Privacy Policy

Controller

A data protection officer has not been appointed, as the legal requirements for a mandatory appointment are not met.

General information on data processing

We process our visitors' personal data only insofar as this is necessary to provide a functional website as well as our content and services. Processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This website uses no cookies, no analytics or tracking services and no advertising networks.

Hosting and server log files

When you access our website, the hosting provider automatically collects information in so-called server log files that your browser transmits. These are:

• IP address of the requesting device
• date and time of access
• name and URL of the file accessed
• website from which access is made (referrer URL)
• browser used and, where applicable, operating system

Processing is carried out on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in ensuring a trouble-free connection setup, system security and stability, and the prevention of attacks. This data is not merged with other data sources. The log files are deleted after 14 days at the latest, unless security-relevant events require longer retention.

Hosting provider: Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. The website is delivered via Netlify's infrastructure and CDN. As the provider is based in the USA, data (in particular the server log data mentioned above) may be transferred to the USA; the legal basis for this is the EU Commission's Standard Contractual Clauses and/or the provider's certification under the EU-US Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

Contacting us

When you contact us by email or via the contact form, the data you provide (name, email address, company if applicable, project details and message content) is stored by us in order to respond to your enquiry.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding a contract or serves to carry out pre-contractual measures; otherwise Art. 6 (1) (f) GDPR on the basis of our legitimate interest in processing the enquiries addressed to us.

The data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations (in particular §§ 147 AO, 257 HGB) apply.

Messages sent via the contact form are transmitted and delivered through the “Netlify Forms” service provided by Netlify, Inc. (USA). The form data you enter is processed on Netlify's servers and forwarded to us (legal bases and safeguards as under section 03).

Embedded 360° tours

Interactive 360° tours may be embedded on this website. The tours themselves and the associated project data are hosted on and delivered from servers within the European Union (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus); for technical reasons your IP address is transmitted to the delivering server when loading (Art. 6 (1) (f) GDPR — interest in the appealing presentation of our reference projects). No tracking takes place within the tours.

Fonts (locally hosted)

This website uses web fonts that are embedded locally on our server. When you access the site, no connection is established to servers operated by Google or other third parties; no data is transferred to third parties.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the prefix “https://" and the padlock symbol in your browser bar.

Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR)

Insofar as we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. Please address your objection informally to mail@energy360.tours.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

Data transfer and storage period

Your data is not transferred to third parties unless this is necessary for the performance of a contract, you have consented, or we are legally obliged to do so. We store personal data only for as long as is necessary for the stated purposes or as prescribed by statutory retention periods.

Currency and amendment of this privacy policy

This privacy policy is dated July 2026. As our website develops further, or due to changed statutory or regulatory requirements, it may become necessary to amend it. The current version can always be found at energy360.tours/en/privacy-policy.