Data privacy policy and GDPR

The information below relates to how we handle your personal data that we collect in connection with our website.

A. General information

I. Name and contact details of the controller and their representative

GASAG AG, represented by the Management Board
EUREF-Campus 23–24
10829 Berlin
GASAG Service-Hotline: 030 7072 0000-0
Email address: service@gasag.de

II. Contact details of the data protection officer

GASAG AG, Data Protection Officer Uwe Haider
10829 Berlin
Email address: datenschutzbeauftragte@gasag.de

III. Purposes of processing and respective legal bases

  1. Provision of the website www.gasag.de; communication with GASAG AGThe website we offer at www.gasag.de requires us to handle personal data, for example the IP address used to access the content displayed on the website, when you send us enquiries or in our online service areas.

1.1 You also have the option of contacting us via our contact forms (e.g. for bonus points). For this we collect the personal data you provide us via the corresponding contact form.

1.2 To provide our website (including the functions) we use cookies. You will find more information on this in “B. Special information”.

1.3 We handle your personal data for the provision of this website and for communication with GASAG AG on the basis of our legitimate interest. For us to provide this website, it is technically necessary for us to process certain personal data (e.g. the IP address). For your communication with GASAG AG it is necessary for us to handle the personal data mentioned above.

1.4 Within the framework of the necessary reconciliation of interests, we have weighed up your interest in your respective personal data being kept secret and our interests in providing this website and in making contact. In these cases, our interests take precedence over your interest in secrecy. Otherwise we would not be able to provide you with this website or respond to your contact request.

  1. Online services “MY GASAG” and “Energy portal”2.1 You can register for our online service “MY GASAG” at www.gasag.de and you will be able to use this service. For this we collect your email address, username, contract account number and meter number.

When we undertake the activation of the online “Energy portal” service, we collect the business partner’s personal data that are necessary for using the energy portal.

2.2 Within the framework of our online service we handle your personal data to initiate, implement and process the corresponding usage agreement.

  1. Energy supply contracts

3.1 At www.gasag.de you can conclude energy supply contracts (e.g. GASAG | ELECTRICITY and GASAG | NATURAL GAS, GASAG | NATURAL GAS (Vacant Property), GASAG | Electricity (Vacant Property)). For this we collect your master data, contact details, meter number, bank details and details of the respective property management company or owner.

3.2 As soon as your personal data are stored in our customer information systems, an account will also be set up in our online service “MY GASAG”.

3.3 We handle your personal data in order to initiate, implement and process the corresponding energy supply contract. This also includes our online service “MY GASAG”.

3.4 We collect personal data on your previous payment behaviour and creditworthiness information on the basis of mathematical and statistical processes run by credit rating agencies. Credit rating agencies store personal data so that they are able to issue information.

  1. Subsequent tenants or new owners within the context of the energy supply

4.1 We offer the option that subsequent tenants or new owners can be registered on a portal site by a third party (e.g. the previous tenant, the old owner, a property management company) within the context of the energy supply. For this we collect the personal data requested in the respective form. We write to the subsequent tenant or new owner as an interested party in order to guarantee their energy supply.

4.2 Within the framework of the necessary reconciliation of interests, we have reconciled the interest of the subsequent tenant or new owner in their respective personal data being kept secret, and our interest in processing these data within the framework of the energy supply. In these cases, our interests take precedence over the interest in secrecy.

  1. Consent to advertising

5.1 If you give us your consent to receiving advertising, we will handle your personal data for our own advertising purposes.

5.2 Your declaration of consent is the legal basis for our handling your personal data in this respect. You can retract your consent at any time with future effect.

  1. Newsletter

6.1 On our website you can register for our newsletter by issuing the corresponding consent. You can also register for our newsletter by email. Your consent is the legal basis for our data processing. You can retract your consent at any time with future effect.

6.2 For the respective registration we will process your username, first name, last name and email address.

  1. GASAG WhatsApp customer service

7.1 You can register for our GASAG WhatsApp customer service.

7.2 You will find the corresponding data privacy policy here:
https://www.gasag.de/privatkunden/service/kundenservice/whatsapp-kundenservice/whatsapp-kundenservice-datenschutz

  1. Online job applications

8.1 You can apply to us online via our career portal. For this we will process the personal data you provide to us within the framework of your application. We will handle your personal data for initiating the corresponding employment contract.

8.2 You can register for and subsequently use our applicant portal. For this we will process the personal data you enter on the registration form. We will handle your personal data within the framework of the applicant portal to initiate, implement and process the corresponding usage agreement.

8.3 Special data protection information applies to our career portal. You will find this on our “Careers” web page or in our career portal.

IV. Recipients or categories of recipients of personal data

  1. Provision of the website www.gasag.de; communication with GASAG AG;
    online services “MY GASAG” and “Energy portal”

1.1 We use service providers to provide our website (including its functions). For this we transmit personal data to these service providers. The respective service providers are named in “B. Special information”. We have contractually obliged these companies to apply the same care when handling the personal data as GASAG AG does itself.

1.2 Insofar as your enquiry comprises cooperation with a company in the GASAG group, or such a company is involved in the provision of services to you, we will share your personal data with this company. You will find an overview of the companies in the GASAG group here: https://www.gasag.de/unternehmen/die-gasag/unternehmensportraet

  1. Energy supply contracts

2.1 For the implementation of the contract we transmit personal data to other companies in the GASAG group, to market partners as defined in the procedural regulations of the Bundesnetzagentur (Federal Network Agency) (e.g. to network and metering point operators and upchain suppliers), and to service providers involved in providing the service (e.g. tradespeople and transport operators).

2.2 If you unlawfully refuse to comply with your payment obligation, we will transmit your personal data to collection companies.

V. Criteria for specifying the storage period for personal data

We will delete your personal data when the respective purpose for such storage no longer applies and there is no statutory regulation requiring storage. Statistical evaluations take place only in anonymised form.

VI. Your rights

You have the right to information about your personal data and to rectification, deletion, restriction of the processing and to data portability. In cases in which we process your personal data on the basis of our legitimate interest, you have the right to object to the respective processing.

You can retract your consent to receiving advertising at any time with future effect.

To assert your rights and retract your consent to receiving advertising, please contact the Data Protection Officer.

VII. Existence of a right to complain to a data protection supervisory authority

You can complain to a data protection supervisory authority. The following data protection supervisory authority has competence for us:

Berliner Beauftragten für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin

VIII. Provision of personal data

The fields on the respective order form marked * are obligatory fields. These personal data are required for concluding a contract. If you do not provide these personal data, we cannot conclude the respective contractual relationship.

There is no legal or contractual provision stating that you must provide your email address and/or phone number within the context of your consent to receiving advertising. If you do not give us your consent to receiving advertising, you will not receive any information about offers, products and services unless this is permitted by law.

IX. Existence of automated decision-making and profiling

Credit checks are undertaken by a credit reference agency. Depending on the outcome of the credit check, on the basis of probability values the person concerned is allocated to a statistical group of persons that have displayed similar payment behaviour in the past. This allocation takes base in particular on the following basis:

  • Personal status and age
    • Information about the address / confirmation of the address, about the building / way in which the building is used, and about the name
    • Payment experiences
    • Connections with the company / functions in the company

The credit rating agency uses collected information and past experiences to prepare a forecast of future events. The probability values are calculated primarily on the basis of the information stored by the credit rating agency on a particular person. This procedure is known as “logistic regression”, and is a well-founded mathematical and statistical method that has been proven in practice for a long time for forecasting risk probabilities.

As a consequence of this creditworthiness check, an automated decision might be made not to conclude a contract with the person concerned. In such a case, the person concerned has the right to request a review of this automated decision by an employee of the GASAG group, and to present their own view.

X. Children

Children should not transmit any personal data to GASAG AG without the consent of their parents or guardian. We therefore recommend that all parents and guardians instruct their children on the safe and responsible handling of personal data on the Internet. GASAG AG will not knowingly collect, process or use personal data from children.

B. Special information

I. Security

We take suitable technical and organisational measures to protect your data that we administer against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons.

II. Automatically collected information

  1. Use of cookies

On our website we use cookies, which are data sets that are deposited on the user’s end device (e.g. computer, smartphone, tablet) by a web server. When you access our website again from the same end device, these cookies are sent back either to our website (“first-party cookie”) or another website to which the cookie belongs (“third-party cookie”). Via the information that has been stored and sent back (e.g. the Internet browser used and operating system; domain name of the website from which you came; average dwell time, pages accessed) the respective website recognises that you have already accessed and visited it using the browser of your end device. When you access our web pages, information is automatically collected in anonymous form. Over time, this enables us to offer users more effective and generally better use of our web pages by improving the content and making the site easier to use. The statistical data acquired help us to improve the performance and attractiveness of our web pages. We use this information so that we can provide you with services and information that are specially tailored to your needs. Any storage of information over and above the information mentioned takes place only after you have given us your express consent. This is the case, among other things, if you set up a customer account, conclude a contract or contact us. In such cases, your personal data will be used solely for processing your respective issue. Our cookies generally remain on your end device for twelve months unless you delete them earlier. Deactivating the cookie function in your browser will restrict your use of the web pages and the services offered.

  1. Use of tracking cookies for advertising purposes

2.1 This website works with external performance advertising networks to display and optimise our own advertisements. Within the framework of the tracking services, in order to document transactions, cookies are placed on the end devices of users that visit or use the websites or other online offerings of its customers. These cookies solely serve the purpose of correctly identifying the success of an advertisement and invoicing for the services accordingly within the framework of the advertising network. No personal data are collected, processed or used here. All that takes place is information being placed on a cookie about when a particular advertisement was clicked on by an end device.

2.2 We use cookies for the following suppliers:

  1. Use of Google Analytics

3.1 This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of the website is generally transmitted to and stored by Google on servers in the United States. The IP anonymisation on gasag.de means that your IP address will be abridged by Google beforehand within the member states of the European Union, or in other states signatory to the Agreement on the European Economic Area.

3.2 Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and abridged there. On behalf of GASAG AG, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. Google will not associate the IP address transmitted by your browser with any other data held by Google.

3.3 You can refuse the storage of cookies by selecting the appropriate setting on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from receiving and processing data generated by the cookies and relating to the use of the website (including your IP address) by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=en

3.4 We also use Google Analytics to evaluate data from DoubleClick cookies and AdWords for statistical purposes. If you do not want this, you can deactivate it via the ad preference manager http://www.google.com/settings/ads/onweb/?hl=en .

  1. DoubleClick by Google

4.1 “DoubleClick” is a service provided by Google. For DoubleClick, cookies are used to show you relevant advertising. Your browser is allocated a pseudonymous ID to check which ads have been shown in your browser and which ads have been accessed. The cookies do not contain any personal information. The use of the DoubleClick cookies only enables Google and its partner websites to show ads on the basis of previous visits to our website or other websites. The information generated by the cookies is transmitted by Google to a server in the United States and stored there. Transmission by Google of data to third parties only takes place on the basis of the statutory provisions or within the framework of contract data processing. Google will not associate your data with any other data held by Google.

4.2 You can also deactivate DoubleClick via the following options: https://support.google.com/ads/answer/2662922?hl=en.

4.3 Further information about DoubleClick: https://policies.google.com/technologies/ads?hl=en

  1. Use of GA Audiences

Google Analytics Audiences is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA (“Google”). This service uses cookies to show you advertising that is relevant to you. For this, your browser is allocated a pseudonymous ID to check which ads have been shown in your browser and which ads have been accessed. The cookies do not contain any personal information. The use of these cookies only enables Google and its partner websites to show ads on the basis of previous visits to our website or other Internet websites. The information generated by the cookies is transmitted by Google to a server in the United States and stored there. Any transmission of data by Google to third parties only takes place on the basis of the statutory provisions or within the framework of contract data processing. Google will not associate your data with any other data held by Google.

Further information on the services provided by Google:
https://policies.google.com/technologies/ads?hl=en 

If you do not want to receive any interest-based advertising, you can deactivate the use of cookies by Google for these purposes by following the instructions at https://www.google.de/settings/ads/onweb#display_optout .

  1. Exactag

6.1 Exactag GmbH, Kennedydamm 1, 40476 Düsseldorf, collects and stores data on this website and its subpages for marketing and optimisation purposes. Anonymous usage profiles can be prepared from these data. For this, cookies and a technique known as a “fingerprint” are used. Cookies are small text files that are stored locally in the temporary cache of the site visitor’s Internet browser. The fingerprint technology stores Internet browser environment variables in a database, without saving unique user-related data such as an IP address. The cookies and/or the fingerprint enable the Internet browser to be recognised. The data collected using the Exactag technologies are not used to identify the visitor to this website personally without the separately issued consent of the user . Strictly no personal data are collected.

6.2 You can object to the storage of the anonymously collected visitor data concerning you at any time with future effect. A cookie will be placed in your browser to ensure that this exclusion from data storage takes effect. This cookie bears the name “optout” and will be placed by “exactag.com”. It should not be deleted as long as you object to the data storage.

6.3 To object to the storage of your visitor data please use the provider’s opt-out process at:
https://www.exactag.com/en/data-privacy/

  1. Bing Ads

7.1 On the website we use technologies from Bing Ads (bingads.microsoft.com), which are provided and operated by the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft will place a cookie on your end device if you have reached our website via a Microsoft Bing Ad. In this way both we and Microsoft Bing can recognise that someone has clicked on an ad, been redirected to our website and reached a previously determined destination page (conversion page). We only learn the total number of users that have clicked on a Bing ad and then been redirected to the conversion page. Via the cookie, Microsoft collects, processes and uses information from which usage profiles are created using pseudonyms. The usage profiles serve to analyse visitor behaviour and are used to display advertising. No personal information about the user’s identity is processed.

7.2 If you do not want Microsoft to use information about your behaviour as described above, you can refuse the placement of a cookie that is necessary for this, for example by means of the browser setting that deactivates the automatic placement of cookies.

7.3 You can also prevent the collection of the data relating to your use of the website that is generated by the cookie, and prevent this being processed by Microsoft, by declaring your objection via the following link  http://choice.microsoft.com/en-GB/opt-out. Further information about data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com/en-gb/privacystatement.

  1. Use of Mouseflow

8.1 For our website we use Mouseflow, a web analysis service from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. This is done to record random individual visits and thus analyse the user behaviour on our website.

8.2 These are recorded using an anonymised IP address. The resultant user behaviour log (mouse movements, clicks, scrolling, handling of form fields) can then be spot-checked. We use this anonymised information to improve the user-friendliness of our website and derive measures for improving the use of the website. The information does not relate to any individual person and is not disclosed.

8.3 If you want to object to this recording, please use the following link: www.mouseflow.com/opt-out/.