Data protection.

1. Controller and data protection contact

TP ENERGY GmbH, Lichtenstein 11, 37581 Bad Gandersheim, Germany. Represented by Managing Director Florian Schneider. Telephone: +49 5382 5898100. E-mail: info@tp-energy.de.

For data protection requests, the exercise of your rights and the revocation of consent, please contact us using these contact details. Please state the process concerned so that we can assign your request. We only require additional proof of identity if there are reasonable doubts about your identity.

2. Scope and legal bases

These notes concern our WordPress website, contacting TP ENERGY as well as the associated offer, placement and contract processes. At companies, we protect the personal data of their contact persons as well as the data of private customers. Information relating to a company without reference to a natural person is not covered by the GDPR.

We process data for the initiation of a contract on your request and for the fulfilment of a contract with you in accordance with Article 6 (1) (b) GDPR. The communication with employees, agents and other contact persons of our business partners as well as general inquiries is based on Article 6 (1) (f) GDPR; our interest is the appropriate business communication and processing of the respective request. We fulfil legal obligations in accordance with Article 6(1)(c) GDPR. Insofar as separate consent is required, Article 6(1)(a) GDPR shall apply. Consent can be revoked at any time with effect for the future.

3. Hosting, connection and server protocols

Our web hosting takes place at ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider provides the technical infrastructure for the website and database and processes the data required for operation as a hosting service provider on our behalf. The hosting servers we use are located in Germany. Information provided by the provider: Data protection information from ALL-INKL.COM.

When accessing pages, search results, images or data sheets, particularly IP address, date, requested address or file, HTTP status, amount of data transferred, browser and operating system information as well as the previously visited page are transmitted technically. This information is used for delivery, troubleshooting, availability and prevention of abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and functional website.

Data is retained for the duration of the technical service and, where logged, in accordance with the necessary operational deletion cycles. The specific logging depends on the hosting settings. Data relating to a particular security incident may be retained separately for as long as needed to investigate it and safeguard legal claims. Data is not retained indefinitely for these purposes.

Our website is transmitted via HTTPS. For ordinary e-mails there is no continuous end-to-end encryption. Please send particularly vulnerable documents only after coordination of an appropriate transmission route.

4. Contact, product inquiries and file attachments

If you contact us via the form, by e-mail, by phone or by post, we process your contact details, the content of the communication and the information necessary for your request. This also applies to the department addresses vertrieb@tp-energy.de and service@tp-energy.de. The form requires name or company, e-mail address, subject and message. Telephone number, quantity, additional technical information and annexes are optional. Without the required information, we cannot assign or answer a form request.

For product inquiries, manufacturers, series, model and the variant you choose can be included in the inquiry. In the case of special construction and reproduction, additional quantities, dimensions, old module designation, drawings, photos and technical documents can be processed. Please provide only required data and no third-party personal information without permission.

The purpose is to check and answer your request, the technical coordination and, if necessary, the preparation and processing of an offer. The legal bases set out in Section 2 shall apply, depending on the operation. The processing of your request does not require consent in advertising or mediation.

Form attachments are processed during processing in the temporary server directory and when the message is actually sent to the responsible receiving point. They are not published by the contact form in the public WordPress media library. In case of a form error, attachments must be selected again. Received e-mails and their attachments shall be subject to purpose-related retention in accordance with Section 10.

Form enquiries are sent by email to the department at TP ENERGY responsible for the relevant matter. For a business enquiry, please use the direct email address or telephone number provided there.

5. Form security and short-term restoration

To protect against automated inquiries, we use an invisible form trap, a temporary form release and a server-side limitation of requests. For the set limit, a hash value is generated from the connection IP address with a server-side secret and held together with a counter for ten minutes. The IP address is not stored as plain text in this counter. The legal basis is Article 6(1)(f) GDPR; our interest lies in preventing spam and abusive access.

If an input, upload or sending error occurs, sanitised text entries are kept for recovery for no more than ten minutes. To do this, your browser stores the cookie tp_contact_draft with a random, opaque token. The information itself is held in a server-side WordPress cache that is not publicly accessible. The cookie contains no name, email address or message and is protected by HttpOnly, SameSite=Lax and, for HTTPS, Secure. Attachments are not stored in this draft.

After successful processing, the draft and cookie are actively deleted. After ten minutes, a draft is no longer made available for recovery; expired database entries are removed during WordPress clean-up. Recovery serves only to complete the form submission you started. Depending on the enquiry, the legal basis for processing the data is Article 6(1)(b) or (f) GDPR; for the necessary cookie, section 25(2) no. 2 TDDDG.

6. Mediation and transfer to distribution partners

We work with independent sales partners and specialist companies. A transfer can in particular serve the advice on site, a technical appraisal or the preparation of an offer by a suitable partner. Only the contact and project data required for this purpose are transmitted; documents are limited to necessary content.

For an optional referral, we tell you which partner would receive your data, the purpose and the data concerned before transmission, and obtain your separate consent under Article 6(1)(a) GDPR. Selecting ‘Request a referral’ in the contact form initially only expresses your wish to be contacted by TP ENERGY about a referral; it does not yet authorise any data transfer. We also process your enquiry if you do not select this option.

If you expressly commission a concrete mediation service and if a specific transmission is objectively necessary for this purpose, Article 6 (1) (b) GDPR may be decisive. A mere expediency or general interest in distribution is not sufficient. For each transmission, the appropriate purpose and legal basis shall be determined.

Independent partners generally act as separate controllers for the data they receive and inform you about their processing. Any contract with a partner is concluded separately. Withdrawing your consent from TP ENERGY prevents future transfers based on that consent; it does not affect the lawfulness of processing already carried out. You can also exercise your rights directly against the partner.

7. Further recipients and data sources

Within TP ENERGY only the persons involved in the respective process receive access. To the extent necessary for contract, shipping, payment, technical clarification or legal defense, data can be transmitted to transport and logistics companies, banks, manufacturers or service companies, tax consultants, legal advisors and legally authorised authorities. If possible, a technical inquiry to a manufacturer shall be made without personal information. If personal data are required, we limit the transmission to the necessary extent and the respective legal basis.

Hosting, email and technical maintenance providers receive data only within the scope of their respective tasks. Where they process data on our instructions, the processor requirements of Article 28 GDPR apply. Data is not shared for independent third-party advertising without an appropriate legal basis.

We obtain data mainly directly from you. For business contacts, names, roles and business contact details may also come from your company, a person you have authorised, or publicly available business contact information. For a referral you have requested, we may receive the necessary data from the named partner. We use this information only for the relevant business matter; information duties under Article 14 GDPR remain unaffected.

8. Cookies, local resources and external offers

tawk.to provides the visitor display described in the following section. We currently use no other analytics or advertising trackers, social media plugins, external CAPTCHA services or automatically loaded YouTube videos on the public WordPress website. Fonts, product images and documents are served locally. This website currently provides neither newsletter registration nor newsletter tracking.

Technically necessary cookies can be set for the form recovery described in Section 5 and for the registration of authorized editors and administrators. WordPress login cookies serve the session, registration and security of the protected administration area; they are not required for the public product range. The legal basis is § 25 paragraph 2 point 2 TDDDG, supplemented by Article 6 paragraph 1 point f GDPR or the relevant legal basis for legitimate administrative access.

You can delete or block cookies in your browser. This may affect the recovery of form entries, login and chat. The chat with tawk.to will be loaded automatically on the page view; details and the ability to disable are in the following section. The additional WordPress emoji detection and its browser storage are disabled in the public appearance.

Links to the online shop, manufacturers and other foreign internet offers lead to independent offers. Only when you access such a link will your browser connect to the target. The respective data protection information applies there. This WordPress site does not send any completed contact forms to the online shop via the mere link.

8a. Chat and visitor display with tawk.to

We use tawk.to from tawk.to Inc., 187 East Warm Springs Rd, SB298, Las Vegas, Nevada 89119, USA, including related tawk.to Ltd. Information provided by the provider: Data protection notice and Order processing conditions.

The service is automatically loaded on the page view so that the chat is ready and visits are displayed in our tawk.to dashboard. In particular, IP address, browser and device information, visited pages and times are transmitted, even if you do not send a chat message. When you enter messages, contact details or files in the chat, they are also processed. The service uses cookies as well as local and session-related browser stores for connection, recognition and page history. According to the provider, the recognition cookie tawk_uuid per property can last up to six months; other connection values are session-related. Details: Cookies and browser storage at tawk.to.

The input of messages is voluntary. A specific contract or product request you have started will be processed in accordance with the principles set out in Section 2. Contact form, e-mail and telephone remain accessible without using the chat. Filled out website forms are not automatically included in the chat. This technical integration does not include an upstream request for consent.

Under ‘Chat settings’ in this section, you can disable chat for this browser. This ends the chat connection, removes accessible tawk.to entries belonging to this website and reloads the page. Deactivation is recorded as tp_chat_disabled in local browser storage and remains in effect until you enable chat again or delete the entry. This entry serves only to implement your selection (section 25(2) no. 2 TDDDG). Storage on other domains is subject to your browser’s deletion options. Disabling chat takes effect for the future and does not delete messages already sent.

tawk.to states that chat histories are kept until the account holder deletes them. Our further handling and deletion follow the purposes and periods in section 10. You can send deletion requests to

9. Third country transfers

The technical provision of this WordPress site takes place via the aforementioned hosting in Germany. The automatically loaded tawk.to chat also processes data in the USA. tawk.to mentions its participation in the EU-US Data Privacy Framework or appropriate contractual guarantees for international transfers. Information on the transmission basis, order processing conditions and subcontractors employed shall be published by the supplier at: tawk.to – Data protection information. The requirements laid down in Article 44 et seq. GDPR applies regardless of the technical integration. We inform separately about other required third country transfers in individual cases; a mere linking to a foreign offer does not replace any legal basis.

10. Storage, erasure and legal claims

We retain personal data only for as long as needed for the relevant purpose. Enquiries that do not lead to a contract are deleted after final processing once no legitimate need for evidence or statutory obligation prevents deletion. The mere technical possibility of retaining an enquiry does not justify keeping it for longer.

In the case of contract and business documents, the statutory tax and commercial retention periods apply depending on the type of document, in particular according to § 147 AO and § 257 HGB. The start of the deadline and possible extensions depend on the respective statutory provisions. During a required storage, the use is limited to the permitted purposes.

Insofar as specific claims are asserted or are sufficiently foreseeable, necessary data can be stored up to the clarification and within the relevant limitation periods for the assertion, exercise or defence of legal claims. The legal basis is Article 6(1)(f) GDPR; in case of legal storage obligations Article 6(1)(c) GDPR. This does not justify any general storage of all data for an indefinite period of time.

Backup copies are used to restore after technical malfunctions. Deleted data may be included in it until the next regular overwriting or deletion cycle. They will not be restored for any other purpose; any deletions to be considered in case of a necessary restoration will be taken into account again.

11. Your rights and appeals

If the legal requirements are met, you have the right to be informed in accordance with Article 15 GDPR, correction in accordance with Article 16, deletion in accordance with Article 17, restriction in accordance with Article 18 and data portability in accordance with Article 20 GDPR. The legal requirements and exceptions, in particular statutory retention obligations, remain decisive. You can revoke your consent at any time for the future.

Please send your request to info@tp-energy.de or the postal address referred to above. A particular form or use of a form is not required. In principle, we respond to requests within one month; legally permissible extensions are communicated with justification.

You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, particularly in the country of your habitual residence, workplace or the alleged infringement. The authority responsible for our registered office is the Lower Saxony Commissioner for Data Protection (Der Landesbeauftragte für den Datenschutz Niedersachsen), Postfach 221, 30002 Hannover; visitor address Prinzenstraße 5, 30159 Hannover; telephone +49 511 120-4500; email poststelle@lfd.niedersachsen.de. Further information and complaint form: State Commissioner for Data Protection Lower Saxony.

12. Objection to processing based on legitimate interests and to direct marketing

If we process your data on the basis of Article 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation. We will not process the data further, unless we prove compelling reasons worthy of protection that outweigh your interests, rights and freedoms, or the processing serves legal claims.

You can object to the processing of your data for direct advertising at any time without giving reasons. The data concerned will then no longer be processed for this advertising. Objection or revocation is possible via the above mentioned contact channels.

13. Applications and employment

If you apply to TP ENERGY, we will process your contact details, application documents and the information provided in the procedure exclusively for deciding whether to establish an employment relationship. The legal basis is § 26 (1) BDSG in conjunction with Article 6 (1) (b) GDPR. We only process special categories of personal data under the additional legal requirements applicable for this purpose. Please do not send any sensitive documents not required for the application.

Only the persons involved in the selection and the necessary technical service providers receive access. A transfer of application documents to distribution partners for their own personnel selection does not take place on the basis of a general contact request. A candidate pool requires separate voluntary consent; this website does not set up such a pool.

After an unsuccessful application procedure, documents are generally deleted within six months unless a specific legal dispute or another lawful retention reason prevents deletion. Temporary retention serves to defend possible claims; the legal basis is Article 6(1)(f) GDPR. If an applicant is hired, only data needed for the employment relationship is transferred to personnel administration.

14. Automated decisions and updates

Within the scope of this website, we do not take exclusively automated decisions with legal or comparable significant effect in accordance with Article 22 GDPR and do not perform profiling for this purpose. Technical spam and security checks do not replace a decision on a contract.

This information will be adjusted if the actual processing or legal requirements change. No new purposes or recipients will be released retroactively for consents already granted.