Privacy policy

General provisions

The collection and use of personal data of the users of our website takes place exclusively in compliance with the data protection laws of the Federal Republic of Germany. In the following, we inform you of the manner, extent and purpose, if any, for which we collect and use your personal data. You can access the information on data protection on this website at any time.

1. name and contact details of the data controller

This data protection notice applies to data processing by the data controller named below:

Energy Sales GmbH & Co KG
University Park 1/1
73525 Schwäbisch Gmünd
Tel +49 7171 1857 – 600

2. collection and storage of personal data as well as type and purpose and their use

a) When visiting our website

When you visit our website / /, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion: IP address of the requesting computer, date and time of access, name and URL of the accessed file, website from which the access was made (referrer URL), browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The aforementioned data is processed by us for the following purposes: Ensuring a smooth connection setup of the website, ensuring a comfortable use of our website, evaluating system security and stability as well as for other administrative purposes. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations on this under points 4 and 5 of this data protection declaration.

b) When using our contact form For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know who the enquiry is from and so that we can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

3. transfer to third parties

Your personal data will not be passed on to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

you have given your express consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, the disclosure is necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. c DSGVO, as well as this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.

4. use of cookies
We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware.

You will find all further information on the subject and the cookies used by us in our cookie policy.​

5. your data subject rights
You have the right at any time:​

to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;​

in accordance with Art. 16 DSGVO, to demand the immediate correction of inaccurate or incomplete personal data stored by us.;​

in accordance with Article 17 of the Regulation, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.;​

in accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.;​

in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party; in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This means that we may no longer continue the data processing based on this consent in the future and to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace for this purpose.​

​To assert your rights, please use the contact details listed under point 1 and at the end of the website.

6 Data access by unauthorised persons / data security
Data transmission via the Internet always involves the risk of unauthorised third parties gaining access to your data. Complete protection of your communication, for example by e-mail, cannot be guaranteed. We will soon set up an electronic system for your communication and personal retrieval of documents. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Please always hand over particularly sensitive data / documents etc. to us personally!

7. right of revocation
Insofar as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation.

8. sending unsolicited advertising to us
We hereby expressly object to any use by third parties of our contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information material. We therefore reserve the right to take legal action against the senders of unsolicited spam mails or other advertising material.

9. topicality and change of this data protection declaration
This data protection declaration is currently valid and has the status January 2021.

Social Media

Data processing through social networks
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below. Social networks such as Facebook, Google+, etc. can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in. Please also note that we are not able to track all processing procedures on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals. Legal basis
Our social media presences are intended to ensure the most comprehensive possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO). Person responsible and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook). Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider. Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail


We have a profile on Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. Facebook has certification under the EU-US Privacy Shield.

We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link:

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in:

For details, see Facebook’s privacy policy:

Facebook Fanpage Insights – Notice to our Facebook Fanpage users:

Facebook Ireland Ltd (“Facebook”) provides us as Facebook Fanpage operators with so-called “Facebook Insights” (“Insights”). The Insights are various statistics that provide us with information about the use of our Facebook Fanpage. Detailed information on this and which data processing takes place can be found at and

Facebook Fanpage Insights may be based on personal data collected in connection with a visit to or interaction with our Facebook Fanpage and its content, so that personal data may also be processed by Facebook when you visit our Facebook site. The essential information of the agreement concluded between us and Facebook within the meaning of Article 26 of the General Data Protection Regulation can be found there:

Jointly responsible for the processing Facebook Fanpage Insights are:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland


Energy Sales GmbH & Co. KG
University Park 1/1
73525 Schwäbisch Gmünd
Tel. +49 7171 1857 -600

Facebook Ireland primarily fulfils:the information obligations from Articles 12, 13 DSGVO, as well as

  • the obligations from Articles 15 to 21 DSGVO, i.e. the data subject rights can be asserted against Facebook Ireland, as well as
  • the obligations from Articles 33 and 34 DSGVO.

Of course, you can also assert your rights against us.

In accordance with Article 32 of the GDPR, Facebook Ireland takes appropriate technical and organisational measures to ensure the security of the processing operations using Facebook Fanpage Insights.

For the legal basis and purposes of the processing on the part of Facebook Ireland, please refer to the information provided there: and

We process Facebook Fanpage Insights data on the basis of our legitimate interest in evaluating the activities on our Fanpage and our marketing measures there (advertisements, campaigns, postings); Article 6(1) sentence 1 f) DSGVO.

Further information: Data protection: Facebook Fanpages and InSights – here are the answers.

You are not legally obliged to provide your personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the Facebook Fanpage. If you do not provide it, it may not be possible to offer a contract or a function on the Facebook Fanpage.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the General Data Protection Regulation as well as from Sections 32 to 37 of the Federal Data Protection Act.

With regard to your personal data, you have the right of

  • Information, Article 15 of the General Data Protection Regulation
  • Correction, Article 16 Basic Data Protection Regulation
  • Deletion, Article 17 Basic Data Protection Regulation
  • Restriction of processing, Article 18 of the General Data Protection Regulation and
  • Portability, Article 20 of the General Data Protection Regulation.

You also have the right to object to the processing of personal data.

  • objection, Article 21 of the General Data Protection Regulation

see further information separately below.

If you have given consent to the processing of personal data, you have the right of

  • revocation, Article 7 of the General Data Protection Regulation

with effect for the future.

Please address all enquiries, requests and notifications to Facebook Ireland or to us, see above-.

If you believe that the processing of personal data relating to you is in breach of data protection law, you always have the

  • right to complain

to the competent supervisory authority, see Article 77 of the General Data Protection Regulation. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The competent supervisory authority for Facebook Ireland is the Irish Data Protection Commission ( for us, the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.


You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1) sentence 1 f) of the General Data Protection Regulation (data processing on the basis of a balance of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

2. in individual cases, we process personal data in order to carry out direct advertising. If this is the case with you, you have the right to object at any time to the processing of data relating to you for the purpose of such advertising.

If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made without any formalities.


We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal data, please refer to Instagram’s privacy policy:


On our website, we will use YouTube or a YouTube plugin in the future. The following applies with regard to data protection: YouTube belongs to Google Inc, San Bruno/California, USA. As soon as you visit the page of our website equipped with a YouTube plugin, a connection to the YouTube servers is established. In the process, the YouTube server is informed which particular page of our website you have visited. If you also have your own YouTube account and are logged in to it when viewing our posts, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this possibility of association by logging out of your own account before viewing our posts. For further information on the collection and use of your data by YouTube, please refer to the information on data protection at


This website uses functions and plugins of the “LinkedIn” service. The company responsible for this is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. You can recognise the functions / plugins of LinkedIn by the corresponding logo or the “Recommend button”. If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is thus informed that our website has been visited with your IP address. If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page. In doing so, you enable LinkedIn to associate your visit to our website with you or your user account.

We hereby expressly point out that we, as the provider of this website, have no knowledge of the content and scope of the transmitted data or its use by LinkedIn. For further information, please refer to the LinkedIn data protection declaration at If necessary, make changes regarding the collection / forwarding of data in the profile settings there.


This website contains functions of the XING service. The provider of this service is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany, Tel.: +49 40 419 131-0, Fax: +49 40 419 131-11, E-Mail: If you use the XING service, either via the forwarding button or the “XING Share Button”, a connection to the XING service servers is established via your browser when you access this website and data is transferred accordingly. As the operator of this website, we are not informed by XING about the content and scope of the transmitted data or the use of data. Please inform yourself directly at the XING service – generally at , with regard to the “XING Share Button” at: -about what data is collected and in what form and to what extent it may be stored.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept All”, you consent to the use of ALL the cookies. However, you may visit "Cookie Settings" to provide a controlled consent.