Data protection

Uniper attaches importance to the protection of personal data

Uniper attaches great importance to the protection of personal data and is committed to protecting the data of people who visit our websites. Uniper SE, Holzstraße 6, 40221 Düsseldorf, processes personal data collected during visits to our websites in accordance with the laws on data protection and data security of the Federal Republic of Germany and is the data controller in this respect. This privacy policy provides you with information on how Uniper handles information that is collected during your visit to the Uniper website.

This Privacy Policy applies to all websites that link to this Privacy Policy, including https://decarbsolutions.uniper.energy (collectively referred to as "Uniper websites" or "our websites").

1. collection and processing of personal data

Personal data is any information relating to an identified or identifiable natural person, such as your name, e-mail address or postal address. Unless you have agreed otherwise with Uniper, Uniper only collects personal data that is necessary for our business relationship, such as your name, job title, address, telephone number, e-mail address and other contact details. In this case, data is only collected if you provide it to Uniper, e.g. if you order information material using a contact form or request it by e-mail, subscribe to an e-mail information service, apply online via our applicant portal or take part in a survey or competition. Uniper only collects this data directly from you and not from other third parties. The legal basis for the processing in this respect results from Art. 6 para. 1 sentence 1 lit. b) GDPR.

2. use and disclosure of personal data

Uniper uses your personal data to respond to your inquiry, to process your order or to provide you with access to specific information or offers that you have requested from us. For example, if you fill out an online contact form, Uniper will use this data to contact you regarding your interest in the services. The legal basis for the processing in this respect results from Art. 6 para. 1 sentence 1 lit. b) GDPR.

Uniper may also use personal data of its customers and data of participants for marketing purposes, provided that they have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. In this case, Uniper will use the data provided by you to contact you to discuss your interest in the services and to send you information about the company, its subsidiaries and affiliates, such as promotions or events. For this purpose, it may also be necessary for Uniper to pass on your data to group companies or external service providers as part of commissioned data processing. For example, it may be necessary for Uniper to pass on customer data for the purpose of customer relationship management.

If you have consented to the processing of your personal data, you can withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Uniper will not sell or otherwise market your personal data to third parties or pass it on for their advertising purposes. Insofar as you have expressly consented to this in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, Uniper will pass on your data to its subsidiaries and partner companies so that they can contact you directly.

 

3. duration of the storage

Uniper will only store your personal data for as long as is necessary to provide the services or information you have requested and for the duration of our business relationship. In addition, we store your data only to the extent necessary to fulfill statutory retention obligations or for the duration of legal disputes to protect our legitimate interests. We will delete your data immediately if it is no longer required for the aforementioned purposes.

 

4. automatically collected information

When you access the Uniper website, general information is collected automatically (i.e. not via registration). The following data is stored automatically:

  • the shortened and thus anonymized IP address. The shortening excludes any personal reference.
  • the website you last visited (referrer).
  • the websites you have visited on the Uniper website.
  • the names of the retrieved files.
  • the date and time of the retrieval.
  • the operating system and browser version of your PC.

 

5. notes on web analysis

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization

Google Analytics IP anonymization is activated. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

 

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

 

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

LinkedIn Insight Tag

This website uses the Insight tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight Tag

With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes. Details can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. If consent has not been obtained, this service is used on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in effective advertising measures including social media.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of LinkedIn Insight Tag

Object to the analysis of user behavior and targeted advertising by LinkedIn under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Cookies

Session cookies are used on the uniper.energy website and all associated subdomains to offer users greater convenience. For example, visitors to the Uniper websites can continue ordering brochures even after switching to another page without having to re-enter their own data. A session cookie is also used for web analysis.

Randomly selected visitors are asked whether they would like to take part in a user satisfaction survey. Whether you decline or participate is stored in a permanent cookie so that you are not shown this request again at a later date.

No personal data is stored in a cookie at any time.

We use the following cookies on our website and the associated subdomains:

NameProviderDescription of theDomainStorage duration
AnalyticsSyncHistoryLinkedInThis cookie is used to store the time of synchronization with the "lms_analytics" cookie for users in the designated countries..linkedin.com1 year
PHPSESSIDSite operatorThe cookie called PHPSESSID is used by PHP to store a unique session ID that is assigned on the server to track a user session.decarbsolutions.uniper.energySession
UserMatchHistoryLinkedInThis cookie is used to synchronize the IDs of LinkedIn Ads..linkedin.com30 days
_gaGoogleContains a randomly generated user ID. Google Analytics can use this ID to recognize returning users on this website and merge the data from previous visits..uniper.energy1 year
_ga_*****GoogleContains a randomly generated user ID. Google Analytics can use this ID to recognize returning users on this website and merge the data from previous visits. Data transfer to third countries: USA. Google LLC. is certified under the Data Privacy Framework, which means that your rights as a data subject can be guaranteed..uniper.energy1 year
_gcl_auGoogleThis cookie stores a unique identifier that links the click to the user's subsequent actions on the advertiser's website..uniper.energy90 days
bcookieLinkedInCookies from LinkedIn used by share buttons and advertising tags..linkedin.com1 year
borlabs-cookieSite operatorThis cookie saves your cookie settings for this website. You can change these settings or withdraw your consent at any time..decarbsolutions.uniper.energy1 year
formSubmittedSite operatorThis cookie stores information about whether the form on the https://decarbsolutions.uniper.energy/about-ppa/ page has been sent.decarbsolutions.uniper.energy30 days
li_gcLinkedInThis cookie stores whether or which data processing a user has consented to..linkedin.com180 days
li_mcLinkedInThis cookie is used as a temporary cache. It is used to avoid database queries for a member's consent to the use of non-mandatory cookies and to have this consent information available on the client side for enforcement on the client side..linkedin.com180 days
li_sugrLinkedInContains additional information to recognize users across countries..linkedin.com90 days
lidcLinkedInAmong other things, LinkedIn uses the user's location to determine which data center is nearby or should serve the user. The assigned data center is then stored in the lidc (LinkedIn Data Center) cookie to speed up future connections..linkedin.com1 day
lms_adsLinkedInThis cookie is used as a temporary cache. It is used to avoid database queries for a member's consent to the use of non-mandatory cookies and to have this consent information available on the client side for enforcement on the client side..linkedin.com30 days
lms_analyticsLinkedInThis cookie is used to identify LinkedIn members in the designated countries for analysis purposes..linkedin.com30 days
weglot_allow_privateSite operatorThis website is translated with the help of WeGlot. This cookie is used to manage and control access to certain translated content.decarbsolutions.uniper.energy1 day
wp_longSite operatorSaves the language of the visitors selected in the menu.decarbsolutions.uniper.energySession

 

Objection to the storage of cookies

Primarily, you can prevent the setting of cookies for statistical and/or marketing purposes from the outset in our cookie banner by not giving your consent to the setting of these cookies.

Moreover, most browsers are preset to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you before cookies are stored. Users who do not accept cookies may not be able to access certain areas of our websites.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under this link.

Your current selection:
[borlabs-cookie type="btn-switch-consent" id="google-analytics" title="Google Analytics"/]

6. e-mail marketing

Uniper sends marketing emails to customers and interested parties after they have consented to receiving such emails. These e-mails are measured individually with regard to their opening and click rates and evaluated by Uniper for the purpose of designing and improving future information mailings. If you do not wish the opening and click rates to be recorded, we will unfortunately not be able to send you any advertising information by e-mail. This does not apply to e-mails exchanged within the scope of the contract.

The following data is collected and stored as part of email marketing:

  • Time of delivery and opening of the email - Click behavior and forwarding
  • The browser and operating system used to open it
  • Revocations

You can revoke your declaration of consent to receive marketing emails at any time with effect for the future. Please send your revocation to ues-marketing@uniper.energy or click on the unsubscribe link in the respective e-mail if you no longer wish to receive marketing e-mails.

7. recipients outside the EU

With the exception of processing operations for which we provide information in this privacy policy about the possibility of transferring data to recipients based outside the EU, we do not transfer your data to recipients based outside the European Union or the European Economic Area. Data is generally transferred on the basis of the so-called standard contractual clauses of the EU Commission.

 

8. minors

Uniper strongly encourages all parents and guardians to instruct their children in the safe and responsible use of personal data on the Internet. Children, including persons under the age of 16, may not submit any personal data to the Uniper website without the consent of their parents or guardians! Uniper will not knowingly collect personal data from children or use it in any way or disclose it to third parties without authorization.

 

9. shareholders

Further information on the processing of our shareholders' personal data can be found at www.uniper.energy/datenschutz/aktionaere.

 

10. links to other websites

This privacy policy applies to the Uniper website at uniper.energy. Please inform yourself separately about the data protection notices for the websites of the Uniper companies. This website presence may contain links to other providers within and outside the Uniper Group to which this Privacy Policy does not apply. When you leave Uniper's website, you are advised to carefully read the privacy policy of each website that collects personal data.

 

11. integration of social networks

On the uniper.energy website, we integrate the content of our official channels on YouTube at various points. For the companies that operate these social networks (YouTube LLC), this makes it possible to determine what content you have visited on uniper. energy. In particular, if you are also logged in to one of these sites with your personal profile, the social network operators can assign the information to your account.

To prevent the operators of the above-mentioned social networks from collecting the above-mentioned data through your visit to our website, please log out of the respective social network before visiting our site and delete any existing cookies. To prevent YouTube from generally accessing your data on our and other websites, you can connect social plug-ins using an add-on for your browser (e.g. Disconnect).

 

12. your rights

You have the right to receive information free of charge at any time about your personal data stored by us, its origin and recipients and the purpose of data processing as well as the right to correct, block or delete and transfer this data.

IN ADDITION, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, PROVIDED THAT THE PROCESSING OF YOUR PERSONAL DATA IS BASED ON ART. 6 (1).LIT. E) OR LIT. F) GDPR.

If you have consented to the processing of your personal data, you can withdraw this consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You may request a copy of the data we hold about you. Uniper reserves the right to charge you a small fee if you make disproportionate use of this right. If you wish to transfer your data to another controller, Uniper will provide you with the data you have transferred to Uniper in a machine-readable format free of charge.

To exercise your above rights, please send us, Uniper SE as the controller, a description of the data concerned and provide your name, customer number (if applicable) and date of birth. Uniper may ask you to provide further proof of your identity in order to protect your personal data from unauthorized access. The legal basis for the collection of the aforementioned data is Art. 6 para. 1 sentence 1 lit. c) GDPR. The contact details are:

Uniper SE
Holzstraße 6
40221 Düsseldorf
dataprotection@uniper.energy.

If you have any questions or complaints regarding the processing of your personal data, you can also contact us using the contact details above.

You can reach the data protection officer at the e-mail address dataprotection@uniper.energy or at the address

Uniper SE
- for the attention of the Data Protection Officer -
Holzstraße 6
40221 Düsseldorf.

If you are of the opinion that we are not complying with the legal provisions when processing your data or that your data protection rights have been violated in any other way, you can contact the data protection supervisory authority responsible for your country in accordance with Art. 77 (1) GDPR.

 

13. notification of changes

This privacy policy was last updated in July 2023. If this privacy policy is changed, the change will be noted in this privacy policy.