Privacy Policy for Electricity Supply
Effective Date: 01.04.2025
We would like to inform you about the processing of personal data in connection with our services in accordance with Articles 13 and 14 of the GDPR. This document outlines how we use your data.
Responsible Entity
GETEC ENERGIE GmbH
An der Börse 4
30159 Hannover
Deutschland
Telefon: +49 (0) 511 51949-100
Telefax: +49 (0) 511 51949-197
E-Mail: info@getec-energie.de
Our Data Protection Officer, Ass. Jur. Phillip Fischer, can be contacted at: datenschutz@getec-energie.de.
Purposes and Legal Basis of Data Processing
GETEC ENERGIE GmbH, as the controller of your data, or its designated service providers process your personal data for the fulfillment of contractual agreements or the initiation of contracts, as well as for billing purposes. This includes, among other things, the issuance of invoices, communication with you, billing, or issuing reminders, if necessary.
The legal basis for processing data for the fulfillment of our services and implementation of contractual measures, including answering inquiries, is Article 6(1)(b) GDPR. The legal basis for processing necessary to fulfill our legal obligations is Article 6(1)(c) GDPR. The legal basis for processing that serves our legitimate interests is Article 6(1)(f) GDPR.
Additionally, we may use your data for purposes such as informing you of rate changes or related offers within our corporate group, provided the statutory requirements (e.g., GDPR or MsbG) are met. Furthermore, we may use your data for limited periods for customer retention efforts based on Article 6(1)(f) GDPR.
If we do not collect your data directly from you, we may obtain it from your default electricity supplier or from your electrician, who submits the grid connection application on your behalf. In certain cases, we process your personal data for purposes such as direct marketing or market research based on our legitimate interests under Article 6(1)(f) GDPR.
Categories of Processed Personal Data
We primarily process the following categories of personal data in connection with our energy services:
- Contact and identification data (e.g., name, address, email address, phone number, and date of birth)
- Banking data (e.g., IBAN)
- Meter readings and measurement data
Most of this data is provided directly by you through the completed contract and related contractual documentation. Additionally, we may receive measurement data from your grid operator or measure the data ourselves. These data are essential for fulfilling the contract and billing for services rendered.
Subsequently, we use the data to execute and finalize the contract agreed upon with you, as well as for billing purposes.
Recipients or Categories of Recipients of Personal Data
We do not carry out every step in fulfilling your contract or processing your billing internally; we may collaborate with partners to ensure these processes are completed. Primarily, this includes companies within our corporate group, as well as carefully selected IT service providers, cooperation partners, and document storage providers. These partners act in accordance with our instructions and adhere to Article 28 GDPR.
Under specific circumstances, we may also engage service providers for credit assessments to analyze risks. In this case, essential data such as your name, address, and potentially your date of birth may be shared to ensure accurate identification.
For overdue claims, we may transfer the debt to debt collection agencies in compliance with Article 6(1)(f) GDPR. Similarly, we may share your personal data with law firms to pursue legal claims or defend against legal disputes, based on our legitimate interests under Article 6(1)(f) GDPR.
We may conduct surveys to assess the quality and transparency of our products, services, and communications in order to improve and tailor them to our customers’ needs. If such surveys are conducted through channels other than postal correspondence, they will only take place if you have provided explicit consent or a legal justification exists.
We only disclose your data to authorities if mandated by law.
Transfer of Personal Data to Third Countries
All customer-related data collected for contract fulfillment or used for billing purposes is stored on our systems. We do not transfer your personal data to entities or organizations located outside the EU or in third countries.
Although users may access our portals from locations outside the EU, these are user-initiated activities over encrypted internet pathways and beyond our control.
 Duration of Data Storage
We retain your data as long as necessary for the business relationship, including adhering to statutory retention periods (e.g., § 257 of the German Commercial Code (HGB) or § 147 of the German Tax Code (AO)). Generally, this pertains to the billing of services rendered.
Tax-relevant data is retained for 10 years, while other business communications are retained for 6 years. Exceptions apply for the permissible temporary use of data for customer retention measures, statistical evaluations, or market research, unless you expressly object to such processing.
Your Rights as a Data Subject
If you have provided consent for specific processing activities (e.g., telephone or email communications) in the context of the contract, you may withdraw your consent at any time without affecting the validity of the contract.
You may object to the processing of your data for direct marketing or research purposes at any time. Additionally, you have the statutory rights to access, rectify, delete, restrict the processing of, and port your data under Articles 15 to 20 of the GDPR.
If you wish to exercise any of these rights, please contact our Data Protection Officer. They will verify hether the applicable legal conditions have been met.
For complaints related to data protection, you may contact the competent supervisory authority:
The State Commissioner for Data Protection in Lower Saxony
Prinzenstr. 5
30159 Hannover
Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de