1) Preamble

Welcome to the Optimax Energy website. We take the protection of your personal data very seriously. This privacy policy explains what data we collect, for what purposes, on what legal basis, and how we protect your privacy.

Personal data means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR).

Where we rely on Art. 6(1)(f) GDPR (legitimate interests) as our legal basis, you have the right to object at any time under Art. 21 GDPR, in particular where processing is carried out for direct marketing purposes.

​

2) Data Controller

The controller within the meaning of Art. 4(7) GDPR is:

Optimax Energy GmbH

Käthe-Kollwitz-Str. 1 04109 Leipzig, Germany

Phone: +49 (0)341 / 355 855 50

E-Mail: info@optimax-energy.de

​​

3) Data Protection Officer

We have appointed an external Data Protection Officer who can be contacted directly for all data protection matters:

Dr. Bittner Consulting GmbH & Co. KG

Podbielskistraße 386 30659 Hannover, Germany

E-Mail: datenschutzteam417@drbg.de

You may contact our Data Protection Officer directly at any time without going through any internal channels.

​

4) Server Log Files

Each time you access our website, we automatically collect data and store it in server log files. The following data is recorded:

• Time of access (request to the host provider's server)

• URL of the website from which you accessed our site

• Operating system of your device

• Type and version of browser used

• IP address of your device (masked – the last octet is zeroed)

 

Purpose: Ensuring our website is accessible and displayed correctly, and maintaining system security. No marketing analysis takes place.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a functioning website).

Retention period: 10 days. After this period, the oldest log file is overwritten.

Recipients: Our server hosting provider, acting as a data processor pursuant to Art. 28 GDPR.

Right to object: You may object to this processing at any time (e.g. by e-mail to info@optimax-energy.de).

​

5) Cookies & Consent Management

Our website uses cookies – small text files stored on your device that save certain settings and data for exchange with our system.

We distinguish between the following categories:

Strictly necessary cookies: Required for the website to function. These cannot be declined. Legal basis: Art. 6(1)(f) GDPR.

Analytics and marketing cookies: Only set after your explicit consent. Legal basis: Art. 6(1)(a) GDPR.

On your first visit, your options are presented via our cookie banner. You may withdraw consent at any time with effect for the future. You can also manage cookies via your browser settings:

• Google Chrome: Settings → Privacy and Security → Cookies

• Mozilla Firefox: Settings → Privacy & Security → Cookies

• Apple Safari: Settings → Privacy → Cookies

• Microsoft Edge: Settings → Privacy, search, and services → Cookies

​

6) Information on Google Services

We use services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

By integrating these services, Google may collect and process personal data, potentially on servers in third countries (in particular the USA). No adequacy decision exists under Art. 45 GDPR. Transfers are based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Further information on SCCs: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractuals-clauses-scc_en

Google may process, among other things:

• Log data (including IP address)

• Location-related information

• Unique application numbers

• Cookies and similar technologies

 

If you are logged into a Google account, Google may associate data with your account. You can prevent this by logging out or adjusting your account settings. Google's privacy policy: https://policies.google.com/privacy

​​

7) Google Analytics

We use Google Analytics, a web analytics service by Google Ireland Limited, only with your prior consent.

Google Analytics is only activated on our website after you have given your explicit consent via our cookie banner. Without consent, no data is transmitted to Google.

Google Analytics uses cookies and web beacons to analyse how visitors use our website. The information generated is transferred to Google servers, which may be located in the USA or other third countries.

We use Google Analytics exclusively with IP anonymisation enabled. Your IP address is shortened within the EU/EEA prior to transmission.

Data processed: Online identifiers (incl. cookie IDs), anonymised IP address, device identifiers, usage behaviour.

Purpose: Analysis of website usage to improve our offering.

Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time via our cookie banner.

Third-country transfer: Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Opt-out: You may also download the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Further information: https://support.google.com/analytics/answer/6004245

​​

8) Contacting Us

You may contact us by post, phone, fax or e-mail. We process the following data depending on the method of contact:

• Postal contact: address details, date/time, content of correspondence

• Phone contact: phone number, name, e-mail address (if provided), time of call, subject matter

• E-mail contact: e-mail address, timestamp, message content

 

Purpose: Processing your enquiry and communicating with you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Where contact aims at concluding a contract: Art. 6(1)(b) GDPR.

Retention: Data is deleted once your enquiry has been fully resolved, unless statutory retention obligations apply.

​​

9) Job Application

You may apply for vacancies via our website, by e-mail, or by post.

Data processed: All data provided as part of your application (e.g. name, contact details, CV, certificates).

Purpose: Identifying suitable candidates.

Legal basis: Art. 6(1)(b) GDPR, Art. 88(1) GDPR in conjunction with § 26(1) BDSG.

Retention: In the event of rejection, application documents are deleted or returned no later than 6 months after the conclusion of the application process. Postal documents will be returned upon request. With your consent, data may be retained for consideration for future positions.

​​

10) Social Networks and External Links

We maintain presences on social networks accessible via links on our website. When you visit these presences, personal data may be transferred to the respective provider, including servers outside the EU.

For details on the purpose and scope of data processing, please refer to the privacy policies of the respective providers:

 

Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)

Privacy policy & opt-out: https://help.instagram.com/155833707900388

 

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

Privacy policy & opt-out: https://www.linkedin.com/legal/privacy-policy

 

Our website also contains links to external third-party websites over whose data processing we have no control.

​

​

11) Data Security 

We protect our website and systems through technical and organisational measures in accordance with Art. 32 GDPR against loss, destruction, unauthorised access, alteration or disclosure of your data. Despite regular checks, complete protection against all risks cannot be guaranteed.

Data transmission on our website is encrypted via HTTPS.

​​​

12) Withdrawal of Consent

You have the right to withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing carried out prior to withdrawal (Art. 7(3) GDPR).

To withdraw consent, please contact us via:

• E-mail: info@optimax-energy.de

• Post: Optimax Energy GmbH, Käthe-Kollwitz-Straße 1, 04109 Leipzig, Germany

• For cookie consent: via our cookie banner on the website

​

12) Rights of Data Subjects

You have the following rights with regard to personal data concerning you:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

 

To exercise your rights, please contact: info@optimax-energy.de

Please note that we are required to verify your identity before fulfilling data subject requests to ensure data is provided to the correct person.

Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority. The competent authority for Saxony is:

Sächsischer Datenschutzbeauftragter (Saxon Data Protection Commissioner)

Devrientstraße 5, 01067 Dresden, Germany / www.saechsdsb.de

 

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place on our website.

​

​

Last updated: May 2026