‘Personal data’ means any information relating to an identified or identifiable natural person (e.g., name, address, telephone number, date of birth, email address or user behaviour).

‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
 

Delivery of the online offer and server log files

If you use our website purely for informational purposes – that is, if you do not register or otherwise transmit information to us – we only process the personal data that your browser automatically transmits to our server. This data is required for technical reasons to display the website to you and to ensure the stability and security of our website (legal basis: Art. 6(1) sentence 1(f) of the GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• HTTP status code
• Operating system and version
• Language and version of the browser software

This data (log files) will not be attributed to specific persons. The data is used for technical monitoring and troubleshooting, and is stored for a maximum of 30 weeks and then automatically deleted. In individual cases, data may be stored for longer periods for evidence purposes, for example, in cases of suspected misuse or fraud.

Technically necessary cookies

We use temporary session cookies and technically necessary cookies to deliver our online offer. These cookies enable basic functions such as displaying the website on your device or managing order processes. Processing is carried out in accordance with Art. 6(1)(b) of the GDPR (performance of a contract) or Art. (6)(1)(e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG) within the scope of our tasks in the public interest.

Session cookies are automatically deleted when the browser is closed. We also store your consent settings for other services, for example, in technically necessary cookies. You can view, manage or delete cookies at any time via your browser settings.

Web analytics with etracker

If you consent to this (Art. 6(1) sentence 1(a) of the GDPR), we use the etracker web analytics service provided by etracker GmbH, Hamburg, Germany. The aim is to statistically evaluate the use of our website in order to optimise our content. Data processing is exclusively pseudonymised and cannot be traced back to you personally.

Your IP address and browser information (user agent) are processed anonymously. The complete IP address is not stored. Analysis takes place exclusively on servers in Germany; no data is transferred to third parties. Your session will be completely anonymised after 7 days.

You can revoke your consent or give your consent again at any time via consent management at the bottom of the page by changing the selection in the ‘Statistics’ section.

Web analytics and user feedback using Hotjar

With your consent (Art. 6(1) sentence 1 (a) of the GDPR), we also use the web analytics service Hotjar provided by Hotjar Ltd, Malta, to better understand the behaviour and interaction of users on our website. This includes surveys and usage analyses to improve our offer.

Hotjar records anonymised interactions (such as mouse movements, click behaviour), but no personal content. Your IP address is automatically shortened by Hotjar so that no conclusions can be drawn about you personally.

The analysis can be deactivated via the browser function ‘Do Not Track’ or managed using Consent Manager on our website. Please visit www.hotjar.com/legal/compliance/opt-out/ for further information.

Web analytics using Matomo

We use Matomo on our website to analyse user behaviour. This is an open-source web analytics tool. Matomo does not collect any session data without your consent.

Matomo uses cookies. These text files are stored on your computer and enable us to analyse the use of a website. For this purpose, the usage information obtained by the cookie is transmitted to the dena servers and stored so that usage behaviour can be analysed. Your IP address is an anonymous identifier for us. We have no technical means of identifying you with this as a registered user. You remain anonymous as a user. 

Please visit https://matomo.org/wp-content/uploads/2022/07/privacy.png for further information.

Integration of Datawrapper

We use the services of Datawrapper, a tool for creating interactive diagrams and maps provided by Datawrapper GmbH, on our website. When accessing pages with embedded Datawrapper visualisations, personal data (IP address, for example) may be transmitted to Datawrapper servers. This is technically necessary in order to display the content correctly.

Data processing is based on Art. 6(1)(f) of the GDPR – our legitimate interest in an appealing and informative presentation of data on our website.

For further information on data protection at Datawrapper, visit: https://www.datawrapper.de/privacy

Integration of YouTube

We use the YouTube platform to integrate our videos: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented by Sundar Pichai (Chief Executive Officer). You have the option to object to the processing of your personal data by the platform (opt-out): https://adssettings.google.com/authenticated.

For further information on data protection at Google LLC, visit: https://policies.google.com/privacy?hl=de&gl=de

Integration of Google Maps

We integrate maps from the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented by Sundar Pichai (Chief Executive Officer). You have the option to object to the processing of your personal data by Google LLC (opt-out): adssettings.google.com/authenticated.

For further information on data protection at Google LLC, visit: https://policies.google.com/privacy?hl=de&gl=de

Integration of Google Fonts

We integrate the fonts of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, represented by Sundar Pichai (Chief Executive Officer). You have the option to object to the processing of your personal data (opt-out): https://adssettings.google.com/authenticated

For further information on data protection at Google LLC, visit: https://policies.google.com/privacy?hl=de&gl=de

Website forms (for example, contact, surveys)

If you contact us via our forms or participate in a survey, we process the personal data you voluntarily provide (such as your name, email address, telephone number) to process your enquiry (legal basis: Art. 6(1) sentence 1(b) of the GDPR). 

If you use a contact form to contact us, you consent to the processing of your voluntarily submitted personal data (legal basis: Art. 6(1) sentence 1(a) of the GDPR). The data will be processed exclusively for the intended purpose and deleted after processing or expiry of statutory retention periods.

Translation feature (DeepL)

Our website uses the translation feature of DeepL SE, Maarweg 165, 50825 Cologne, Germany, in order to provide content in different languages. There is an interface (API) that enables the automated translation. The content already published on this website is the only data that will be transmitted; the personal data of users is not processed.

For further information on data protection at DeepL, visit: https://www.deepl.com/privacy

We use the tools Zoom, Webex and Teams to hold video conferences, telephone conferences and webinars. For further information, see: Data protection information for video conferences, conference calls and webinars via Zoom, Cisco Webex and Microsoft Teams. 

Find out more

Our website also contains links to third-party websites of social networks. We no longer have any influence on the collection, storage and processing of your personal data (e.g., IP address or URL of the page on which the link is located) once you have clicked the respective link. 

Please note that the vast majority of the platforms mentioned carry out their data processing worldwide and in particular in the USA. This so-called third country transfer outside the EU harbours risks with regard to the possible assertion of your data protection rights. 

Link to Xing

We use a link to Xing (XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany) on our website. If the users are members of the Xing platform, Xing can assign the access to the abovementioned content and functions to the user’s profiles there. 

For further information on data protection at New Work SE, visit: https://privacy.xing.com/de/datenschutzerklaerung

Link to Mastodon

We use a link to Mastodon, a decentralised social network based on the ActivityPub protocol, on our website. Mastodon is not operated centrally by one company, but consists of many independent servers (‘instances’). If you are a member of a Mastodon instance, the instance in question may assign the linked content to your user profile when you access it.

Please note that privacy policies and data processing practices may vary depending on the instance used. Information on data protection can be obtained from the responsible Mastodon instance or at: https://joinmastodon.org/privacy-policy

Link to LinkedIn

We use a link to LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) on our website. If users are members of the LinkedIn platform, LinkedIn can assign access to the abovementioned content and functions to the user’s profiles there.

For further information on data protection at LinkedIn, visit: https://www.linkedin.com/legal/privacy-policy

Link to YouTube

We operate an account on the video portal ‘YouTube’ of the company Google Ireland Limited to distribute its video content.

When you visit our presence on YouTube, Google processes your personal data and places cookies on your device. For further information, visit: www.dena.de/cookie-einstellungen/.

If you are logged in to Google at the same time, the information stored there will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. 

For further information about the data protection settings on YouTube, visit: https://policies.google.com/technologies/product-privacy.

We regularly send out surveys to obtain feedback from different groups of recipients. Various survey tools are used for this purpose. Participation in our surveys is voluntary. To the extent your data is personal, it will be processed on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR. Information about the respective tools and the associated data processing is provided below.

Surveys using LamaPoll

For certain surveys, we use the LamaPoll tool provided by Lamano GmbH & Co KG, Frankfurter Allee 69, 10247 Berlin, Germany.

When participating in a survey via LamaPoll, the following data is processed depending on the survey:

• IP address
• Date, start and end time of participation
• Response time and duration
• Language settings
• Type of device, operating system and browser used
• Origin page (referrer)
• Answers to the survey questions
• Additional voluntary information if applicable
• In the case of non-anonymous surveys, the device name, device version and manufacturer are also recorded and linked to the respective participant.

The IP address is processed exclusively on our instructions and only in individual cases. Such processing is indicated in the data protection information of the specific survey. It is controlled via the following functions:

• Prevention of multiple participation through IP check
• IP blacklist for defining permitted or excluded IP addresses

We use the collected data to improve our services or to prepare statistical analyses, among other things. The data will only be passed on to our clients or contractual partners to the necessary extent.

LamaPoll stores all collected data exclusively on servers in Germany and is subject to the data protection regulations of the European Union.

Further information: https://www.lamapoll.de/Support/Datenschutz

Surveys using Mentimeter

For interactive surveys (at events or presentations, for example), we also use the Mentimeter tool provided by Mentimeter AB, Alströmergatan 22, 112 47 Stockholm, Sweden.

The following data is collected when you participate in a Mentimeter survey:

• IP address (in part only shortened)
• Time stamp and duration of participation
• Language settings
• Type of device, operating system and browser used
• Location data where applicable (if the location function of the device is activated)
• Origin page (referrer)
• Answers to questions asked and contributions in interactive elements
• Additional voluntary information if applicable

As a rule, participation is anonymous unless you voluntarily provide personal information or we explicitly refer to a personalised analysis.

Mentimeter processes the data primarily to provide and optimise the services. Processing is carried out based on our legitimate interest (Art. 6(1)(f) of the GDPR) in interactive communication, presentation and obtaining feedback or – if personal data is provided voluntarily – based on your consent (Art. 6(1)(a) of the GDPR).

Mentimeter may transfer data to third countries, in particular to the USA. According to the provider, an appropriate level of data protection is guaranteed by EU standard contractual clauses.

Further information: https://www.mentimeter.com/privacy

You can subscribe to our newsletters, which we use to inform you about our current projects and events, by giving us your consent. We use the Brevo and Newsletter2Go services as well as email marketing platforms of the provider Sendinblue GmbH to send our newsletters. These enable us to organise and analyse the sending of our newsletters. 

We use the double opt-in procedure when registering for our newsletters. This means that after you register with us, we will send you an email, in which we ask you to confirm that you wish to receive the respective newsletter, to the email address you have provided. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the respective newsletter is your email address. The provision of further data, which will be indicated separately, is voluntary and is used to be able to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6(1) sentence 1(a) of the GDPR and Art. 7 of the GDPR, in conjunction with Section 7(2) no. 3 of the German Act Against Unfair Competition. You can revoke your consent to the sending of the newsletter at any time via the unsubscribe link contained in the newsletter and unsubscribe from the newsletter.

For further information on data processing by Brevo, visit: https://www.brevo.com/de/legal/privacypolicy/

As part of our contact data management, we use cobra CRM and brevo from astendo GmbH for our customer relationship management (CRM). We store various personal data relating to interested parties and business contacts there and process this data for various purposes. 

Types of data processed 

The following personal data can be processed by our CRM tool: 

• Contact information: Name, email address, telephone number, postal address
• Communication data: Emails, calls, messages, interactions
• Customer data: Information on purchased products/services (in particular tickets for events), contracts, invoices, payment history, planning and control data
• Behaviour-based data: Data on participation in events
• Technical data: IP address, browser type, operating system, access times, log files
• Information from third parties: Credit agencies, data from public directories
• Image and audio data
• Marketing data
• Data on professional affiliation and career
• Data on membership in political parties, associations, institutions and/or political groups 

Purposes and legal basis of processing 

Your personal data is processed for the following purposes: 

• Personal contact
• Documentation and maintenance of customer relationships
• Organisation of customer letters/information, invitations to events
• Marketing and advertising purposes, provided you have consented to this or we are authorised to use the data based on a weighing of interests
• Documentation of contractual relationships
• Preparation and analysis of statistics to optimise our content and our online and offline offers
• Preparation and analysis of statistics on the energy policy situation (market analysis) 

Legal basis for processing 

Your personal data is processed on the basis of the following legal bases in accordance with Art. 6 of the GDPR: 

• Contract performance (Art. 6(1)(b) of the GDPR): Processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract.
• Consent (Art. 6(1)(a) of the GDPR): In certain cases, we obtain your express consent, for instance for marketing measures or the processing of special categories of data.
• Legitimate interests (Art. 6(1)(f) of the GDPR): We process data if this is necessary to protect our legitimate interests, for example, to improve our services and systems. 

Further information on the processing of data by astendo GmbH can be found in its privacy policy. 

We process various personal data as part of the use of astendo GmbH’s eventManager for our participant management. 

Types of data processed 

The following personal data may be processed by eventManager: 

• Master data: Name, date of birth if applicable (for events with security checks)
• Contact information: Email address, telephone number, postal address
• Communication data: Emails, interactions (registrations/deregistrations)
• Customer data: Information on purchased products/services, contracts, invoices, payment history
• Behaviour-based data: Data on participation in events
• Technical data: IP address, browser type, operating system, access times, log files
• Marketing data: First party marketing data
• Data on professional affiliation and career
• Data on membership in political parties, associations, institutions and/or political groups
• Purposes of processing 

Your personal data is processed for the following purposes: 

• Contact
• Obtaining feedback
• Newsletter registration
• Event registrations
• Planning, organisation and implementation of events and the associated communication
• Conducting security checks by the Federal Criminal Police Office (BKA) or other competent authorities
• Marketing and advertising purposes, provided you have consented to this or we are authorised to use the data based on a weighing of interests
• Documentation of contractual relationships
• Preparation and analysis of statistics to optimise our content and our online and offline offers
• Preparation and analysis of statistics on the energy policy situation (market analysis) 

Legal basis for processing 

Your personal data is processed on the basis of the following legal bases in accordance with Art. 6 of the GDPR: 

• Contract performance (Art. 6(1)(b) of the GDPR): Processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract.
• Consent (Art. 6(1)(a) of the GDPR): In certain cases, we obtain your express consent, for instance for marketing measures or the processing of special categories of data.
• Legitimate interests (Art. 6(1)(f) of the GDPR): We process data if this is necessary to protect our legitimate interests, for example, to improve our services and systems.
• Legal obligation (Art. 6 (1) (c) GDPR): For some events, we process data on the basis of a legal obligation and official security requirements.

 Further information on the processing of data by astendo GmbH can be found in its privacy policy. 

We use the online application tool Persis from Atoria – the people software GmbH for our application management. For further information, see: Data protection information for the processing of personal data of applicants in our dena application portal. 

Find out more

Your personal data will be only disclosed, transferred or otherwise made accessible to third parties where this is permitted under law (e.g., to fulfil contractual obligations, where you have given your consent, on the basis of our legitimate interests or where there is a legal obligation to do so).
Should third parties be commissioned with the processing of data on the basis of a commissioned data processing agreement, they may only do so according to our instructions pursuant to Art. 28 of the GDPR.

Transfer to third countries
It is ensured that there is either an adequate level of data protection before the transfer of personal data or that EU standard contractual clauses of the European Union have been agreed with the recipients or that the data subject has given sufficient consent.
 

If you have consented to your personal data being processed, you can withdraw this consent at any time with future effect. All you need to do is send an email to Widerruf-Einwilligung(at)dena.de. The withdrawal of consent will not affect the legitimacy of the data processed on the basis of the consent given prior to consent being withdrawn. Once consent has been withdrawn, we shall only be permitted to continue processing your personal data if there is another legal basis for doing so.

You have the following rights regarding your personal data subject to statutory regulations:

• the right of access pursuant to 15 of the GDPR
  • the right to rectification or erasure pursuant to Art. 16 and 17 of the GDPR
  • the right to restriction of processing pursuant to Art. 18 of the GDPR
  • the right to object to processing pursuant to Art. 21 of the GDPR
  • the right to data portability pursuant to Art. 20 of the GDPR

Additionally, you have the right to lodge a complaint to a data protection supervisory authority regarding our processing of your personal data.

You also have the right pursuant to Art. 77 of the GDPR to lodge a complaint with the data protection supervisory authority, the Federal Commissioner for Data Protection and the Freedom of Information.

To ensure that data subject requests are handled in an organised and legally compliant manner, we use the Caralegal data protection management tool. This involves processing the personal data necessary for dealing with your request, particularly contact and identification data (such as your name and email address), details relating to your enquiry, and any communication content and internal processing records. Processing is carried out exclusively for the purpose of reviewing, documenting and responding to your data subject requests to ensure compliance with your rights.

Your data will only be stored for as long as is necessary for the provision of our services and online offering and unless there is statutory retention period to the contrary. Data that is subject to a statutory retention period is blocked until the corresponding retention period has expired. This data is no longer available for further use.

You can contact our company data protection officer at datenschutz(at)dena.de or at our postal address with the addition ‘Attn. Company data protection officer’.

Please use the following contact form for data subject requests: Data subject requests