We appreciate your visit to our website. The protection of your personal data is important to us and we want you to feel safe when using our website.

1. General notice and mandatory information and designation of the responsible body

a. In the following, we inform you about the collection, processing and use of personal data on our website. Personal data is any data relating to a living person who can be identified.

b. The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) is:

Folivora Energy GmbH

Bahnhofstraße 36

64367 Mühltal

Deutschland

Contact:

contact@folivoraenergy.com

2. Your rights as a data subject

a. You have the following rights against us in relation to personal data concerning you:

Right of access by the data subject (Article 15 GDPR):

You have the right to request information from us at any time about the data we hold about you. This information includes, among other things, the categories of data we process, the purposes for which they are processed, the source of the data if they were not collected directly from you, and, if applicable, the recipients to whom we have disclosed your data. You may obtain a copy of your data from us free of charge. Should you require additional copies, we reserve the right to charge you for these copies.

Right of rectification (Article 16, GDPR):

You have the right to request that we correct any inaccurate data relating to you. We will take reasonable steps to keep the data we store and process accurate, complete and up to date on an ongoing basis, based on the most current information available.

Right to erasure (Article 17, GDPR):

You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.

Right to restriction of processing (Article 18, GDPR):

You have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or if you object to the processing pursuant to Art. 21 GDPR.

Right to data portability (Article 20, GDPR):

You have the right to request that we transfer your data – if technically possible – to another controller. However, you can only exercise this right if the data processing is based on your consent or is necessary for the performance of a contract. Instead of receiving a copy of your data, you may also request that we transfer the data directly to another controller designated by you.

Right to object (Article 21, GDPR):

You have the right to object to the processing of your data at any time on grounds relating to your particular situation, provided that the data processing is based on your consent, on our legitimate interests or those of a third party. In this case, we will stop processing your data. This does not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests, or if we need your data for the establishment, exercise or defense of legal claims.

Right to withdraw consent (Article 7(3), GDPR):

a. You have the right to revoke your consent to us at any time. This has the consequence that we may not continue the data processing based on this consent for the future.

b. If you feel that we have not responded appropriately to your complaints or you have further concerns, you have the additional right to complain to a data protection authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information.

3. Collection of personal data when visiting our website

If you use the website for information purposes only, i.e. do not register or send us information, only the personal data that your browser sends to the server will be collected. If you wish to call up our website, the following technical data will be collected, which we need to be able to display our website to you and to ensure stability and security (legal basis is Article 6 (1)(f). GDPR):

·       IP address

·       Date and time of the query

·       Time zone difference relative to Greenwich Mean Time (GMT)

·       Content of the query (specific page)

·       Access status/HTTP status code

·       Amount of data transferred in each case

·       Website from which the request originated

·       browser

·       Operating system and its user interface

·       Language and version of the browser software

The personal data mentioned above are processed for the following purposes and legitimate interests (Article 6 (1)(f), GDPR):

·       To ensure a smooth connection of the website

·       To enable you to use our website comfortably

·       To evaluate system security and stability and for other administrative purposes

This information is temporarily stored in so-called log files. When you visit this website, this information is collected automatically and without your intervention and stored until it is automatically deleted. If you do not want the above-mentioned personal data to be collected, you should not access our website, as we cannot allow you to access our website without this personal data.

We use the following host:

United-domains AG

Gautinger Straße 10

82319 Starnberg

Deutschland

4. Recipients or categories of recipients of personal data

In the course of our activities and services, it may become necessary for us to pass on the personal data we hold about you to natural or legal persons or authorities. We enter into contracts with our service providers to ensure that they may only process your personal data in the way we have expressly instructed them to do so. In addition, we ensure that they take the necessary technical and organizational measures to process your data securely and to store your personal data only for as long as necessary. External service providers who may receive personal data generally fall into the following categories of recipients.:

•         Subsidiaries and affiliates

•         Cloud provider

•         IT service provider for the maintenance of our IT infrastructure

5. Communication and contact form

If you contact us, for example by e-mail or via the contact form, the information you provide will be processed for the purpose of processing the request and in the event that follow-up questions arise. If you contact us, our legal basis for processing your personal data is our legitimate interest in processing your request and enabling you to contact us quickly and easily. The personal data collected by us in this context will be deleted when the concern associated with the contact has been fully clarified and it is also not expected that the specific contact will become relevant again in the future, unless there are legal storage obligations to the contrary.

6. Data retention

We retain your personal information for the duration of the customer relationship with you or for the period required by law after the termination of such relationship or arrangement in order to defend our legal claims, protect and enforce our rights, or comply with laws and regulations. Generally, the legal retention period for documents that are important for taxation purposes (e.g., accounting records) is ten (10) years, while other documents that may be considered commercial or business transaction documents are six (6) years.

7. Social-Media portals

a. We are represented in social networks. These presences are operated exclusively by the respective provider. They are used for direct communication with customers, interested parties and users. If you contact us via our social media channels, we process the data that you provide to us as well as the data that is required to process your request (Art. 6 para. 1 lit. b) GDPR). If you have given your consent to the operators of the respective social media platforms, the processing is based on Art. 6 (1) (a), GDPR. You can revoke your consent at any time vis-à-vis the operator of the respective platform with effect for the future.

b. When you visit our social media pages, your user data is collected and made available to us by the operator. The exact types of data differ from provider to provider.

c. Since our social media channels are operated by the providers of the respective social network, there may be supplementary use of your personal data by the respective operator over which we have no control. This often involves the collection of your IP address, the creation of static evaluations and the processing of further information that is stored in the form of cookies. We have no influence on the generation and presentation of this data and can neither disable this function nor prevent the processing of the data.

d. The assertion of data subject rights and inquiries can most effectively be addressed directly to the platform operators, as only they have access to your data and can take immediate measures and provide information. If our cooperation is required for this, we will support you in asserting your rights as a data subject.

e. More detailed information on the terms of use of the respective platform as well as a detailed description of further data processing and the respective objection options can be found on the websites of the providers.

8. Cookies

a. In addition to the aforementioned categories of data, we use cookies to make your visit to our website as user-friendly as possible and to enable you to use certain functions. Cookies are small text files that are stored on the delegated hard drive of your browser and through which certain information flows back to the person who sets the cookie (in this case, us). Cookies are used to improve the usability and effectiveness of our website.

b. This website uses the following types of cookies:

Transient cookies – Transient cookies are automatically deleted when you close your browser. These are mostly session cookies that store a so-called “session ID”, which enables the assignment of various queries within your browser during a specific session. This allows your device to be identified when you repeatedly visit a website during a session. These cookies are deleted as soon as you log out or the browser window is closed.

Persistent cookies – Persistent cookies allow the website to remember your information and settings the next time you visit. This allows you to access the website faster and more comfortably, as you do not have to change your language settings again, for example. How long the cookie remains on your device depends on the duration or expiration date of the respective cookie and your browser settings. These cookies are automatically deleted after a certain period of time, which may vary from cookie to cookie. Persistent cookies can be deleted at any time via the security settings in your browser.

c. We use cookies based on our legitimate interests (technically necessary cookies) or based on your consent, depending on whether you select the cookie banner that is displayed when you access the website. You can also configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. This may lead to a limitation of functionality.