Data Privacy Statement
Welcome to our website. On this page you will find information on how we process your personal data when you visit our website.
We attach great importance to compliance with all applicable data protection rules and regulations, particularly the General Data Protection Regulation (Regulation (EU) 2016/679; also referred to as "GDPR"), which will come into full force and effect on 25 May 2018.
Name and address of controller
This website is operated by Open Grid Europe GmbH, Essen (hereinafter also referred to as "OGE" or "we"). OGE is solely responsible for all data processing operations associated with your visit, unless otherwise stated below.
Our contact address is:
45141 Essen (Germany)
For further information about our company, please refer to our Legal Notice.
Visiting and interacting on the website
Data processed: Whenever you visit our website, we will collect certain (mainly technical) information, which may, however, be classified by the courts as personal data. This information includes the IP address, device identification, browser features, operating system details, language settings, referring URLs, the duration of your visit and the pages displayed. If you use our contact forms or functions for contributions and comments, we will collect the data submitted by you and the time of data transmission. If you use the hydrogen demand and hydrogen supplier report, we process the contact information you provide as part of the report (hydrogen demand: company affiliation, surname, first name, position in the company, e-mail address and telephone number, hydrogen supplier: company affiliation, logo, surname, first name, function in the company, address, e-mail address and telephone number). If you use the CO2 market enquiry, we process the contact information you provide in the course of registration (company affiliation, surname, first name, (optional) position in the company, e-mail address and telephone number).
Processing purposes: We will use the data submitted by you via the contact form and other forms to process your request and to initiate resulting improvements. Any information provided by you in connection with postings and comments features will be used to publish and process any questions you may have about the content.
We use the data you provide when reporting your hydrogen demand or hydrogen offer on the one hand to be able to contact you in case of queries within the framework of the validation process for the demand reported or the submitted offer. On the other hand, we would also use it at a later point in time to be able to contact you in case of questions or supplements of relevant information on the demand reported or reported offer by you. The contact for the hydrogen demand or offer report can also be made via a service provider commissioned by us.
We use the contact details you provide when registering for the CO2 market survey on the one hand to be able to contact you in case of queries during the validation process. On the other hand, we would also use them at a later date to contact you in case of questions. We would also use it at a later date to contact you if we have any questions or if we need to add relevant information to your reported transport needs. Contact for the purposes described can also be made via a service provider commissioned by us.
When you register on the hydrogen supplier web page, the following information will always be published on the OGE website: company name, e-mail address, link to the German company website. The following information will only be published if it is submitted voluntarily: company logo, link to the English company website and the description of hydrogen activities and company description.
When using other information, we do not as a rule draw any conclusions about the data subject. This information is used to correctly deliver the contents of our website, to guard against cyber-attacks, for scientific research and statistical purposes, and to provide law enforcement authorities with the information required for prosecution in the event of a cyber-attack.
Legal basis of data processing: In part, the consent of data subjects; performance of a contract or steps taken prior to entering into a contract; compliance with a legal obligation of OGE; processing for the purposes of the legitimate interests pursued by OGE and third parties (cf. Article 6 para. 1 lit. (a) to (f) of the GDPR).
Any further statistical analysis of collected data will only take place after any reference to persons has been removed.
Pursued legitimate interests within the meaning of Article 6 para. 1 lit. (f) of the GDPR: Interest in operating a website; protecting our computer systems against attacks and optimising our website; tracking attacks on our computer systems.
Categories of recipients of personal data: The personal data mentioned in this section will only be disclosed to service providers for the operation of our website. Data submitted via the contact form and other forms will be forwarded to the persons needed / responsible for answering such enquiries. If we decide in future to use a service provider for the validation process of the hydrogen demand, hydrogen offer or the CO2 market survey, the information required for this will also be made available to this service provider. Agreements on commissioned processing pursuant to Art. 28 DSGVO have been or will be concluded with the service providers in advance for the processing of your personal data. As a matter of principle, your personal data will only be passed on with your express consent. Exceptions to this are cases in which OGE is obliged to disclose your data due to legal provisions or by enforceable official or judicial order (Art. 6 para. 1 lit. c DSGVO).
No data transfer to recipients in unsafe third countries: OGE does not intend to transfer the personal data mentioned in this section to recipients in unsafe third countries (e.g. on the basis of standard contractual clauses).
Storage period: The aforementioned personal data will generally be stored for a period of seven days, after which the data will be rendered anonymous or be deleted. This does not include data that (i) is still needed to investigate or track a cyber-attack or (ii) must be stored further in accordance with a legal or statutory retention obligation. We plan to keep the data you submit via the contact form and other forms for a period of two years, after which the data will be deleted. We plan to retain personal data provided by you via the hydrogen demand and hydrogen supplier report or CO2 market enquiry for a period of three years and to delete it thereafter.
Obligation to provide personal data: The provision of the aforementioned personal data by you is neither required by law nor by any contractual agreements. Processing restrictions can restrict the use of some of our website functions.
No automated decision making (profiling): The above personal data will not be used to automatically make decisions that have a legal effect on you or significantly affect you in a similar way.
We use Google services on our website. The operator is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").
When Google services are used, the data collected may be transmitted, stored and used by Google and other group companies in the USA – including but not limited to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter also referred to as "Google"). This entails the risk, for example, that your data may be subject to extensive access by security authorities.
Third country transfer: Where data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have agreed EU standard contractual clauses [https://business.safety.google/adsprocessorterms/sccs/eu-c2p/] with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective, and you do not have the same rights there as within the EU/EEA. You may not have any legal remedies against access by authorities.
Currently our collaboration with Google in relation to the components “Google Analytics 4” and “Google Tag Manager”, which are described in more detail below, is based on the contract for commissioned processing provided by Google pursuant to Article 28 of the GDPR (available at: https://privacy.google.com/businesses/processorterms/). Within the scope of this agreement, Google is entitled to engage subcontractors. A list of these subcontractors is available at https://privacy.google.com/businesses/subprocessors/.
For Google Analytics 4, the pseudonymisation of IP addresses is activated by default. Due to IP pseudonymisation, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behaviour is recorded in the form of "events". Events can be: Page views, first visit and repeat visits to the website, start of session, your "click path" - interaction with the website, scrolls to the end of the page, clicks on external links, internal search queries, interaction with videos, file downloads, language settings.
The following is also recorded: Your approximate location, your IP address in shortened form, technical information about your browser and the terminal devices you use, your internet service provider, the referrer URL.
Processing purposes: On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns (conversion measurement).
The purpose of the Google Analytics components is our legitimate interest in analysing the flows of visitors to our website and measuring its reach (purpose pursuant to Article 6.1 (f) of the GDPR). The use of Google Analytics also takes place on the basis of your express consent (Article 6.1 (a) of the GDPR). The granting of consent is voluntary. You can revoke your consent at any time in the cookie settings. The lawfulness of any processing carried out on the basis of consent before such revocation remains unaffected.
Google Analytics places statistics cookies on your computer. Please refer to the section on “Cookies” below for more information about cookies. The cookies allow the use of our website to be analysed. Each time you visit one of the pages of this website, the Internet browser on your computer is automatically prompted by the relevant Google Analytics component to transmit data to Google for the purpose of online analysis.
Revocation: You can revoke your consent at any time with effect for the future by accessing the cookie settings via the link button at the beginning of this page and changing your selection there. Such revocation shall be without prejudice to the lawfulness of the data processing carried out on the basis of the consent up until the revocation thereof.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionalities on this and other websites may be restricted. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by
a. not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics here.
Preventing the use of Google Analytics 4 as described above will have no influence on the usability of our website.
Storage period: The data sent by us and linked to cookies are automatically deleted after 2 months. Data whose retention period has been reached is automatically deleted once a month.
Google Tag Manager
We also use the Google service “Google Tag Manager”.
Google Tag Manager allows us to manage the analytics tools (such as Google Analytics 4) via one standardised application. The Tag Manager manages the so-called tags assigned to the respective analytics tool. Tags are code elements that are built into the source text of our website for the use of tracking and analysis tools such as Google Analytics 4. With the help of the Google Tag Manager, we are able to manage the tags required for use of the tracking and analytics tools in a uniform manner and thus to save computing and programming power.
If and to the extent that personal data is processed via the Google Tag Manager, this processing is based on our legitimate interest in the efficient management of tags/analytics tools used by us (Article 6.1 (f) of the GDPR).
LinkedIn Insight Tag
Registered LinkedIn users can manage the use of their personal data in their account settings. There is an option to deactivate the Insight Tag via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
No personal data from the cookies is transmitted to any recipients unless otherwise stated in this data privacy statement.
We plan to store the aforementioned data for a period of 10 years and to delete it afterwards.
There are no intentions to transfer data to third countries outside the European Economic Area (with the exception of Google Analytics' cookies – as outlined above).
We use the following cookies for the purposes specified in each case with the expiration dates specified in each case:
|Cookie designation||Purpose||Expiry date|
|Neos_Session||Web server session cookie||Session|
|ARRAffinity||Cookie on the Windows Azure cloud platform for load balancing||Session|
|_ga||GoogleAnalytics cookie to generate statistical data on how the visitor uses the website||2 years|
|_gid||GoogleAnalytics Cookie distinguishes anonymous users||1 day|
|Unique identifier for the Adobe Experience Cloud||180 days|
|li_oatml||Cookie identifies LinkedIn members outside of LinkedIn for promotional and analytical purposes outside of the designated countries and, for a limited time, for promotional purposes as well in the designated countries||30 days|
|lang||Cookies remembers language setting of a user||Session|
|_gcl_au||Cookies is used by Google Analytics to understand how users iteract with website and ads||3 months|
|lidc||Cookies optimises the data center selection||1 day|
|mbox||Cookie is used by Adobe Target to analyse relevance of online content||180 days|
|lissc||Cookie ensures that all cookies in this browser are using the same SameSite attribute||1 year|
|ELOQUA||Cookies is used by ELOQUA for tracking purposes||2 years|
|spectroscopyId||Cookies is used to detect malicious activities via browser extensions||7 days|
|VID||ID is assigned to visitors of a LinkedIn microsite to determine conversions for lead generation pusposes||1 year|
|liap||Cookie is used by domains without the addition "www" to show the login status of a member||1 year|
|Cookie indicates for Adobe Experience Cloud when a session has started||Session|
|SID||Cookie to determine a visitor's actions before conversion on a LinkedIn microsite||Session|
|UserMatchHistory||Cookie to synchronise the IDs of LinkedIn Ads||30 days|
|_guid||Cookie to identify a LinkedIn member for advertising via Google Ads||90 days|
|sdsc||Signed context cookie for the data service, which is used for database routing and should ensure cross-database consistency in case of changes||Session|
|bcookie||Cookie is a browser identifier that is used to uniquely identify devices accessing LinkedIn in order to detect misuse of the platform||2 years|
|_ga M8915HMTS9||Used to maintain session status.||2 years|
|_gac_gb_ M8915HMTS9||Contains campaign-related information. If Google Analytics and Google Ads accounts are linked, this cookie will be read by Google Ads website conversion tags unless you disable it.||90 days|
A "Session" ends when you close your browser.
On our website, there is an option to sign up to a newsletter. We use our newsletter to provide you with regular information about press releases on our website and/or to send you our Policy Letter/ Policy Impulse (with current topics and background reports on energy policy and the energy industry). For this purpose, we store and use your e-mail address. In addition, when you register for the newsletter, the IP address of the computer system being used at the time of registration as well as the date and the time of registration are recorded.
After registration for the newsletter, you will receive an e-mail in which you need to re-confirm your registration to the newsletter via a link (“confirm registration” – so-called “double opt-in procedure”). This confirmation e-mail serves to check whether the owner of the e-mail address did actually authorise receipt of the newsletter.
The aforementioned data collection is necessary, on the one hand, in order to be able to track potential misuse of the e-mail address and thus takes place on the basis of the statutory provisions of Article 6.1 (f) of the GDPR. On the other hand, the processing of your data and delivery of the newsletter to the e-mail address you supplied takes place on the basis of your express and voluntary consent (Article 6.1 (a) of the GDPR). It is possible to unsubscribe from the newsletter at any time by clicking on the unsubscribe link in the relevant newsletter e-mail and thus to revoke consent. Alternatively, you can unsubscribe via the following link: www.oge.net/en/newsletter/unsubscribe.
The lawfulness of any processing carried out on the basis of consent before such revocation remains unaffected. If you unsubscribe from the newsletter or do not complete your registration, we will delete your data.
To send the newsletter, we make use of assistance from service providers acting on our behalf and under our instructions.
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server, or from that of a mailing service provider where we are using one, when the newsletter is opened. As part of this retrieval, technical information, such as information on the browser and your system as well as your IP address and the place and time of the retrieval, is initially recorded.
We use this information to improve our newsletter. For this purpose we evaluate not only the abovementioned technical data but also click rates and users’ reading behaviour. This analysis also includes determining whether or not the newsletter was actually opened and which links in the newsletter were clicked on. This information is assigned to the individual newsletter recipient and stored in profiles until its deletion. We use the analyses to identify the reading habits of our users and to adapt our content to them, or to send different content according to the interests of our users.
The data processing operations relating to the newsletter tracking described take place on the basis of express and voluntary consent from the user (Article 6.1 (a) of the GDPR), which can be revoked at any time with a click on the unsubscribe link in the respective newsletter e-mail.
Alternatively, you can unsubscribe via the following link: www.oge.net/en/newsletter/unsubscribe. In this case, the stored profile information will be deleted. The lawfulness of any processing carried out on the basis of consent before such revocation remains unaffected. Separate revocation of the newsletter tracking is not possible.
Use of social media links
We currently offer social media links from Facebook, Twitter, Xing, LinkedIn, kununu and YouTube.
By clicking on such links to third-party providers, your IP address and the page from which you clicked on the link are transmitted to the selected provider and stored there (e.g. US providers in the USA). If you do not then use any further offers from the linked third-party providers (e.g. by neither recommending nor linking to the page), nothing else will be transmitted from our website to the third-party provider. How you act on the following page with the respective third-party provider is entirely up to you.
We have no control over the data collected by third parties or data processing processes, nor are we aware of the full scope of the data collection, the processing purposes and the storage periods. Further information on the purpose and scope of data collection and its processing by the respective third-party provider can be found in the data protection declarations provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.
Addresses of the respective providers and URL with their data protection information:
- Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Facebook Inc. 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php
- Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy
- Xing AG (including kununu), Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy
- YouTube, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://policies.google.com/privacy?hl=en
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Your rights, which OGE will be happy fulfil at your request, include the right to:
- obtain information about your personal data;
- have incorrect personal data about you corrected;
- have your personal data deleted or restrict the processing of your personal data;
- have the personal data concerning you transferred in a structured, common and machine-readable format to you or – as far as technically feasible – to a third party; or
- object to the processing of your personal data if such processing is based on legitimate interests (Article 6.1 (c) and (f) of the GDPR).
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority.
Withdrawal of consents: You have the right to withdraw a consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
No responsibility for links to other websites
We have no control over the Internet pages of other providers which are offered under other domain names. Insofar as our website refers to such third-party offers, we cannot accept any responsibility for the third party's handling of your personal data. Please contact the respective third party for further information.
Open Grid Europe GmbH
Data Protection Officer
Last revised: 29 June 2023