Privacy

The controller within the meaning of Article 4(7) GDPR and other applicable data protection provisions is:

S&G Energy Development GmbH
Europaallee 1
46047 Oberhausen
Germany
Email: anleihe@s-g-energy.de
Phone: +49 (0)208 / 306 658-00

Further company information is available in our imprint.

The definitions in Article 4 GDPR apply to this privacy policy. These include, in particular, the terms personal data, processing, controller, processor, recipient, consent and data subject.

This privacy policy explains, in accordance with the General Data Protection Regulation (GDPR), how personal data is processed on this website and within our company.

We process personal data only where necessary to provide a functional website and our content and services. Processing is based on a statutory permission or the data subject's consent. We do not carry out decisions based solely on automated processing within the meaning of Article 22 GDPR.

As a data subject, you have the rights described below. You may exercise them by sending an informal request to the contact details listed in section 1.

YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU THAT IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR. WHERE YOUR DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU MAY OBJECT TO THAT PROCESSING AT ANY TIME.

Following an objection, we will no longer process the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

• Access (Article 15 GDPR): You may request information about the personal data we process, the purposes, recipients and storage periods.
• Rectification (Article 16 GDPR): Inaccurate or incomplete data may be corrected or completed at any time.
• Erasure (Article 17 GDPR): You may request deletion of your data where the statutory requirements are met.
• Restriction (Article 18 GDPR): You may request restriction of processing, particularly while accuracy or lawfulness is being reviewed.
• Data portability (Article 20 GDPR): You may receive data you have provided in a structured, commonly used and machine-readable format.
• Withdrawal of consent (Article 7(3) GDPR): Consent may be withdrawn at any time with effect for the future.
• Complaint (Article 77 GDPR): You may lodge a complaint with a data protection supervisory authority.

The following legal bases may apply to our processing activities:

• Article 6(1)(a) GDPR: processing based on your consent.
• Article 6(1)(b) GDPR: processing for the performance of a contract or pre-contractual measures.
• Article 6(1)(c) GDPR: processing necessary for compliance with a legal obligation.
• Article 6(1)(f) GDPR: processing based on our legitimate interests or those of a third party, provided your overriding interests or fundamental rights do not take precedence.

Where information is stored on or read from your device for the technical provision of this website, strictly necessary operations are based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Non-essential access, for example for analytics or marketing, would take place only with consent under Section 25(1) TDDDG.

Unless a more specific period is stated, we retain personal data until the purpose of processing no longer applies. If you make a justified deletion request or withdraw consent, the data will be deleted unless other lawful grounds or statutory retention obligations require continued storage.

If service providers process personal data outside the European Union or European Economic Area, transfers take place only in accordance with Articles 44 et seq. GDPR. Safeguards may include an adequacy decision, the EU-US Data Privacy Framework, EU Standard Contractual Clauses or other legally recognised measures.

We implement appropriate technical and organisational measures to protect personal data. The website should be provided exclusively through an encrypted TLS connection. You can usually identify an encrypted connection by “https://” and the padlock icon in your browser's address bar.

This website is operated by an external hosting provider. During a visit, IP addresses, metadata and communication data, requested pages and technical log data may be processed on the provider's servers.

The processing enables secure, fast and reliable delivery of our online offering. It is based on Article 6(1)(f) GDPR. Our legitimate interest is the technically fault-free and economical operation of the website. Where the provider processes data on our behalf, a data processing agreement under Article 28 GDPR is concluded.

When you access the website, your browser automatically transmits information to the web server. This may include:

• the IP address of the requesting device,
• the date and time of access,
• the name and URL of the requested file,
• the referrer URL, browser, operating system and access provider,
• the HTTP status code and transferred data volume.

The processing is based on Article 6(1)(f) GDPR and serves to establish a technically reliable connection, maintain system security and defend against attacks. Data is deleted when no longer required for these purposes unless longer retention is necessary to investigate a security incident or comply with legal obligations.

This website does not itself use analytics, marketing or tracking cookies. Where technically necessary cookies are used by the hosting or access infrastructure, this is based on Section 25(2) TDDDG in conjunction with Article 6(1)(f) GDPR.

You can configure your browser to allow cookies only in individual cases, reject them generally or delete them automatically when the browser is closed. Fully disabling cookies may restrict certain services.

If you contact us by email or telephone, we process the information and contact details you provide to handle your enquiry and any follow-up questions.

Processing is based on Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual measures. In other cases, it is based on our legitimate interest in efficiently handling enquiries under Article 6(1)(f) GDPR or on your consent under Article 6(1)(a) GDPR.

The data will be deleted when you make a justified request, withdraw consent or the purpose no longer applies. Statutory retention obligations remain unaffected. Data is disclosed only where necessary to handle the enquiry, permitted by law or authorised by you.

The fonts, images and videos used on this website are delivered locally from our web server. Visiting the website does not establish a connection to Google Fonts, Adobe Fonts or external video platforms.

Local delivery is based on Article 6(1)(f) GDPR. Our legitimate interest is a privacy-conscious, technically secure and visually consistent presentation. If your browser does not support web fonts or a media format, suitable system fonts or fallback presentations are used.

If you send us an application by email or post, we process the associated personal data to assess your suitability and conduct the recruitment process. This may include identity and contact data, CVs, certificates, references and any further information you provide voluntarily.

The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG), supplemented by Article 6(1)(b) GDPR. If you consent to longer retention, for example for a talent pool, processing is based on Article 6(1)(a) GDPR.

If an application is unsuccessful, the data is generally deleted no later than six months after completion of the recruitment process unless retention obligations apply or you have consented to a longer period.

We update this privacy policy when legal requirements, our website or the procedures used change. The version published on this website is the applicable version.

This English translation is provided for convenience. In the event of discrepancies, the German version shall prevail.