Privacy Policy

1. Controller (Art. 13 para. 1 lit. a GDPR)

Moritz Mair, Lindenweg 20, 64291 Darmstadt, Germany
Email: mail [at] energyforecast.de

2. Data collected and purpose (Art. 13 para. 1 lit. c GDPR)

Data privacy is very important to us. We want to inform you about the data we collect and how we use it. We aim to collect as little data as possible while still being able to provide a good service.

Upon registration: Email address, password (encrypted), optionally further details (name, address for paid plans) for contract fulfilment.

During use: IP address, browser type, operating system, pages visited, time of access to ensure system stability and detect misuse.

Contact via contact form

If you send us enquiries via the contact form, your data will be forwarded to us by our service Formpost.eu. The transmission to Formpost.eu is carried out via the HTTPS protocol. As a result, we receive an unencrypted email from Formpost.eu containing the data you entered. Formpost.eu is another service of ours and is hosted on servers in Germany. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in being contacted). Further information can be found on the privacy page of Formpost.eu.

Hosting

We host our website with Hetzner Online GmbH in Germany. The servers are located in German data centres and are subject to strict German data protection regulations. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable hosting). You can find Hetzner's privacy policy here: Hetzner's privacy policy

Payment processing and invoicing

For processing payments for paid plans, we use the payment service provider Mollie B.V. When you make a booking, your payment data is processed directly by Mollie. Mollie is a certified Payment Service Provider and meets the highest security standards (PCI DSS Level 1). Mollie is headquartered in the Netherlands and is subject to the GDPR for the processing of data of European customers. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfilment). Further information on data protection at Mollie can be found at: Mollie's privacy policy

For invoicing, we use Lexware (Haufe-Lexware GmbH & Co. KG). Your billing address and payment information are transmitted to Lexware to create legally compliant invoices. Lexware is based in Germany and processes your data in accordance with the GDPR. The legal basis is Art. 6 para. 1 lit. c GDPR (legal obligation for invoicing). Further information on data protection at Lexware can be found at: Lexware's privacy policy

Email dispatch

For sending emails (e.g. registration confirmations, newsletters, password resets), we use an SMTP server of Strato AG (Germany). Your email address and the content of the emails are processed exclusively for sending purposes. The data is not passed on to third parties. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfilment) or Art. 6 para. 1 lit. a GDPR (consent for newsletter).

Cookies

Our website only uses session cookies required to stay logged in. These are technically necessary cookies pursuant to Art. 6 para. 1 lit. f GDPR and do not require consent.

Web Analytics

The data is linked to your account if you are registered and logged in. Otherwise, the data is stored anonymously. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest).

3. Legal bases for processing (Art. 6 GDPR)

Art. 6 para. 1 lit. a GDPR – Consent (e.g. newsletter, revocable at any time)

Art. 6 para. 1 lit. b GDPR – Contract fulfilment (provision of the service, payment processing)

Art. 6 para. 1 lit. c GDPR – Legal obligation (invoicing, retention obligations)

Art. 6 para. 1 lit. f GDPR – Legitimate interest (security, misuse detection, system improvement, hosting, contact)

4. Your rights (Art. 15–22, 77 GDPR)

You have the right to:

• Access the data stored about you (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of your consent at any time (Art. 7 para. 3 GDPR)
• Complaint to the supervisory authority (Art. 77 GDPR)

The competent supervisory authority is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, poststelle [at] datenschutz.hessen.de

5. Contact

If you have a concern, please contact us via our contact form or alternatively via the email address in the imprint