Privacy

Dear user,

Welcome to our website. The protection of your personal data is important to us. We would like to inform you here about the topic of data protection and the processing of your personal data during website use. By visiting and using this website, you confirm that you have read and understood our privacy policy.

1. Responsible body in the sense of data protection law

OPTENDA GmbH
Hasenbergstraße 49B
70176 Stuttgart

optenda@iqony.energy
www.optenda.com

2. Contact details of our data protection officer

STEAG GmbH
Corporate Data Protection Officer
Rüttenscheider Straße 1–3
45128 Essen
datenschutz@steag.com

3. Information on the collection and storage of data

In principle, you can visit our website without disclosing your identity. If you use certain functions/areas of our website, it may be necessary to provide or collect personal data, depending on the circumstances. The details of the respective data processing are explained below.

Note: Applications must be submitted exclusively via our separate application and career portal. All applications that we receive by other means will be deleted immediately.

4. Collection of personal data when using the website

(1) If you only use the website to obtain information and do not send us any further information (e.g. via the contact form), the following data will be collected to help us display your website correctly and to ensure stability and security (legal basis: Art. 6 para. 1 lit. f) GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) Information you have provided

If you use contact forms on our website, we will process the data you provide for the purpose specified in the contact form on the basis of your consent (legal basis Art. 6 para. 1 lit. a) GDPR).

If you book an online meeting with us, our service provider bookingtime GmbH, Robert-Koch-Str. 26, 20249 Hamburg will process the data you provide by transmitting it to us for the purpose specified by you in the booking on the basis of your consent (legal basis Art. 6 para. 1 lit. a) GDPR). We have concluded an order processing contract with the provider.

We store information that you send us via the contact form or via an online meeting request. The information provided is used for the specific purpose of processing your inquiry or order. We add your contact information to our customer database and store it for a maximum of one year after the last contact. In this respect, we refer to your right of revocation.

(3) Data confidentiality

Your personal data and other transmitted information will not be forwarded to third parties unless we are legally obliged to do so.

5. Cookies

We also use cookies in some areas of our website. Cookies are small text files that are stored on your computer or device when you visit our website. They are used to collect information about your use of our website and to provide various functions.

Our website uses different types of cookies. Some cookies ensure the correct functioning of the website (necessary cookies). Others increase your convenience when you visit our website, for example so that you do not have to make settings again when you visit our website repeatedly. And some give us information about your user behavior on our website so that we can improve the performance of our website. By law, we can store cookies on your device if they are absolutely necessary for the operation of our website. We require your consent for all other cookie types.

We will introduce you to all other cookies below and explain the purpose and legal basis for their use (legitimate interest or your consent). Some cookies are placed by third parties that appear on our pages; we also point this out separately below.

When you visit our website for the first time, you will be asked whether you want to actively consent to the use of cookies.

(1) CCM19

When you visit our website for the first time, you will be asked whether you want to actively consent to the use of cookies.

You can change your consent at any time via the "Change consent" link (see below this text section) or via the icon at the bottom left of all pages.

Technically necessary

Cookie Consent Manager CCM19

Publisher: Iqony GmbH

Scope of the processing
Used to store the cookie consent - which cookies may be set. The status of the cookie settings can be set for you. The data is stored in categories.

What data is processed
We store the user's consent status for cookies on our website.

Local Storage:

Local Storage:

Legal basis and revocation option
Art. 6 para. 1 s. 1 lit. c GDPR

Recipient of the data
45128 Essen

(2) Google Ads and conversion tracking
We use Google Ads Conversion on our website to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. We are interested in tracking how successful the individual advertising measures are, showing you advertising that is of interest to you and making our website more interesting for you. Google AdWords is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you click on a Google ad and accept third-party cookies within our cookie notice, a cookie will be set for conversion tracking. We only process your data with your consent, Art. 6 para. 1 lit. a GDPR.

Additional note on data transfer to the USA: By selecting "Google Ads", you also expressly consent to the transfer of your data collected by Google to Google servers in the USA in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. The USA has been classified by the European Court of Justice (ECJ) as a country with a level of data protection that may be inadequate by EU standards.

You can revoke your consent at any time with effect for the future by changing your cookie settings accordingly or deleting the cookies on your computer. You also have the option of activating or deactivating cookies by installing the plug-in provided by Google under this link.

How it works: The ads are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.

Recipient of the data: Further information on data protection at Google can be found here: www.google.com/intl/de/policies/privacy and here. Alternatively, you can visit the website of the Network Advertising Initiative (NAI).

(3) Google Analytics

If you have given your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR), Google Analytics, a web analysis service of Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google Tag Manager is activated to enable the use of Google Analytics. Tags and script codes can be centrally integrated and controlled via the Tag Manager user interface.

Scope of the processing:
Google Analytics uses cookies that enable your use of our website to be analyzed. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

The use includes the Universal Analytics operating mode: This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices.

We use the 'anonymizeIP' function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, Google Analytics collects the following data, among others

• the pages you visit, your "click path"
• Achievement of "website goals" (e.g. newsletter registrations, downloads)
• Your user behavior (e.g. clicks, dwell time, bounce rates)
• Your approximate location (city in country X)
• Your IP address (in abbreviated form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• Website from which the request comes ("bounce page")

Purposes of the processing:
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our application and the success of our marketing campaigns.

Recipient:
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor. We have concluded a data processing agreement with Google for this purpose. Google has confirmed to us that it processes your data in the European Economic Area. We cannot rule out the possibility that Google LLC, based in California, USA, and possibly US authorities may be able to access the data stored by Google. Please also read our risk notice in section 5 "Recipients of your data".

Storage period:
The data is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis and revocation option:
Your consent is a prerequisite for this data processing, Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future. To do so, follow the link provided under section 4.3 "Cookies".

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

(4) Social networks and media

Icons:
Our website has integrated social network icons from YouTube, LinkedIn, Instagram and Twitter. You can only access these networks via an external link. These are not share buttons but merely hyperlinks.

YouTube embeds:
We also use so-called embeds or embeds from the YouTube platform for videos that you find on our website. YouTube is a service of Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland. Embedding is carried out using the technical process known as framing. Framing involves the mere insertion of an HTML link provided by YouTube into the code of a website to create a frame on our website (so-called third-party presence) and thus enable the video stored on YouTube servers to be played. We use the framing codes generated by YouTube in the so-called "extended data protection mode". According to YouTube, usage data is only transmitted when the user clicks on the play button and starts the video. If you visit our pages without using the video offer, no data will be transmitted to Youtobe We offer videos in our legitimate interest to provide you with vivid insights into our company and to explain our products (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Information on what data is processed by YouTube and for what purposes this data is used can be found in YouTube's privacy policy.

Presence in social media:
We maintain a presence on social media. Further information on this can be found here.

6. Microsoft Advertising

We use Universal Event Tracking (UET) on our website via the Microsoft Advertising service (formerly Bing Ads) from Microsoft Corporation (USA). Microsoft uses UET to store a cookie in your browser to enable us to analyze the use of our online offering. The prerequisite for this is that you have reached our website via an advertisement from Microsoft Advertising. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page (so-called conversion measurement). No IP addresses are stored in this process. No further personal information about the identity of the user is communicated.

If you click on an ad from Microsoft Advertising and accept third-party cookies within our cookie notice, a cookie will be set for conversion tracking. We only process your data with your consent, Art. 6 para. 1 lit. a GDPR.

Additional note on data transfer to the USA: By selecting "Microsoft Advertising", you also expressly consent to the transfer of your data collected by Microsoft to Microsoft servers in the USA in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. The USA has been classified by the European Court of Justice (ECJ) as a country with a level of data protection that may be inadequate by EU standards.

7. Newsletter

(1) You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us.

• Salutation
• First name
• Surname
• E-mail address

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy. No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

(2) The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR if the user has given consent.

(3) The purpose of collecting the user's email address is to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

(4) The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active.

(5) The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.

8. Web seminars/Edudip

You can take part in free web seminars via our website. When you register, we collect the following data (registration data):

• First and last name
• e-mail address
• Telephone number
• Company

Before participating in the seminar, we will ask you as a participant for your consent (start window in the Edudip software used). When the web seminar is held, the following data may be collected (performance data) and processed for further customer care:

• First and last name
• e-mail address
• IP address (but only in standard server logs and cannot be combined with other data)
• Questions and other content from your chat messages to the moderators

Legal basis and purpose
We collect and process your data in accordance with the legal provisions, in particular the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as other legal bases in the field of electronic communication for the purpose of conducting the web seminar on the basis of your consent, Art. 6 para. 1 lit. a) GDPR:

• Organization and implementation of the seminar
• Marketing and customer care (chat content only)

If necessary, we process your data to protect our legitimate interests or those of third parties (Art. 6 para. 1 f GDPR):

• Ensuring IT security and IT operations
• Legal obligations to provide evidence

Our aim is to offer you a web seminar situation that is as similar as possible to a face-to-face seminar. Therefore, you can ask your questions in the chat bilaterally to our moderators, other participants will not see this. In order to ensure such a serious and real exchange, the administrator and moderators will see your participant names, the other participants will not.

Please note that we reserve the right to record certain events. The recording (stream) is made from the participant's perspective and concerns the moderator. We do not collect any personal data in the stream. In the event of a recording, we will inform you in advance. Chats are recorded separately.

We implement our web seminars with the service provider (processor) Edudip GmbH, Jülicher Straße 306, 52070 Aachen. We have concluded an order processing contract with Edudip. The service provider uses the sub-service provider Hetzner for hosting.

We will delete your performance data no later than four weeks after the seminar has been held and your registration data if we have not had any customer contact with you for more than one year or if you have objected to further processing.

9. links to third party websites

Our website contains links to external third-party websites such as the social networks XING and LinkedIn. We have no influence on the content of these sites. If you click on these links, we also have no influence on what data these providers process. The content of the linked sites is the responsibility of the respective provider or site operator. Although they were checked for legal violations at the time of linking, continuous monitoring of the content is not reasonable without concrete evidence of a possible legal violation. Should we become aware of any legal infringements, we will remove these links as soon as possible.

10. data security

The website and other systems are protected by up-to-date technical and organizational measures against loss, destruction, access, modification or processing of your data by unauthorized third parties.

SSL technology is used to ensure that your data is transmitted securely. If you use our contact form, your data will be transmitted in the form of email messages.

The servers we use employ various security mechanisms and authorization procedures to prevent unauthorized access. Access information should always be treated confidentially by you. Please close the browser window when you have finished communicating with OPTENDA. This way, no one but you can access your personal data. You should also make sure that nobody has unauthorized access to your computer, the network or your password, if you have one - this is the only way to protect yourself. Unfortunately, we have no means of protecting you from misuse in this respect.

11. recipients of your data, third country transfer

The processing of your personal data generally takes place in a member state of the European Union or in another state party to the Agreement on the European Economic Area. A transfer of personal data to a third country or access to this data from a third country only takes place if the special requirements of Art. 44 et seq. GDPR are met (e.g. through the agreement of standard contractual clauses or if the recipient acts on the basis of a legal basis adopted by the European Commission in accordance with Art. 45 para. 1 GDPR (so-called adequacy decision)). You can find more detailed information from the individual providers mentioned.

12. right of information and revocation

If you are interested in finding out which personal data or which data relating to your business activities we have stored as a result of your visit to the OPTENDA website, please contact us via our data protection officer.

You have a right of access, i.e. you can request us to disclose all the personal information that we have collected and retain (Art. 15 GDPR). In addition, you can also request rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

If we process your personal data on the basis of your consent, you can withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, but processing will cease for the future.

You can address revocation and other requests to our Group Data Protection Officer.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: info@iqony.energy.

We take your inquiries and concerns very seriously and always endeavor to comply with them.

13. right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR in conjunction with Section 19 BDSG. The competent supervisory authority in Baden-Württemberg is The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, e-mail: poststelle@lfdi.bwl.de.

Status: October 2023