Privacy Policy

General Information
We take data protection very seriously, comply with applicable data protection laws, and aim to inform you, the users (all visitors and users, with these and other terms understood as gender-neutral) of our website and data providers, about how we ensure this protection. We explain what types of data we collect, process, and use to provide our services within the framework of the present offer comparison.

In our privacy notice, we explain how we handle your personal data when you contact us or use our services.

Our privacy policy is structured in multiple sections. If you want quick access to specific processing information, you can select it via the table of contents. The relevant section will provide context-specific details about how we handle your personal data.

The first part of our privacy notice contains information that we must always provide, as it applies to every processing situation.

Contact Information of the Responsible Entity
The entity responsible for data processing on this website is:

W1 LLC
3833 Powerline Rd, Suite 201,
Fort Lauderdale
33309 Florida
info@energydeal.co

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Your Data Subject Rights
Data protection law grants you several rights as a data subject, depending on the purpose and nature of the processing of your personal data. These rights include:

1. Right of Access
You have the right to know whether and, if so, what personal data we process about you. You may request copies of your personal data. This right always applies, but certain exceptions regarding the disclosed data may exist.

2. Right to Rectification
You have the right to request the correction of any personal data about you that you consider inaccurate. You also have the right to request the completion of incomplete personal data. This right always applies.

3. Right to Erasure
Under certain circumstances, you may request the deletion of your personal data.

4. Right to Restriction of Processing
Under specific conditions, you may request that the processing of your personal data is restricted.

5. Right to Object to Processing
If your personal data is processed based on your consent or a legitimate interest, you have the right to object to such processing.

6. Right to Data Portability
This right applies only to the personal data you have provided to us. You can request that this data be transferred directly to another responsible entity or organization or provided to you in a machine-readable format. This applies only if the data processing is based on your consent, a contract, or during contract negotiations and is carried out using automated means.

How to Contact Us
To quickly obtain relevant information about specific data processing activities, we have categorized these activities by keywords below. The selected section will provide context-specific details about what we do with your personal data.

Information and Details About Our Website

Data Collection on This Website
The data processing on this website is carried out by the website operator. You can find the contact details in the “Contact Information of the Responsible Entity” section of this privacy policy.

How Do We Collect Your Data?
– Data Provided by You: For example, data entered into a contact form.
– Automatically Collected Data: Certain technical data (e.g., browser type, operating system, or time of page access) is collected automatically by our IT systems when you visit the website.

Purpose of Using Your Data
– A portion of the data is collected to ensure the error-free provision of the website.
– Other data may be used to analyze user behavior.

Your Rights Regarding Your Data
You have the right to:
– Free access to information about the origin, recipients, and purpose of your stored personal data.
– Request the correction or deletion of your data.
– Withdraw your consent to data processing at any time for the future.
– Request restriction of the processing of your personal data under certain conditions.
– File a complaint with the relevant supervisory authority.

For these rights and any other questions about data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools
When visiting this website, your surfing behavior may be statistically analyzed, primarily using so-called analytics programs. Detailed information about these analytics programs can be found in the complete privacy policy.


**External Hosting**
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website visits, and other data generated through the website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). If consent has been obtained, processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, provided the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TTDSG. Consent can be revoked at any time.

Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.
We use the following host:
**HOSTINGER operations, UAB**
Švitrigailos str. 34, Vilnius 03230 Lithuania

**Notes and Mandatory Information**
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy. When you use this website, various personal data is collected. Personal data is information that can personally identify you. This privacy policy explains what data we collect and for what purpose we use it. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (e.g., communication via email) can have security gaps. Complete protection of data against third-party access is not possible.

**Retention Period**
Unless a more specific retention period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate deletion request or revoke consent for data processing, your data will be deleted, provided we have no other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion occurs after these reasons cease to exist.

**General Notes on Legal Basis for Data Processing on This Website**
If you have given consent to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR and/or Art. 9 para. 2 lit. a GDPR if special data categories under Art. 9 para. 1 GDPR are processed. If explicit consent has been given for the transfer of personal data to third countries, data processing is additionally carried out based on Art. 49 para. 1 lit. a GDPR. If the storage of cookies or access to information in your device (e.g., via device fingerprinting) has been consented to, processing is also carried out based on § 25 para. 1 TTDSG. Consent can be revoked at any time.

If your data is necessary for contract performance or pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if required by a legal obligation based on Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. Specific legal grounds for individual cases are provided in the respective sections of this privacy policy.

**Transfer to a Third Country or International Organization**
We use tools from companies located in the USA or other third countries that do not offer the same level of data protection as the EU. If these tools are active, your personal data may be transmitted to and processed in these third countries. We note that these countries may not guarantee an EU-comparable level of data protection. For example, US companies are obliged to hand over personal data to security authorities without you, as the affected party, being able to take legal action against it. It cannot, therefore, be excluded that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no control over these processing activities.

**Revocation of Your Consent to Data Processing**
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out up until the revocation remains unaffected.

**Right to Object to Data Collection in Specific Cases and Direct Advertising (Art. 21 GDPR)**
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your specific situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms or the processing serves the assertion, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling, insofar as it is associated with such direct advertising. If you object, your personal data will no longer be used for direct advertising purposes (objection under Art. 21 para. 2 GDPR).


**Right to Lodge Complaints with Supervisory Authorities**
In case of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

**Right to Data Portability**
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

**SSL or TLS Encryption**
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the browser’s address line changing from „http://“ to „https://“ and the lock icon in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

**Right to Information, Deletion, and Correction**
You have the right at any time within the scope of applicable legal provisions to free information about your stored personal data, its origin and recipient, and the purpose of data processing and, if necessary, a right to correction or deletion of this data. For this and other questions regarding personal data, you can contact us at any time.

**Right to Restriction of Processing**
You have the right to request the restriction of processing your personal data. To do so, you can contact us at any time. The right to restrict processing applies in the following cases:
– If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
– If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
– If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
– If you have objected to processing pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or for asserting, exercising, or defending legal claims or protecting the rights of another natural or legal person or for reasons of significant public interest of the European Union or a member state.

**Objection to Advertising Emails**
The use of contact data published as part of the legal notice obligation for sending unsolicited advertising and information materials is hereby rejected.

**Cookies**
Our websites use so-called „cookies.“ Cookies are small text files that do not damage your end device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain on your device until you delete them yourself or your web browser deletes them automatically.

Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or display advertising.

Cookies required for electronic communication, providing certain functions you wish to use (e.g., the shopping cart function), or optimizing the website (e.g., cookies to measure web audience) are stored based on Art. 6 para. 1 lit. f GDPR unless a different legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of its services. If consent for cookies or similar recognition technologies has been requested, …

You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases, or generally, and activate automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

If cookies from third-party companies or for analysis purposes are used, you will be informed separately within this privacy policy and, if necessary, your consent will be requested.


**CCM19**
Our website uses CCM19 to obtain your consent for the storage of certain cookies on your device or the use of certain technologies and to document this in compliance with data protection laws. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter referred to as „CCM19“).

When you visit our website, a connection to CCM19’s servers is established to obtain your consents and other declarations regarding cookie usage. CCM19 then stores a cookie in your browser to associate the consents you have granted or their revocation. The data collected is stored until you request its deletion, delete the CCM19 cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.

The use of CCM19 is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

**Contact Form**
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and for follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your inquiry is related to the fulfillment of a contract or necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you enter in the contact form remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

**Requests via Email, Phone, or Fax**
If you contact us via email, phone, or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed for the purpose of handling your request. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data sent to us via contact inquiries remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your concern has been fully resolved). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

**Google Tag Manager**
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It only serves to manage and play out the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on their website. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1.


**TTDSG and Cookie Consent**
Consent under the TTDSG includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

**Google Analytics**
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. Various usage data, such as page views, duration of visits, operating systems used, and the origin of users, is collected. This data is assigned to the user’s device. It is not linked to a device ID.

Additionally, Google Analytics can record your mouse and scroll movements as well as clicks. Google Analytics also uses various modeling approaches to supplement collected data and applies machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding your use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

**IP Anonymization**
We have activated IP anonymization on this website. This means that your IP address will be truncated by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. On behalf of this website’s operator, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

**Browser Plugin**
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

**Google Signals**
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history, and demographic data (visitor data). This data can be used for personalized advertising through Google Signals. If you have a Google account, the data collected by Google Signals will be linked to your Google account and used for personalized advertising. The data is also used to create anonymized statistics on user behavior.

**Demographic Features in Google Analytics**
This website uses the „demographic features“ function of Google Analytics to display appropriate advertisements to website visitors within the Google ad network. This allows reports to be created that contain information about the age, gender, and interests of website visitors. These data come from Google’s interest-based advertising and third-party visitor data. This data cannot be attributed to a specific individual. You can disable this feature at any time via the ad settings in your Google account, or you can generally prohibit the collection of your data by Google Analytics as described under „Objection to Data Collection.“


**Google Remarketing**
This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user behavior on our website (e.g., clicking on specific products) to categorize you into specific advertising target groups and subsequently display relevant advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked to Google’s cross-device functions. This allows interest-based, personalized advertising messages tailored to your previous usage and surfing behavior on one device (e.g., mobile phone) to be displayed on your other devices (e.g., tablet or PC).

If you have a Google account, you can opt out of personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Further information and the privacy policy can be found in Google’s privacy policy: https://policies.google.com/technologies/ads?hl=en.

**Meta Pixel**
This website uses the visitor action pixel from Meta for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Meta advertisement. This enables the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, Meta stores and processes the data, allowing it to be linked to the respective user profile and enabling Meta to use the data for its own advertising purposes in accordance with the Meta Data Usage Policy. This allows Meta to display advertisements on Meta sites as well as outside of Meta. This use of data is beyond our control as the site operator.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.

To the extent that personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transmission to Meta. The processing carried out by Meta after the transmission is not part of the joint responsibility. 


**Facebook Controller Addendum**
According to the agreement available at https://www.facebook.com/legal/controller_addendum, we are responsible for providing the data protection information when using the Meta tool and for ensuring the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of Meta products. Data subject rights (e.g., requests for information) regarding the data processed by Facebook can be asserted directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.

Further details on protecting your privacy can be found in Meta’s privacy notices: https://www.facebook.com/about/privacy/.

You can also disable the „Custom Audiences“ remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

**Facebook Custom Audiences**
We use Facebook Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, take advantage of our free or paid services, send us data, or interact with the Facebook content of our company, we collect your personal data. If you give us consent to use Facebook Custom Audiences, we will share this data with Facebook to display relevant advertisements to you. Additionally, your data can be used to define target groups (Lookalike Audiences).

Facebook processes this data as our data processor. Details can be found in Facebook’s terms of use: https://www.facebook.com/legal/terms/customaudience.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

**Use of Our Service: Free Offer Comparison**
In this privacy notice, we inform you about how we handle your personal data, which we process in the context of our business relationship with you, and inform you of your related rights.

**What Personal Data Do We Collect and Where Does It Come From?**
We primarily process personal data that you provide to us as part of our business relationships.

**Inquiries via the Website and Facebook Form:**
To process your inquiry and initiate the process of creating an offer, we collect the following data or data categories during the initial contact on our websites:
– Address and contact information (postal code, gender details, first and last name, phone number, and possibly email address)
– Relevant information about your project or plans. This data depends on the specific product requested (e.g., size of the planned solar installation, project planning timeline, age and care level for stairlift inquiries, investment amount for financial products)
– Information about local conditions or the residential property (e.g., roof slope, type of heating)
– Information about contract terms (purchase, rent)
– Information about other areas of interest

**Telephone Contact**
To complete your details and directly clarify any follow-up questions in order to select relevant providers, we collect the following data or data categories during a phone call:
– Data for telephone contact
– More detailed information about the planned project and local conditions (e.g., specific inquiries about installed roof windows during a roof check using Google Maps)


**To Complete Your Information and Clarify Follow-Up Questions**
To select relevant providers, we collect the following data or data categories during a phone call:
– Data for telephone contact
– Detailed information about the planned project and local conditions (e.g., specific inquiries about installed roof windows during a roof check using Google Maps)
– Log data about the conversation
– Voice recordings, if explicit consent is given in advance (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with future effect.

**For What Purposes and on What Legal Basis Is Data Processed?**
Primarily, data processing serves to initiate, execute, and fulfill the contractual relationship (§ 662 BGB) for the transmission of your data to companies in the photovoltaic industry and is thus carried out to fulfill contractual obligations under Art. 6 para. 1 lit. b GDPR. This includes, for example:
– Using the provided phone number for telephone contact to conduct the conversation necessary for fulfilling the contract
– Transmitting your data to our selected partner companies:

Solar X

– Creating an internal user account to manage your request
– Responding to emails in case of follow-up questions

The data collected from you will be stored and matched with the profiles of partner companies. Using a matching algorithm, Leadfy identifies the most suitable partner companies for processing the inquiries and forwards the inquiry data to them. Our partner companies then contact you for the purpose of submitting an offer.

**Legitimate Interests**
We also process personal data to safeguard legitimate interests of ours or third parties under Art. 6 para. 1 lit. f GDPR. To do so, we carefully balance our interest in processing your data against your interest in not processing it. Our legitimate interests primarily include:
– Maintaining business relationships
– Improving communication with our customers
– Ensuring data and IT security
– Preventing or investigating criminal acts
– Asserting and defending against legal claims
– Expanding and maintaining our customer or contact database
– Carrying out direct marketing measures for existing customers

For direct marketing measures aimed at prospects, we rely on your consent (Art. 6 para. 1 lit. a GDPR), which we obtain separately.

**Newsletter Processing**
Data processing for newsletter distribution is also based on your consent. You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

**1.4 Partner Portals**
If we cannot successfully forward your referral request to partner companies in your region, your inquiry may be forwarded to a specialized partner portal. The partner portal may contact you by phone to specify your inquiry.

**Data Transmission**
Your data will be transmitted to the selected partner portal:

FE Leads


**Forwarding Data to Partner Companies**
To find a suitable partner company for you, the partner portal forwards your data to companies (including dealers and manufacturers) in your region that provide the requested service. These companies may contact you by phone, WhatsApp, SMS, or email to prepare an offer.

These data processing activities by us, the partner portal, and the partner companies are also based on Art. 6 para. 1 lit. b GDPR, to fulfill your referral assignment (§ 662 BGB) to us and Art. 6 para. 1 lit. f GDPR. Our legitimate interest a…

**Newsletter Consent**
Data processing for newsletter distribution is based on your consent. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

**How Long Are Your Data Stored?**
Your personal data will be deleted as soon as they are no longer required to achieve the aforementioned purposes. After the end of the business relationship, those personal data that we are legally obligated to retain will continue to be stored. This is…

Personal data that we process and store based on your consent will be deleted upon receipt of the revocation of consent.

In addition, personal data that we need to enforce or defend against legal claims will be retained. The retention period covers the period during which claims can be asserted against us.

The data you provide to us for newsletter subscriptions will be stored by us until you unsubscribe from the newsletter or the newsletter service provider. After unsubscribing, the data will be deleted from the newsletter distribution list. Data stored for …

**Who Receives Your Data?**
Within Leadfy, only individuals involved in the execution of the contractual relationship have access to your data and require it for the fulfillment of the aforementioned purposes.

In some areas, we also use external service providers. Where service providers act as data processors for us, we ensure that a data processing agreement is concluded. These external service providers include:
– Dropbox International Unlimited Company
– Microsoft Corporation
– Zapier
– Make.com
– Google Drive

To fulfill our contractual obligations arising from the assignment relationship with you, we transmit your personal data to specific partner companies. We select the contractual partners whose offers best match your details and project. These partner compan…

In certain cases, such as when there are insufficient providers with available capacity in the relevant region for the requested product, we also transmit your data to intermediaries or energy consultants.

Our partner companies act as data controllers under data protection law and will subsequently contact you.


**What Rights Can You Exercise as a Data Subject?**
You have the rights under Articles 15–21 of the GDPR:
– Right to Access (Art. 15 GDPR)
– Right to Rectification (Art. 16 GDPR)
– Right to Erasure (Art. 17 GDPR)
– Right to Restriction of Processing (Art. 18 GDPR)
– Right to Data Portability (Art. 20 GDPR)
– Right to Object to Processing (Art. 21 GDPR)

Please direct your inquiries to the following address:
W1 LLC
3833 Powerline Rd, Suite 201,
Fort Lauderdale
33309 Florida
info@energydeal.co

**Right to Withdraw Consent**
If we process your data based on a declaration of consent, you have the right to withdraw your consent at any time with future effect. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.
Please direct the withdrawal to:
W1 LLC
3833 Powerline Rd, Suite 201,
Fort Lauderdale
33309 Florida
info@energydeal.co

**Are You Obligated to Provide Your Data?**
The provision of your personal data is neither legally nor contractually required. However, the absence or unavailability of relevant data means we cannot forward you to suitable contractual partners for the purpose of the offer comparison.

**To What Extent Are Automated Individual Decisions or Profiling Measures Used?**
We do not use purely automated processing to make decisions.

**As a Contractual Partner**
In this privacy notice, we inform you about how we handle your personal data, which we process in the context of our business relationship with you or your employer or client, and inform you about your rights.

**What Personal Data Do We Collect and Where Does It Come From?**
In principle, we process personal data that is provided to us within the framework of joint business relationships. Depending on the contractual relationship you have with us, this generally includes the following data or data categories:

**For Business Partners in Lead Referral:**
– Address and contact information (phone, fax, and email)
– Information about the contact person
– Information about offered services/product portfolio
– Offer and contract data
– Bank account information
– Appointment management data
– Billing and service data

**For Suppliers and Other Business Partners:**
– Address and contact information
– Information about the contact person
– Bank account information

If you access our premises/grounds, we additionally process the following data or data categories:
– Image data captured during video recordings

**Additionally, We Collect the Following Data Categories Independently:**
– Master data (e.g., customer number)
– Contract data (e.g., contract history)
– Communication data (e.g., consultation records)
– Technical data (e.g., log data generated during the use of our IT infrastructure)

**For What Purposes and on What Legal Basis Is Data Processed?**
Primarily, data processing serves the initiation, execution, or fulfillment of contracts and is therefore carried out to fulfill contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR. Depending on the type of contractual relationship, this in…
– Contract negotiations
– Processing of orders
– Payment for goods and services
– Transmission of contact data 

 


**Processing Personal Data to Fulfill Legal Obligations**
We also process personal data to meet legal requirements under Art. 6 para. 1 lit. c GDPR. This includes, in particular, compliance with statutory retention periods and the fulfillment of legal reporting obligations.

**Legitimate Interests**
Furthermore, we process personal data to safeguard legitimate interests of ours or third parties under Art. 6 para. 1 lit. f GDPR. To do this, we carefully balance our interest in processing your data against your interest in not processing it. Our legitimate interests include:
– Maintaining business relationships
– Organizing and conducting events
– Improving communication with our business partners
– Ensuring data and IT security
– Preventing or investigating criminal acts
– Asserting and defending against legal claims
– Expanding and maintaining our customer or contact database
– Conducting direct marketing measures for existing customers

**Data Retention Period**
Your personal data will be deleted as soon as it is no longer necessary to achieve the aforementioned purposes. After the end of the business relationship, those personal data that we are legally obligated to retain will continue to be stored. This is regularly derived from the legal proof and retention obligations of tax/levy and commercial law. Retention periods are typically up to ten years.

Additionally, personal data that we require to enforce or defend against legal claims will be retained. The retention period extends over the period during which claims can be asserted against us.

**Who Has Access to Your Data?**
Within Leadfy, only individuals involved in carrying out the business processes and requiring your data to fulfill the aforementioned purposes have access.

In some areas (e.g., IT, accounting), we also use external service providers. Where service providers act as data processors for us, we ensure that a data processing agreement is concluded. These external service providers include:
– Dropbox International Unlimited Company (One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland)
– Microsoft Corporation
– Zapier
– Google Drive

In addition, we may transfer certain personal data to recipients outside the company who process your data on their own responsibility. These include, among others:
– Financial institutions
– Credit agencies
– Public authorities that we are legally obligated to involve (especially tax authorities)
– Insolvency administrators in case of insolvency
– Tax advisors

**What Rights Do You Have as a Data Subject?**
You have rights under Articles 15–21 of the GDPR:
– Right to Access (Art. 15 GDPR)
– Right to Rectification (Art. 16 GDPR)
– Right to Erasure (Art. 17 GDPR)
– Right to Restriction of Processing (Art. 18 GDPR)
– Right to Data Portability (Art. 20 GDPR)
– Right to Object to Processing (Art. 21 GDPR)

Please contact the following address to exercise your rights:
W1 LLC
3833 Powerline Rd, Suite 201,
Fort Lauderdale
33309 Florida
info@energydeal.co

**Right to Withdraw Consent**
If we process your data based on a declaration of consent, you have the right to withdraw your consent at any time with future effect. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.
Please direct the withdrawal to:
W1 LLC
3833 Powerline Rd, Suite 201,
Fort Lauderdale
33309 Florida
info@energydeal.co


**Communication via Online Conference Tools**
You have arrived on this page via a link to learn about how we handle your personal data. To fulfill our information obligations under Articles 12 et seq. of the General Data Protection Regulation (GDPR), we are pleased to provide the following information about data protection:

**What Data Do We Process About You and for What Purposes?**
If we have received data from you, we will generally only process it for the purposes for which it was received or collected. For instance, if you or we sent an email, we process the data contained therein (name, email address, content) to respond to your inquiry or to contact you.

The processing of your data may therefore occur on the basis of the following legal grounds:
– Art. 6 para. 1 lit. a GDPR (Consent)
– Art. 6 para. 1 lit. b GDPR (Performance/Initiation of a Contract)
– Art. 6 para. 1 lit. c GDPR (Legal Obligations)
– Art. 6 para. 1 lit. f GDPR (Legitimate Interest)

**Deletion of Data**
If you withdraw your consent, your data will be deleted unless we are legally obligated to retain it further. You can inquire about these obligations for your individual case at any time. Otherwise, your data will be deleted only after the expiration of the statutory retention periods.

**Processing for Other Purposes**
Processing of your data for purposes other than those specified will only be considered if the required legal conditions under Art. 6 para. 4 GDPR are met. Any obligations to provide additional information under Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR will, of course, be complied with in such cases.