data protection notice
MVV Energie AG
data protection information due to GDPR
We appreciate your interest in our company and our products and services. We would like you to feel secure when you visit our website, also with regard to the safety of your personal data. Protecting your personal data is a matter we take seriously. We naturally comply with the requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-new).
With this data protection information, we would like to inform you about the type, scope and purpose of personal data processing on these internet pages and about your rights in this respect.
We update this data protection information at regular intervals. To keep informed, you should consult this information regularly.
contact details for the responsible body and the Data Protection Officer
Responsible body (“controller”)
MVV Energie AG
Luisenring 49
68159 Mannheim
E-Mail: kontakt@mvv.de (see our legal imprint page for further details).
Data Protection Officer
MVV Energie AG
Data Protection Officer
Luisenring 49
68159 Mannheim
E-Mail: datenschutz@mvv.de
general information on the scope and purpose of personal data processing on our websites
Personal data is information about your personal and material circumstances. This includes information such as your name, address, telephone number and e-mail address. In general, you do not need to disclose any personal data to use our websites.
When you visit our website, we store the following data in anonymised form: the name of your internet provider, the number of visits you make to our website per day and week, the number of visits per page, the average time spent per page, the number of feedbacks, the website from which you visit us and your IP address. This data is evaluated to ensure the trouble-free operation of the website and to improve our services.
No personal user profiles.
If you use our services, we will only collect that data (e.g. your name and address) we need to provide these services. If we ask for additional data, you provide this on a voluntary basis.
children
We have no interest in collecting personal data from children under the age of 16. We do not knowingly or intentionally collect data about children. We are aware that children’s personal data may only be processed with the consent of their legal guardians. If you believe that we have collected information about a child for which you are the legal guardian, you can notify us at datenschutz@mvv.de. We will then delete the data.
purpose of processing
We will process (collect, use and store) your data for the following purposes:
- To respond to your enquiries, process your orders, or provide you with access to specific information or offerings (Art. 6 (1) b) GDPR)
- To protect our legitimate interests and those of third parties, particularly of companies within the MVV Energie Group, also for advertising or market research, to improve services and offerings of customised products, for credit checks, or to investigate or prevent criminal actions such as electricity theft (Art. 6 (1) f) GDPR)
- To the extent that you have given us your consent (Art. 6 (1) a) GDPR)
- Due to legal requirements to which we as a company are subject, and in particular the requirements of commercial of tax law, the German Energy Industry Act and the German Metering Operation Act. (Art. 6 (1) c) GDPR).
forwarding of personal data
If it is necessary to process your enquiries and to provide our services to you, we will pass on the personal data collected to recipients of the following categories within the legal framework (e.g. within the framework of order processing):
- Service provider for customer care
- Credit institutions, payment service providers, debt collection agencies and lawyers
- IT, postal and other communication service providers
- Other companies in the MVV Energie Group
- Public bodies and institutions (e.g. supervisory authorities, social security institutions, financial authorities, investigating authorities).
Further transmission will only take place if you have expressly consented to this beforehand.
duration of storage
Where you or a third party have communicated your data to us, we will only process it from the time at which it is collected. We delete the data thereby collected as soon as storage is no longer required. If statutory retention applies, we restrict the processing of the data.
your rights
You are at all times entitled
- a) To request information as to whether and which personal data concerning you we are processing (Art. 15 GDPR)
- b) To request the rectification, deletion or restriction in the processing of personal data concerning you (Art. 16 – 18 GDPR)
- c) To exercise your right to data portability (Art. 20 GDPR)
- d) To object to the processing of personal data concerning you (Art. 21 GDPR).
Please addressed such requests to MVV or send an e-mail to kontakt@mvv.de. We will inform you by sending copies to you or – if you submit your request in electronic form – electronic copies.
Furthermore, you are entitled to lodge a complaint with the responsible supervisory body.
right to withdraw consent already provided
If you have already explicitly consented to us processing your data, you are at all times entitled to withdraw this consent with future effect.
That also applies to the withdrawal of declarations of consent you provided to us before the GDPR came into effect on 25 May 2018. The withdrawal of consent applies to the future and does not alter the legitimacy of data processing through to the withdrawal of consent. If you would like to withdraw your consent, then please write to MVV or send an e-mail to datenschutz@mvv.de.
right to object
Unless we are obliged to process your data due to compelling legitimate grounds, you are at all times entitled to object to this processing of your data on grounds relating to your particular situation. That also includes the right to object to the processing of your data for advertising purposes.
additional information about specific website offerings
contact by e-mail
If you take up contact with us by mail, we will store the data you send (your e-mail address, possibly your name and telephone number) for the purpose of responding to your questions. By sending your e-mail, you consent to the data you send (such as e-mail address, name) being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) GDPR.
Your personal data will be used solely for the purpose stated and only stored for as long as is necessary to fulfil this purpose. If we are required to comply with statutory retention periods, the processing of your data will be restricted once the original purpose has been fulfilled.
online forms
We use numerous online forms to enable you to contact us or draw on our services. If you contact us using an online form, we will store the data you send (your e-mail address, possibly your name and telephone number) for the purpose of responding to your questions. By sending your enquiry, you consent to the data you send (such as e-mail address, name) being processed for the purpose of responding to your enquiry and to enable us to contact you pursuant to Art. 6 (1) b) GDPR.
Your personal data will be used solely for the purpose stated and only stored for as long as is necessary to fulfil this purpose. If we are required to comply with statutory retention periods, the processing of your data will be restricted once the original purpose has been fulfilled.
online services for private and business customers
Private and business customer who have previously registered are provided with password-protected direct access to their customer accounts. When registering, customers are required to accept the terms of use for our online services.
When you register, we will first send you a validation link by e-mail. Please click on this link to complete the registration of your user account for our online services.
To enable you to visit the specially protected area of your account to view and amend your customer data for our online services at www.mvv.de/onlineservices, we will ask you to enter your user name and your password. This access data is stored in encrypted form in a database. This means that all personal details you provide for our online services are automatically encrypted. No other internet user has access to this data. Protected areas can be recognised by the “https” in the URL address.
information about the safety of your data
We have taken technical and organisational security measures to protect your data against loss, destruction, manipulation and unauthorised access. All our employees and all the individuals involved in processing data are obliged to comply with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG-new) and other legislation relevant for data protection purposes and to ensure the confidential treatment of personal data.
Where personal data is collected and processed, the information is communicated in encrypted form to prevent any data abuse by third parties. Our security measures are continually updated in line with the latest technology.