Privacy Policy

Privacy information for the use of the website

We, the company EnBW Energie Baden-Wuerttemberg AG, take the protection of your personal data very seriously. In the following we would like to inform you about which personal data we collect when you visit our website, how we process this data and what rights you have in connection with your personal data.

1. Who is responsible for the processing of my data?

Responsible for the processing of your data is:

EnBW Energie Baden-Württemberg AG
Durlacher Allee 93
76131 Karlsruhe

Telephone exchange: +49 (0)721 63-00
Customer service number: +49 (0)721 72586-001

If you have any questions, suggestions or complaints, you can contact us using the contact details above.

2. How can I contact the data protection officer?

You can contact our data protection officer at He will be happy to answer any questions you may have about data protection.

3. How will my data be processed when I visit the website?

We collect and process your data only if we have either received your consent for data processing or processing is legally permitted.

3.1 Collection of technically necessary data and log files

If you visit our website for information purposes only, i.e. do not register or otherwise transmit data (e.g. via a contact form), we collect the data that your browser transmits to us. In detail, these are the following data:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • The amount of data transferred in each case
  • Website from which you visit us (referrer URL)
  • Website you are visiting
  • Browser type and version used
  • Operating system and its interface
  • Language and version of the browser software

This data is collected and processed in order to display the website, to ensure and improve stability and for security reasons. The legal basis for this processing is art. 6 para. 1 f) GDPR (General Data Protection Regulation). The collection of this data as well as the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.

If you use offers on our web pages, which require a registration, further data are stored. Information on registration can be found in the “Registration” section of the Terms of Use.

3.2 Use of cookies

In addition, cookies are used when you visit our website. Cookies are small text files that are stored on your computer by us or by another website (more detailed information can be found in the description of our analysis procedures below) and through which specific information flows to the respective website setting the cookie. Cookies are always assigned to the browser. By using cookies, it is not possible to run programs or transfer viruses to your PC.

You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third party cookies or all cookies. However, this may result in you not being able to use all functions of our website. You are also free to delete all cookies at any time using your browser settings.

3.2.1 Use of technically necessary cookies

We use technically necessary cookies to make our website more user-friendly and effective. In detail, the following data is stored in the cookies and transmitted to us:

  • Log in Information
  • Form data
  • Search configurations
  • Contradictions and consents to the processing of information

The legal basis for this data processing is art. 6 para. 1 f) GDPR. The use of these cookies is intended to facilitate your use of our website. Some functions of our website do not function without the use of these cookies and could therefore not be offered. Our legitimate interest in the processing of cookies arises from the aforementioned purposes. The cookies are deleted after the end of the session (e.g. logging out or closing the browser) or after a specified period.

3.2.2 Use of technically unnecessary cookies

In addition, we also use cookies which enable us to analyse the user behaviour of visitors to our website. In detail, the following data is stored in the cookies and transmitted to us:

  • Click flows (this means that we record which of our pages you have viewed)
  • Entered search terms
  • Duration of stay on the individual websites
  • Use of website functions

The legal basis for this data processing is art. 6 para. 1 f) GDPR and § 15 para. 3 TMG (German Telemedia Act). The use of the analysis cookies allows us to optimise our websites and make them more tailored to your needs. These purposes also justify our legitimate interest in the processing of these data. The analysis cookies are deleted after a specified period of time.

3.3 Use of technically unnecessary cookies and pixels based on consent

3.3.1 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses so-called “cookies”, which are text files placed on the user’s end device, and which make it possible to analyse how users use the site. The information generated by the cookie about the use of this website by users is generally transmitted to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, Google will shorten the IP addresses of users within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website.

On our behalf, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide us as the website operator with further services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. The legal basis for this data processing is art. 6 para. 1 f) GDPR and art. 15 para. 3 TMG. Our legitimate interest arises from the aforementioned purposes.

You can prevent the storage of cookies by adjusting your browser software accordingly. Users can also prevent Google from collecting data generated by the cookie and relating to their use of the website (including their IP address) and they can prevent Google from processing this data by downloading and installing the browser plug-in available under the following link:

As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is then stored on your device. Please note that the opt-out cookie only works in the browser in which it was set. Even if you delete your cookies, you must click this link again.

3.3.2 Google Adwords

As an AdWords customer, we also use Google Conversion Tracking on our website. This is an analysis service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). As part of this service, Google AdWords sets a cookie on your computer (“conversion cookie”) when you visit our website via a Google advertisement. These types of cookies expire after 30 days and are not used to personally identify you.

If you visit certain pages of ours and if the cookie has not yet expired, it is possible for us and for Google to recognize with the help of this cookie that someone has clicked on the advertisement and has thus been forwarded to our page. Since each AdWords customer receives a different cookie, it is not possible to track the cookie on websites of other AdWords customers. The purpose of using the conversion cookie is to use the information collected to generate conversion statistics for AdWords customers.

As an AdWords customer, we only see the total number of users who clicked on our advertisement and were redirected to a page with a conversion tracking tag. However, we do not receive any information that would enable us to identify a user personally. The legal basis for this data processing is art. 6 para. 1 f) GDPR and art. 15 para. 3 TMG.

If you do not wish to participate in this tracking process, you can refuse the setting of the conversion cookie. This is done by configuring your browser settings according to your wishes and, for example, rejecting the acceptance of third party cookies or all cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the “” domain. Please note that the browser settings you make only work in the relevant browser.

3.3.3 Use of a contact form

If you contact us via a form on, this is basically done with 128-bit encryption. If you do not use the EnBW contact forms, but your private e-mail account, please note that you must take your own security measures to ensure the confidentiality of your message. Therefore, please use the encrypted forms of EnBW. If the form is not encrypted, there is a technical problem and we cannot assume any liability for the security of your data transmission. You can see whether a form is encrypted by the closed “lock” symbol in your browser window. Depending on the content of your request, the legal basis for this data processing is art. 6 para. 1 b), f) or a) GDPR. We will delete the data you send us by means of your inquiry after reaching the respective purpose. If the transmitted inquiry refers to a contract concluded with us, your inquiry will be deleted as explained in the data protection information of the respective contract. You can find the data protection information for your respective contract here.

3.3.4 Hubspot

On this website, we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

This is an integrated software solution that we use to cover various aspects of our online marketing. These include:

Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, hits, etc. …), contact management (e.g. user segmentation & CRM), landing pages and contact forms.

Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures.

The legal basis for the use of Hubspot’s services is your consent in accordance with Art. 6 I a) DSGVO.

More information about the privacy policy of HubSpot ”

More information from HubSpot regarding EU data protection regulations ”

More information about the cookies used by HubSpot can be found here & here ”

3.3.5 Hotjar

We use “Hotjar” on our website, a web analytics service provided by Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (hereinafter referred to as: “Hotjar”). Among other things, Hotjar uses cookies, i. e. small text files that are stored locally in the cache of your web browser on your terminal device and that enable an analysis of your use of our website, as well as a so-called tracking code. The cookies used by Hotjar are stored on your end device for different lengths of time, in some cases only during your visit, in others for 365 days. The information collected in this way is transmitted and stored to Hotjar on a server in Ireland. The following information is collected by the tracking code:

Device-dependent data collected by your end device and web browser:

  • IP address of your end device (collected and stored in an anonymized format)
  • E-mail address including your first and last name, if you have provided it to us via our website
  • Screen size of your end device
  • Device type and browser information
  • Geographical data (country only)
  • Language used to display our website
  • User interactions
  • Mouse commands (movement, position and clicks)
  • Keystrokes

Log data automatically used by our server when using Hotjar:

  • Referring domain
  • Visited web pages
  • Geographic data (country only)
  • Language used to display our website
  • Date and time of access

Hotjar uses this information to evaluate your use of our website, compile reports on usage, and provide other services related to the evaluation of our website. Hotjar also uses third-party services (e. g., Google Analytics and Optimizely) to provide services. These third parties may store or otherwise process information that your browser transmits when you visit our website (which may include your IP address).

We use Hotjar for the purpose of analysing the use of our website and to be able to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating a storage of cookies in the settings of your web browser. We point out, that in this case you may not be able to use all features of our website in total. You can also prevent the collection of data by Hotjar by setting an opt-out cookie on the website linked below: Please note that this setting will be deleted when you delete your cookies.

Third party provider information: Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta. For more information about Hotjar’s data use, setting and opt-out options and data protection, please visit the following Hotjar website:

3.3.6 Newsletter

On our website you have the possibility to subscribe to a newsletter. Should you do this, we will inform you about our offers at regular intervals. To subscribe to the newsletter, you must provide us with a valid e-mail address and register to receive the newsletter. We will then check your e-mail address to make sure that you really are the owner of this e-mail address and that you have access to the specified e-mail account (double opt-in procedure).

Furthermore, we use your e-mail address exclusively for sending the newsletter. When you register for our newsletter, we log your IP address, the date and time of your registration for verification purposes. The data collected when ordering the newsletter will not be combined with other data collected via our website, unless you have given us your consent to do so. The legal basis for this data processing is your consent to receive the newsletter (art. 6 para. 1 a) GDPR). If you no longer wish to receive the newsletter, you can unsubscribe at any time. Simply click the unsubscribe link at the end of each newsletter. By doing so, you revoke your consent to receive the newsletter. The legality of data processing up to the time of revocation remains unaffected by this.

Your data collected in connection with the newsletter will be deleted 3 years after the end of the year in which you unsubscribed.

3.3.7 Youtube

On our website, we use a service from YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA for the integration of videos. The videos are stored at You can play these videos directly from our website. The videos are all embedded in “enhanced privacy mode”, which means that no information about you as a YouTube user will be stored unless you play the videos. Nevertheless, YouTube will contact Google’s Double Click service and, according to YouTube, no data will be stored in this case. Only when you play the videos will your IP address and the information that you have watched the video be saved by YouTube. If you are logged in to YouTube, this information is also assigned to your YouTube user account. If you do not wish this to happen, you will need to log out of your YouTube account before playing the video. We have no influence on the data recording and processing by YouTube. You can find more detailed information about the data processing by YouTube in their privacy policy. You can find this at

3.3.8 LinkedIn

Our website uses functions of the LinkedIn network. Named provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you press the “Recommend button” of LinkedIn and you are logged into your account on LinkedIn, it is possible for LinkedIn to assign your visit to yourself and your user account on our website. We would like to point out that we, as the provider of the pages, have no knowledge about the content of the transmitted data or its use by LinkedIn.

For more information, please refer to the LinkedIn privacy policy at:

3.4.9 Facebook Pixel, Facebook Custom Audiences and Facebook Conversion Tracking

Facebook Pixel is used on our websites. This is a JavaScript code snippet that enables us to track the activities of our website visitors. The Facebook Pixel is used by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The use of the Facebook pixel as well as the storage of “conversion cookies” is only carried out if you have given your consent to the use of cookies and similar procedures when visiting our website. The legal basis is Art. 6 para. 1 lit. a GDPR.

With the help of the Facebook pixel, Facebook is able to determine you as a target group for the display of advertisements (so-called “Facebook ads”) by visiting our online offer. In order to make this possible, we use the Facebook pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics. A certain characteristic could for example be the interest in a certain product, which could be defined by the website visit. The information collected is transmitted to Facebook (so-called “customer audiences”). We do not have access to this information ourselves. With the help of the Facebook pixel, we want to ensure that our Facebook advertisements match the potential interest of the users. We can also use the Facebook Pixel to track the impact of Facebook Ads for statistical and market research purposes by seeing whether network visitors have been redirected to our website after clicking a Facebook ad (so-called “conversion tracking”).

Example 1 for custom audiences (remarketing): you visit our website, are interested in an electricity tariff and Facebook provides you with further relevant information on the respective product for us via a Facebook advertisement at a later date, based on your interests. The advertising offer tailored to your interests will be displayed on Facebook, Instagram or on other websites cooperating with Facebook.

A special form of customer audiences are the so-called “lookalike audiences”. With this method, not the actual website visitors are addressed, but network members with comparable profile characteristics. This means that the advertising message is not displayed to the website visitor, but to the so-called “lookalikes”. Comparable profile characteristics can include age, place of residence or interests.

Example 2 for custom audiences (lookalikes): you visit our website and are interested in an electricity tariff. Based on your interest in our product and your profile characteristics, Facebook will display advertisements on Facebook, Instagram or other websites cooperating with Facebook that resemble your profile.

When using the Facebook pixel, the following information is passed on to Facebook:

  • HTTP header information: e.g. IP address, web browser information, page location, document, referrer.
  • Pixel-specific data: this includes the pixel ID and Facebook cookie data
  • Standard and user-defined data events – e.g:
  • Visit to our websites
  • Interactions with certain website content (e.g. articles)
  • Price enquiries made
  • Degrees awarded

The Facebook pixel, which is integrated into our website and on partner pages of Facebook, also recognises whether you are the owner of a Facebook account and are using it on the basis of the Facebook cookies set. Via the Facebook pixel, the generated data about your usage behaviour is forwarded to Facebook. Your Facebook ID is also transferred, which enables a data link on Facebook pages. If you would like to check this data recording, further processing and the general use of the data and/or deactivate this procedure, you can do this directly in the settings of your Facebook account.

Privacy policy of Facebook

Data processing by Facebook is carried out in accordance with the Facebook Data Usage Guidelines. Accordingly, you will find general information on the presentation of Facebook advertisements in the Facebook Data Usage Guidelines. Further information on the Facebook pixel can be found in the Facebook help section.

Revocation and other privacy settings

You can revoke the consent you have given at any time. If you wish to revoke the consent you have given, please click here. This will delete the Facebook pixel.

In order to set directly on Facebook which types of advertisements are displayed to you within Facebook, you can access the page set up by Facebook and follow the instructions there on the settings for usage-based advertising. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. You can also object to the use of cookies for audience measurement and advertising purposes via the deactivation page of the Network Advertising Initiative  and additionally via the US website  or the European website

3.3.10 Data processing on the basis of legal obligations

In so far as we are subject to legal obligations, which make further processing of your data necessary, we will also process your data for the purposes intended by the legislator in each case. The legal basis for this data processing is Art. 6 Para. 1 c) DSGVO in conjunction with the standard which contains the respective legal obligation.

3.3.11 Data processing on the basis of consent given

In addition to the purposes explicitly stated here, data processing will take place if and to the extent that you have consented to data processing in accordance with Art. 6 Para. 1 a) DSGVO. The purposes of the data processing result from the respective consent.

4. To which categories of recipients will my data be transmitted?

We treat your data confidentially. Within the EnBW Energie Baden-Wuerttemberg AG, only those departments and employees who require access to your data in order to fulfil the above-mentioned purposes are actually granted access.

Personal data will only be transmitted by us to third parties if this is necessary for the aforementioned purposes and legally permitted or if you have given your prior consent.

In addition to the recipients already named above, we make use of the assistance of other service providers (contractors) to fulfil our obligations. The following recipient categories can receive data:

  • IT service providers
  • Survey service providers
  • Call centres
  • Marketing service providers
  • Analysis specialists
  • File and data carrier disposal specialists
  • Authorities
  • Legal guardians and persons who have a power of attorney

Personal data is also only transferred to other affiliated companies if there is a legal basis for this and this is necessary for one of the purposes mentioned above.

5. What do I have to consider from a data protection perspective when using links?

Our website may contain links to other providers to whom our data protection regulations do not apply.

6. How safe is my data?

EnBW uses state-of-the-art technical and organizational security measures to protect the data you provide us from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

7. What applies to children’s data?

We strongly encourage parents to accompany their children’s online activities. Children should not transmit any personal data to us without the consent of their parents or legal guardians. We do not knowingly request or process personal data from children.

8. What rights do I have with regard to my data?

With regard to the processing of your personal data, you have the right pursuant to art. 15 GDPR to request information about your personal data processed by us. Furthermore, you have the right to have data corrected in accordance with article 16 GDPR or deleted in accordance with article 17 GDPR and to restrict processing in accordance with article 18 GDPR. Furthermore, in accordance with article 20 GDPR, you have the right to demand the handing over of the personal data provided by you in a structured, current and machine-readable format. With regard to the right to information the restrictions of article 34 BDSG (German Data Protection Act) and with regard to the right of cancellation the exceptions of article 35 BDSG apply.


If we process your data on the basis of legitimate interests (art. 6 para. 1 f) GDPR) or to perform a public task (art. 6 para. 1 e) GDPR) and if reasons against this processing arise from your particular situation, you have the right to object to this processing in accordance with art. 21 para. 1 GDPR. In the event of an objection, we will no longer process your data for these purposes, unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

You have the right of objection – without restriction – pursuant to art. 21 para. 2 and 3 GDPR against any kind of processing for direct advertising purposes.

You can address your objection to us at any time requiring no particular form. For the best possible processing, please use the following contact data:

EnBW Energie Baden-Württemberg AG
Durlacher Allee 93
76131 Karlsruhe

Telephone exchange: +49 (0)721 63-00
Customer service number: +49 (0)721 72586-001

Please note that you can only implement your objection to the use of tracking procedures on our website yourself. It is technically not possible to do this centrally. For each tracking procedure where you have to implement the objection yourself, we have attached a statement above.

9. Can I revoke my consent?

If we process your data on the basis of a consent given by you, you have the right to revoke your consent at any time. Your data will then no longer be processed for the purposes covered by the consent. Please note that the legality of the data processing, which took place before the revocation, is not affected by the revocation. For more information on how you can explain your revocation in detail, please refer to the previous information or the information in the respective consent. Please address your revocation to:

EnBW Energie Baden-Württemberg AG
Durlacher Allee 93
76131 Karlsruhe

Telephone exchange: +49 (0)721 63-00
Customer service number: +49 (0)721 72586-001

Here your revocation – if technically possible – is implemented directly centrally or you will find an explanation how you can implement the revocation yourself, since a central implementation by us is not possible for some technical procedures.

10. Do I have a right of appeal to a supervisory authority?

If you believe that the processing of your personal data violates applicable law, you can complain to a data protection supervisory authority at any time in accordance with art. 77 GDPR. This is without prejudice to other administrative or judicial remedies.

11. Do I have to provide the data or is the provision of data necessary for the conclusion of the contract?

With the exception of the technically necessary data for displaying our website, any provision of data by you is voluntary. Should this be different in exceptional cases, this is explicitly mentioned in the appropriate section of this declaration.

12. Will my data be used for automated decision making? And if so, how is this done and what are the consequences for me?

No, automated decision making does not take place.

13. Can this information be changed? And if so, how do I find out about this?

As our data processing is subject to change, we will also adjust our data protection information from time to time. We will inform you of any changes in good time. You will find the current version of these data protection regulations here.