PRIVACY POLICY
The protection of your personal data is of particular concern to us. We, KOGA ENERGY GmbH, FN 617391 d (“KOGA ENERGY”), therefore process your personal data exclusively on the basis of the statutory provisions. We only use state-of-the-art security standards to protect personal data. Below we inform you about how we handle your data.
1. Contact with us
The controller within the meaning of the EU General Data Protection Regulation (hereinafter: “GDPR”) and other national data protection laws of the Member States as well as other data protection regulations is the:
Name: KOGA ENERGY GmbH
Address: Nibelungengasse 8/5, 1010 Vienna
Tel: +43-660-1778895
e-mail: contact@koga-energy.com
This privacy policy applies to the KOGA ENERGY website, which can be accessed under the domain https://www.koga-energy.com/ and the various subdomains (hereinafter referred to as “our website”).
2. Rights of data subjects
You have the following rights:
• Right of access (Art 15 GDPR);
• Right to rectification (Art 16 GDPR;
• Right to erasure (Art 17 GDPR);
• Right to restriction (Art 18 GDPR);
• Right to data portability (Art 20 GDPR);
• Right to object (Art 21 GDPR);
• Right to withdraw consent (Art 7 (3) GDPR);
• If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you have the right to lodge a complaint with the competent supervisory authority (Art 77 GDPR). In Austria, this is the data protection authority.
3. What is personal data?
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address or IP address. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. by anonymising the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.
4. Collection and storage of personal data
a) When visiting the website
We collect and use our users’ personal data only to the extent necessary to provide a functional website and our content and services or information. When you visit our website, your browser automatically sends information to our website servers (so-called log files). The following files, among others, are collected:
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made,
• IP address of the requesting computer,
• the browser used and the user’s operating system and its interface as well as the name of your access provider.
The aforementioned data is required by us for a smooth visit and use of the website, the maintenance of system security and for administrative purposes.
The legal basis for data processing is Article 6(1)(f) GDPR. As soon as the aforementioned data is no longer required to display the website, it will be deleted. Further storage will take place in individual cases if this is required by law.
b) When using our contact form
To make it easier for you to contact us, we offer you the option of using the contact forms on our website. The mandatory information (email address, name, telephone number and, if applicable, the information in the documents you provide) is necessary to ensure the best possible response to your enquiry. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be entered into a customer database, insofar as it does not lead to a business transaction, so that we can respond better to your concerns in the future. This storage is limited in time.
c) Newsletter
If you register for a newsletter, you agree to receive occasional information about KOGA ENERGY products by e-mail. In this case, the personal data provided when registering for the newsletter will be stored and used in accordance with Art 6 para 1 1 lit a GDPR. This consent can be revoked at any time by sending an e-mail to contact@koga-energy.com.
5. Forwarding of data
Your personal data will only be transferred to third parties if:
• you give your express consent in accordance with Art 6 para 1 lit a GDPR;
• the disclosure is necessary for the establishment, exercise or defence of legal claims pursuant to Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data;
• in the event that there is a legal obligation for the disclosure pursuant to Art 6 para 1 lit c GDPR; and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art 6 para 1 lit b GDPR.
We transfer personal data outside the EU/EEA, Switzerland and the United Kingdom to countries that the European Commission considers to offer an adequate level of data protection.
For transfers from the EU/EEA and Switzerland to countries that do not offer an adequate level of data protection, we transfer personal data under a data protection addendum with standard contractual clauses and appropriate additional measures, including appropriate technical and organisational measures.
For transfers to the USA, we transfer data in accordance with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”)
Personal data is passed on by KOGA ENERGY to the following companies for the fulfilment of the contract:
• For cloud services: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; their privacy policy can be found at https://privacy.microsoft.com/de-de/privacystatement.
• GoDaddy Deutschland GmbH, c/o WeWork, Friesenplatz 4, 50672 Cologne, Germany; their privacy policy can be found at https://www.godaddy.com/de-at/legal/agreements/privacy-policy.
• For marketing purposes: Omnisend, UAB, code 302530363, address Verkių g. 25C-1, LT-08223 Vilnius, Republic of Lithuania; their privacy policy can be found at https://www.omnisend.com/privacy/.
6. Cookies
We use cookies to operate the website. A cookie is a small file containing either letters or numbers that is sent to the visitor’s browser and stored on their computer’s hard drive (or other internet-enabled device) when they visit the website. They are based on our legitimate interests in providing a fully functional website and the services you have requested (Article 6(1)(f) GDPR, Section 96(3) TKG). If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) provided by us on the website, the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR.
Two types of cookies are used on our website:
• Session cookies: These are temporary cookies that remain on the user’s computer until the browser is closed and are then automatically deleted.
• Persistent cookies: For better user-friendliness, cookies remain stored on your end device and allow us to recognise your browser on your next visit.
If you wish to block or restrict cookies completely, you can make the changes in the settings of your Internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
As soon as the data transmitted to us via the cookies is no longer required to fulfil the purposes described above, this information is deleted. Further storage will take place in individual cases if this is required by law.
7. Analysis tools
We use tracking and analysis tools to ensure the continuous optimisation and needs-based design of our website.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.
The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Google will use the information generated by cookies on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can generally prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
It cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a plugin for your browser at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
This plugin prevents information about your visit to the website from being transmitted to Google Analytics. Other analyses are not prevented by this plugin.
We would like to point out that you cannot use the browser plugin described above when visiting our website via the browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent the collection of your usage data by Google Analytics by clicking on the following link <ahref=”javascript:gaOptout()”>Disable Google Analytics</a>.
Data processing is carried out on the basis of the statutory provisions of Section 96 (3) TKG and Article 6 (1) (a) (consent) and/or (f) (legitimate interest) GDPR. Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer and our website. The user data is stored for a period of 26 months (according to Google’s current default settings).
8. Maps and fonts
Google Maps
We use Google Maps to display map information. When Google Maps is used, Google also collects, processes and utilises data about the use of the Maps functions by visitors to the websites. You can find more information about data processing by Google in Google’s privacy policy at https://www.google.at/intl/de/policies/privacy/. You can also change your settings there in the data protection centre so that you can manage and protect your data.
Data processing is carried out on the basis of the statutory provisions of Section 96 (3) TKG and Article 6 (1) (a) (consent) and/or (f) (legitimate interest) GDPR.
Google Fonts
We use Google Fonts to display external fonts. This is a service provided by Google.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.
The connection to Google established when you access our website enables Google to determine from which website your enquiry has been sent and to which IP address the display of the font is to be transmitted.
You can find more information about data processing by Google in Google’s privacy policy at https://www.google.at/intl/de/policies/privacy/. There you can also change your settings in the data protection centre so that you can manage and protect your data.
9. Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. If you activate these hyperlinks, you will be forwarded directly from our website to the website of the other provider. You can recognise this by the change of URL displayed in your browser. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.
10. Data security
We undertake to treat your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress. However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data – e.g. when sent by e-mail – may be read by third parties. We have no technical influence on this. It is your responsibility as a user to protect the data you provide against misuse by means of encryption or in any other way.
11. Status and updating of this privacy policy
This privacy policy is dated 23 January 2024. We reserve the right to update the privacy policy in due course in order to improve and/or adapt data protection.
