Privacy policy
This English version is provided for convenience. The German version is legally binding.
Privacy policy for the website www.fion-energy.com
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
FION Energy GmbH
c/o Mindspace
Münzstraße 12
10178 Berlin, Germany
hello@fion-energy.com
2. Data collection on our website
2.1 Server log files
The provider of these pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. This information comprises:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data cannot be attributed to specific individuals. It is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.
2.2 Cookies and local storage
With your consent, our website uses optional analytics and marketing tools that rely on cookies and similar technologies (see sections 2.5 to 2.7). These tools are loaded only if you have given your consent in the cookie banner. Without your consent, no tracking cookies are set.
We store your cookie preference (consent or refusal) in your browser’s local storage so that the cookie banner is not shown to you again on every page view. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer.
Legal basis for the analytics tools: Art. 6(1)(a) GDPR (consent).
Legal basis for storing the cookie preference itself: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation).
2.3 Hosting with Cloudflare
This website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). To provide the website, Cloudflare processes technically necessary connection data (see section 2.1). We have concluded a data processing agreement with Cloudflare; data is transferred to the USA on the basis of the European Commission’s standard contractual clauses.
Purpose of processing: Provision and delivery of the website, DDoS protection, secure data transmission
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Cloudflare’s privacy policy: https://www.cloudflare.com/de-de/privacypolicy/
2.4 Contact form (Web3Forms)
If you use our contact form, the data you enter (name, email address, phone number, message) is processed via the Web3Forms service and forwarded to our email inbox. Web3Forms is a product of the provider Web3Creative (Kerala, India); processing takes place on servers in the USA. According to the provider, Web3Forms does not store the form data permanently but forwards it to us immediately; server logs are deleted by the provider at regular intervals. The data is used solely to handle your enquiry and is not passed on to third parties for any other purpose.
Purpose of processing: Handling of contact enquiries
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
Transfer to third countries: The transfer to the USA or India is based on Art. 49(1)(b) GDPR, as it is necessary for the implementation of pre-contractual measures taken at your request
Web3Forms’ privacy policy: https://web3forms.com/privacy
2.5 Google Analytics 4
If you have given your consent in the cookie banner, our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies (including _ga, _gid) that enable a pseudonymised analysis of your use of the website. We have activated IP anonymisation (anonymize_ip: true); your IP address is therefore truncated before it is stored. We have concluded a data processing agreement with Google; any transfer to the USA takes place on the basis of the European Commission’s standard contractual clauses.
Purpose of processing: Audience measurement, analysis of user behaviour to improve the website
Legal basis: Art. 6(1)(a) GDPR (consent)
Tracking ID: G-BR0LJBLE55
Storage period: up to 14 months
Withdrawal of consent: at any time via the “Cookie settings” link in the footer
Google’s privacy policy: https://policies.google.com/privacy
2.6 Microsoft Clarity
If you have given your consent in the cookie banner, our website uses Microsoft Clarity, an analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA). Clarity collects pseudonymised usage data in the form of session replays (recordings of mouse movements, clicks and scrolling behaviour during the website session) and aggregated heatmaps. Entries in form fields are masked by default. Cookies are set (including _clck, _clsk, MUID). Data is transferred to the USA on the basis of the European Commission’s standard contractual clauses.
Purpose of processing: Analysis of the user experience and improvement of usability
Legal basis: Art. 6(1)(a) GDPR (consent)
Tracking ID: vui2fwkbok
Withdrawal of consent: at any time via the “Cookie settings” link in the footer
Microsoft’s privacy policy: https://privacy.microsoft.com/de-de/privacystatement
2.7 Pipedrive Leadfeeder
If you have given your consent in the cookie banner, our website uses Pipedrive Leadfeeder (Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia). Leadfeeder uses the IP address of your internet connection to identify the company from which the website is being visited (reverse IP lookup based on publicly available databases). Private individuals are not identified in this way. Cookies are set to recognise returning sessions.
Purpose of processing: Identification of companies interested in our services for targeted business development (B2B lead identification)
Legal basis: Art. 6(1)(a) GDPR (consent)
Tracking ID: DzLR5a5AvNWaBoQ2
Withdrawal of consent: at any time via the “Cookie settings” link in the footer
Pipedrive Leadfeeder’s privacy policy: https://www.leadfeeder.com/privacy/
2.8 Vimeo (embedded videos)
Our website embeds videos from the provider Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA). The videos are loaded only once you actively consent: either by accepting in the cookie banner or by clicking the placeholder of the video concerned. Before you consent, no connection is made to Vimeo’s servers. Your IP address is transmitted to Vimeo only when a video is loaded; Vimeo may set technically necessary cookies at that point. We embed the videos in enhanced privacy mode (“Do Not Track” parameter), which prevents Vimeo from collecting session data and carrying out analytics tracking. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework, under which Vimeo is certified.
Purpose of processing: Display of customer case study videos
Legal basis: Art. 6(1)(a) GDPR (consent)
Withdrawal of consent: at any time via the “Cookie settings” link in the footer; videos that have already been loaded are blocked again on your next page view
Vimeo’s privacy policy: https://vimeo.com/privacy
Privacy policy for the SaaS application app.fion-energy.com
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
FION Energy GmbH
c/o Mindspace
Münzstraße 12
10178 Berlin, Germany
hello@fion-energy.com
2. Data collection in our software
2.1 Hosting with AWS
Our software is hosted by Amazon Web Services (AWS) in the eu-central-1 region (Frankfurt am Main). All data that you enter into our software is stored and processed on AWS servers. AWS is contractually obliged to process the data only in accordance with our instructions and has undertaken to comply with the requirements of the GDPR.
2.2 Services used
Datadog: For monitoring the performance and availability of the software.
Google Analytics: For analysing user behaviour.
Hotjar: For optimising our offering and the user experience.
Highcharts: For displaying data visualisations.
Stripe: For processing payments.
Airtable: For managing data.
Google Workspace: For processing emails and documents.
Google Firebase: For supporting app development and improving the user experience.
Google Cloud Platform (GCP): For providing cloud services and infrastructure.
Trello: For organising and managing projects.
Crmble: For managing customer relationships.
General provisions
3. Rights of data subjects
You have the right of access, the right to rectification, erasure, restriction of processing and data portability, the right to withdraw your consent and the right to object. If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been infringed in some way, you can lodge a complaint with the supervisory authority.
4. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always meets current legal requirements, or to reflect changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.
5. Contact
If you have any questions about the processing of your personal data or about this privacy policy, you can reach us using the contact details provided above.