Policy Statement

Privacy Policy of EYYU Energy GmbH

23.01.2025

The protection of your privacy is very important to us at EYYU Energy GmbH. We kindly ask you to carefully read the following summary regarding data collection on our website www.eyyu.de.

This privacy policy informs you about the nature, scope, and purpose of the collection of personal data by the website operator, EYYU Energy GmbH. Data collection and sharing are carried out in accordance with the requirements of the GDPR (General Data Protection Regulation) and the BDSG (Federal Data Protection Act). As changes and updates to this privacy policy cannot be excluded, we recommend that you review it regularly.

We assure you that your data will only be used for the following purposes:

• The functioning of our website,
• Statistical evaluations,
• If applicable, contract formation,
• The continuous improvement of our services.

Your data will be stored only for the period necessary for the aforementioned purposes. In exceptional cases, longer storage may occur based on the GDPR. Of course, we comply with the legally prescribed deletion periods.

We treat your data confidentially and with the utmost care. Should you have any questions or concerns regarding data collection, we are happy to assist you. You can find the relevant contact details at the end of this privacy policy.

Your trust is important to us – the protection of your data is our top priority.
I. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:

EYYU Energy GmbH
Bahnhofstr. 3
56424 Mogendorf
E-Mail: info@eyyu.de
II. General Information on Data Processing

Scope of Processing Personal Data

Eyyu Energy GmbH processes personal data of its users generally only to the extent necessary for providing a functional website and fulfilling our content and services. Processing usually only occurs after explicit consent from the user, unless prior consent is not possible for factual reasons and the processing is legally permissible.
Legal Basis for the Processing of Personal Data

Personal data refers to any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be directly or indirectly identified, for example, through an identifier such as a name, identification number, location data, or other specific characteristics. This includes, among other things, details such as name, address, phone number, date of birth, email address, IP address, or user behavior. Anonymized data, where no link to a person can be made, are not considered personal data.

The processing of personal data (e.g., collection, use, storage, or transmission) always requires a legal basis or the consent of the affected person. Depending on the type of processing, the following legal bases apply:

• Consent: Where the processing is based on the consent of the affected person, Art. 6 para. 1 lit. a GDPR serves as the basis.

• Contract performance: For the performance of a contract to which the affected person is a party or to carry out pre-contractual measures, Art. 6 para. 1 lit. b GDPR is applicable.

• Legal obligation: If the processing is required to fulfill a legal obligation, it is based on Art. 6 para. 1 lit. c GDPR.

• Vital interests: If the processing is necessary to protect the vital interests of the affected person or another natural person, Art. 6 para. 1 lit. d GDPR applies.

• Legitimate interest: If the processing is necessary to safeguard the legitimate interests of Eyyu Energy GmbH or a third party and the interests or fundamental rights of the affected person do not override those interests, Art. 6 para. 1 lit. f GDPR serves as the legal basis.

Eyyu Energy GmbH ensures that all data protection requirements are met and that the lawful processing of your personal data is guaranteed.
3. Data Deletion and Retention Period

The personal data of the affected person will be deleted or blocked as soon as the purpose of storage no longer applies. Further storage will only take place if required by European or national laws, regulations, or other legal provisions to which Eyyu Energy GmbH is subject.

The blocking or deletion of data will also occur once the legally required retention period has expired, unless the data is still necessary to conclude or fulfill a contract. We ensure that all data protection requirements are complied with and guarantee the proper deletion of your data in accordance with the applicable regulations.
III. Provision of the Website and Creation of Logfiles

Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling device, which the internet browser automatically transmits to our servers. This information is stored in a so-called logfile. These include:

(1) Information about the browser type and version used
(2) The operating system of the user
(3) The internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system reaches our website

The data is also stored in the logfiles of our system. The user's IP address or other data that could enable the allocation of the data to a user are not affected by this. The data is not stored together with other personal data of the user.
2. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's device. For this, the IP address must remain stored for the duration of the session.

Our legitimate interest in processing the data, in accordance with Art. 6 para. 1 lit. f GDPR, lies in ensuring the functionality and security of our website, as well as optimizing our content and advertising measures. Furthermore, the processing is used to detect and investigate abuse cases and to provide the necessary information to law enforcement agencies in the event of a cyber attack.

The collected data will be deleted or anonymized as soon as it is no longer required for the above-mentioned purposes.
3. Duration of Storage

The data will be deleted as soon as they are no longer required to achieve the purpose of their collection. In the case of data collected for the provision of the website, this occurs when the respective session is finished.

4. Right to Object and Erasure

The collection of data for the provision of the website and the storage of the data is strictly necessary for the operation of the website. Therefore, the user does not have the right to object.
IV. Use of Cookies

Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique string of characters that allows for the identification of the browser when the website is accessed again.

We use cookies to make our website functional. Some elements of our website require that the requesting browser can be identified even after a page change. The following data is stored in the cookies and transmitted:

Language settings
Additionally, we use cookies on our website that allow for the analysis of the users' browsing behavior. In this way, the following data can be transmitted:

(1) Search terms entered
(2) Frequency of page views
(3) Use of website functions

When visiting our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. A reference to this privacy policy is also provided in this context.

V. Contact Form and Email Contact

Description and Scope of Data Processing
Our website features a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input form is transmitted to and stored by us. This data includes:
At the time of sending the message, the following data is also stored:

(1) First and last name
(2) Email address
(3) Phone number
(4) Name of the company

For the processing of the data, your consent is obtained during the submission process, and reference is made to this privacy policy.

Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted with the email is stored.

In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing
The legal basis for processing the data is, in the case of the user's consent, Art. 6 para. 1 lit. a DSGVO.

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of Data Processing
The processing of the personal data from the input form serves solely to process the contact request. In the case of contact by email, the required legitimate interest in processing the data is also present.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of Storage
The data will be deleted once it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by email, this is the case once the respective conversation with the user is concluded. The conversation is considered concluded when it is evident from the circumstances that the relevant matter has been fully resolved.

The additional personal data collected during the submission process will be deleted at the latest after a period of seven days.

5. Right to Object and Erasure
The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If you wish to exercise your right to object, please send us an email at “email address” and inform us of your objection in an informal manner. We will promptly confirm receipt of the message and the deletion of your data.

All personal data stored during the contact process will be deleted in this case.
6. Right to Object and Erasure

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If you wish to exercise your right to object, please send us an email at "email address" and inform us of your objection in an informal manner. We will promptly confirm the receipt of the message and the deletion of your data.

1. All personal data stored during the contact process will be deleted in this case.

Analysis of Your Property Data
Scope of the Processing of Personal Data
We use the data transmitted through our website for the analysis of the property characteristics of property owners who have registered for a free preliminary check regarding the suitability of their land for the installation of PV or battery storage systems. In order to carry out the free preliminary check, we process the following user data:

(1) Name
(2) Email address
(3) Phone number

The software runs exclusively on the servers of our website. Personal data of the users is stored only there. The data will not be passed on to third parties unless written consent is given by the property owner.
VI. Rights of the Data Subject

As a data subject of the processing of personal data, the following rights arise for you under the GDPR:

In accordance with Article 15 GDPR, you have the right to request information about the personal data we process about you. In particular, you can request information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of the right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, information about transfers to third countries, and, if applicable, meaningful information about the details thereof.
In accordance with Article 16 GDPR, you have the right to request the correction of inaccurate or the completion of your personal data stored with us without undue delay.
In accordance with Article 17 GDPR, you have the right to request the erasure of your personal data stored with us under the conditions of Article 17(1)(a) to (f) GDPR, such as when your data are no longer necessary for the purposes for which they were collected or otherwise processed, unless the processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
In accordance with Article 18 GDPR, you have the right to request the restriction of processing of your personal data, if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, and you object to their erasure because you need them for the establishment, exercise, or defense of legal claims. In such a case, the data will be blocked for processing. The right under Article 18 GDPR also applies if you have lodged an objection to processing in accordance with Article 21 GDPR.
In accordance with Article 20 GDPR, you also have the right, if we process your personal data for the fulfillment of a contract with you or based on your consent, to receive your personal data in a structured, commonly used, and machine-readable format, or to transmit them directly to another controller, as long as you have provided the data to us.

In accordance with Article 7(3) GDPR, you can withdraw your consent at any time. As a result, we will no longer be able to continue processing your personal data based on this consent in the future. This also applies to the withdrawal of consent declarations made before the General Data Protection Regulation became effective, i.e., before May 25, 2018. Please note that the withdrawal only applies to the future. Processing that took place before the withdrawal is not affected by this.
In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority at any time, especially with a supervisory authority in the member state of your residence, place of work, or the place of the alleged infringement if you believe that the processing of your personal data violates data protection laws.
If you would like to request information about the data stored about you, enforce your other rights, or have questions regarding data protection, you can contact us using the contact information provided in Section 2 (Responsible Party).
Information about Your Right to Object under Article 21 GDPR

Individual Right to Object

You have the right to object at any time to the processing of your personal data based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a legitimate interest) for reasons arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to Object to Processing for Direct Marketing Purposes

In some cases, we process your personal data to engage in direct marketing. You have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling related to such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Recipient of an Objection

The objection can be made informally in writing with the subject "Objection," including your name, address, and date of birth, and should be sent to:

EYYU Energy GmbH
Bahnhofstr. 3
56424 Mogendorf
Email: info@eyyu.de
VII. Changes to the Privacy Policy

As the data controller, we reserve the right to amend the privacy policy at any time in accordance with applicable data protection regulations. The current version is from January 2025.

2025 © EYYU Energy

Follow us!