Privacy Policy

The website of ZILONIS Energy Solutions GmbH collects data about you. Strict compliance with the provisions of the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG), and the General Data Protection Regulation (GDPR) forms the basis of our trustworthy relationship with you as a user.

Our website may also contain links to external websites. We do not assume any responsibility for the content of these external offerings. When you leave our pages, we recommend that you carefully read the privacy policy of any website that collects personal data.

1 Data Controllers

a) Responsible for Data Processing

b) Data Protection Officer

We have appointed Dr. Julia Zirfas as our Data Protection Officer.

ZUKUNFT: Datenschutz
External Data Protection Consultancy
Email: info@zukunft-datenschutz.de

2 What is Personal Data?

Personal data refers to all data that relates directly or indirectly to you as a person. This includes, for example, data such as your date of birth, your address and IP address, as well as texts or images that allow conclusions about you as a person. The following privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Where applicable, we may be required by law to disclose your data to third parties. However, we only comply with such requests within this framework and after careful examination of whether such an obligation actually exists.

Data processing takes place in Germany or in other European countries. If, in exceptional cases, data is transferred to a third country, this is only done to countries where an adequate level of data protection exists or where we can ensure this through appropriate safeguards such as the conclusion of standard contractual clauses or certifications.

3 What Data is Processed?

a) When Visiting the Website

When you visit the website, every access to and retrieval of a file stored on this website is logged to enable the use of the service. The following data is logged:

• IP address
• Time of visit
• Page or file accessed
• Browser type and version used
• Operating system and hostname of the accessing computer

The data is also stored in the log files of our system. This data is not merged or stored together with other personal data of the user.

i) Legal Basis

The legal basis for the temporary storage of data and log files is a legitimate interest pursuant to Art. 6 (1) lit. f GDPR.

ii) For What Purpose is This Data Processed?

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

Storage in log files is done to ensure the functionality of the website. The data also serves to optimize the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.

iii) How Long is the Data Stored?

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data collected to provide the website, this is the case when the respective session ends. Data stored in log files is deleted after 7 days at the latest.

b) Required Cookies

Like most websites, we also use cookies on our site. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is accessed again. Session cookies store information that is used during your current visit. These cookies are automatically deleted when you leave our site.

We also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. When you visit our site again to use our services, it is automatically recognized that you have visited us before and what entries and settings you have made, so that you do not have to enter them again.

i) Legal Basis

The cookies required for the operation of the website and the associated processed personal data are necessary for the stated purposes to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR and for the provision of the website pursuant to Art. 6 (1) lit. b GDPR.

ii) For What Purpose is This Data Processed?

The cookies set are technically necessary. Certain functions of the website cannot be offered without the use of cookies. For example, it is necessary for the browser to be recognized even after a page change.

We do not use the collected user data to create user profiles or to provide visitors to our pages with advertising. The information generated by the cookies about your use of this website is not passed on to third parties.

iii) How Long are Cookies Stored and How Can I Delete Them?

Cookies are stored on your computer and transmitted to our site by you. As a user, you therefore have full control over the use of cookies. You can prevent the use of cookies by changing the settings in your internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari). However, to be able to use all the functions of the website, you should allow the use of cookies in your browser and instead reject optional cookies via the settings in the cookie layer.

c) Website Hosting

This website is hosted and provided in cooperation with an external service provider.

The following personal data is processed as part of the hosting:

• IP addresses
• Content of contact requests as well as associated meta and communication data
• Contract data
• Contact data
• Names
• Website access and other data generated via a website

i) Legal Basis

Hosting serves to provide the website and thus to fulfill the contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast and efficient provision of our website by a professional provider (Art. 6 (1) lit. f GDPR).

ii) For What Purpose is This Data Processed?

Our hosting provider will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the hosting provider IONOS SE, Elgendorferstr. 57, 56410 Montabaur as part of a data processing agreement pursuant to Art. 28 GDPR. The server is located in Karlsruhe. A corresponding data processing agreement has been concluded with the provider.

iii) How Long is the Data Stored?

Your data is stored by the contractor and the hosting company as long as the purpose for data processing exists.

d) IONOS Web Analytics

This website uses analysis services from IONOS WebAnalytics. The provider of these services is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. In connection with the analysis by IONOS, it is possible to analyze, for example, the number of visitors and their behavior patterns during the visit (e.g. number of pages accessed, duration of their visit to the website, percentage of abandoned visits), the origin of visitors (i.e. from which page the visitor came to our website), the locations of visitors and technical data (browser used and version of operating system used). For this purpose, IONOS archives in particular the following data:

• Referrer (previously visited website)
• Page or file accessed on the website
• Browser type and browser version
• Operating system used
• Type of device used
• Time of access to the website
• Anonymized IP address (only used to determine the location of access)

According to IONOS, the collected data is fully anonymized so that it cannot be traced back to individuals. IONOS WebAnalytics does not archive cookies.

i) Purpose and Legal Basis

The storage and analysis of data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior to optimize both the operator's web presence and the operator's advertising measures.

ii) Further Information

Further information on data collection and processing by IONOS WebAnalytics can be found in the privacy policy at: https://www.ionos.de/terms-gtc/index.php?id=6

e) Contact Form / Contact by Email or Telephone

You can contact us quickly and easily via our contact form or send us feedback. The same applies to contact by email and telephone. You can find all contact options under the Contact section.

The following data must be provided in the contact form:

• Name
• Gender (for correct form of address)
• Telephone number (for contact)
• Email address (for contact)
• Your message or feedback for us

You may also voluntarily provide the following data:

• Address
• Company

At the time the message is sent, the following data is also stored:

• Date and time when the message was sent

What data you provide on any of the other contact channels is up to you.

i) Legal Basis

The legal basis for processing data transmitted via our contact form is Art. 6 (1) lit. f GDPR. For the voluntary provision of additional data, this is done with your consent (Art. 6 (1) lit. a GDPR).

ii) For What Purpose is This Data Processed?

The data is only stored for the purpose of responding to and contacting you. The provision of further data is optional but is also only used for answering inquiries. The transmission of data from the contact form is encrypted.

iii) How Long is the Data Stored?

The personal data collected by us for the use of the contact form is automatically deleted after your request has been processed. Follow-up questions may occur, in which case the data remains stored until final resolution. Communication is concluded when it can be inferred from the circumstances that the matter in question has been finally clarified.

f) Sending Information Mailings and Newsletter

We send information to you by email as part of our customer relationship. These are important for you as our customer. We use the contact data you have provided to us. This is not the sending of a regular newsletter.

Separately from this contractual information, we also send a newsletter that you can subscribe to.

i) Legal Basis

The legal basis for processing data for the sending of contractual information is Art. 6 (1) lit. b GDPR, as contact is necessary for the performance of our contractual relationship.

The legal basis for sending the newsletter is your consent (Art. 6 (1) lit. a GDPR).

ii) For What Purpose is This Data Processed?

The data is used for sending information on contract-related topics by email or post. With your consent, also for sending the newsletter.

iii) How Long is the Data Stored?

Your data remains stored during the ongoing contractual relationship. However, it will be blocked for further contact for the above purposes after the end of our contractual relationship.

You can revoke your consent to receive the newsletter at any time and unsubscribe. You can declare the revocation by clicking on the link provided in every newsletter email, as well as by sending an informal message to the contact details given above.

The newsletter is sent via HubSpot. For more information, please see the HubSpot CRM section below.

g) XOVI (SEO Analysis)

We use a tool for search engine optimization and SEO analysis for our website. The tool is a service of the provider XOVI GmbH, Hohenzollernring 72, 50672 Cologne, Germany.

i) Legal Basis

The legal basis for the use of XOVI is Art. 6 (1) lit. f GDPR.

ii) For What Purpose is This Data Processed?

With XOVI, user flows can be tracked, and keyword and link analyses can be performed. In this way, we obtain information on how customers find our site, in order to design our websites in a more customer-friendly and target-group-oriented manner.

iii) Further Information

The complete privacy policy of XOVI GmbH can be found at: www.xovi.de/datenschutz/

h) Google Analytics and Google Tag Manager

Our website uses Google Analytics, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable analysis of your use of the website (see cookies section above).

With the help of Google Analytics tracking, we are able to recognize whether the user has performed certain actions. For example, we can analyze how often which buttons on our website were clicked and which products are particularly frequently reviewed or purchased. The purpose of this information is to create conversion statistics. We learn how many users clicked on our ads and what actions they performed. We do not receive any information that would allow us to personally identify users. Google uses cookies or comparable recognition technologies for identification purposes.

The information generated by cookies about your use of this website such as:

• Browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing computer (IP address)
• Time of server request

is transmitted to a Google server in the USA and stored there.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only manages and operates the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the USA.

1. Legal Basis

The legal basis for setting the cookie is Section 25 (1) TTDSG. Personal data is processed exclusively with your consent (Art. 6 (1) lit. a GDPR). You can give your consent directly in our cookie banner (can be displayed again at any time via the small cookie icon in the lower left part of the page).

i) For What Purpose is This Data Processed?

Google evaluates the use of our online offering on our behalf in order to compile reports on our activities and to provide us with further services related to the use of this online offering and internet usage. For example, Google Marketing Services allows ads to be displayed to show users only ads that potentially match their interests. User data is only processed within pseudonymous user profiles within Google Marketing Services.

ii) Further Information

For more information on Google Conversion Tracking, please see Google's privacy policy at: https://policies.google.com/privacy?hl=en

We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

Users' personal data is deleted or anonymized after 14 months.

4 How is Data Transmitted?

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5 What are Your Rights as a Data Subject?

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

• Right of access pursuant to Art. 15 GDPR (restrictions pursuant to Section 34 Federal Data Protection Act (BDSG) possible)
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR (restrictions pursuant to Section 35 BDSG possible)
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to object pursuant to Art. 21 GDPR
• Withdrawal of consent pursuant to Art. 7 (3) GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in conjunction with Section 19 BDSG

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate,
Postfach 30 40, 55020 Mainz (further contact options at: https://www.datenschutz.rlp.de/)

6 How Can I Object or Withdraw?

If you have given us consent for the processing of personal data, you have the right to revoke your declaration at any time with effect for the future.

You can object to data processing that we have based on the legal basis of “legitimate interest” (Art. 6 (1) lit. f GDPR).

You also have the right to object to the processing of personal data for the purposes of direct marketing (Art. 21 (2) GDPR). After objection, your data will no longer be processed “for the purposes of direct marketing” (Art. 21 (3) GDPR).

To do so, send your revocation/objection by email or post to the contact details of ZILONIS given at the beginning.

7 Status of the Declaration

This privacy policy is currently valid as of January 2026.

Due to the further development of the website or changes in legal or official requirements, it may become necessary to amend this privacy policy.