The General Data Protection Regulation (GDPR) allows, according to Art. 6 para. 1 lit. b, the collection, processing, storage and use of data for the fulfillment of a contract, whose contracting party is the person concerned, or for the implementation of pre-contractual measures, which take place at the request of the person concerned, especially if this serves the purpose of the contract or the contract-like trust relationship.
In order to create the energy certificate for you, the data listed in the online application, especially personal data (e.g. your name, your address and your e-mail address), as well as the building data relevant for calculation (especially address of the building, year of construction, information on hot water preparation and energy consumption of the last three billing periods or information on building services and building envelope) and information on the modernization measures already carried out are required. These data are collected, stored and processed by us electronically. The requirements of the European General Data Protection Regulation and possibly supplementary German data protection law are observed.
If data is transmitted to other persons and companies in the course of processing, disclosed or otherwise granted access to the data, this is only done on the basis of a legal permission or if this is necessary according to Art. 6 para. 1 lit. b GDPR for contract fulfillment, you have consented, a legal obligation provides for this or on the basis of legitimate interests (e.g. when using order data processing, web hosts, etc.).
The data is used exclusively for the purpose a) of issuing and delivering the certificate, b) for invoicing, c) for further (after issuing the certificate) energy consulting and in anonymized form for statistical evaluations.
You have the right to request confirmation as to whether personal data concerning you are being processed and the right to information about the type and scope of this data in accordance with Art. 15 GDPR. Furthermore, you have the right to request the completion or correction of the data concerning you in accordance with Art. 16 GDPR. In accordance with Art. 17 GDPR, you can request that data concerning you be deleted immediately. If deletion is not possible due to legal retention obligations or another legitimate interest, this is replaced by a restriction of processing in accordance with Art. 18 GDPR.
The stored personal data will otherwise be deleted as soon as they are no longer necessary for their intended purpose, unless deletion is opposed by legal retention obligations or another legitimate interest.
