(Last update on 24 may 2018)
This notice provides you with information on how E-nable+ Online Services GmbH, FN 476617h, Eschenbachgasse 9, 1010 Vienna, Austria (“we”) will process your personal data.
1. Purposes for which we process your data
We will process your personal data set out in Point 2 below for the following purposes:
A) Performance of services under the contracts (“Contractual Services”) by considering the current GTC of E-nable+ Online Services GmbH (https://portal.e-nable.eu/terms), amongst others, providing inter alia:
- Matchmaking between owners of an energy project and investors
- Matchmaking between tender issuers, bidders and/or contractors
- Matchmaking between freelancers and principals/employers
- Other business contact services for stakeholders of the energy business
B) Information of existing and potential customers about current trends and developments in the energy-sector and related domains and keeping them up-to-date with the developments of the Platform via newsletter and promotion materials.
C) Management and optimization of the Platform and Contractual Services to ensure a highest-possible customer value and service quality and to derive general statistics about the usage of the Platform.
D) Activities in connection with bookkeeping and accounting.
We collect this data from:
A) your registration for the Contractual Services
B) usage of cookies
When you visit our site (www.e-nable.eu) or the Platform (https://portal.e-nable.eu), a cookie (a very small text file) is placed on your device. If you accept it, it is used to provide you with a personalized experience and to assist in the collection of the site visitation statistics of the site and the Platform.
C) usage of logfiles
To protect your interest, we do also collect statistic information on logins and failed login-attempts
D) Platform- and website navigational content
When using the Platform, we store also platform navigational content and user activities to ensure highest customer value and service quality
Principally, the provision of personal data is voluntary. However, if you do not provide your personal data with us, we may not be able to perform the Contractual Services.
2. Legal basis for the processing
The processing of your personal data is necessary for the performance of the Contractual Services or in order to take steps at your request of the data subject prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation (“GDPR”)).
For marketing activities you have given us your explicit consent that you would like to receive our information (Article6(1)(a) of the GDPR).
If you no longer wish to receive newsletters or promotional materials, you may opt-out of receiving these communications. You can do it by following the unsubscribe link placed in the footer of the newsletter- or promotional e-mail or, if by post, by returning the letter to us with “unsubscribe” marked upon it. Or you can simply contact firstname.lastname@example.org and ask to be unsubscribed.
Apart from the above, we process your personal data on the basis of legitimate interests to achieve the processing purposes under Point 1 (Article 6(1)(f) of the GDPR). In particular, this may apply for usage of cookies, logfiles and navigational content of the website and Platform.
3. Transfer of your personal data
For the processing purposes set out in Point 1, we may transfer your personal data to the following recipients:
A) Other registered users on the E-nable+ Online Platform to perform the Contractual Services
B) Document Storage Provider
C) Platform Hosting Provider
D) Payment and Invoicing Service Provider
E) Transactional E-Mailing Service Provider
F) Newsletter Service Providers
G) Customer Relationship Management Tool Service Provider
H) Website Hosting Provider
I) Web Analytics Tool Provider
J) Software developers
Some of the recipients listed above are located in or process personal data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your personal data where the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering in appropriate data transfer agreements based on Standard Contractual Clauses (2017/87/EC and/or 2004/915/EC). Such agreements are accessible upon request from email@example.com.
4. Storage period
Your personal data will only be kept for as long as we reasonably consider necessary for achieving the purposes set out under Point 1 above and as is permissible under applicable law. We will, in any case, retain your personal data for as long as there are statutory retention obligations or potential legal claims are not yet time-barred.
5. Your rights in connection with your personal data
Under applicable law, you have, among others, the rights (under the conditions set out in applicable law): (i) to check whether and what kind of personal data we hold about you and to request copies of such data, (ii) to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements, and (iii) to request us to restrict the processing of your personal data, (iv) in certain circumstances, to object for legitimate reasons to the processing of your personal data or to revoke consent previously granted for the processing, (v) to request data portability, (vi) to know the identities of third parties to which personal data are transferred, and (vii) to lodge a complaint with the competent authority.
6. Links to websites of third parties
On our website and the Platform, there are also links to other third party websites. This Data Protection Notice is not valid for those websites of third parties.
We hereby ask you to visit these websites directly in order to obtain the respective information on your data protection rights. We neither assume any responsibility nor liability for the content of those third party websites.
7. Webserver Protocols
The webserver stores only anonymized data. We store such anonymized data due to technical reasons as well as for statistic purposes. Furthermore, we use this data for an analysis of the user behavior on our website and the Platform to optimize inter alia the fulfillment of Contractual Services.
We use Google Analytics, a web analytical tool of Google LLC (“Google”). Google is using cookies. The information generated through cookies while using services of the Platform will in general be transferred to and stored on a server of Google, located in the United States.
Google is certified according to the Privacy-Shield Framework and therefore warrants to comply with the European data protection law. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to analyze activities and create reports about activities of the users while performing the Contractual Services and to provide further services, related with the performance of Contractual Services. Thereby, user profile aliases can be created.
We only use Google Analytics with activated IP-anonymization, meaning that your IP-address will be shortened by Google within the member states of the European Union and/or in other member states being part of the European data protection regime. However, it is only in exceptional cases, in which your full IP-address will be transferred on a server of Google in the US to be locally shortened.
Your IP-address submitted by your browser will not be combined with other data of Google. You may refuse the cookie and all related services performed by Google through changing your settings of your internet browser software or downloading and installing the following browser-plugin: https://tools.google.com/dlpage/gaoptout?hl=en
Further information about the usage of data by Google, settings and possibilities of appeal are included within the Data Protection Notice of Google (https://policies.google.com/technologies/ads) or within the settings for displaying online ads through Google (https://adssettings.google.com/authenticated).
All personal data of users will be deleted or anonymized after 14 months.
8. Data Protection Measures
The protection of your personal data is ensured by adequate organizational and technical measures. We and the providers apply technical and organizational protection measures in order to safeguard your data, against manipulation, loss, destruction or unauthorized access. Regardless of our efforts to provide for a high standard of care, it cannot be excluded that information which is provided by you to us via the internet may be accessed or used by other persons.
Please note that we do not assume any liability for the disclosure of information which is caused by errors in recourse of data transmission and/or unauthorized access by third parties (such as cyber attacks).
9. Amendment to this Data Protection Notice
In the course of an ongoing development, this Data Protection Notice will be amended on a regular basis. We recommend that you visit our website or Platform regularly in order to be informed about the newest version of this Data Protection Notice.
8. Our contact details
Please address your requests or questions concerning the processing of your personal data to:
E-nable+ Online Services GmbH, FN: 476617h
Eschenbachgasse 9, 1010 Vienna, Austria