General
Thank you for your interest in our company. Your privacy is important to us and you should always feel safe and comfortable when visiting our website. That is why we have put both technical and organizational measures in place to ensure we observe the relevant legislation at all times. This document describes the information we may collect and how we handle it.

I. Controller and data protection officer

Website:
RWE Aktiengesellschaft
RWE Platz 1
45141 Essen
P +49 (0) 201-51790
F +49 (0) 201-51795005
e-mail to RWE Aktiengesellschaft

Funding process:
RWE Foundation gGmbH
Gemeinnützige Gesellschaft mit beschränkter Haftung
RWE Platz 1
45141 Essen
email to RWE Foundation gGmbH

You can reach our data protection officer at:

RWE Aktiengesellschaft
Data Protection Officer
RWE Platz 6
45141 Essen
e-mail to dataprotection@rwe.com

II. Provision of the website and logfiles
In the following, we will inform you how we process your personal data in connection with the provision of the website and creation of log files.

1. Which of your personal data do we use?
Each time you access our website, our system automatically collects data and information from the operating system of the accessing device. In addition to non-personal data (e. g. the domain name of the website which you came from; the websites from our offering you have visited; the names of the files accessed; the date and time of an access; the name of your internet service provider; as well as, if applicable, the operating system and browser version of your device; host name of the accessing device; language settings), your IP address is processed in the process.

2. What are the sources of the data?
The data is collected from you by being automatically transmitted by your computer to our system.

3. What do we process your data for (purpose of processing) and on what legal basis?
The data is initially collected to be able to provide the website in technical terms. In this case, the legal basis is our legitimate interest. In addition, we store the data - in pseudonymized form in log files - for security purposes, in particular to detect and counteract attacks on our website, for statistical purposes and to optimize our internet presence. In these cases, the processing is based on our legitimate interest to ensure the purposes stated above.

4. Who will your data be passed on to?
In certain cases, the data may be passed on to other Group companies. In addition, we use external service providers who also receive personal data in certain cases as part of the performance of their duties. In these cases, we ensure that your personal data is processed in accordance with the provisions of the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act or the respective national data protection laws. 

As a matter of principle, your data will not be passed on to other third parties unless we are obliged to do so due to legal or official orders.

5. How long will your data be stored?
We store the data for a period of 30 days.

6. Is there an obligation to provide your data?
There is no legal or contractual obligation to provide the data. If you do not provide the data, it is not possible to use the website to its full extent.

III. Web analysis and web optimization through cookies 
We use cookies on our website. Cookies are text files that contain a characteristic string of signs and enable a unique identification of the computer. They are stored in the Internet browser or by the Internet browser on the user's operating system when the website is accessed. When the website is opened again, the operating system can be identified in this way and certain information can be transferred automatically. 
The information that is stored via cookies fulfils various functions. We categorize them as follows:

• Essential Cookies
• Analytical Cookies

1. Which of your personal data is used by us?

Depending on the cookie used, we collect different personal data. You can find a list of which data is involved in individual cases here.

2. What are the sources of the data?
All data that we collect in the form of cookies originate from you.

3. What do we process your data for and on what legal basis?
Depending on the cookie used, we pursue different purposes with the use of cookies. The first time you visit our website, you will be asked to select which cookies you wish to allow. Here you have the possibility to view and change your selection.

a. Essential Cookies
Essential cookies serve to safeguard a flawless operation of our website and to ensure its stability. When you access our websites, you will be informed by the info banner about the use of cookies and referred to this data protection information. The legal basis for this processing is our legitimate interest, which consists of being able to guarantee the aforementioned purposes. 
The data collected from you in this way is pseudonymized by technical precautions and not stored together with other personal data from you. In this way, we can no longer assign the data to you personally.

b. Analytical Cookies
Analytical cookies enable us to analyze your surfing behaviour on our website so that we can measure and improve the performance of our pages. In doing so, we create statistical profiles that are not attributable to individuals but only to groups. These profiles are used to analyze visitor and click behaviour as well as demographic characteristics of the website visitors. 
When you visit our websites, our info banner informs you about the use of analysis cookies by referring to this data protection information. If you agree to the processing, you click on this cookie category and thereby grant your consent, which serves as a legal basis. 
The data collected from you in this way is pseudonymized by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.

4. Who will your data be passed on to?
In certain cases, the data may be passed on to other Group companies. In addition, in certain cases, third-party companies that offer the respective cookie also receive your data as part of the processing on our behalf.

5. How long will your data be stored?
We use two types of cookies: persistent cookies and session cookies. A persistent cookie lasts beyond the current session and will stay on your browser until they expire or you delete them. Session cookies last only as long as the session (usually the current visit to a website or a browser session). Third parties, such as our customers, partners and service providers may also use cookies in connection with our Services. The list will inform you in detail about the storage.

6. Is there an obligation to provide your data?
There is no obligation to provide the data. However, the essential cookies are necessary for the website to function properly.

7. Your rights with regard to cookies
In addition to the rights mentioned under point VIII, you have the right:

• to object to the use of the essential cookies at any time.
• to withdraw your consent here regarding the analytical cookies used by us.

IV. Usercentrics
We use the consent management service Usercentrics, of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (Usercentrics). This allows us to obtain and manage the consent of website users for data processing. The processing is necessary for the fulfillment of a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 p. 1 lit. c GDPR). The following data is processed for this purpose:
Date and time of access Browser information Device information Geographic location Cookie preferences URL of the visited page.
Usercentrics is a recipient of your personal data and acts as a processor for us.
The processing takes place in the European Union. For more information on objection and removal options vis-à-vis Usercentrics, please visit: https://usercentrics.com/privacy-policy/.
The data will be deleted after 3 years.

V. General contact, submission and processing of funding applications
On our website, you have the possibility to contact us via a web form or e-mail. In addition, you can also submit a funding application via the website. In the following, we explain how we process your data in this context.

1. Which of your personal data do we use?
We process the data you provide in the respective form or via e-mail. This data may include the following: Salutation, name, title, e-mail address, address, telephone number, company as well as the content of the message. In the context of the submission of funding applications, project-related data (e. g. project period, project budget, project location(s)) is also processed.
In some cases, the web form offers you the option of specifying the means by which we can contact you.

2. What are the sources of the data?
You provide the data yourself by sending the message to us. Alternatively, your data has been provided to us by your co-applicant.

3. What do we process your data for (purpose of processing) and on what legal basis?
We process the data in order to answer your enquiry. The legal basis for the processing is your consent pursuant to Art. 6 Para. 1 lit. a) GDPR, which you implicitly grant by sending the message.
In the context of the submission of funding applications, we process the data for the purpose of reviewing and processing your funding application. The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

4. Who will your data be passed on to?
We may pass on your personal data within the Group if this is necessary to process your enquiry. In addition, in certain cases we use service providers who may also receive your data. In this case, access is granted exclusively for a specific purpose within the framework of processing on our behalf and in compliance with the relevant data protection regulations.

5. How long will your data be stored?
The data will be stored for as long as is necessary to process your request and, in addition, for as long as any statutory retention obligations exist.

6. Is there an obligation to provide your data?
There is no obligation to provide the data. Without the data, however, we cannot fully answer your request. It is also not possible to process the application unless the data is provided.

7. Right to withdraw your consent
Your consent to the processing and publication of personal data in the context of public relations can be withdrawn at any time without any disadvantages or stating reasons by sending an e-mail to info@rwefoundation.com. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal. Within the scope of using the contact form you have the rights mentioned under point X.

VI. Project reporting
Once your project receives funding, the RWE Foundation may create and publish reports about the project.

1. Which of your personal data do we use?
In the context of communication and reporting on the project, we process names and organizational affiliation of the project partners and responsible parties as well as the photo material provided, on which individuals may be recognizable.

2. What are the sources of the data?
We obtain the data from you or the project partners.

3. What do we process your data for (purpose of processing) and on what legal basis?
We process your data for publication purposes (for instance on the intranet/internet, in social media, RWE image databases, annual reports, etc.) in the context of communication and reporting on your project on the basis of Art. 6 para. 1 lit. f) GDPR or, if required by data protection law, on the basis of your voluntary consent within the meaning of Art. 6 para. 1 lit. a) GDPR. 

4. Who will your data be passed on to?
In accordance with the cooperation agreement concluded as part of the funding, we may forward your personal data to RWE AG as well as to other companies of the RWE Group to facilitate the release of reports, e.g. in publications, on their websites or in social media posts.

5. How long will your data be stored?
The data is generally deleted as soon as it is no longer required to achieve the purpose it was collected for. Information published on the Internet may still be available even after it has been deleted from the original channel.

6. Is there an obligation to provide your data?
An obligation to provide certain data arises from the provisions of the cooperation agreement. Personal data, such as photos, which was provided on the basis of your consent, is excluded from this obligation.

7. Right to withdraw your consent
Your consent to the processing and publication of personal data in the context of public relations can be withdrawn at any time without any disadvantages or stating reasons by sending an e-mail to info@rwefoundation.com. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal. Within the scope of using the contact form you have the rights mentioned under point X.

VII. Links to other Websites
The RWE websites contain links to other websites. As the provider of our websites, we are solely responsible for the content of our own online presence. A distinction must be made between our own content and the content provided by other providers, for which we cannot accept any responsibility and do not adopt their content as our own. We have no influence on whether the website operators linked to us adhere to the relevant data protection regulations. This declaration on data protection therefore does not apply to the websites of other providers, even if you access them via links on our website. Please therefore observe the respective data protection regulations of the other providers. We therefore accept no liability for the content of other websites. In the event that you should notice a relevant violation, we thank you for informing us. We will then remove the link after checking it, if necessary.

VIII. Does automated decision-making, including profiling take place?
No automated decision-making, including profiling takes place.

IX. Is your data transferred to third countries?
We also use carefully selected service providers based outside the European Union and the European Economic Area (in so-called "third countries") to process your data. Similarly, some of the RWE companies which your data is shared with under the terms of the cooperation agreement are headquartered in third countries. In these cases, a third-country transfer of your personal data takes place. Such transfers will always be in accordance with Chapter V of the GDPR or the respective national data protection laws. In the absence of an adequacy decision by the European Commission pursuant to Art. 45 GDPR, adequate safeguards are provided to ensure an adequate level of data protection. As a standard practice, we enter into contracts with data recipients that contain standard data protection clauses, also referred to as "standard contractual clauses", to the extent that personal data is transferred outside the EEA. 
You have the possibility to request further information as well as to receive copies of corresponding agreements at any time. You can reach us using the contact details mentioned under point 1.

A transfer to external parties only takes place to the extent that the photos/videos and other personal data are included and published on the Internet, social media, in externally released information (print products). Transfer of data to a third country is also possible in this case. For detailed information on data processing by social media providers, please refer to their privacy policies and statements.

X. What rights do you have in connection with the processing of your data?

1. Right of access
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller.

2. Right to rectification
You have a right of rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

3. Right to erasure
You may request the controller to delete the personal data concerning you without undue delay and the controller is obliged to delete such data without undue delay, unless an exception provided by law applies.

4. Right to restriction of processing
Under the conditions regulated by law, you may request the restriction of the processing of personal data concerning you.

5. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller and the processing of which is based on consent or on a contract with you, in a structured, commonly used and machine-readable format. You also have the right, under the conditions stipulated by law, to have your personal data transmitted to another controller without hindrance from the controller to whom the personal data was provided.

6. Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. All personal data stored on the basis of the consent granted in each case will be deleted in this case, unless there is another legal basis for further storage according to the law.

8. How to exercise your rights
To exercise your above rights, please use the contact details mentioned under point 1.  
If you wish to withdraw your consent regarding the cookies we use, you can change the setting here.

9. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes relevant data protection rules. 

An overview of the data protection supervisory authorities with their contact information is available on the following website of the European Data Protection Board.