiry or the service/product requested by you explicitly provides for this. You will then be informed of this at the appropriate point. We store your data for a period of 6 months.

5. Is there an obligation to provide your data?

The provision of data takes place on a voluntary basis.

VI. Does automated decision-making, including profiling take place?

We do not employ automated decision-making.

VII. Werden Ihre Daten an Länder außerhalb der Europäischen Union / des Europäischen Wirtschaftsraums (sog. Drittländer) übermittelt?

We have individual tasks and services carried out by carefully selected and commissioned service providers on the basis of order processing agreements in accordance with Art. 28 GDPR. Some of these companies are located outside the European Union and the European Economic Area (third countries). In these cases, a third country transfer of your personal data takes place. The transfer of personal data to third countries will be carried out in accordance with Chapter V of the GDPR and the respective national data protection laws. In the absence of an adequacy decision by the European Commission pursuant to Art. 45 GDPR – a list of countries with an adequacy decision can be found here - adequate safeguards are provided to ensure an adequate level of data protection. As a standard practice, we enter into contracts with data recipients that contain standard data protection clauses, also called "standard contractual clauses". A copy of the model data protection clauses approved by the European Commission is available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

VIII. What rights do you have in connection with the processing of your data?

1. Right of access

You may request a confirmation as to whether personal data concerning you are being processed by us. You also have the right to request information on whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR. 

2. Right to rectification

You have a right to rectification and/or completion, insofar as the personal data processed concerning you are inaccurate or incomplete. We shall carry out the rectification and/or completion without undue delay.

3. Right to restriction of processing

Under the conditions regulated in the GDPR, you may request the restriction of the processing of personal data concerning you.

4. Right to erasure

You may request that the personal data concerning you be erased without undue delay and we are obliged to erase such data without undue delay, unless an exception provided by law applies.

5. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us and the processing of which is based on your consent or on a contractual agreement with you, in a structured, commonly used and machine-readable format. In addition, you have the right, under the conditions stipulated by the GDPR, to have this data transmitted to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons. 

6. Exercising your rights

To exercise your rights, please use the contact details provided under points I or II.

7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. f) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

To declare your objection, please use the contact details provided under points I or II.

8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

To facilitate the exercise of your rights, you will find below the address of the supervisory authority responsible for our company:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.