Data protection

General provisions

The collection and use of personal data of the users of our website takes place exclusively in compliance with the data protection laws of the Federal Republic of Germany. In the following we will inform you in what way, to what extent and for what purpose we may collect and use your personal data. You can always access the information on data protection on this website.


1. Name and contact details of the person responsible for processing
These data protection notices apply to data processing by the person responsible mentioned below:

Energy Sales GmbH & Co KG
University Park 1/1
73525 Schwäbisch Gmünd
Tel +49 7171 1857 - 600


2. Collection and storage of personal data as well as type and purpose and their use

a) When you visit our website

When you visit our website " / /", the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted: IP address of the requesting computer, date and time of access, name and URL of the file accessed, website from which access was made (referrer URL), Browser used and, if applicable, the operating system of your computer and the name of your access provider. The data mentioned are processed by us for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability and for other administrative purposes. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit.f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations under Sections 4 and 5 of this data protection declaration.

b) When using our contact form If you have any questions, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid email address so that we know who sent the request and to be able to answer it. Further information can be provided voluntarily. The data processing for the purpose of contacting us takes place in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for using the contact form will be automatically deleted after your request has been dealt with.


3. Disclosure to Third Parties
Your personal data will not be passed on to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

You have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR that disclosure is necessary in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR for the establishment, exercise or defense of legal claims and no There is reason to assume that you have an overriding legitimate interest in not disclosing your data in the event that there is a legal obligation for the disclosure in accordance with Art. 6 Paragraph 1 Clause 1 lit. according to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you


4. Use of cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

You will find all further information on the subject and the cookies we use in our cookie policy.


5. Your rights as a data subject
You always have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;

in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;

In accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do this to assert or exercise it or you need to defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible; in accordance with Art. 7 Para. 3 GDPR, your consent once given at any time to revoke us. As a result, we are no longer allowed to continue the data processing based on this consent in the future and to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work for this purpose.

To assert your rights, please use the contact details given under item 1 and at the end of the website.


6. Data access by unauthorized persons / data security
Data transmission over the Internet always involves the risk that unauthorized third parties will gain access to your data. Complete protection of your communication, for example by e-mail, cannot be guaranteed. We will shortly set up an electronic system for communication and personal retrieval of documents for you. We also use suitable technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Please always hand over particularly sensitive data / documents etc. to us personally!


7. Right of withdrawal
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so which arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.


8. Sending unsolicited advertising to us
We hereby expressly object to any use by third parties of our contact data published in the context of the imprint obligation for the purpose of sending unsolicited advertising and information material. We therefore reserve the right to take legal action against the senders of unsolicited spam mails or other advertising mail.


9. Topicality and changes to this data protection declaration
This data protection declaration is currently valid and is dated January 2021.



Social media

Data processing through social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below. Social networks such as Facebook, Google+ etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations. In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is recorded, for example, using cookies that are stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in. Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals. Legal basis
Our social media appearances are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR). Responsible and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) against us as well as claim against the operator of the respective social media portal (e.g. against Facebook). Please note that, despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider. Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions - especially retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail


We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield.

We have concluded an agreement with Facebook on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link:

You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in:

Details can be found in Facebook's privacy policy:

Facebook Fanpage Insights - Note for our Facebook Fanpage users:

Facebook Ireland Ltd (“Facebook”), as the Facebook fan page operator, provides us with so-called “Facebook Insights” (“Insights”). The insights are various statistics that give us information about the use of our Facebook fan page. Detailed information on this and what data processing takes place can be found at and

Facebook fan page insights can be based on personal data that was collected in connection with a visit or interaction of people on or with our Facebook fan page and its content, so that personal data can also be processed by Facebook, visit our Facebook site. The essential information of the agreement concluded between us and Facebook within the meaning of Article 26 of the General Data Protection Regulation can be found there:

Facebook fanpage insights are jointly responsible for processing:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbor
Dublin 2, Ireland


Energy Sales GmbH & Co. KG
University Park 1/1
73525 Schwäbisch Gmünd
Tel. +49 7171 1857 -600

Facebook Ireland primarily fulfills: the information obligations from Articles 12, 13 GDPR, as well

  • the obligations from Articles 15 to 21 GDPR, the rights of the data subject can therefore be asserted against Facebook Ireland, as well as

  • the obligations from Articles 33 and 34 GDPR.

Of course, you can also assert your rights against us.

Facebook Ireland takes appropriate technical and organizational measures in accordance with Article 32 GDPR to ensure the security of processing using Facebook Fanpage Insights.

For the legal basis and purposes of processing by Facebook Ireland, please refer to the information there: and

We process the Facebook Fanpage Insights data due to our legitimate interest in evaluating the activities on our fanpage and our marketing measures there (advertisements, campaigns, postings); Article 6 paragraph 1 sentence 1 f) GDPR.

Further information: Data protection: Facebook fan pages and InSights - here are the answers

You are not legally obliged to provide your personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the Facebook fan page. In the event of non-provision, a contract or a function on the Facebook fan page may not be offered.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the General Data Protection Regulation as well as from Sections 32 to 37 of the Federal Data Protection Act.

With regard to your personal data, you have the right to

  • Information, Article 15 General Data Protection Regulation

  • Correction, Article 16 General Data Protection Regulation

  • Deletion, Article 17 General Data Protection Regulation

  • Restriction of processing, Article 18 General Data Protection Regulation and

  • Portability, Article 20 General Data Protection Regulation.

You also have the right to object to the processing of personal data

  • Objection, Article 21 General Data Protection Regulation

to collect, see further information separately immediately.

If you have given your consent to the processing of personal data, you have the right to

  • Withdrawal, Article 7 General Data Protection Regulation

with effect for the future.

Please address all inquiries, requests and messages to Facebook Ireland or to us, see above-

If you are of the opinion that the processing of your personal data violates data protection law, you always have that

  • Right to Complain

at the competent supervisory authority, see Article 77 of the General Data Protection Regulation. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is contrary to the General data protection regulation violates. The supervisory authority responsible for Facebook Ireland is the Irish Data Protection Commission (, for us the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.


1. For reasons that arise from your particular situation, you have the right to object at any time to the processing of personal data relating to you, which is based on Article 6, Paragraph 1, Clause 1 f) of the General Data Protection Regulation (data processing based on a weighing of interests).

If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. In individual cases we process personal data in order to operate direct mail. If this is the case with you, you have the right to object at any time to the processing of data concerning you for the purpose of such advertising

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally.



We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Details on how they handle your personal data can be found in Instagram's privacy policy:



In the future, we will use YouTube or a YouTube plug-in on our website. With regard to data protection, the following applies: YouTube belongs to Google Inc., San Bruno / California, USA. As soon as you visit the page of our website equipped with a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is informed which specific page of our website you have visited. If you also have your own YouTube account and are logged into it when viewing our posts, this enables YouTube to assign your surfing behavior directly to your personal profile. You can prevent this possibility of assignment by logging out of your own account before viewing our posts. Further information on the collection and use of your data by YouTube can be found in the information on data protection there at



This website uses functions and plugins from the "LinkedIn" service. The LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA is responsible for this. You can recognize the functions / plugins of LinkedIn by the corresponding logo or the "Recommend button". When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is informed that our website has been visited with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page. In doing so, you enable LinkedIn to assign your visit to our website to you or your user account.

We hereby expressly point out that, as the provider of this website, we have no knowledge of the content and scope of the data transmitted or their use by LinkedIn. Further information on this can be found in LinkedIn's data protection declaration at If necessary, make changes with regard to the collection / forwarding of data in the profile settings there.



This website contains functions of the XING service. Their provider is the company XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany, Tel .: +49 40 419 131-0, Fax: +49 40 419 131-11, E-Mail:
If you use the XING service, be it via the forwarding button or the “XING Share button”, when you access this website via your browser, a connection to the XING service servers is established and data is transferred accordingly. As the operator of this website, we are not informed by XING about the content and scope of the data transferred or the use of data. Please contact the XING service for information directly - generally at, regarding the “XING Share Button” at: op = data_protection - about which data is collected and in what form and to what extent this may be. get saved.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: