Privacy Policy

Privacy Policy

1 General Information

We appreciate your visit to our website at www.transsolar.com and your interest in our company. Protecting your personal data is important to us. In this Privacy Policy we inform you about the type, scope, and purposes of the personal data we collect, use, and process, and we explain your rights in this regard.

The processing of your personal data (for example, name, address, email address, or telephone number) is always carried out in accordance with the General Data Protection Regulation (GDPR) and the national data protection provisions applicable to us. For definitions of the terms used, please refer to Article 4 of the GDPR.

We have implemented numerous technical and organizational measures to make our website as secure and privacy-friendly as possible. Our website uses SSL encryption, does not use cookies, and does not employ web analytics services. Please note that internet-based data transmissions may have security vulnerabilities; absolute protection cannot be guaranteed. You are welcome to transmit personal data to us via alternative means, for example, by telephone.

This Privacy Policy does not apply to your activities on third-party websites that you may access via links on our website. Please review the privacy policies of the respective providers on their websites.

2 Collection and Processing of Personal Data

You may generally use our website without providing any personal data. If, however, you wish to use particular services we offer on our website, it may become necessary to process personal data. Where processing is required, we first determine whether a legal basis exists under Article 6(1) GDPR – such as the performance of a contract, compliance with legal obligations, or our legitimate interests. If none of these legal bases apply, we obtain the consent of the data subject before processing.

When you visit our website, our hosting provider, DomainFactory, automatically records server logs (“logfiles”) for certain services on the server. All logfiles are rotated daily. The logs from the previous day are archived and deleted after a retention period of three days. These are purely internal logfiles to which we, Transsolar Energietechnik GmbH, do not have access. The web server logfile records the domain, your IP address, requests, user agent, timestamp, and status code. The privacy notices of our hosting provider, DomainFactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany, can be found here: www.df.eu/de/support/df-faq/service-infos/datensicherheit/

The personal data collected when visiting our website is required to deliver the content of our website correctly, to ensure the long-term functionality of our IT systems and website technology, and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. These purposes also constitute our legitimate interest in processing under Article 6(1)(f) GDPR.

3 Cookies and Consent Management

Our website currently does not use cookies for analytics or marketing purposes. Should this change in the future, we will implement a consent management tool that informs you upon first visiting the website about the use of cookies and requests your explicit consent. The legal basis for the use of cookies requiring consent is Article 6(1)(a) GDPR. Necessary cookies may be used without your consent (Article 6(1)(f) GDPR).

4 Adobe Typekit

We use Adobe Fonts (formerly Typekit) to present fonts on our website in a uniform and appealing manner. The provider is Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”).

When you access our website, your browser loads the required fonts directly from Adobe’s servers to display text and fonts correctly. In doing so, a connection to Adobe servers is established – including to servers in the United States – through which Adobe becomes aware that our website was accessed via your IP address.

The purpose of processing is to provide an aesthetically pleasing and technically uniform display of fonts on our website to improve user-friendliness. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the appealing visual design of our online offering.

Where personal data is transferred to third countries, in particular the United States, Adobe states that it relies on appropriate safeguards within the meaning of Article 46 GDPR. In particular, this includes the use of EU standard contractual clauses (Standard Contractual Clauses – SCCs) and additional measures to protect data, such as encryption and pseudonymization.
Further information on data processing by Adobe in connection with Adobe Fonts can be found in Adobe’s Privacy Policy: www.adobe.com/privacy/typekit.html

5 YouTube

We use YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“YouTube”), to embed videos on our website. Our videos are embedded using “enhanced privacy mode.” According to YouTube, your personal data is transmitted to the YouTube server in the United States only if you actively start the video by clicking on it. By clicking on the video, you consent to this transmission. The legal basis for processing is your consent under Article 6(1)(a) GDPR. If you are simultaneously logged in to YouTube, this information is assigned to your YouTube member account. You can prevent this by logging out of your account before visiting our website. We have no influence on Google’s data processing. Please note that the use of YouTube may result in the transfer of personal data to servers in third countries outside the European Union – particularly the United States. YouTube bases these transfers on Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR and additional protective measures (e.g., encryption).

Further information on the collection and use of personal data by YouTube and Google can be found in Google’s Privacy Policy: www.google.de/intl/de/policies/privacy/

6 Algolia

We use the search technology “Algolia,” provided by Algolia SAS, 55 Rue d’Amsterdam, 75008 Paris, France. Algolia enables a powerful and user-friendly search function to help you quickly find content on our website. When the search function is used, in particular your IP address, your search query, and technical usage information are transmitted to Algolia’s servers. These data may be processed in data centers within the European Union or – in individual cases – in the United States. According to the provider, storage is for statistical and optimization purposes for a period of 90 days.

The purpose of processing is to provide a functional and efficient website search, improve user-friendliness, and enable the technical analysis and optimization of our online offering. The legal basis for using Algolia is our legitimate interest under Article 6(1)(f) GDPR in an effective search function and improvement of our web offering. Where cookies or similar technologies are used in connection with this service, this is also based on your consent pursuant to Section 25(1) TTDSG.

Algolia may transfer personal data to third countries outside the EU or EEA, in particular to the United States. To safeguard such transfers, Algolia relies on appropriate safeguards within the meaning of Article 46 GDPR, in particular EU Standard Contractual Clauses (SCCs). In addition, according to Algolia, technical and organizational measures such as transport encryption (TLS), access controls, and data minimization are used to ensure an adequate level of protection.

Further information on data processing by Algolia can be found in the provider’s privacy notice:
www.algolia.com/policies/privacy/

7 Contacting Us

If you contact us – for example by email, telephone, or via social media – the data you provide will be used to process your inquiry and to perform any services you may request through such contact. Your information may be stored in a customer relationship management (“CRM”) system or a comparable system for contact management and handling.

We only collect and process additional personal data if you use certain services and we require your data for that purpose, or if you have given us your explicit consent. This may occur, for example, when you complete a relevant form or send us an email, order services, or submit inquiries to us. The legal bases for processing are Article 6(1)(b) GDPR or your consent (Article 6(1)(a) GDPR).

8 Disclosure of Personal Data to Third Parties or Other Recipients

In certain cases, we are legally obligated to transmit data to a requesting governmental authority – for example under national legal provisions or where disclosure is necessary for legal or criminal prosecution in the event of attacks on network infrastructure. The legal basis for such processing is Article 6(1)(c) GDPR.

When engaging service providers as processors, the data protection requirements of Article 28 GDPR and Articles 44 et seq. GDPR are observed. This applies in particular to service providers in the areas of IT, web hosting, and search functions. Beyond this, we only disclose data to third parties if you have expressly consented to such disclosure, if the transfer is clearly necessary to perform a service requested by you, or if the transfer is provided for by law.

Please note that we may transfer your personal data to countries outside the EU or EEA. In such cases, we take all necessary steps to ensure that appropriate measures are implemented to protect your personal data in accordance with data protection laws – for example, by using the European Commission’s approved Standard Contractual Clauses.

9 Data Protection for Applications and in the Recruiting Process

We publish job openings on our website. You may submit your application to us by email at jobs(at)transsolar.com. We process your data to manage your application process. Your application will be viewed only by employees responsible for the initial selection. We do not disclose your data to third parties and do not use it for other purposes.

We store your applicant data. If we reject your application, we store the data only as long as necessary, but no longer than six months. The legal basis for processing your data is Section 26 BDSG and Article 88 GDPR.

10 Newsletter

You can subscribe on our website to our free newsletter, which informs you about our projects and events. Our newsletter is sent using the service provider MailChimp, a newsletter delivery platform operated by the US provider The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield framework and thereby commits to comply with EU data protection requirements. MailChimp’s privacy policy can be found here: www.mailchimp.com/legal/privacy/

When you subscribe to our newsletter, the following personal data are transmitted to The Rocket Science Group for processing: email address and, optionally, first name, last name, and company. In addition, the IP address of the computer system used at the time of registration, as assigned by your internet service provider (ISP), as well as the date and time of registration, are stored. After registration, a confirmation email is sent to the email address provided for newsletter delivery using the double opt-in procedure. This confirmation email serves to verify whether the owner of the email address has authorized receipt of the newsletter.

Our newsletter contains “tracking pixels.” A tracking pixel is a miniature graphic embedded in emails sent in HTML format to enable log file recording and analysis. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed the links contained in the newsletter. Technical data – such as information about your IT system and your IP address – are also recorded. The personal data collected via the tracking pixel are stored and analyzed so that we can optimize our newsletter offering and better tailor the content of future newsletters to readers’ interests.

You may revoke your consent to receive the newsletter at any time with effect for the future. To do so, simply click the unsubscribe link included in each newsletter. Alternatively, you can notify us of your revocation by sending an email to privacy(at)transsolar.com.

11 Online Presences on Social Media

We maintain online presences within social networks and platforms (e.g., LinkedIn, Facebook, Instagram) to communicate with customers, prospects, business partners, and other users active there and to inform them about our services, offerings, events, and other relevant information. The terms of use and privacy policies of the respective providers apply when you access these networks and platforms.

The legal basis for processing personal data in the context of our social media presences is generally our legitimate interest in effective corporate communication and external representation pursuant to Article 6(1)(f) GDPR. Please note that personal data of users may be processed outside the European Union. This may pose risks for users, for example regarding the enforceability of data subject rights. Where providers based in third countries operate under an EU adequacy decision (e.g., the EU–U.S. Data Privacy Framework) or the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR, data transfers are based on those mechanisms.

Unless otherwise stated in this Privacy Policy, we only process users’ data when they communicate with us within the social networks – for example by posting on our profiles or sending us direct messages.

12 Blog “Green & Inspiring”

Our website contains a link to our blog “Green & Inspiring.” We use Tumblr as our blogging platform, which is operated by Tumblr Inc., 770 Broadway, New York, NY 10003, USA. No data is transmitted to Tumblr upon your initial visit to our website. If you click the link, you will be redirected to Tumblr’s website. Additional data about you may be processed there. After the connection is established, we no longer have any influence over the type and scope of data that the provider collects and processes; information on this can be found in Tumblr’s privacy policy: www.tumblr.com/privacy

13 Facebook

Our website contains a link to our Facebook page. The website www.facebook.com is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. No data is transmitted to Facebook upon your initial visit to our website. If you click the link, you will be redirected to Facebook’s website. Additional data about you may be processed there. After the connection is established, we no longer have any influence over the type and scope of data that the provider collects and processes; information on this can be found in Facebook’s privacy policy: www.facebook.com/privacy/explanation

14 Software

Our website also links to our software website www.trnsys.de, which is operated by us, Transsolar Energietechnik GmbH, Curiestrasse 2, 70563 Stuttgart, Germany. The corresponding privacy notices can be found on the software website.

15 Storage Periods

We store personal data only for the period necessary to fulfill the respective purposes. The duration of storage is determined by the following criteria:

• Withdrawal of consent: Where processing is based on your consent pursuant to Article 6(1)(a) GDPR, storage continues until you withdraw your consent.
• Necessity for contractual or business purposes: Personal data is stored as long as necessary to fulfill a contractual relationship or to carry out pre-contractual measures (Article 6(1)(b) GDPR), or as long as our legitimate interest in storage continues (Article 6(1)(f) GDPR).
• Statutory retention obligations: Storage beyond this period occurs where required by law, in particular under tax or commercial retention obligations (Article 6(1)(c) GDPR).
• Recruiting procedures: Application documents are generally deleted no later than six months after the conclusion of the selection process, unless a longer retention period is required by law or explicit consent has been given for longer retention.
• Third-party services: Data processed by third-party services (e.g., Algolia, Adobe Typekit, YouTube) are subject to the respective providers’ retention periods. Further information can be found in the privacy policies of those services.

After the respective storage purpose ceases to apply and after statutory retention periods expire, personal data will be deleted without undue delay, unless longer storage in a restricted manner is required due to legal obligations or for the establishment, exercise, or defense of legal claims.

You have the right under Article 21(1) GDPR to object at any time to processing where it is based on legitimate interests pursuant to Article 6(1)(f) GDPR. In that case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

16 Data Subject Rights

You have the right at any time to obtain, free of charge, information regarding the purposes, scope, origin, and recipients of the personal data stored about you (Article 15 GDPR). You also have the right to have inaccurate or incomplete data rectified (Article 16 GDPR).

Pursuant to data protection law, you further have the right to the erasure of your personal data, provided the requirements of Article 17 GDPR (“right to be forgotten”) are met, as well as the right to restriction of processing pursuant to Article 18 GDPR.

In addition, you have the right to object to the processing of your personal data at any time (Article 21 GDPR) where such processing is based on Article 6(1)(e) or (f) GDPR. This applies in particular to the processing of your data for direct marketing purposes.

You also have the right to data portability, i.e., to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of this data to another controller, provided the requirements of Article 20 GDPR are met.

If you believe that the processing of your personal data violates data protection law or that your rights have otherwise been infringed, you have the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 GDPR.

You also have the right to withdraw your consent to the processing of your personal data at any time with effect for the future, for example by informal notice via email (privacy(at)transsolar.com) or in writing to the contact details listed above (Article 7(3) GDPR). The lawfulness of processing carried out on the basis of your consent up to the time of withdrawal remains unaffected.

Last updated: May 28, 2025

Privacy Policy Transsolar (pdf)