Introduction
Thank you for your interest in our company. Your privacy is important to us, and you should always feel safe and comfortable when visiting our website.

That is why we have put both technical and organisational measures in place to ensure we observe the relevant legislation at all times.

We ensure that your personal data is processed in accordance with the provisions of the EU GDPR, UK GDPR and the Data Protection Act 2018.

This document describes the personal data we may collect regarding the Norfolk Offshore Wind Zone website and how we handle it.

I. Controller
RWE Aktiengesellschaft
RWE Platz 1
45141 Essen
P +49(0)201-51790
F +49(0)201-51795005
E-Mail RWE Aktiengesellschaft

is responsible for the content and services made available on this website and therefore controller of personal data within the meaning of data protection laws.

II. How can you contact the data protection officer?
You can reach our data protection officer at:
RWE Aktiengesellschaft
Data Protection Officer
RWE Platz 6
45141 Essen
E-Mail dataprotection@rwe.com

III. Provision of the website and logfiles
In the following, we will inform you how we process your personal data in connection with the provision of the website and creation of log files.

1. Which of your personal data is used by us?
Every time you visit our website, our system automatically collects data and information from the operating system of your device accessing the website.

In addition to non-personal data (e. g. the domain name of the website which you came from); the data collected includes:

• websites that you visited on our domain
• the names of the files accessed (incl. date and time of the retrieval)
• the name of your Internet service provider; and, if applicable
• the operating system and browser version of your device
• host name of the accessing device; language settings)
• your IP address 

2. What are the sources of your personal data?
The data is collected from you by being automatically transmitted by your device to our system.

3. What do we process your personal data for and on what legal basis?
The data is initially collected to be able to provide the website in technical terms. In addition, we store the data - in pseudonymized form in log files - for security purposes, in particular to detect and counteract attacks on our website, for statistical purposes and to optimize our Internet presence. In these cases the processing is based on our legitimate interest to ensure the purposes stated above.

4. Who do we share your personal data with?
In certain cases, the data may be passed on to our other Group companies.

In addition, we use external service providers who also receive personal data in certain cases as part of the performance of their duties.

In these cases, we ensure that your personal data is processed in accordance with the provisions of the relevant data protection laws.

As a matter of principle, your personal data will not be passed on to other third parties, unless we are obliged to do so for compliance with a legal obligation.

5. How long will your personal data be stored?
We store the data for a period of 30 days. 

6. Is there an obligation to provide your personal data? 
There is no legal or contractual obligation to provide the data. If you do not provide the data, it is not possible to use the website to its full extent.

IV. Web analysis and web optimisation through cookies and other services.
We use cookies and other services on our website. Cookies are text files that contain a characteristic string of signs and enable a unique identification of the device. They are stored in the Internet browser or by the Internet browser on your end device when you access the website. When the website is opened again, the device system can be identified in this way and certain information can be transferred automatically.

The cookies/services used on our website fulfil various functions. We categorize them as follows:

• essential 
• functional & analytical

1. Which of your personal data is used by us?
Depending on the cookie used, we collect different personal data. You can find a list of which data is involved in individual cases here.

2. What are the sources of your personal data?
All data that we collect originate from you.

3. What do we process your personal data for and on what legal basis?
Depending on the cookie/service used, we pursue different purposes.

The first time you visit our website, you will be asked to select which cookies/service you wish to allow. 

Here you have the possibility to view and change your selection.

a. Essential cookies/services
Essential cookies/services are required for the technical operation of our website and to ensure its stability.

When you visit our websites, a dedicated banner informs you about the use of cookies/services and refers you to this data protection information.

The personal data collected from you in this way is pseudonymised by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.

Processing your personal data as identified above is necessary to safeguard our legitimate interests and is justified by the balance of interests in our favour.

Some functions on our website will not work without the use of these cookies/services.

It is essential that your browser is still recognised when you move on to a different page.

We also have a legitimate interest in processing your personal data as identified above - in other words, to communicate relevant information about our intentions and business activities by operating our own websites as intended.

Although you have a justifiable interest in not having the above personal data used for this purpose, this does not outweigh our legitimate interest, since we use this personal data appropriately and in accordance with the stated purpose, and you also have an interest in enjoying a customer-friendly access to our website.

b. Functional and analytical cookies/services
Functional cookies and services enable us to provide you with additional features on our website, e. g. interactive maps or location services, which enhance your experience and make your visit even more comfortable.

We also use cookies/services that let us analyse the browsing behaviour of our users.

Analytical cookies/services help us to analyse the website and thus measure and improve the performance of our web pages.

We use cookies for the purpose of “audience reach measurement”.

They are used to create statistical profiles which cannot be traced back to individual users, but merely to groups.

We can analyse visitor and click behaviour as well as the demographic characteristics of website users.

See the list of cookies/services here for details of the analytical cookies/services we use, and the opportunity to opt out of all or specific cookies/services.

The personal data collected about you in this way is pseudonymised by technical means to ensure it can no longer be attributed to you.

This data is not stored with other personal details we collect from you.

When you visit our websites, you will be informed via a dedicated banner about our use of cookies/services, referred to this data protection information and asked for your consent to process the personal data collected in this context.

Your consent provides the legal basis for us to process personal data for analytical purposes using cookies/services.

You will also be advised how you can block the storage of cookies in your browser settings.

You are entitled to withdraw this consent at any time with future effect.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The easiest way to withdraw your consent is to set the relevant opt-out cookie via our cookie/services list here.

4. Who do we share your personal data with?
In certain cases, the personal data may be passed on to our other Group companies. In addition, third-party companies that offer the respective cookie/service will receive your personal data within the scope of data processing on our behalf.

5. How long will your personal data be stored?
We use two types of cookies: persistent cookies and session cookies. A persistent cookie lasts beyond the current session and will stay on your browser until they expire or you delete them. Session cookies last only as long as the session (usually the current visit to a website or a browser session). Third parties, such as our customers, partners and service providers may also use cookies in connection with our services. The list will inform you in detail about the storage of your personal data in connection which each of the cookies/services selected.

6. Is there an obligation to provide your personal data?
There is no obligation to provide the data. However, the essential cookies/services are necessary for the website to function properly.

7. Your rights with regard to cookies/services
In addition to the rights mentioned in the section X, you have the right:

• to object to the use of the essential cookies/services at any time.
• to revoke/withdraw your consent here regarding the functional and analytical cookies/services used by us. 

V. Contact Form
On our website you have the possibility to contact us via a form.

In the following we explain to you how we process your data in this context.

1. Which of your personal data is used by us?
We process the personal data you provide in the respective form. These are:

• subject
• name, 
• e-mail, 
• postcode, 
• phone number.

In addition, you have the possibility to provide us with further data via a free text.

2. What are the sources of the personal data?
You enter the data into the contact form yourself.

3. What do we process your personal data for on what legal basis?
We need the personal data so that we know who has sent us the inquiry and to answer this inquiry.

The legal basis of the processing is your consent, which you grant by sending the request.

4. Who do we share your personal data with?
We will pass on your personal data to the Group company responsible for your request.

In addition, we use service providers in certain cases who may also receive your personal data.

5. How long will your personal data be stored?
The personal data will be stored as long as necessary to answer your request.

In addition, your personal data will be stored within the legal retention periods.

6. Is there an obligation to provide your personal data? 
There is no obligation to provide your personal data.

Without your personal data, we are not able to answer your inquiry.

7. Right to withdraw your consent
Within the scope of using the contact form you have the rights mentioned in the section X.

VI. Consent management service
We use the consent management service Usercentrics, of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (Usercentrics).

This allows us to obtain and manage the consent of website users for data processing.

The processing is necessary for the fulfilment of a legal obligations (obligation to provide evidence of and the corresponding documentation of consents) which we are subject to.

The following data is processed for this purpose:

• date and time of access
• browser information
• device information
• geographic location
• cookie/service preferences
• URL of the visited page.

Usercentrics is a recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union.

The consent data is stored for 1 year.

For more information about the collected data and contact options, please visit https://usercentrics.com/privacy-policy/.

VII. Links to other Websites
The RWE websites contain links to other websites.

As the provider of our websites, we are solely responsible for the content of our own online presence.

A distinction must be made between our own content and the content provided by other providers, for which we cannot accept any responsibility and do not adopt their content as our own.

We have no influence on whether the website operators linked to us adhere to the relevant data protection regulations.

This data protection information therefore does not apply to the websites of other providers, even if you access them via links on our website.

Please therefore observe the respective data protection regulations of the other providers.

We therefore accept no liability for the content of other websites.

In the event that you should notice a relevant violation, we thank you for informing us.

We will then remove the link after checking it, if necessary.

VIII. Does automated decision-making including profiling take place?
No automated decision-making including profiling takes place.

IX. Is your personal data transferred to countries outside the European Union (so called third countries)?
As part of our data processing activities, we may transfer your personal data to a recipient in the UK, which has been recognized by the European Commission as providing an adequate level of data protection under Article 45 of the GDPR. This means that your data will be protected in that country to a standard comparable to that within the European Union.

X. What rights do you have in connection with the processing of your personal data?

1. Right of access
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

You also have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization.

In this context, you may request to be informed of the appropriate safeguards in connection with the transfer.

2. Right to rectification
You have the right to ask the controller to rectify and/or complete the data, if the personal data processed concerning you is incorrect or incomplete.

The controller shall make the correction without delay.

3. Right to restriction of processing
Under the conditions stipulated by the law, you may request that the processing of personal data concerning you be restricted.

4. Right to erasure
You may request the controller to delete the personal data concerning you and the controller is obliged to delete such data immediately, unless an exception is provided for by law.

5. Right to data portability
You have the right to obtain your personal data, in a structured, commonly used and machine-readable format, which you have provided to the controller and the processing of which is based on consent or on a contract with you.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one data controller to another, as far as this is technically feasible.

The freedoms and rights of other persons must not be affected by this.

6. Right to withdraw your consent
You have the right to withdraw your data protection declaration of consent at any time.

Withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.

In this case, all personal data stored on the basis of the consent will be deleted, unless the law provides another legal basis for further storage.

8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the relevant data protection rules.

To make it easier for you to assert your rights, you will find the contact details of the supervisory authority competent for us below:

Germany
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
T: +49 211 38424 – 0
F: +49 211 38424 – 10
E-Mail: poststelle@ldi.nrw.de

United Kingdom
The Information Commissioner’s Office (ICO) is the independent supervisory authority for data protection in the UK.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website contact form: https://ico.org.uk/global/contact-us/

An overview of the data protection supervisory authorities with their respective contact information is available on the following website of the European Data Protection Board.