Privacy and Data Protection Policy

Thank you for visiting our web page and for your interest in our company and services. Protecting your privacy is important to us. For this reason, your personal data are collected and used only in accordance with the regulations of the Federal Data Protection Act and other relevant data protection guidelines. Our website is hosted in-house. We can therefore guarantee that all incoming data are used only for the purpose specified.
Who is responsible for processing my data?
Responsible for processing your data is the EnBW Energie Baden-Württemberg AG, Durlacher Allee 93, 76131 Karlsruhe. If you have any questions, suggestions or complaints, you can contact us using these contact details.


How can I contact the data protection officer?
You can contact our data protection officer at We will answer any questions you may have about our data policy
How is my data processed when I visit the website?
We will only collect and process your data if we have received your consent for data processing or if processing is permitted by law.
Collection of technically necessary data and log files
If you visit our websites for information purposes only, i.e. do not register or otherwise transmit data (e.g. via a contact form), we collect the data that your browser transmits to us. In detail this is the following data:

  • IP address or the IP address of your providerDate and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Contents of the request (concrete page)
  • Access status/HTTP status code
  • amount of data transferred in each case
  • Website from which you visit us (Referrer URL)
  • Website you visit
  • Browser type and version used
  • Operating system and its interface
  • Language and version of the browser software

These data are collected and processed in order to display the website to you, to guarantee and improve its stability, and for security reasons. The legal basis for this processing is Art. 6 Para. 1 f) DSGVO. The data will be deleted as soon as they are no longer required for the aforementioned purposes. If an IP address is stored, it will be deleted or made anonymous after 7 days at the latest. The collection of this data as well as the storage of the data in log files is mandatory for the operation of the website. The user is therefore not entitled to object.

Use of cookies
In addition, cookies are used when using our website. Cookies are small text files that can be stored on your hard drive. These are generated by the web server with which you have established a connection via your web browser and then sent to you. Most browsers are currently set to accept cookies automatically. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. There is no link to personal data. You can also delete cookies from your system at any time. On our pages, we integrate offers from third parties on a case-by-case basis, which also use cookies. Please note the data protection notices of the respective third party providers.
Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on the user’s computer, to help the website analyze how users use the site. The information generated by the cookie about users’ use of this website is generally transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, the IP address of Google users will be shortened beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website.

Google will use this information on our behalf to evaluate the use of the website by users, to compile reports on website activity and to provide us, as website operators, with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. The legal basis for data processing is Art. 6 Para. 1 f) DSGVO or § 15 Para. 3 TMG. Our legitimate interest arises from the aforementioned purposes.

You can prevent the storage of cookies by making the appropriate settings in your browser software. In addition, users can prevent Google from collecting the data generated by the cookie and related to their use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following Link. As an alternative to the browser add-on or within browsers on mobile devices, please click this Link to prevent Google Analytics from collecting this data within this website in the future. An opt-out cookie will be placed on your device. Please note that the opt-out cookie only works in the browser in which it was set. Even if you delete your cookies, you must click this link again.

We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” in order to guarantee an anonymous recording of IP addresses (so-called IP masking).


Google Analytics is not used on the  website:

Use of a contact form
If you do not use the EnBW contact forms, but use your private mail account, you should note that you must take your own security measures to ensure the confidentiality of your message. Therefore, please use the EnBW’s encrypted forms. If the form is not encrypted, there is a technical problem and we cannot assume any liability for the security of your data transmission. You can see whether a form is encrypted by looking at the closed “lock” symbol in your browser window. Depending on the content of your request, the legal basis for data processing is Art. 6 Para. 1 b), f) or a). The data that you send us by means of your inquiry will be deleted after the respective purpose has been achieved. If the transmitted request refers to a contract concluded with us, your request will be deleted as explained in the data protection information of the respective contract.
Processing of your data based on legal requirements
Insofar as we are subject to legal obligations which require further processing of your data, we will also process your data for the purposes specified by the legislator in each case. The legal basis for this data processing is Art. 6 Para. 1 c) DSGVO in connection with the standard which contains the respective legal obligation.
Further processing of your data on the basis of a consent given by you.
In addition to the purposes explicitly stated here, data processing will take place if and to the extent that you have consented to data processing in accordance with Art. 6 Para. 1 a) DSGVO. The purposes of the data processing result from the respective consent.
To which categories of recipients will my data be transmitted?
We treat your data confidentially. Within EnBW Energie Baden-Württemberg AG, only the departments and employees who need it to fulfil the above-mentioned purposes have access to your data.

Personal data will only be transmitted by us to third parties if this is necessary for the aforementioned purposes and is permitted by law or if you have given your prior consent.

SANDY Energized Analytics is part of the EnBW Group and cooperates with other Group companies on a division of labour basis. Personal data will also only be transferred to other group companies if there is a legal basis for doing so and if this is necessary for one of the above-mentioned purposes.

What do I have to consider when using links from a data protection point of view?
Our website may contain links to other websites which are not covered by our privacy policy.
What about the security of my data?
EnBW uses technical and organisational security measures in accordance with the current state of technology in order to protect the data provided to us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.
What about children's data?
We strongly encourage legal guardians to accompany their children’s online activities. Children should not transmit any personal data to us without the consent of their parents or legal guardians. We do not knowingly request personal data from children and do not knowingly process such data.
What rights do I have with regard to my data?
With regard to the processing of your personal data, you have the right pursuant to Art. 15 DSGVO to request information about the data processed by us concerning your person. In addition, you have the right to have data corrected or deleted in accordance with Art. 16 DSGVO and Art. 17 DSGVO and to limit the processing in accordance with Art. 18 DSGVO. Furthermore, pursuant to Art. 20 DSGVO, you have the right to request the disclosure of personal data provided by you in a structured, common and machine-readable format. With regard to the right of access, the restrictions of § 34 BDSG apply and with regard to the right of deletion, the exceptions of § 35 BDSG apply.


If we process your data on the basis of legitimate interests (Art. 6 para. 1 f) DSGVO) or for the performance of a public task (Art. 6 para. 1 e) DSGVO) and if your particular situation gives rise to reasons against this processing, you have the right to object to this processing pursuant to Art. 21 para. 1 DSGVO. In the event of an objection, we will no longer process your data for these purposes unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

Pursuant to Art. 21 (2) and (3) DSGVO, you have the right to object – without restriction – to any type of processing for direct marketing purposes.
You can address your objection to us at any time without any formal requirements. For the best possible processing, please use the following contact details:

Can I revoke consent given?
If we process your data on the basis of a consent given by you, you have the right to revoke your consent at any time. Your data will then no longer be processed for the purposes covered by your consent. Please note that the legality of the data processing, which took place before the revocation, is not affected by the revocation. Please refer to the preceding information or the information in the respective consent for details of how you can declare your revocation. Please contact us if you wish to withdraw your consent:
Do I have the right to appeal to a regulatory authority?
If you are of the opinion that the processing of your personal data violates applicable law, you can, in accordance with Art. 77 DSGVO, lodge a complaint with a data protection supervisory authority at any time. This is without prejudice to other administrative or judicial remedies.
Do I have to provide the data or is the provision required for the conclusion of the contract?
With the exception of the technically necessary data to display our website, any provision of data by you is voluntary. Should this be different in exceptional cases, this is explicitly mentioned at the appropriate place in this declaration.
Will my data be used to make an automated decision? And if so, how is this done and what effects does it have on me?
No, automated decision making does not take place.
Can this information be changed? And if so, how do I know about it?
As our data processing is subject to change, we will also change our privacy policy from time to time. We will notify you of any changes in a timely manner. The current status of these data protection regulations can be found here.