Status: June 2023
Thank you for your interest in our website and our other digital channels. With the data protection declaration shown here, we would like to inform you, among other things, about the type, scope and purpose of the personal data we collect, use and process.
Our website data protection information is structured as follows:
A. General provisions on data processing
B. Provisions on data processing on our website
C. Further documents on data protection
The protection of your personal data is a great and very important concern for us. In the following, we would therefore like to inform you in detail about which data is collected when you visit our website, use our offers there and how it is processed or used by us in the following. Furthermore, we would also like to inform you about the accompanying technical and organisational protective measures we have taken.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject shall always be in line with the applicable data protection provisions. By means of this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us and, insofar as you are affected by the data processing, to clarify this.
Although we, as the party responsible for processing personal data, have implemented numerous technical and organisational measures, Internet-based data transmission can in principle have security gaps. Therefore, absolute protection cannot be guaranteed. We ask you to take this into account when using our internet service.
In this data protection declaration, terms are used which were specified by the legislator in the Data Protection Regulation (hereinafter also referred to as GDPR). You can access the GDPR under the following link:
EUR-Lex – 32016R0679 – DE – EUR-Lex (europa.eu)
The aim of our privacy policy is to inform you in a simple and understandable way about the processing of your personal data on our website.
The responsible person for the processing of personal data is:
bmp greengas GmbH
Ganghoferstraße 68a
80339 Munich, Germany
Phone: +49 89 309 05 87 0
Fax: +49 89 309 05 87 888
E-mail: info@bmp-greengas.de
You can contact our data protection officer at:
Andreas Fritz
bmp greengas GmbH
Ganghoferstraße 68a
80339 Munich, Germany
E-mail: datenschutz@bmp-greengas.de
The personal data processed by us will be stored by us for as long as this is necessary for the respective purpose – in particular the processing of your request or your order – in compliance with the statutory retention periods (e.g. ten years for tax-relevant documents or tax regulations in accordance with the German Commercial Code and Fiscal Code, six years for other business letters) (Art. 6 Para. 1 S. 1 lit. c GDPR). Storage beyond the statutory retention periods is possible if you have consented to this in accordance with Article 6 Paragraph 1 S. 1 lit. a GDPR or the purpose of the data processing has not yet ceased.
You have the following rights in relation to the processing of your personal data:
If we process your data on the basis of consent given by you, you have the right to revoke your consent at any time. Your data will then no longer be processed for the purposes covered by the consent. Please note that the lawfulness of the data processing that took place before the revocation is not affected by the revocation. Please refer to the preceding information or the information in the respective consent for details of how you can declare your revocation. You are welcome to address your revocation to our data protection officer or other employees.
You can object to the use of personal data for direct marketing purposes at any time; You can also object to the use of personal data on the basis of Art. 6 Paragraph 1 lit. e or f GDPR for reasons arising from your particular situation at any time with effect for the future without incurring any costs other than the transmission costs the basic tariffs arise.
We do not process your personal data automatically in such a way that it has legal effect on you or in a similarly significant way.
You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach, Germany
Unless otherwise stated in the description of the respective data processing operation of this data protection declaration, the following regulations apply.
Art. 6 (1) lit. a GDPR serves as the legal basis for processing operations for which consent must be obtained for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Art. 6 (1) (b) GDPR. The same applies to processing operations that are necessary for the performance of pre-contractual measures, for example in cases of enquiries about our services and products.
If we are subject to a legal obligation which requires us to process personal data, the processing is based on Art. 6 (1) (c) GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. In this case, the processing is based on Art. 6(1)(d) GDPR.
Finally, processing operations could be based on Art. 6(1)(f) GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the protection of a legitimate interest of bmp greengas or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator (cf. recital 47 sentence 2 GDPR).
Unless otherwise regulated in the description of the respective data processing operation of this data protection declaration and the processing of personal data is based on Art. 6 (1) lit. f GDPR (legitimate interest), our legitimate interest is the performance of our business activities and the associated economic interest.
We treat your data confidentially. Within bmp greengas, only those departments and employees will have access to your data that need it to perform their tasks. Data will only be transferred to third parties if this is necessary for specific purposes, if we are legally permitted to do so, or if you have given your prior consent.
We use the help of other service providers (order processors) to fulfil our obligations. The following categories of recipients may receive data:
bmp greengas is a 100% subsidiary of VNG Handel & Vertrieb GmbH and part of the EnBW Group. bmp greengas cooperates with other Group companies on the basis of a division of tasks. Personal data is also only transferred to other group companies if there is a legal basis for doing so and if this is necessary for one of the above-mentioned purposes.
Data transfers to countries in which there is no adequate level of data protection (“third countries”, i.e. countries outside the European Union/European Economic Area) occur in the context of the administration, development and operation of IT systems and only insofar as the transfer is generally permissible and the special conditions for a transfer to a third country exist, in particular the so-called data importer guarantees an adequate level of data protection in accordance with the EU standard contractual clauses for the transfer of personal data to data processors in third countries.
We collect personal data when you provide it to us. This can be e.g. data that you enter in a contact form or transmit to us in the course of contacting us. Insofar as certain input fields are marked as “mandatory information”, we use these fields to collect the data required to carry out the desired measure. Of course, you can provide us with further data if you wish.
The processing of this data takes place on the basis of Art. 6 Para. 1 S. 1 lit. b GDPR, if this is necessary to carry out a measure requested by you. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 Para. 1 S. 1 lit. f GDPR).
We can use your data for advertising purposes. We have a legitimate interest in using your data for direct marketing purposes within the meaning of Art. 6 Para. 1 S. 1 lit.f GDPR.
If you have consented to this (Art. 6 Para. 1 S. 1 lit. a GDPR), we will also use your data to send you an e-mail newsletter. The newsletter is technically designed so that we can understand whether you have opened it. The information obtained is used to make the newsletter even more attractive for you in the future.
You can revoke your consent to the sending of the newsletter at any time via the “unsubscribe” link in every e-mail newsletter or by sending a message to the contact details given above. In addition, you can object to the processing of your personal data for advertising purposes with immediate effect for the future in writing, by fax, by e-mail or by telephone without incurring any costs other than the transmission costs according to the basic tariffs. This does not affect the legality of the data processing operations that have already taken place.
The newsletter is sent by a service provider who is bound by instructions and is obliged to comply with data protection regulations and is not allowed to use the data for any other purpose.
We collect and process the personal data of applicants for the purpose of carrying out the application procedure and thus on the basis of a pre-contractual measure within the meaning of Art. 6 (1) lit. b GDPR or our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in hiring employees.
The processing may also take place electronically, e.g. if an applicant submits relevant application documents to us electronically, for example by e-mail or via our contact form. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
bmp greengas reserves the right to change this privacy policy at any time with effect for the future. A current version is available on the website. Please visit our website regularly and inform yourself about the applicable data protection provisions.
Some of the processing operations explained above use cookies. Most browsers accept cookies automatically. If you do not wish this, you can deactivate the storage of cookies on your hard drive in your browser settings. You can also delete cookies that have been saved in your browser settings at any time. However, in this case you may not be able to use all functions of our website to their full extent.
Some of the processing operations explained above only take place with your consent. You can revoke your consent to these processing operations at any time with immediate effect for the future. In this case, you may no longer be able to use our services as usual until you have again consented to the respective data processing. You can exercise your right of withdrawal via our CMT Borlabs cookie. In this way, you can also consent to individual data processing operations again. Click here to change your settings or withdraw your consent.
Click here to change your settings withdraw your consent.
We process personal data in order to be able to provide our website with as little technical or functional restrictions as possible and in accordance with legal requirements.
When you visit our website, we save certain access data, e.g. browser type and version, operating system used, the previously visited website, access date and time of the server request and the file request of the client (file name and URL). We use this data anonymously for statistical evaluations without assignment to the respective user.
The purpose of this data processing is the availability and correct presentation of the website on your device as well as the optimization of our website. In this respect, there is a legitimate interest on our part. Processing is based on Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR and Article 15 of the German Telemedia Act.
Our website uses the Consent Management Tool (“CMT”) Borlabs Cookie to obtain and document your consent to data processing by various services. When you open our website, you can use the CMT to submit declarations of consent for individual data processing that is stored by the CMT. For this purpose, the CMT places cookies, i.e. small text files, on your computer. These are the following cookies:
When the website is opened again, the cookies can be used to determine which data processing and which services you have consented to or not consented to. This means that you do not have to change your cookie settings every time you visit. Of course, you can also change your selection later in the Cookie settings. We use the CMT so that you can consent to various data processing operations and revoke your consent. We are legally obliged to obtain and document your consent. The legal basis for data processing by the CMT is Article 6 Paragraph 1 S. 1 lit. c GDPR. Further information on CMT and data protection at Borlabs Cookie can be found at: https://de.borlabs.io/kb/mustertext-fuer-deine-datenschutzerklaerung/.
If you have given your consent, this website uses services provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).
In order to be able to provide the services, Google processes personal data. The legal basis for data processing by Google services is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR.
It cannot be ruled out that information collected by Google services may also be transmitted to a Google server in a third country, in particular to a server belonging to Google’s parent company, Google LLC, based in 1600 Amphitheater Parkway, Mountain View, California, USA stored there. We have agreed standard data protection clauses with Google to secure the transfer to third countries. Google ensures compliance with data protection agreements. At the same time, the transmission of personal data to the USA is associated with particular risks for data subjects. The integration of and data processing by Google services therefore only takes place with your express consent. You can find more information on third country transfers in section 6.
If you are logged into your Google account, Google can add processed information to your account depending on your account settings and treat it as personal data, see in particular https://www.google.de/policies/privacy/partners/. We have no knowledge of the data collected in this way and how it is used.
Further information on data processing by Google can be found at:
This website uses Google Ads to draw attention to our offers in Google search results and on third-party websites.
We have a legitimate interest in drawing attention to our offers. The relevant legal basis for the use of this service and the associated data processing is therefore Art. 6 Para. 1 S. 1 lit.f GDPR.
We only want to place attractive advertisements for you. For this purpose, Google matches the keywords you are looking for with the tags we have specified on our website and analyzes your surfing behavior on our website. For this so-called “remarketing measure”, Google places cookies on your terminal device.
If you click on an advertisement placed for us by Google in the Google search results or on the website of a third party, cookies for so-called conversion tracking (visit action analysis) are stored on your device. These cookies are only valid for a limited period of time. If you then visit certain pages on our website and the cookies have not yet expired, Google can recognize that you clicked on our ad and were redirected to our website. In this way, Google can provide us with a statistical evaluation of the effectiveness of our advertising measures.
You can activate or deactivate personalized advertising from Google via the settings for advertising under this link: https://adssettings.google.com/anonymous?sig=ACi0TCjoT_RnPbIUe8IGa85dyA_5J4bol6TV5SM7jVOJycoeZaGP6BA8RWwSWmRUP0XhlKEX4nczIzV15.
These settings are saved in your Google Account (if you are signed in) or in your browser (if you are not signed in). Alternatively, you have the option of installing a plug-in for your browser under this link in order to deactivate personalized advertising: https://support.google.com/ads/answer/7395996?hl=de
For more information on how Google Ads works and how it processes data, see:
This website uses Google Maps to visually display geographic information and to create directions.
The embedding of Google Maps is linked to your settings in our Consent Management Tool. This means that you will initially only see a preview image on our website without establishing a connection to Google. A connection to Google will only be established after you have activated the map function in the settings by ticking the box. This will forward your IP address to the Google server and thus inform Google that our website has been visited with your IP address. In addition, according to its own information, Google can use cookies, i.e. small text files that are stored on your computer, to collect data on your user behavior.
These are the following cookies:
You also have the option of deactivating the Google Maps service and thus preventing data transfer to Google by deactivating JavaScript in your browser settings. However, we would like to point out that in this case you will not be able to use the map display.
Further information on Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html (Terms of use for Google Maps).
This website uses the Google reCAPTCHA service.
The legal basis for the use of this service and the associated data processing is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR.
The purpose of reCAPTCHA is to check whether the data entry on our website is made by a person or improperly by an automated program. reCAPTCHA is used to ensure data security when transmitting data that is collected via Contact or other forms and thus to protect against spam.
You have the option of deactivating Google reCAPTCHA and thus preventing data transfer to Google by deactivating JavaScript in your browser. However, we would like to point out that in this case you may not be able to use all of the services on our website.
Further information on Google reCAPTCHA can be found at:
We have integrated videos from the Google service YouTube so that you can view them on our website.
The embedding of YouTube is linked to your settings in our Consent Management Tool. This means that you will initially only see a preview image on our website without establishing a connection to Google. A connection to Google will only be established after you have activated the playback of videos in the settings by dragging the slider. This will forward your IP address to the Google server and thus inform Google that our website has been visited with your IP address. In addition, according to its own information, Google can use cookies, i.e. small text files that are stored on your computer, to collect data on your user behavior.
These are the following cookies:
You also have the option of preventing the integration of YouTube videos and thus data transfer to Google by deactivating JavaScript in your browser settings. However, we would like to point out that in this case you will not be able to use the video function.
You can find more information about YouTube at: https://www.youtube.com/t/terms (YouTube Terms of Use).
If you have given your consent, our website uses various functions of LinkedIn Marketing Solutions, which are provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
We can place advertisements on LinkedIn to draw attention to our offers. You should only see our advertisements on LinkedIn if they are of interest to you. In order to determine whether an advertisement could be of interest to you, LinkedIn analyzes your surfing behavior on our website.
If we place an ad for you on LinkedIn and you click on it, you can be redirected to our website. In this case, LinkedIn can understand that you clicked on our ad and were redirected to our website. In this way, LinkedIn can provide us with a statistical analysis of the effectiveness of our advertising measures on our behalf (so-called “conversion tracking”). Conversion tracking takes place using the so-called “LinkedIn Insight Tag”. These are some lines of code provided by LinkedIn that we have integrated into our website.
If you are logged in to LinkedIn with your profile, LinkedIn can add the collected data to your user profile.
It cannot be ruled out that data collected by LinkedIn may also be transmitted to a LinkedIn server in a third country, in particular to a server belonging to LinkedIn’s parent company, the LinkedIn Corporation, based in 2029 Stierlin Court Mountain View, California 94043, USA, and stored there. We have agreed standard data protection clauses with LinkedIn to secure the transfer to third countries. LinkedIn ensures compliance with data protection agreements. At the same time, the transmission of personal data to the USA is associated with particular risks for data subjects. The integration of and data processing by LinkedIn Marketing Solutions therefore only takes place with your express consent. You can find more information on third country transfers in section 6.
The relevant legal basis for data processing by LinkedIn is your consent, Art. 6 Para. 1 S. 1 lit.
If you are logged in to LinkedIn, you can deactivate the data collection at any time under this link: https://www.linkedin.com/psettings/enhanced-advertising. You can also object to the analysis of your usage behavior by LinkedIn and the placing of individualized advertisements under this link (“opt-out”): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Further information on data processing by LinkedIn as well as your related rights and setting options to protect your privacy can be found at: https://www.linkedin.com/legal/privacy-policy.
Our website includes services from companies based in the USA or relationships in the USA. If you consent to data processing by one of these service providers, it cannot be ruled out that US authorities will have unrestricted access to the data processed about you. You have no legal recourse against this. Specifically, it is about these service providers:
It cannot be ruled out that the companies or the respective parent companies and / or US authorities may gain access to personal data that is processed to provide the services.
So far, this transfer of personal data to the USA could be justified because the companies or the parent companies of the companies were certified according to the EU-US Privacy Shield, which was declared invalid by the European Court of Justice in July 2020. A transmission on the basis of the so-called standard data protection clauses according to Art. 46 Para. 2 lit. c GDPR is not possible because the high standards of the ECJ (The Court of Justice of the European Union) and the data protection supervisory authorities for additional agreements with companies in the USA cannot (yet) be met. Negotiations are in progress between the USA and the EU on a follow-up agreement to the Privacy Shield. However, when these will be completed is not foreseeable.
We therefore only use the mentioned services with your express prior consent and expressly point out the following about the risks of data transmission to one of the above-mentioned service providers.
Due to the powers of the US secret services and the legal situation in the USA, the state surveillance measures in the USA are disproportionate and, from the EU’s point of view, there is no adequate state level of data protection for personal data. In particular, Sec. 702 of the US-American Foreign Intelligence Surveillance Act (FISA) does not provide any restrictions on the surveillance measures of the secret services and no guarantees for non-US citizens. In addition, the Presidential Policy Directive 28 (PPD-28) does not give those affected any effective legal remedies against measures by the US authorities and does not provide for any barriers to ensuring proportionate measures. In addition, on the basis of the US Cloud Act, US authorities can demand that a US company surrender all stored data, even if this data is on servers within the EU.
We use references (“links”) to the social networks LinkedIn and XING on our website on the basis of Art. 6 (1) sentence 1 lit. f GDPR in order to draw attention to our services and products and to contact you as a visitor and user of these social media pages as well as our website.
You can recognise the links by the logo of the respective social network. When you click on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.
These are not so-called social plug-ins, where a connection and data transmission to the respective social network is already established when you call up our website. We would like to point out that you use the following services and their functions on your own responsibility. Please also note that when calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. In detail, these are the following third-party providers:
XING of New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany; privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=registration_footer-privacy-policy
Twitter der Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland,; privacy policy: https://twitter.com/de/privacy; settings: https://twitter.com/personalization
Here you can find further data protection documents for download:
Our Partners
Our Partners
