Privacy Policy

Konzept Energietechnik GmbH
Status: June 2026

Thank you very much for your interest in our company’s website. As your visit involves the processing of personal data, we are providing you with the following information in accordance with the relevant requirements.

Name and contact details of the Data Protection Officer

The data controller responsible for the processing of personal data in accordance with Article 4(7) of the GDPR is listed in the legal notice.

Data Protection Officer

We have appointed a Data Protection Officer:

Manuel Langeheinecke
digitalNORD GmbH
Zeppelinring 35a
24146 Kiel

You can contact them as follows:
By post at the above address, marked ‘Data Protection Officer’.
By email at dsb@dnord.de or via the website at https://digital-nord.de

External Hosting

This website is hosted by an external service provider (the host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual datacontact details, names, website visits and other data generated via a website.
The host is used for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) of the GDPR – General Data Protection Regulation) and in the interests of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR). Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG (Telecommunications Digital Services Data Protection), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our hosting provider will only process your data to the extent necessary to fulfil its contractual obligations and will comply with our instructions regarding this data.
Hosting provider:

digitalNORD GmbH
Zeppelinring 35a
24146 Kiel

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Use of our Website

When you visit our website, the browser used on your device automatically sends information to our provider’s server. This information is temporarily stored in a so-called log file.
The following information is collected automatically without any action on your part and is stored until it is automatically deleted:

• IP address of the requesting computer
• language set in the browser
• browser type used and the operating system of your computer, including the respective version
• whether JavaScript and cookies are enabled
• screen resolution, pixel density and screen size of the display device
• Date and time of access
• Your time zone
• The name of your internet service provider
• Name and URL of the file accessed
• Website from which access took place (referrer URL)

We process the data mentioned for the following purposes:

• To ensure the website connects smoothly,
• To ensure a user-friendly experience on our website,
• To assess system security and stability, and
• For other system administration purposes, such as troubleshooting.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity.
The IP address is deleted from all systems used in connection with the operation of this website after 7 days at the latest. We are then no longer able to establish a link to your identity from the remaining data.

General information on the legal basis

Where you have consented to the processing of your data, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, where special categories of data as defined in Article 9(1) of the GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. Where you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) of the TDDDG. Consent may be withdrawn at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data where this is necessary to comply with a legal obligation on the basis of Article 6(1)(c) of the GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The relevant legal bases in each individual case are set out in the following paragraphs of this privacy policy.

Note on the Transfer of Data to the USA

Our website incorporates, amongst other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a ‘safe third country’ within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. intelligence services) may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.

Enquiries by Email, Telephone or Messenger

If you contact us by email, telephone or messaging services, your enquiry – including any personal data it contains (name, enquiry) – will be stored and processed by us for the purpose of dealing with your request. We will not pass on this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent has been sought; you may withdraw your consent at any time.
The data you send to us via contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Using our Contact form

If you submit your enquiry to us via our contact form, you must provide the information marked as mandatory fields so that we know who the enquiry is from and can respond to it. Any further details may be provided on a voluntary basis.
Data processing for the purpose of contacting us is carried out in accordance with Article 6(1)(b) of the GDPR for the purpose of taking pre-contractual measures in response to your enquiry.
Should data no longer be required in the context of a customer or prospective customer relationship, or should a conflicting interest on the part of the customer take precedence, we will delete the data in question, provided that this does not conflict with any statutory retention obligations.

LinkedIn

We use components provided by LinkedIn Corporation on our website. You can access our company page on LinkedIn via the relevant link on our website. LinkedIn is also a social network.
LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.
If you follow the link to our LinkedIn page, LinkedIn will receive information via the LinkedIn component indicating that the data subject has visited our website.
The data protection policy published by LinkedIn, which can be found at  https://www.linkedin.com/legal/privacy-policy is available and provides information on the collection, processing and use of personal data by LinkedIn.

Cookies

Our website uses cookies. A cookie is a data record that is created when a website is visited and temporarily stored on the website user’s system. If the website user accesses our website’s server again, the user’s browser sends the previously received cookie back to the server. The server can analyse the information obtained through this process. Cookies can, for example, make it easier to navigate a website. Some cookies are necessary to ensure the proper functioning of our website (the legal basis cited is Article 6(1)(f) of the GDPR, namely the protection of the legitimate interests of the operator of this website – we use cookies only in accordance with Article 5(1)(a) of the GDPR, i.e. in line with the principles of ‘lawfulness, processing in good faith, transparency”).

If you wish to disable the use of cookies altogether, you can do so via the settings in your web browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).
Where cookies are not technically necessary, you will find further information in this privacy policy regarding the cookies used by tools and plug-ins.

Links to Third-party Websites

This website contains references to third-party websites in the form of so-called links. Data relating to the link destination is only transmitted once you click on such a link. This is technically necessary. The data transmitted includes, in particular: your IP address, the time at which you clicked the link, the page on which you clicked the link, and details of your internet browser. If you do not wish this data to be transmitted to the link destination, do not click the link.

Events Calendar (TicketMachine)

On our website, in the section  https://konzept-energietechnik.com/webinare/ we use the ‘TicketMachine’ service to display our calendar of events.

The provider is
NET-UP AG
Dachauer Str. 272
80992 München

When pages on which the events calendar is embedded are accessed, a connection is established with NET-UP AG’s servers. In doing so, technical connection data (in particular the IP address, date and time of access, browser type, operating system and referrer URL) is transmitted.
The legal basis for the integration and the associated processing of technical connection data is Article 6(1)(f) of the GDPR. Our legitimate interest lies in presenting our programme of events in an appealing and clear manner to residents, relatives, staff and interested guests.
The processing takes place on servers within Germany. No data is transferred to a third country.
Further information can be found in the provider’s privacy policy at: Datenschutz u8211? TicketMachine | Die Ticketing Spezialisten

Rights of those affected

As we process your personal data, you have the following rights:

  • Right of access – You may, in accordance with Article 15 of the GDPR, request access to your personal data processed by us.
  • Rectification – You may, in accordance with Article 16 of the GDPR, request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.
    Erasure – In accordance with Article 17 of the GDPR, you may request the erasure of your personal data held by us.
  • Restriction of processing – In accordance with Article 18 of the GDPR, you may request the restriction of the processing of your personal data.
  • Data portability – In accordance with Article 20 of the GDPR, you may receive your personal data in a structured, commonly used and machine-readable format.
  • Right to withdraw consent – You may withdraw your consent at any time, in accordance with Article 7(3) of the GDPR.
  • Right to lodge a complaint – You may lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. You may do so, for example, with the supervisory authority responsible for us:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
(Independent State Centre for Data Protection Schleswig-Holstein)
Holstenstraße 98
24103 Kiel
Germany

  • Right to object – Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR.
  • Automated decision-making – As a responsible company, we do not use automated decision-making or profiling.

If you wish to exercise your right of withdrawal or right to object, simply send us an email.

Right to lodge a complaint with the Supervisory Authority

Under Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data if you believe that it infringes the GDPR. You may contact the supervisory authority in your place of residence, your place of work or the place where the alleged infringement occurred.

A list of the relevant supervisory authorities can be found at:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Safety Notice

We use the widely adopted SSL (Secure Sockets Layer) protocol for encryption whilst you are visiting our website. You can tell whether a particular page on our website is being transmitted in encrypted form by the closed key or padlock symbol displayed in your browser’s status bar.
Furthermore, we employ appropriate technical and organisational security measures in accordance with Article 32 of the GDPR to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction, as well as against unauthorised access, unauthorised alteration or unauthorised disclosure by third parties. Our security measures are continuously improved in line with technological developments.
However, despite all due care, complete protection against all risks is not always possible. As complete data security cannot be guaranteed in the case of unencrypted communication via email, we recommend that you send confidential information to us exclusively by post or via encrypted electronic communication.

Definitions

This privacy policy is based on the terminology of the European General Data Protection Regulation (GDPR). Key terms are explained here:

Personal Data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’). A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

Processing

Processing means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of disclosure, the matching or linking, the restriction, erasure or destruction.

Restriction of Processing

Restriction of processing refers to the marking of stored personal data with the aim of restricting its future processing.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure the personal data is not attributed to an identified or identifiable natural person.

Data Protection Officer

The data protection officier is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Processor

A data processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller.

Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed, regardless of whether or not they are a third party.

Third Party

A ‘third party’ means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or any other clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.

Changes to this Privacy Policy

We reserve the right to amend this privacy policy should there be any changes to the legal framework, this website or the manner in which data is collected. However, this applies only to statements concerning data processing. Where the user’s consent is required, or where parts of the privacy policy contain provisions governing the contractual relationship with users, any amendment to the privacy policy will only be made with the user’s consent.

Please therefore familiarise yourself with this privacy policy where necessary, particularly if you are providing personal data.

Status: June 2026

Reviewed by:
digitalNORD GmbH, Kiel — Digital innovation with security and data protection
https://digital-nord.de