Data Protection Declaration

The protection of your personal data is a central concern for Peeeks (hereinafter referred to as "Peeeks", "we" or "us"). With this data protection declaration we would like to inform you about the processing of your personal data within the framework of the use of the websites accessible at www.peeeks.energy and other websites, as these are referred to below (hereinafter jointly referred to as "website"), in accordance with the requirements of the General Data Protection Regulation (agreed upon by the European Parliament and Council in April 2016 - hereinafter referred to as "GDPR"). Our website may contain links to other third party websites to which this privacy statement does not apply. Regarding additional digital services that Peeeks or affiliated companies are delivering as part of our residential energy management software purchased via one of our partners, please read the Supplementary data protection statement for the energy management system and optional digital services (portal / app)

1. Responsibility

The person responsible for the data processing explained in this data protection declaration is the following office:
Peeeks BV.
Hofplein 20
NL-3032 AC Rotterdam

Peeeks is represented by
Jorrit Lucas

2. Contact Details


3. Categories of personal data that we process

When you use our website and/or other services or services we provide to you or your employer, we process the following categories of personal data, depending on the services or services you use or that we provide to you or your employer:

a. Total use of our website (hereinafter referred to as surfing)
Information about the type of browser you are using and its version
The operating system of your device
Your Internet Service Provider
Your IP address
Date and time of access
Websites from which your system accesses our website
Websites accessed by your system through our website
Cookie data (e.g. pseudonymous cookie ID, length of stay on our websites, page views, movement of the user via links, IP address), unless and insofar as you should prevent this, as explained under Section 8.

b. Contact/correspondence by e-mail and/or telephone
Personal data (first name, last name)
Contact details such as telephone number, e-mail address
Address (street, postcode, city, country)
Metadata of your e-mail (e.g. date and time of dispatch)
Content of the message/your concern

c. Forms and input fields
Your entries in these fields, whereby mandatory fields are marked accordingly

d. Social media channels
Within the framework of our social media pages on
LinkedIn (available at the following external link: https://www.linkedin.com/company/peeeks/)
(hereinafter jointly referred to as "Social Media Site(s)"), we also process the following categories of personal data on our Social Media sites:
User name and profile picture of the social media visitor
Comment details (e.g. profile picture, user/display name, comment content)
Contents of messages to us
Information about Likes or "Like" Information about our Posts
Details of contributions shared by us
Photos of people featured in posts on our social media sites
Name and photos of employees
If and to the extent that we require the above categories of personal data for this purpose, we also process them for other purposes specified in this data protection declaration.

e. Application procedure
If you send us an unsolicited application to , we will process your contact and application data. When sending your application by e-mail, please ensure that it is appropriately encrypted, as data transmission by e-mail may not be secure and reading by unauthorised persons cannot be ruled out.

4. Origin of personal data not collected directly from you

In principle, we collect personal data about you only from yourself. Should this be different in exceptional cases, we will point this out to you separately. When processing data through our online forms and systems, we receive the data from the person who enters it into the respective form or system.

Should you transmit personal data of third parties to us via our aforementioned services, you are obliged to comply with all data protection requirements, in particular those of Art. 5 to 10 and 12 et seq. of the GDPR. Otherwise, we have no intention of collecting this data and reserve the right to take legal action against you.

5. Duration of storage

The personal data collected by us will only be stored as long as it is necessary for the fulfilment of the respective purpose associated with the storage. If this purpose is omitted, we will delete or anonymise the data again unless and to the extent that there are no legitimate reasons or obligations to store the data (e.g. in accordance with tax regulations) to the contrary. In the latter case, the data will only be processed to a limited extent, i.e. only for the purpose of fulfilling the reason for retention or the obligation to retain data and otherwise only with your consent, to assert, exercise or defend legal claims, to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union (EU) or an EU member state. In the event of the existence of a retention obligation or a legitimate reason for retention, we will delete or anonymise the data after the legitimate reason for retention or the retention obligation has ceased to apply.

In the event of data processing on our social media pages, we delete or anonymise the data processed by us (for further details, please refer in particular to Section 12) after two years, unless and to the extent that there are no legitimate reasons or obligations to prevent the data from being stored.

6. Purposes for which the personal data is processed

We observe the principle of the earmarked use of personal data and process your personal data in principle only for the purposes explained in this data protection declaration or supplementary data protection declarations.

Your personal data will not be passed on to third parties without your express consent, unless otherwise stated in this or supplementary data protection declarations.

The transmission to government institutions and authorities entitled to receive information will only take place within the scope of the legal obligations to provide information or if we are obligated to provide information by a court decision. Our employees involved in data processing and the service companies commissioned by us have been obligated by us to secrecy and to comply with data protection regulations.

When you visit our website, it is not required by law or contract that you actively provide personal information. Nevertheless, we collect certain data anonymously or using pseudonyms in order to evaluate your usage behaviour. In addition, so-called cookies are used on our websites (more on this under point 8).

We use the personal data provided by you for the following purposes:

Processing your request(s) (e.g. via the contact form)
Customer care and administration
Direct advertising (e.g. sending newsletters (after consent) or invitations to events)
Performance of contract and implementation of pre-contractual measures
Acceptance of registrations for events of Peeeks
Granting of access data for restricted areas of the website
Decision on the establishment of an employment relationship and, in the case of establishment of the employment relationship, also on its implementation and termination.
Compliance with legal requirements (e.g. for compliance with tax and commercial law obligations)
Data protection and security management and audits

7. Legal basis for the processing

The processing of personal data is based on the GDPR, and other European regulations and laws in the countries we operate.

a. Overview of the legal bases

The following list gives you a brief overview of the existing or used legal bases according to GDPR, which we may refer to when processing your data:

Legal basis
Consent. Art. 6 Para. 1 S. 1 a) GDPR This legal basis takes effect if you have consented that we process your data for one or more purposes (e.g. consent to newsletter dispatch).
Performance of contract or implementation of pre-contractual measures. Art. 6 para. 1 sentence 1 b) GDPR If we have concluded a contract with your person or if you have asked us to carry out a pre-contractual measure (e.g. preparation of an offer), this legal basis allows us to process all of your data which is necessary for the fulfilment of the contract or for the implementation of the pre-contractual measure.
Fulfilment of a legal obligation. Art. 6 Para. 1 S. 1 c) GDPR This legal basis allows us to process your data if this is necessary to fulfil a legal obligation (e.g. to fulfil commercial or tax obligations).
Legitimate own interests or legitimate interests of third parties. Art. 6 para. 1 sentence 1 f) GDPR In some cases, we also base the processing of personal data on our legitimate interests or the legitimate interests of third parties. All legal, economic and non-material interests that are not disapproved of by the legal system can be considered legitimate interests. Examples of our legitimate interests are, for example:
- Data processing for communication with our customers and contacts (unless already covered by Art. 6 Para. 1 S. 1 b) GDPR).
- Direct advertising (unless already covered by Art. 6 Para. 1 S. 1 a) GDPR), e.g. when we draw your attention to products or events. You may object to direct advertising for the future at any time, as explained in section 11 g).

b. Details of the legal basis for data processing

VISITS ON OUR WEBSITE

For technical reasons, we automatically collect data and information from the computer system of the calling end device each time you visit our web pages in order to provide you with our web pages. In doing so, we process the data types of you mentioned under point 3 a). The legal basis for this is Art. 6 Para. 1 S. 1 a) GDPR, whereby you have given your consent to the processing by using our web pages in combination with the cookie banner displayed.

In addition, we process cookie data in particular in order to understand how visitors move around our websites. We will explain the details of this to you under point 8, whereby you will also receive information on how you can prevent this.

CONTACT/CORRESPONDENCE BY E-MAIL AND/OR TELEPHONE

If we correspond by e-mail or telephone (e.g. for product or partner enquiries), we process the data types specified under point 3 b). The processing of the data provided is necessary in order to answer your enquiry and, if necessary, to carry out pre-contractual measures requested by you (e.g. to send you an offer requested by you).

If you have expressly consented to this, you can also contact us by e-mail for the purpose of direct advertising; if we do not address you as a consumer, we can also contact you by telephone for the purpose of direct advertising if at least your presumed consent has been given. As a consumer, however, we would only address you by telephone for the purpose of direct marketing if you have expressly consented to this.

The legal bases for the processing described in this section are as follows
Art. 6 para. 1 sentence 1 a), b) and f) GDPR. Insofar as we base this on a legitimate interest, this consists of fulfilling our main and secondary contractual obligations, staying in contact with you or your employer, promoting our sales and being able to deal with your concerns addressed to us appropriately, promptly and efficiently.

USE OF OUR SOCIAL MEDIA PAGES

If you use our social media pages, we process the data types mentioned under point 3 d). You have the opportunity to comment on our contributions and ask questions, for example. You can also contact us via the contact options on our social media pages. If you make an inquiry or comment on a contribution in order to obtain information about our products for the conclusion of a contract, we process your data on the basis of Art. 6 Para. 1 S. 1 b) GDPR to carry out pre-contractual measures which you have requested or to fulfil a contract with you. If you contact us for information purposes only, we process your personal data on the basis of our legitimate interests pursuant to Art. 6 Para. 1 S. 1 f) GDPR. It is our legitimate interest to answer your inquiry and thus to present our company optimally on the Internet and to inform interested parties. We process your profile picture on the basis of Art. 6 Para. 1 S. 1 a) GDPR, whereby by uploading your profile picture on your social media profile and interacting with our social media page, you have given your consent to your photo being shown on our corresponding social media page (e.g. in a commentary).

In addition, we use the analysis tools available on the social media pages to evaluate which of our contents are more interesting to you as a user and how broad the reach of our contributions is. We only have access to anonymous - i.e. non-personal - statistical information that we cannot assign to you without additional information. Processing is based on Art. 6 Para. 1 S. 1 f) GDPR, whereby our legitimate interest lies in the optimisation and user-friendly design of our social media pages. Further details on this and how we use analysis tools on the individual social media pages can be found in section 12.

If you are displayed on our LinkedIn Social Media page under the "Employees" section with your name and, if applicable, photo, processing will also be carried out on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 a) GDPR. Your consent is that you have indicated in your LinkedIn profile that you work for Peeeks and have not made your privacy settings in such a way that a listing on our site is prevented. Your consent to this is also given voluntarily and can be revoked at any time with effect for the future by adjusting your privacy settings. If you do not give your consent, this will of course not result in any disadvantages beyond the fact that your name (and possibly your profile picture) will be displayed on LinkedIns website under the area employees.

For the responsibilities for data processing on our social media pages, please refer to the explanations under item 12.

OTHER PURPOSES (INCLUDING DIRECT ADVERTISING)

It is possible that the data types mentioned under point 3 are also processed for the following purposes and on the basis of the following legal bases:

Customer support and administration as well as direct advertising (excluding newsletters and telephone advertising (see above lit. ee)), e.g. sending paper-based event invitations or product information), whereby the legal basis for this in each case is Art. 6 Para. 1 S. 1 f) GDPR. The legitimate interest lies in staying in contact with you, promoting our sales and being able to process all your concerns uniformly, appropriately, promptly and efficiently throughout the Group. This applies in particular to data pursuant to Section 3 which we receive from you in connection with the performance of the contract and/or the provision of pre-contractual measures.
Compliance with legal requirements (e.g. for the fulfilment of fiscal and commercial obligations and the implementation of compliance management including compliance audits), whereby the legal basis for this is Art. 6 Para. 1 S. 1 c) GDPR.
Data protection and security management, including appropriate checks by our data protection officer and the information security officer responsible for us. The legal basis with regard to auditing by our data protection officer is Art. 6 Para. 1 S. 1 c) GDPR, in particular in connection with Art. 24 Para. 2 S. 2 and Art. 38 Para. 2 and Art. 39 Para. 1 b) and c) GDPR, and otherwise Art. 6 Para. 1 S. 1 f) GDPR. Our legitimate interest lies in the secure and data protection-compliant processing of personal data.

JOB APPLICATIONS

We accept applications by post or e-mail. If you send us your application documents by e-mail, please note that we have no intention of collecting unencrypted personal data.

8. Use of cookies

We use cookies on our website. Cookies are small data packages that are generated by our web server and stored on your computer's hard drive when your computer communicates with the web server. A distinction must be made between session cookies, which serve the mere functionality of our web pages and which are deleted immediately after closing the browser, and cross-session cookies, which are stored and used after a session, whereby we use both types of cookies. By using our website in combination with the displayed cookie banner, you have given your consent that we may process your data via cookies as explained below. The legal basis for the processing of your data to this effect is Art. 6 Para. 1 S. 1 a) GDPR. If you wish to exercise your right of revocation or objection in this respect, please proceed as described below, without prejudice to the explanations in Clauses 11 g) and i):

a. Preventing Session Cookies

You can exercise your right to refuse cookies at any time. To do this, you can set your browser so that it does not accept cookies or asks for your consent before you set a cookie, notwithstanding the other options for preventing cookies explained below. Please refer to your browser's help function for details. If you do not accept cookies, you may not be able to use the full range of website functions.

b. Preventing persistent cookies for range analysis

It is important for us to understand how our websites are used in order to improve them and make them more attractive for visitors. We therefore analyse how you use our websites, processing cookie data using external service providers as described below. You can also find out from these descriptions how you can prevent this.

GOOGLE ANALYTICS COOKIES

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following external link. Please note that you are leaving the Peeeks website. The data concerned will not be processed by us.

You can find more information on terms of use and data protection at the following external links: http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/. We would like to point out that on this website Google Analytics has been extended by the code "anonymizeIp" in order to guarantee anonymous collection of IP addresses (so-called IP masking).

c. Important information about saving your cookie settings

Please note that you may have to repeat the above cookie settings if you or your browser should delete cookies. The same applies if you visit our website with a different browser or device.

c. Important information about saving your cookie settings

Please note that you may have to repeat the above cookie settings if you or your browser should delete cookies. The same applies if you visit our website with a different browser or device.

9. Recipients or categories of recipients of personal data

The personal data will be passed on to the following recipients:

Public authorities to whom the data must be transferred by virtue of statutory provisions (e.g. tax authorities, supervisory authorities, social insurance carriers, criminal prosecution authorities if applicable)
Internal bodies involved in the execution of tasks (mainly: Marketing, Human Resources, IT & Security)
Contractors (service companies, such as IT service providers and freight forwarders)
Provider of our social media pages

10. Transfer of personal data to third countries

In principle, we do not transfer personal data that we collect via these websites to countries outside the European Union or the European Economic Area (third countries).

However, it is possible that data collected via these websites may be transferred to third countries if and to the extent necessary for the performance of contracts, for internal communication, customer care and/or administration or due to the use of a service provider in a third country. In such cases, we integrate our data protection officer. A transfer will only take place if the receiving office already has an adequate data protection level based on an adequacy decision or if it has been established by means of suitable guarantees (Art. 45 et seq. GDPR) or if, exceptionally, neither an adequacy decision nor suitable guarantees are required (Art. 49 para. 1 sentence 2 GDPR). As a rule, we use EU standard contractual clauses to ensure an adequate level of data protection for the respective recipient. The guarantees we use are available through our data protection officer. If and to the extent that you would like to receive further information on the guarantees in individual cases, please contact him using the contact data mentioned under point 2.

11. Rights relating to data processing

You are entitled to the rights set out in Art. 15 to 21 GDPR below as well as the right to revoke your consent at any time and the right to lodge a complaint with the supervisory authority. You can assert your rights vis-à-vis us in any form, either directly by using the contact data mentioned under point 1 or via the intermediary of our data protection officer, whose contact data you will find under point 2. With the exception of any transmission or connection charges, you will not incur any costs.

a. Right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether and which personal data relating to you will be processed and, in relation to such data, information in particular on the purposes and legal basis of the processing (see sections 6, 7 and 8), the categories of data we process (section 3), the categories of recipients (section 9) and our intention to transfer the data to recipients in a third country (section 10). The information also includes information about the origin of the data, unless it was collected from you yourself. You also have the right to request a copy of the personal data that are the subject of processing, provided that this does not impair the rights and freedoms of other persons with regard to their personal data.

b. Right to rectification (Art. 16 GDPR)

You have the right to demand from us immediately the correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing.

c. Right to cancellation (Art. 17 GDPR)

You have the right to ask us to delete your personal data immediately if one of the following reasons applies and none of the exceptions explained below applies:

The data processed by you is no longer necessary for the purposes set out in this Privacy Policy.
You have withdrawn your consent (see item 11 i)) and we have no other legal basis for processing your data.
the data has been processed unlawfully, or
the deletion is necessary for the fulfilment of a legal obligation according to Union or member state law, which applies to us.
You have raised an objection to the processing of your data by us (see item 11. g) and we have no overriding legitimate reasons for the processing of your data.
However, we do not have to or may not implement your request for deletion if one of the following reasons applies:

the processing is necessary for the exercise of the right to freedom of expression and information,
the processing is necessary in order to fulfil a statutory obligation applicable to us under the law of the European Union or a member state (e.g. statutory storage obligations),
the processing is necessary for the assertion, exercise or defence of legal claims, or
the processing is necessary for reasons of public interest in the field of public health.

d. Right to limitation of processing (Art. 18 GDPR)

You have the right to demand that we restrict the processing of your personal data. You have this right in particular if one of the following reasons applies:

You dispute the accuracy of your data,
The processing of the data is unlawful and you refuse the deletion of the data,
Although we no longer need your data, you still need it for the assertion, exercise or defence of legal claims, or
You have objected to the processing (see item 11 g)) and we are still checking whether our legitimate reasons for processing outweigh your legitimate reasons for objection.

e. Right to information (Art. 19 GDPR)

If you have exercised your right to correction, deletion or limitation of processing, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of such correction, deletion or limitation of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed of such recipients.

f. Right to data transfer (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, common and machine-readable format and to transfer them to another responsible person or have them transferred to us by us if you have provided us with these data on the basis of consent or on the basis of a contract and the data are processed using an automated procedure. You have the right to have the data transferred by us directly to the new responsible person, as far as this is technically feasible and the rights and freedoms of other persons are not impaired.

g. Right of objection (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data insofar as the processing of such data is necessary to safeguard the legitimate interests of us or of a third party, or for the performance of a task which is in the public interest.

You can object to the processing of your data for advertising purposes at any time in the future. We will always comply with this. Please note, however, that we cannot rule out the possibility that, in individual cases, we may not be able to recall an advertising medium if your objection should reach us at a point in time at which we have already inexorably initiated the playout of this advertising medium. In such a case we will of course exclude you from the playout of any future advertising material.

h. Right of appeal to a supervisory authority (Art. 77 GDPR)

In addition, you may at any time file a complaint with the appropriate data protection supervisory authority, for example, at your location or the location of the alleged violation.

i. Right to revoke consent

If and insofar as you have given us a declaration of consent to process your data, you have the right to revoke this consent at any time for the future. The revocation does not affect the legality of the processing carried out on the basis of the consent up to the time of the revocation; rather, the revocation can only affect the legality of future processing.

12. Information on social media sites and relationship with Peeeks

Please note that Peeeks is only responsible and a service provider in relation to the social media pages referred to in point 3 d) to the extent that Peeeks itself processes data in accordance with the explanations in this point 12. Furthermore, Peeeks is not responsible for, nor can Peeeks influence, telemedia and data processing services accessible via the following social media sites. For this reason, Peeeks has no control over whether and, if so, to what extent your personal data is transferred to recipients in third countries by other service providers who provide telemedia via the social media sites. Other service providers may also process technical information about you when you visit our social media sites. Irrespective of the data that we process pursuant to Section 3 f), the following information in particular may be requested from these providers:

the IP address of your terminal device and/or your Internet connection,
Date and time of access to our social media pages,
Your browser type,
the browser settings and the operating system,
the page you last visited and the amount of data transferred.
These statements apply to all of the social media pages listed below, unless and to the extent that we state otherwise with respect to the respective social media pages.

a. LinkedIn

As the provider of our LinkedIn page, we can see, for example, who follows our LinkedIn page and which employees with their own LinkedIn profiles have indicated to work at Peeeks. Furthermore, we can see who marked our posts with "like", shared them or wrote a comment on them. In the case of comments, we process your data in order to answer your request.

It is also possible that LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn") may provide us with unsolicited anonymised - i.e. non-personal - statistical information about the use of our LinkedIn site that we cannot associate with you without additional information (e.g. analysis for corporate sites).

You can find further information on LinkedIn's processing of your data at https://www.linkedin.com/legal/privacy-policy (external link).

13. No obligation on your part to provide data

There is no legal or contractual obligation according to which you would be obliged to provide us with the data explained under point 3. However, it is possible that we may not be able to fulfil existing contractual obligations (e.g. delivery of a product) towards you or your contractual partner/employer/client or to carry out pre-contractual measures (e.g. preparation of an offer, reply to a product enquiry) if you do not provide us with the necessary data.

If, for example, you technically prevent us from receiving data which is necessary for the use of our website, it is possible that you may not be able to use the services listed under item 3 or only to a limited extent.

The provision of personal data (pursuant to Section 3 f)) within the framework of an application to us is necessary for the decision on the establishment of an employment relationship with you. Failure to provide this data may result in us being unable to make a (positive) decision about your recruitment.

The provision of your data as part of your contact with us is also voluntary. However, it is not possible for us to respond to your enquiry without specifying a contact option.

You are not obliged to provide us with your personal data when using our social media pages. However, if you do not provide us with your data, it may not be possible for you to leave comments, send us messages, share contributions or mark them with "Like".

14. Automated decisions, including profiling, within the meaning of Article 22 GDPR

Your personal data will not be used for automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR.

15. Data security

We take technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against unauthorized disclosure or access.

16. Taking effect and adjustments of this data protection declaration

This data protection declaration takes effect by the date stated below. We reserve the right to amend this data protection declaration. We would therefore like to ask you to check the data protection declaration continuously so that you can inform yourself about any changes.

Latest Update: May 2019