Data protection declaration

1. Name and contact details of the controller and of the company data protection officer

This privacy policy applies to data processing carried out by:

Controller
ENERENT Deutschland GmbH
Winterbruckenweg 58
86316 Friedberg-Derching
Germany
Tel.: +49 821 710 11-0
E-mail: info@enerent.com
Website: www.enerent.de

Data protection officer
The data protection officer is provided externally by STREIT GmbH.
E-mail: datenschutz@enerent.com

For questions, suggestions or comments on the subject of data protection and for the enforcement of your rights listed below, please contact our data protection officer.

2. Collection and storage of personal data; nature and purpose of its use

a) When visiting the website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until its automated deletion:

  • IP address;
  • date and time of the request;
  • time zone difference to Greenwich Mean Time (GMT);
  • content of the request (specific page);
  • access status / HTTP status code;
  • volume of data transferred in each case;
  • website from which the request originates;
  • browser type and version;
  • operating system and its interface;
  • language and version of the browser software;
  • name of the web page accessed;
  • message confirming successful retrieval.

We process the aforementioned data for the following purposes:

  • ensuring a smooth connection to the website;
  • ensuring convenient use of our website;
  • evaluating system security and stability, as well as for further administrative purposes.

The legal basis for the data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations in sections 5 and 6 of this privacy policy.

b) Newsletter

As an existing customer, you regularly receive individual product recommendations from us by e-mail, regardless of whether you have subscribed to a newsletter. For this purpose, we use the e-mail address you provided in the course of the purchase or rental. We act on the legal basis of Art. 6(1) lit. f GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG). You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscribe request by e-mail to info@enerent.com at any time.

c) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address, your first and last name, your address and your telephone number, so that we know who the enquiry comes from and can respond to it. Further information may be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6(1) sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.

d) For credit checks

Based on our legitimate interest pursuant to Art. 6(1) lit. f GDPR, we carry out credit checks in order to protect ourselves against payment defaults. The credit data taken into account includes outstanding payments, dunning proceedings, information about an insolvency and deferral agreements due to payment defaults. Should outstanding invoices not be settled despite repeated reminders, we may transfer the data required for carrying out debt collection to a debt collection service provider for the purpose of fiduciary collection. Alternatively, we may sell the outstanding receivables to a debt collection service provider. The latter then becomes the owner of the receivables and asserts them in its own name.

e) Customer account (web shop)

When you register as a user in our web shop, we request the following data from you:

  • the address of your company;
  • your salutation;
  • your first and last name as the person placing orders and using our web shop;
  • contact details such as telephone number, e-mail address and postal address;
  • general data of your company as well as your tax ID.

This data is collected in order to be able to identify you as our contractual partner. The data processing is carried out at your request and is necessary, pursuant to Art. 6(1) sentence 1 lit. b GDPR, for the stated purposes, for the performance of the contract and pre-contractual measures. The data we collect for registration and login is stored by us until you revoke your consent to this processing or until we cease processing the data due to the expiry of statutory retention periods.

3. Transfer of data

Your personal data is not transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6(1) sentence 1 lit. a GDPR;
  • the transfer is necessary, pursuant to Art. 6(1) sentence 1 lit. f GDPR, for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being transferred;
  • a legal obligation to transfer the data exists pursuant to Art. 6(1) sentence 1 lit. c GDPR; or
  • this is legally permissible and necessary, pursuant to Art. 6(1) sentence 1 lit. b GDPR, for the performance of contractual relationships with you.

Our group of companies consists of the entities ENERENT GmbH, ENERENT Deutschland GmbH, ENERENT Schweiz GmbH and ENERENT Austria GmbH. Should one of these entities not be in a position, for capacity reasons, to process your enquiry, we will forward it, on the basis of our legitimate interest pursuant to Art. 6(1) lit. b and f GDPR, to one of the aforementioned affiliated companies. Each entity acts on its own responsibility; in other words, if you wish to exercise your rights as a data subject, you may address your request to any of the corporate entities.

4. Applications and unsolicited applications

You are welcome to send us your application or your unsolicited application. To do so, please use our job portal, where we ask you to register and enter your documents. Please ensure sufficient security yourself for the transmission channel you choose. Sending an e-mail without a suitable encryption method is not recommended, as your data could then be read and used along the communication path without great effort, including by unauthorised persons. If you wish to send us an encrypted e-mail with application documents, please use exclusively the e-mail address jobs@enerent.com. Our application tool offers the possibility of including you in our talent pool in the event that we currently have no suitable position for you. You are welcome to register there on the basis of your consent pursuant to Art. 6(1) lit. a GDPR (for applicants under the age of 18, the signature of a legal guardian is required).

5. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in each case in connection with the specific device used. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offering more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, also to optimise user-friendliness, we use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to make use of our services, it is automatically recognised that you have already been with us and which entries and settings you have made, so that you do not have to enter them again.

On the other hand, we use cookies in order to record the use of our website statistically and to evaluate it for the purpose of optimising our offering for you (see section 6). These cookies enable us to automatically recognise, when you visit our site again, that you have already been with us. These cookies are automatically deleted after a defined period of time in each case.

The data processed by cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1) sentence 1 lit. a and f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Completely deactivating cookies may, however, mean that you cannot use all the functions of our website. Furthermore, we have installed a cookie banner which first requests your consent when you visit our website.

6. Analysis tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6(1) sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a design of our website that meets user needs and its continuous optimisation. On the other hand, we use the tracking measures to record the use of our website statistically and to evaluate it for the purpose of optimising our offering for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

For the purpose of designing our pages to meet user needs and continuously optimising them, we use Google Analytics, a so-called web analysis service of Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website, such as:

  • browser type/version;
  • operating system used;
  • referrer URL (the previously visited page);
  • host name of the accessing computer (IP address);
  • time of the server request;

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide further services associated with the use of the website and the internet, for the purposes of market research and designing these internet pages to meet user needs. This information may also be transferred to third parties where this is required by law or where third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data held by Google. The IP addresses are anonymised so that attribution is not possible (IP masking).

You can prevent the installation of the cookies by adjusting the settings of your browser software accordingly; however, we point out that in this case you may not be able to make full use of all the functions of this website. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google, by downloading and installing a browser add-on on your device (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on, in particular for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help at https://support.google.com/analytics/answer/6004245?hl=en.

b) Google AdWords conversion tracking

In order to record the use of our website statistically and to evaluate it for the purpose of optimising our website for you, we also use Google conversion tracking. In this context, Google AdWords sets a cookie (see section 5) on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer’s website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to that page.

Each AdWords customer receives a different cookie. Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained with the help of the conversion cookie serves to compile conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

If you do not wish to participate in the tracking procedure, you can also refuse the setting of the cookie required for this – for example, via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy notice on conversion tracking can be found at https://services.google.com/sitestats/en.html.

7. Social media plug-ins

On our website, we use social plug-ins of the social networks Facebook, X and Instagram on the basis of Art. 6(1) sentence 1 lit. f GDPR, in order to make our company better known through these channels. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for operation in compliance with data protection law must be ensured by the respective providers of these services. We integrate these plug-ins by way of the so-called two-click method, in order to protect visitors to our website in the best possible way.

a) Facebook / Instagram (Meta)

Social media plug-ins from Facebook and Instagram are used on our website in order to make their use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offering of Meta Platforms Ireland Limited. When you access a page of our website that contains such a plug-in, your browser establishes a direct connection with Meta’s servers. The content of the plug-in is transmitted by Meta directly to your browser, which integrates it into the web page.

Through the integration of the plug-ins, Meta receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook or Instagram account or are not currently logged in to Facebook or Instagram. This information (including your IP address) is transmitted by your browser directly to a Meta server in the USA and stored there. If you are logged in to Facebook or Instagram, Meta can directly assign your visit to our website to your Facebook or Instagram account. If you interact with the plug-ins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is likewise transmitted directly to a Meta server and stored there. The information is also published on Facebook or Instagram and displayed to your Facebook or Instagram friends.

Meta may use this information for the purposes of advertising, market research and designing the Facebook or Instagram pages to meet user needs. For this purpose, Meta creates usage, interest and relationship profiles, e.g. in order to evaluate your use of our website with regard to the advertisements displayed to you on Facebook or Instagram, to inform other Facebook or Instagram users about your activities on our website and to provide further services associated with the use of Facebook or Instagram. If you do not want Meta to assign the data collected via our website to your Facebook or Instagram account, you must log out of Facebook or Instagram before visiting our website.

For the purpose and scope of the data collection and the further processing and use of the data by Meta, as well as your rights in this respect and setting options for protecting your privacy, please refer to Meta’s data protection notices at https://www.facebook.com/about/privacy/ and https://help.instagram.com/155833707900388.

b) X

Plug-ins of the microblogging network X are integrated on our internet pages. You can recognise the X plug-ins (X button) by the X logo on our site. An overview of X buttons can be found at https://publish.twitter.com/#. When you access a page of our website that contains such a plug-in, a direct connection is established between your browser and the X server. X thereby receives the information that you have visited our site with your IP address. If you click the “X button” while logged in to your X account, you can link the content of our pages on your X profile. This allows X to assign the visit to our pages to your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by X. If you do not wish X to be able to assign the visit to our pages, please log out of your X user account. Further information on this can be found in X’s privacy policy at https://x.com/en/privacy.

c) LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited our internet pages with your IP address. If you click the LinkedIn “Recommend button” and are logged in to your LinkedIn account, LinkedIn is able to assign your visit to our internet page to you and your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information on this can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy.

d) Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing functions is accessed, a connection to Xing’s servers is established. To our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored and usage behaviour is not evaluated. Further information on data protection and the Xing Share button can be found in Xing’s privacy policy at https://www.xing.com/app/share?op=data_protection.

e) YouTube

We use the platform and the services of the video portal YouTube. YouTube is used for public relations purposes and in the interest of an appealing presentation of our offerings pursuant to Art. 6(1) sentence 1 lit. e GDPR. The provider is: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We point out that you use YouTube and its functions on your own responsibility. This applies in particular to the use of functions such as commenting, sharing, rating, etc. When you visit our YouTube page, YouTube collects, among other things, your IP address as well as further information stored in the form of cookies on your PC. Further information on this can be found at: https://www.youtube.com/static?gl=DE&template=terms&hl=en

The data collected about you in this context is processed by Google Ireland Limited and may, where applicable, be transferred to countries outside the European Union (e.g. USA). We have no influence on this. What information Google receives and how it is used is described here: https://policies.google.com/privacy. When you access YouTube, your IP address is transmitted to YouTube. YouTube also stores information about the devices of its users; where applicable, YouTube is thus able to assign IP addresses to individual users. If you do not wish this, please log out of your YouTube user account and delete your cookies before visiting our YouTube page. Further information can be found here: https://support.google.com/youtube/answer/9315727.

8. Plug-ins and tools

a) Google Web Fonts

For the uniform display of fonts, this site uses so-called web fonts provided by Google. When a page is accessed, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. As a result, Google learns that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. If your browser does not support web fonts, a standard font from your computer is used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy published here: https://www.google.com/policies/privacy/.

Opt-out: https://adssettings.google.com/authenticated

b) Google Maps

On our websites, we use Google Maps, a service of Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). By visiting the website, the third-party provider receives the information that you have accessed the corresponding sub-page of our website. In addition, so-called log data is transmitted. This occurs regardless of whether this third-party provider provides a user account via which you are logged in, or whether no user account exists. If you are logged in with the plug-in provider, this data is assigned directly to your account. If you do not wish this assignment to your profile with the plug-in provider, you must log out before activating the button. Data processing by the third-party provider only takes place if you consent by confirming the request field (legal basis: Art. 6(1) lit. a GDPR). If you refuse consent, no maps from Maps can be displayed to you. However, this does not entail any disadvantages for you in the context of contacting us. Further information on data protection in connection with Google Maps can be found here: https://www.google.com/intl/en/policies/privacy/

c) Chatbot

We use the chatbot EMMA from Orimon.ai on our website in order to process enquiries and generate leads. In this context, data you enter, such as your name, e-mail or telephone number, is processed in accordance with Art. 6(1) lit. b and f GDPR. Your data is transmitted to Orimon.ai in encrypted form, used only for the stated purpose and not passed on without your consent. Deletion of data: the stored data is deleted as soon as it is no longer required for the fulfilment of the purpose, unless statutory retention obligations exist.

d) Survey tool

We use the e-mail address you provided to us in the course of your order for customer surveys. We use Microsoft Forms for this purpose. Data is transmitted to the processor Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. This may also involve a transfer of personal data to a country outside the European Union. The transfer of data to the USA takes place on the basis of Art. 45 GDPR in conjunction with adequacy decision C(2023) 4745 of the European Commission, as the data recipient has committed itself to complying with the data processing principles of the Data Privacy Framework (DPF).

If you no longer wish to receive these surveys, you can unsubscribe by clicking on “unsubscribe” in the respective e-mail. The legal basis for the data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Once the aforementioned purpose no longer applies or you have unsubscribed from the survey e-mails, your e-mail address will no longer be contacted for customer surveys.

e) Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that enables us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It serves solely to manage and deliver the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States. Google Tag Manager is used on the basis of Art. 6(1) lit. f GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) lit. a GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), insofar as the consent covers the storage of cookies or access to information in the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

f) Typeform

In order to be able to offer you various services, such as free admission tickets for trade fairs at which we exhibit our products, we use the Typeform tool on our website. Further information can be found at: Typeform’s terms, conditions & policies. The legal basis is Art. 6(1) lit. f GDPR.

g) Virtual company tour

For the virtual tour of our company, we use a plug-in from the provider MATTERPORT. Further information can be found at: https://matterport.com. The legal basis is Art. 6(1) lit. f GDPR.

9. Rights of data subjects

You have the right:

  • pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data where you contest the accuracy of the data, where the processing is unlawful but you oppose its erasure, where we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or where you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
  • pursuant to Art. 7(3) GDPR, to revoke at any time the consent you have once given to us. As a result, we are no longer permitted to continue, for the future, the data processing that was based on this consent;
  • pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual place of residence or workplace, or of our company’s registered office, for this purpose.

10. Right to object

You have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, insofar as there are grounds for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to state a particular situation. You also have a right to the erasure of your data, provided that no other retention periods stand in the way of your request. If you wish to exercise your right of revocation or your erasure request, an e-mail to info@enerent.com is sufficient.

11. Data security

During your visit to the website, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead, where possible from a security perspective. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or padlock symbol in the lower status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

12. Use of artificial intelligence in image editing / image generation

The images used on our websites are generally our own original photographs. Individual images may have been edited, optimised or partially modified with the help of artificial intelligence (AI) – for example, for image retouching, cut-outs, colour correction or the adjustment of image sections and backgrounds.

We attach particular importance to the protection of personality rights: persons depicted are neither altered in their appearance through the use of AI, nor placed in a different context of meaning, nor portrayed in an unfavourable manner. We use fully AI-generated images only occasionally and exclusively for illustrative purposes; where applicable, we label such images as AI-generated.

13. Currency and amendment of this privacy policy

This privacy policy is currently valid and was last updated in 07/2026. As a result of the further development of our website and the offerings provided on it, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be viewed and printed at any time on the website at https://www.enerent.de/de/Rechtliches/Datenschutzerklärung.