Privacy Policy (English Version)

Effective Date: September 16, 2026 | Last Updated: September 16, 2026

1. Introduction and Data Controller Information

Welcome to the website www.energen-de.com (hereinafter referred to as “this Website”). This Privacy Policy
aims to explain how Energen GmbH (hereinafter referred to as “we,” “us,” or the “Data Controller”) collects,
uses, stores, and protects your personal data when you visit this Website, use our services, or interact with
us. We are committed to protecting your privacy and ensuring compliance with the General Data Protection
Regulation (GDPR) and other applicable data protection laws and regulations.

Data Controller Information:
· Company Name: Energen GmbH
· Registered Address: Albert-Einstein-Straße 2, 70806 KORNWESTHEIM
· Contact Email: info@energen-de.com

Welcome to the website www.energen-de.com (hereinafter referred to as “this Website”). This Privacy Policy aims to explain how Energen GmbH (hereinafter referred to as “we,” “us,” or the “Data Controller”) collects, uses, stores, and protects your personal data when you visit this Website, use our services, or interact with us. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws and regulations.

Data Controller Information:
· Company Name: Energen GmbH
· Registered Address: Albert-Einstein-Straße 2, 70806 KORNWESTHEIM
· Contact Email: info@energen-de.com

2. Personal Data We Collect and How We Use It

We only collect and process personal data when we have a lawful basis as stipulated by the GDPR. The type
of data we collect depends on how you interact with this Website.

We only collect and process personal data when we have a lawful basis as stipulated by the GDPR. The type of data we collect depends on how you interact with this Website.

2.1 Core Business Functions

· Product Inquiry and Support: When you contact us via our inquiry form or email, we collect your name,
company name, email address, phone number, and message content.
Purpose of Processing: To reply to your inquiries, provide product quotations, and offer technical
support.
Lawful Basis: Necessary steps for the performance of a contract or prior to entering into a contract
(GDPR Article 6(1)(b)); legitimate interests in business communication (GDPR Article 6(1)(f)).
· Resource Download and Newsletter: When you request technical white papers, product manuals, or
subscribe to our newsletter, we collect your email address.
Purpose of Processing: To provide you with the requested resources or send marketing
communications.
Lawful Basis: Your explicit consent (GDPR Article 6(1)(a)).

· Product Inquiry and Support: When you contact us via our inquiry form or email, we collect your name, company name, email address, phone number, and message content.
Purpose of Processing: To reply to your inquiries, provide product quotations, and offer technical support.
Lawful Basis: Necessary steps for the performance of a contract or prior to entering into a contract (GDPR Article 6(1)(b)); legitimate interests in business communication (GDPR Article 6(1)(f)).
· Resource Download and Newsletter: When you request technical white papers, product manuals, or subscribe to our newsletter, we collect your email address.
Purpose of Processing: To provide you with the requested resources or send marketing
communications.
Lawful Basis: Your explicit consent (GDPR Article 6(1)(a)).

2.2 Website Operation and Optimization

· Server Log Files: When you visit this Website, our servers automatically collect technical data, including
your IP address, browser type, operating system, date and time of access, and pages visited.
Purpose of Processing: To ensure the stability and security of the website and analyze traffic patterns.
Lawful Basis: Legitimate interests in providing a secure and fully functional website (GDPR Article 6(1)
(f)).
· Cookies and Tracking Technologies: We use Cookies to enhance your browsing experience. Please
refer to Section 6 for detailed information

· Server Log Files: When you visit this Website, our servers automatically collect technical data, including your IP address, browser type, operating system, date and time of access, and pages visited.
Purpose of Processing: To ensure the stability and security of the website and analyze traffic patterns.
Lawful Basis: Legitimate interests in providing a secure and fully functional website (GDPR Article 6(1) (f)).
· Cookies and Tracking Technologies: We use Cookies to enhance your browsing experience. Please refer to Section 6 for detailed information

3. Disclosure and Sharing of Personal Data

We do not sell your personal data. We may share your data with third parties only in the following
circumstances:

· Service Providers: We entrust trusted third-party providers (such as website hosting, email delivery, and
data analysis providers) located within the European Economic Area (EEA) or in countries with an
adequate level of data protection to process data. These data processors are bound by strict Data
Processing Agreements (DPA) complying with GDPR Article 28.
· Legal Obligations: We may disclose personal data if required by law, regulation, or valid legal process, or
to protect our rights, property, or safety.
· Cross-Border Data Transfer: As a German company, some data may be processed by service providers
outside the EEA. We will ensure that such transfers are protected by appropriate safeguards, such as
Standard Contractual Clauses (SCCs) approved by the European Commission, to comply with Chapter V
of the GDPR

We do not sell your personal data. We may share your data with third parties only in the following circumstances:

· Service Providers: We entrust trusted third-party providers (such as website hosting, email delivery, and data analysis providers) located within the European Economic Area (EEA) or in countries with an adequate level of data protection to process data. These data processors are bound by strict Data Processing Agreements (DPA) complying with GDPR Article 28.
· Legal Obligations: We may disclose personal data if required by law, regulation, or valid legal process, or to protect our rights, property, or safety.
· Cross-Border Data Transfer: As a German company, some data may be processed by service providers outside the EEA. We will ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to comply with Chapter V of the GDPR

4. Data Storage and Security

· Retention Period: We retain personal data only for the period necessary to fulfill the purposes outlined in
this policy or as required to comply with statutory retention obligations (such as German commercial and
tax laws). Inquiry records are generally retained for 3 years; server logs are retained for 6 months. Upon
expiration of the period, data will be securely deleted or anonymized.
· Security Measures: We have implemented industry-standard technical and organizational measures,
including TLS/SSL encryption, access control, and regular security audits, to protect your data from
unauthorized access, alteration, disclosure, or destruction.

· Retention Period: We retain personal data only for the period necessary to fulfill the purposes outlined in this policy or as required to comply with statutory retention obligations (such as German commercial and tax laws). Inquiry records are generally retained for 3 years; server logs are retained for 6 months. Upon expiration of the period, data will be securely deleted or anonymized.
· Security Measures: We have implemented industry-standard technical and organizational measures, including TLS/SSL encryption, access control, and regular security audits, to protect your data from unauthorized access, alteration, disclosure, or destruction.

5. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

· Right of Access (Article 15): The right to request a copy of the personal data we hold about you.
· Right to Rectification (Article 16): The right to request the correction of inaccurate or incomplete data.
· Right to Erasure (Article 17): The right to request the deletion of your data under specific conditions
(“right to be forgotten”).
· Right to Restriction of Processing (Article 18): The right to request the restriction of data processing
under specific circumstances.
· Right to Data Portability (Article 20): The right to receive your data in a structured, machine-readable
format.
· Right to Object (Article 21): The right to object to data processing based on legitimate interests or for
direct marketing.
· Right to Withdraw Consent: The right to withdraw your consent at any time, without affecting the
lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights: You can contact us at info@energen-de.com to exercise the above rights. We will
respond to your request within one month. You also have the right to lodge a complaint with a supervisory
authority (such as the State Commissioner for Data Protection and Freedom of Information Baden
Württemberg, Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

Under the GDPR, you have the following rights regarding your personal data:

· Right of Access (Article 15): The right to request a copy of the personal data we hold about you.
· Right to Rectification (Article 16): The right to request the correction of inaccurate or incomplete data.
· Right to Erasure (Article 17): The right to request the deletion of your data under specific conditions (“right to be forgotten”).
· Right to Restriction of Processing (Article 18): The right to request the restriction of data processing under specific circumstances.
· Right to Data Portability (Article 20): The right to receive your data in a structured, machine-readable
format.
· Right to Object (Article 21): The right to object to data processing based on legitimate interests or for direct marketing.
· Right to Withdraw Consent: The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights: You can contact us at info@energen-de.com to exercise the above rights. We will respond to your request within one month. You also have the right to lodge a complaint with a supervisory authority (such as the State Commissioner for Data Protection and Freedom of Information Baden Württemberg, Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

6. Cookie Policy

This Website uses the following categories of Cookies:

1、Strictly Necessary Cookies: Essential for the basic functions and security of the website. Such
Cookies cannot be disabled.
2、Analytics and Preference Cookies: Help us understand visitor behavior and remember your
preference settings. Such Cookies are set only after obtaining your prior consent.

Managing Cookies: You can manage or disable Cookies through your browser settings. Please note that
disabling certain Cookies may affect the functionality of the website. We use a Cookie consent banner on this
Website to obtain and record your preferences, thereby complying with GDPR and ePrivacy Directive
requirements.

This Website uses the following categories of Cookies:

1、Strictly Necessary Cookies: Essential for the basic functions and security of the website. Such Cookies cannot be disabled.
2、Analytics and Preference Cookies: Help us understand visitor behavior and remember your preference settings. Such Cookies are set only after obtaining your prior consent.

Managing Cookies: You can manage or disable Cookies through your browser settings. Please note that disabling certain Cookies may affect the functionality of the website. We use a Cookie consent banner on this Website to obtain and record your preferences, thereby complying with GDPR and ePrivacy Directive
requirements.

7. Children's Privacy

This Website and services are directed at corporate clients (B2B). We do not knowingly collect personal data
from children under 16 years of age. If we become aware that we have collected such data, we will
immediately take steps to delete it.

This Website and services are directed at corporate clients (B2B). We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected such data, we will immediately take steps to delete it.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
Material changes will be communicated via a prominent notice on this Website prior to becoming effective.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be communicated via a prominent notice on this Website prior to becoming effective.

9. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices,
please contact us via:

· Email: info@energen-de.com
· Mailing Address: Albert-Einstein-Straße 2, 70806 KORNWESTHEIM
We are committed to addressing any issues promptly and appropriately in accordance with applicable data
protection regulations.

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices, please contact us via:

· Email: info@energen-de.com
· Mailing Address: Albert-Einstein-Straße 2, 70806 KORNWESTHEIM We are committed to addressing any issues promptly and appropriately in accordance with applicable data protection regulations.

10. Language Prevailing Clause

This Privacy Policy is provided in multiple languages. In the event of any conflict or inconsistency between the
Chinese version and the English or German version, the English (or German) version shall prevail.

This Privacy Policy is provided in multiple languages. In the event of any conflict or inconsistency between the Chinese version and the English or German version, the English (or German) version shall prevail.