This webpage is not available in English.
Status February 2021
The protection of personal data is an important concern for WEB Windenergie AG (hereinafter "W.E.B", "we" or "us") and its group companies. In accordance with Articles 13 and 14 of the EU General Data Protection Regulation (hereinafter "GDPR"), we inform you below, among other things, about what personal data is processed when you visit the website "web.energy" (hereinafter the "website") and when you visit one of our social media company pages, how we handle it and what rights you have under applicable data protection law. In addition, you will also find links to further data protection information of W.E.B on specific topics.
Controller in the sense of the legal provisions on data protection (e.g. GDPR) for the processing of your personal data is:
WEB Windenergie AG
Davidstraße 1, A-3834 Pfaffenschlag bei Waidhofen an der Thaya
FN 184649 v
Phone: +43 2848 6336
All questions and requests regarding data protection can also be sent directly to the following e-mail address: email@example.com
We store your data only as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Legal retention obligations may arise in particular from commercial or tax regulations.
In the course of our processing of personal data, the data may be transferred to or disclosed to other bodies, companies, legally independent organizational units or persons. This includes, for example, service providers in the area of hosting, maintenance and support of IT systems as well as postal and delivery services, our house bank and tax advisors/auditors. Our service providers only process data on the basis of explicit instructions and are contractually obligated to ensure appropriate technical and organizational data protection measures. In all cases, we comply with the statutory requirements.
If you exercise your rights pursuant to Art 15 - 22 GDPR, we process the personal data you have provided for the purpose of safeguarding your rights and to be able to provide evidence thereof. These processing operations serve to fulfill the legal obligations pursuant to Art 15 - 22 GDPR. The legal basis is therefore Art 6 (1) (c) GDPR.
You have the right to assert your data subject rights against us. In particular, you have the following rights:
According to Art 15 GDPR, you have the right to request information about whether and, if so, to what extent we process personal data relating to you.
According to Art 16 GDPR, you have the right to demand that we correct your data if it is incorrect, outdated or otherwise inaccurate.
According to Art 17 GDPR, you have the right to demand that we delete your personal data if the storage is inadmissible, the purpose of the processing is fulfilled and the storage is no longer necessary or you have revoked a granted consent to process certain personal data.
According to Art 18 GDPR, you have the right to request the restriction of the processing of your personal data if one of the conditions specified in Art 18 (1) GDPR is met.
According to Art 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request its transfer to another controller.
If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art 7 (3) GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art 77 GDPR.
According to Art 21 (1) GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of your data based on the legal basis of Art 6 (1) (e) or (f) GDPR. If we process personal data about you for the purpose of direct marketing, you may object to such processing according to Article 21 (2) and (3) GDPR.
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website.
During the purely informative use of our website, general information is first automatically retrieved that your browser transmits to our server. This includes by default:
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. We do not store this data. We are not able to identify you as a data subject from the information collected.
Via our consent management tool "Cookiebot", you can also manage for the use of which cookies and comparable technologies on our website you would like to give us consent, and revoke consent already given.
For more information on how cookies and similar technologies are used by us, please see below. You can also view more information about the cookies used by us on the website under the further cookie settings.
We use the service Cookiebot of the company Cybot A/S, based in Denmark, to obtain your consent and to withdraw your consent. Collected are:
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation (Art 6 (1) (c) GDPR) to document your consent in accordance with Art 7 (1) GDPR.
You can send us messages via a contact form, which is included on our website. The transmission of your data is encrypted (recognizable by the "https" in the address line of the browser). To answer your request, we need your name, e-mail address, a subject and the message text. Alternatively, you can send us a message via the contact e-mail address firstname.lastname@example.org. If your request is directed towards the conclusion or performance of a contract with us, Art 6 (1) (b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art 6 (1) (f) GDPR.
You have the possibility to subscribe to our newsletter via our website. After registration we will inform you regularly about current news on the part of W.E.B. To subscribe to the newsletter, you must provide a valid e-mail address as well as your name and an area of interest. Once you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration (double opt-in). If you subscribe to the newsletter on our website, we process personal data on the basis of the consent you have given (Art 6 (1) (a) GDPR). You can revoke your consent at any time with future effect, for example via the "unsubscribe" link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation. When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation (Art 6 (1) (c) GDPR) to document your consent in accordance with Art 7 (1) GDPR.
We analyze the reading behavior and the opening rates of our newsletter. For this purpose, we collect and process aggregated usage data that we do not merge with your e-mail address or your IP address. No profiling takes place. The legal basis for the analysis of our newsletter is Art 6 (1) (f) GDPR, because the processing serves our legitimate interest in optimizing our newsletter. You can object to the future sending of our newsletter at any time with effect for the future - either by using the link located at the bottom of each of our mailings or by sending an e-mail to the e-mail addresses listed under Contact. A separate revocation of the dispatch by the dispatch service provider or the statistical evaluation is unfortunately not possible. In this case, the entire newsletter subscription must be cancelled.
For the management of subscribers and the dispatch of the newsletter, we use the services of Eyepin GmbH (Austria/EU). With regard to the processing of personal data, we have contractually obligated this provider to comply with the requirements of European Data Protection Law.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the service Google Analytics is therefore Art 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.
You can also prevent Google Analytics from storing cookies by selecting the appropriate settings on your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
We use the online advertising program Google Ads of Google Ireland Limited (Ireland/EU), through which we place advertisements on the Google search engine. When you access our website via a Google ad, Google sets a so-called conversion cookie on your terminal device. Each Google Ads customer is assigned a different conversion cookie, so that the cookies cannot be tracked across the websites of different Ads customers. The information collected using the cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified. Insofar as personal data is processed in this context, this is done on the basis of your consent. The legal basis is therefore Art 6 (1) (a) GDPR.
We use services provided by third-party providers on our website. For such integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers. This data processing is carried out in each case to protect our legitimate interests in the optimization and economic operation of our website and is thus based on the legal basis of Art 6 (1) (f) GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is, for example, the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website. We have integrated content from the following services provided by third-party providers into our website:
We use certain services provided by third-party providers on our website only with your consent. The legal basis for the use of these services is Art 6 (1) (a) GDPR. You can manage the giving of your consent for these services in the cookie settings. We use the following service based on your consent:
When visiting our Facebook or Instagram page, through which we present our company, personal data is processed. The sole controller of this processing of personal data is Facebook Ireland Ltd (Ireland/EU). For more information about the processing of personal data by Facebook, please visit https://www.facebook.com/privacy/explanation.
Facebook offers the option to object to certain data processing; information and opt-out options in this regard can be found at https://www.facebook.com/settings?tab=ads.
With the operation of our Facebook and Instagram page, Facebook provides so-called "page insights". These page insights are anonymized statistical data about the users and visitors of our Facebook and Instagram page. For this purpose, Facebook stores cookies on the end devices of the users or visitors of the Facebook and Instagram page. This information or data stored in the cookies is called up again during a subsequent visit to the website, whereby the end device can be recognized. The data stored in the cookies is received and processed by Facebook. Further information on cookies by Facebook is available at https://de-de.facebook.com/policies/cookies/.
Although we only receive anonymized data with the help of the cookies set by Facebook, the creation of these statistics is based on the prior processing of personal data. This processing of personal data is carried out by Facebook and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our site and to improve our site based on these findings. The legal basis for this processing is Article 6 (1) (f) GDPR.
We have entered into a joint controller agreement with Facebook, which sets out the distribution of data protection obligations between us and Facebook. For details about the processing of personal data to create page insights and the agreement concluded between us and Facebook, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data.
LinkedIn Ireland Unlimited Company (Ireland/EU) is the sole responsible party for the processing of personal data when visiting our LinkedIn page. For more information about the processing of personal data by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
When you visit or follow our LinkedIn company page, LinkedIn processes personal data to provide us with insights into anonymized statistics. This gives us insights into the types of actions people take on our page (so-called "page insights"). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. It is also not possible for us to draw conclusions about individual members via the information in the page insights. This processing of personal data in the context of the page insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and improving our company page based on these insights. The legal basis for this processing is Article 6 (1) (f) GDPR. We have entered into a joint controller agreement with LinkedIn, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum.
New Work SE (Germany/EU) is the sole responsible party for the processing of personal data when visiting our XING profile. Further information about the processing of personal data by New Work SE can be found at https://privacy.xing.com/de/datenschutzerklaerung.
We also process information that you have provided to us via our XING company page. Such information may be the username used, contact details or a message to us. We regularly process this personal data only when we have been in contact with you. These processing operations are carried out by us as the sole controller. We process this data based on our legitimate interest in contacting the inquirers. The legal basis for the data processing is Article 6 (1) (f) GDPR.
In addition, we may process this data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art 6 (1) (f) GDPR, because they are carried out in our legitimate interest to further develop our product range and to inform you specifically about offers and promotions. Further data processing may take place if you have consented (Art 6 (1) (a) GDPR) or if this serves the fulfillment of a legal obligation (Art 6 (1) (c) GDPR).
Below you will find further data protection information of W.E.B on the topics listed:
For the establishment or implementation of contractual relationships, the processing of the personal master, contract and payment data of the contractual partner provided to us is regularly required. The legal basis for this processing is Art 6 (1) (b) GDPR. In addition, we process customer and prospective customer data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art 6 (1) (f) GDPR and serve our interest to further develop our product range and to inform you specifically about our offers. Further data processing can only take place if you have consented (Art 6 (1) (a) GDPR) or if this serves the fulfillment of a legal obligation (Art 6 (1) (c) GDPR).
Click here for the data protection information Green Power Contracts
Click here for data protection information Applications
Click here for data protection information on land use contracts