Privacy Policy

The controller within the meaning of the EU General Data Protection Regulation, the Hessian Data Protection and Freedom of Information Act (HDSIG), and other national data protection laws of the member states as well as other data protection regulations is:

LEA LandesEnergieAgentur Hessen GmbH
Mainzer Str. 118
65189 Wiesbaden
Tel. +49 611 950178400
Email: lea@lea-hessen.de
Represented by: Dr. Karsten McGovern

You can reach the data protection officer for the controllers as follows::

SCHIEDERMAIR Beratungsgesellschaft für Datenschutz mbH
Eschersheimer Landstraße 60
60322 Frankfurt am Main
Email: datenschutzbeauftragter@hessen-agentur.de or info@schiedermair-datenschutz.com
Phone: +49 69 95508-400
Fax: +49 69 95508-401

Personal Data

Personal data means all information relating to an identified or identifiable natural person. We describe below how we process your personal data.

1. Storage of usage data for providing the website

Description and scope of data processing: When you visit our website, information from your system is automatically collected, including the IP address used, browser type, operating system, pages visited, and the time of your visit. The collection and storage of system information in log files is essential for providing the website.

Legal basis for the data processing: Our legitimate interest under Art. 6(1)(f) GDPR.

Purpose: The processing of the IP address you use is necessary to deliver the website to your computer. The purpose of storing in log files is to ensure the functionality and stability of our IT system. In the purposes stated above lies our legitimate interest in data processing under Art. 6(1)(f) GDPR. An evaluation of the information for analytics or marketing purposes does not take place in this context."

Retention: The data will be deleted as soon as the purpose for which they were collected ceases to apply. This is the case when the respective session ends. The log files’ stored data will be deleted no later than seven days after collection.

2. Contact by email

Description and scope: If you contact us via the provided email address, the personal data transmitted will be stored. In processing your email inquiry, it may be necessary to request additional data and information from you. If you do not wish to provide the further information in such a case, there are no adverse consequences. However, it is possible that failing to provide the requested information makes handling your inquiry more difficult or impossible.

To answer your questions, depending on the matter, it may be necessary to forward data about you to the Fraunhofer Institute for Energy Infrastructures and Geotechnologies IEG (an institution of the Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V.) or to other authorities within state administration, federal or municipal authorities.

Legal basis: The legal basis for processing the data transmitted in the course of sending an email is Art. 6(1)(e) GDPR in conjunction with § 3(1) HDSIG when we are performing a public-interest task or, if not, Art. 6(1)(f) GDPR. Our legitimate interest is to respond to your email inquiry. If the email contact aims at concluding a legal relationship or relates to an existing legal relationship with us, the additional legal basis for processing is Art. 6(1)(b) GDPR.

Purpose: The processing serves to handle your email inquiry.

Retention: The data are deleted when the conversation ends.

3. Not accessible content reporting form

Description and scope of data processing: By submitting the provided form for reporting non-accessible content on our internet offering, the data you enter are transmitted to us and stored. At submission time, the IP address you used, and the date and time of the report, are also stored. Providing the data is voluntary. If these are mandatory fields, failure to provide them may prevent processing of the report.

Legal basis: With the reporting form we fulfill our legal obligation to provide an accessible internet offering and electronically report existing barriers per Art. 6(1)(c) GDPR in conjunction with § 4(2) No. 2 Hessian Regulation on Accessible Information Technology.

Purpose: The processing of personal data from the reporting form is used solely to handle your report.

Retention: The data are deleted as soon as they are no longer necessary for the purpose for which they were collected. For personal data from the input fields, this is the case when the respective report has been recorded and you have been answered within the statutory period (currently six weeks). After that, the data are deleted unless statutory or contractual obligations, in particular retention periods, oppose deletion. The additional personal data collected during submission are deleted no later than seven days.

4. Use of functional (technically necessary) cookies

Description and scope of data processing: To make visiting our online offering attractive and to enable the use of certain functions, we use technically necessary cookies on various pages. These are small text files stored on your device.

Technically necessary cookies can also be used to enable the use of additional tools from third-party providers, such as for usage analysis or for evaluating and delivering marketing measures and to manage your consent.

Browser settings: You can configure your browser to inform you about cookies and to decide individually whether to accept them or to exclude acceptance for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited. The following links show how to adjust settings in common browsers:

Multiple devices: If you use multiple devices to access our online offering (e.g., computer, smartphone, tablet), ensure the cookie settings you want are set in each browser and on each device.

Legal basis: Where personal data are processed using technically necessary cookies, the legal basis is Art. 6(1)(f) GDPR, § 25(2) TDDDG.

Purpose: The purpose of using technically necessary cookies is to make visiting our website attractive and to enable the use of certain functions, such as language selection or recognizing the browser after registration in a site's member area. Without technically necessary cookies, the site’s features cannot be offered. This is our legitimate interest under Art. 6(1)(f) GDPR.

User data collected by cookies are not used to create user profiles.

Retention: We use session cookies. A session cookie is deleted automatically after the browser is closed.

5. Automated decision-making including profiling

There is no automated decision-making including profiling.

6. Your rights

If your personal data are processed, you have the following rights:

  • Right of access: You have the right, under Art. 15 GDPR, § 52 HDSIG, to request information about the personal data we process about you.
  • Right to rectification: Under Art. 16 GDPR, § 53 HDSIG, you have the right to immediately correct inaccurate or incomplete data.
  • Right to erasure: Under Art. 17 GDPR and § 53 HDSIG, you have the right to request deletion of your data.
  • Right to restriction: Under Art. 18 GDPR, § 53 HDSIG, you have the right to request restriction of processing of your personal data.
  • Right to data portability: Under Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
  • Right to lodge a complaint:If you believe data protection rules have not been observed in the processing of your data, you have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. Usually you may contact the supervisory authority at your usual place of residence or workplace or at our headquarters. The competent supervisory authority for this case is: The Hessian Data Protection Officer, Visitor address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Postal address: P.O. Box 3163, 65021 Wiesbaden, Email: Poststelle@datenschutz.hessen.de, Tel.: +49 611 1408-0.

You also have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR. If your data are processed for direct marketing, you have the right to object at any time to such processing. Any consents you have given for the processing of your personal data may be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal. You may send a withdrawal to the email address provided at registration/purchase or to datenschutzbeauftragter@hessen-agentur.de or by postal mail to the address above.

General information on data protection is also available on the Hessian Data Protection Officer's website: www.datenschutz.hessen.de.

7. Security in data transmission

Data transmission over the Internet cannot be guaranteed to be fully secure. We use appropriate technical and organizational security measures to protect your data.

8. Change of our privacy policy

We reserve the right to change this privacy policy from time to time to adapt it to current legal requirements or to reflect changes in our services and features on the website.

Version: November 2025