Privacy Policy

Last updated: 2025 07 02

We take the protection of your personal data seriously and treat your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (BDSG).

This Privacy Policy explains what personal data we collect, how we use it, and your rights as a user of this website.

1. Data Controller

The data controller for this website is:

Energy Wise Training GmbH
Tim Rogers
Wellenbergstr. 19
97941 Tauberbischofsheim
Germany
Website: www.energywise-training.com

Contact

2. What Data We Collect and Why

a) Contact Forms & Quiz Submissions

When you fill out a contact form or quiz on our website, we collect the data you enter, such as your name, email address, and any additional information you provide.

Purpose: To respond to your enquiries, process your quiz results, or follow up on your request.
Legal Basis: Art. 6(1)(b) GDPR (contractual or pre-contractual obligations) and Art. 6(1)(f) GDPR (legitimate interest in communication).

b) Newsletter Sign-Up

If you sign up for our newsletter, we collect your name and email address.

Purpose: To send you periodic emails with updates, news, or marketing content.
Legal Basis: Art. 6(1)(a) GDPR (consent).

We use a double opt-in process to confirm your subscription. You can unsubscribe at any time via the link in the footer of each email.

c) Usage Data and Analytics

We collect anonymised data on how visitors use our website, such as IP address (with truncation), browser type, and pages visited.

Purpose: To analyse and improve the user experience.
Legal Basis: Art. 6(1)(a) GDPR (consent via cookie banner).

3. Use of Third-Party Services

a) HubSpot

We use HubSpot for managing contact data, CRM, email communication, and some website analytics.

Provider: HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA
Data Processed: Contact data, usage data, cookies
Transfer to third countries: Data may be transmitted to the USA. HubSpot is certified under the EU–US Data Privacy Framework.
Legal Basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract fulfilment)

b) Google Analytics & Tag Manager

We use Google Analytics (GA4) and Google Tag Manager to track website performance.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Features: IP anonymisation is enabled. Consent mode is used to respect cookie preferences.
Transfer to third countries: Data may be transmitted to the USA. Google relies on Standard Contractual Clauses and participates in the EU–US Data Privacy Framework.
Legal Basis: Art. 6(1)(a) GDPR (consent)

You can prevent Google Analytics from tracking your behaviour by installing on opt-out browser add-on.

c) Google reCAPTCHA

To protect our forms from abuse, we use reCAPTCHA, which may collect mouse movements, IP address, and other behavioural data.

Provider: Google Ireland Limited
Purpose: Spam prevention
Legal Basis: Art. 6(1)(a) GDPR (consent)

d) YouTube Embeds (if applicable)

We may embed videos from YouTube on our site. By default, no connection to YouTube is made until you click on a video. When activated, YouTube may set cookies and track usage.

Provider: Google Ireland Limited
Legal Basis: Art. 6(1)(a) GDPR (consent)

4. Cookies

We use cookies and similar technologies to enhance your browsing experience. Non-essential cookies are only set with your consent.

You can manage or withdraw your consent at any time via the cookie settings on our website.

For more details, please refer to our Cookie Policy.

5. Data Retention

We retain your personal data only for as long as necessary:

  • Contact enquiries: retained only as long as necessary to respond to your request, and routinely deleted unless further retention is legally required
  • Newsletter data: until you unsubscribe
  • Analytics data: as configured in GA4 (typically 14 months)

6. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (“right to be forgotten”, Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Withdraw your consent at any time (Art. 7(3))
  • Lodge a complaint with a supervisory authority (Art. 77)

In Germany, the responsible authority is the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information (LfDI BW):
https://www.baden-wuerttemberg.datenschutz.de/

7. Data Security

We use SSL/TLS encryption and take appropriate technical and organisational measures to secure your personal data against unauthorised access, loss, or manipulation.

8. Changes to this Policy

We may update this Privacy Policy to reflect legal or functional changes. The latest version is always available on this page.