• Free shipping from €39 within Germany
  • Service hotline +49 931 760 260 40
  • Personal advice from a specialist retailer

Privacy policy

Privacy Policy

With this privacy policy, we inform you which personal data we process when you visit our online shop and when you place an order, for which purposes and on what legal basis this takes place, and what rights you have. The legal bases are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

The controller for data processing on this website is:

NeueEnergie24 GmbH
Raiffeisenstr. 8
97209 Veitshöchheim
Germany
Telephone: +49 931 760 260 40
Email: kontakt@energie24.shop

Authorised managing directors: Daniel Schmidt, Florian Hertlein. Commercial register: Amtsgericht Würzburg (Local Court of Würzburg), HRB 16491. VAT identification number: DE356978883.

2. Data protection contact

If you have questions about data protection or about exercising your rights, you can reach us at kontakt@energie24.shop or at the address stated above.

3. General information on data processing, legal bases

We process personal data only to the extent that this is necessary to provide our online shop, to handle orders and to answer enquiries, or you have given your consent. The legal bases are in particular:

  • Art. 6(1) sentence 1 point (a) GDPR (consent),
  • Art. 6(1) sentence 1 point (b) GDPR (performance of a contract and pre-contractual measures),
  • Art. 6(1) sentence 1 point (c) GDPR (legal obligation, for example retention obligations under commercial and tax law),
  • Art. 6(1) sentence 1 point (f) GDPR (legitimate interests),
  • for storing and accessing information on your terminal equipment, Section 25(1) TDDDG (consent) and Section 25(2) no. 2 TDDDG (strictly necessary).

We delete data as soon as the purpose of storage no longer applies and no statutory retention obligations stand in the way. We retain documents relevant under commercial and tax law in accordance with Section 257 HGB, Section 147 AO and Section 14b UStG: commercial and business letters for six years, invoices and accounting vouchers for eight years, books of account and annual financial statements for ten years.

4. Hosting and shop system (Shopify)

Our online shop is operated on the Shopify platform. The provider for customers in the European Union is Shopify International Ltd., c/o Intertrust Ireland, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland; the parent company is Shopify Inc., Ottawa, Canada. Shopify processes data of the visitors and customers of our shop on our behalf (commissioned processing under Art. 28 GDPR). This includes in particular order and customer data, payment and shipping data, technical access data and data from the use of the shopping cart and checkout.

When you access our shop, Shopify processes technically necessary access data (for example IP address, date and time, page accessed, browser and device information) in order to deliver the pages, ensure security and prevent misuse. The legal basis is Art. 6(1) sentence 1 point (f) GDPR. Our legitimate interest lies in the secure and stable operation of the shop.

Shopify may also transfer personal data to countries outside the European Economic Area, in particular to Canada and the USA. For Canada, there is an adequacy decision of the European Commission. Otherwise, according to its own statements, Shopify relies on standard contractual clauses of the European Commission. You can find further information in the Shopify privacy policy.

Where Shopify processes data under its own responsibility for certain services (for example Shop Pay, the customer account at "Shop" or certain network and analytics functions), the Shopify privacy policy applies in that respect.

5. Cookies and similar technologies, consent management

We use cookies and similar technologies. Cookies are small text files that are stored in your browser.

Strictly necessary cookies: These cookies are necessary for the shop to function, for example for the shopping cart, the language and currency selection, the checkout and security. The legal basis is Section 25(2) no. 2 TDDDG; the subsequent data processing is based on Art. 6(1) sentence 1 points (b) and (f) GDPR. Consent is not required for this.

Analytics and marketing technologies: We use all other technologies (see section 12) only with your consent (Section 25(1) TDDDG, Art. 6(1) sentence 1 point (a) GDPR). When you first visit, a banner appears in which you can accept all technologies, reject them or set them individually. Rejecting is as easy as accepting. Your consent is voluntary. You can withdraw or change it at any time with effect for the future by reopening and changing your selection via the "Privacy settings" link in the footer of the website (every page).

6. Orders and contract performance

When you order from us, we process the data required for contract performance: name, billing and delivery address, email address, telephone number (where provided, for example for arranging an appointment for freight deliveries), order data, payment data and, where applicable, company and tax details. The legal basis is Art. 6(1) sentence 1 point (b) GDPR. Providing this data is necessary for the conclusion of the contract. Without it, we cannot carry out the order. Due to tax and commercial law requirements, we store order and invoice data for the duration of the statutory retention periods (Art. 6(1) sentence 1 point (c) GDPR).

You can order as a guest or create a customer account. With a customer account, we store your account data and order history until you have the account deleted, unless statutory retention obligations stand in the way.

We transmit data to third parties only to the extent that this is necessary for contract performance, for example to payment service providers, shipping service providers and service providers for accounting and inventory management (see the following sections).

7. Payment service providers

For payment processing, we use payment service providers depending on the payment method you choose, in particular PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden), Shop Pay, Apple Pay, Google Pay and the card and online payment methods offered in our shop (see our page "Payment terms"). In doing so, the data required for the payment (for example name, amount, means of payment, contact details, order information) is transmitted to the respective payment service provider. The legal basis is Art. 6(1) sentence 1 point (b) GDPR. The payment service providers process the data in part under their own responsibility, also for fraud prevention and, depending on the payment method, for a credit check. Their privacy notices are authoritative: PayPal, Klarna, Shopify (Shop Pay).

In the case of advance payment, we will tell you our bank details by email. We process your payment data to allocate the payment.

8. Shipping

For delivery, we pass on your name, your delivery address and, where necessary for delivery or for arranging an appointment, your email address and telephone number to the shipping company commissioned: for parcel shipments DPD (DPD Deutschland GmbH, Aschaffenburg) or DHL (Deutsche Post AG / DHL Paket GmbH, Bonn), for freight goods Dachser (Dachser SE, Kempten). The legal basis is Art. 6(1) sentence 1 point (b) GDPR. The shipping service providers process the data under their own responsibility. You can find further information in their privacy notices, for example at www.dhl.de.

9. Service providers for accounting, inventory management and order processing

To process orders, issue invoices and handle accounting, we use software service providers, in particular Billbee (inventory management and order processing) and Lexware Office (accounting). They process order, customer and invoice data on our behalf on the basis of data processing agreements (Art. 28 GDPR). The legal basis is Art. 6(1) sentence 1 points (b) and (c) GDPR. We also pass data on to our tax adviser to the extent that this is necessary for bookkeeping.

10. Contact (contact form, email, telephone, WhatsApp, chat)

If you contact us via the contact form, by email, telephone or WhatsApp, we process your details (for example name, email address, telephone number, content of the message) in order to handle your enquiry. The legal basis is Art. 6(1) sentence 1 point (b) GDPR if the enquiry is related to a contract or pre-contractual measures, otherwise Art. 6(1) sentence 1 point (f) GDPR (legitimate interest in answering enquiries). We delete enquiries as soon as they have been dealt with and no retention obligations stand in the way.

WhatsApp: If you write to us via WhatsApp (+49 176 72008536), you use the service of WhatsApp Ireland Limited (Meta). We receive your telephone number and the content of the message. Processing by WhatsApp is governed by its privacy policy. If you do not wish this, please use telephone or email.

Chat assistant: Our shop offers a chat provided by Shopify. In this process, your inputs and technical data (for example time, browser) are processed in order to answer your questions and, where applicable, recommend products. The legal basis is Art. 6(1) sentence 1 point (f) GDPR (legitimate interest in timely customer communication). Please do not enter any sensitive data in the chat.

11. Newsletter and promotional emails

If you subscribe to our newsletter, we process your email address and, where applicable, your name in order to send you information and offers by email. The legal basis is your consent (Art. 6(1) sentence 1 point (a) GDPR). Dispatch takes place via Shopify (Shopify Email). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by email to kontakt@energie24.shop.

If you have ordered goods from us, we also use your email address for direct marketing of similar goods of our own (Section 7(3) UWG, Art. 6(1) sentence 1 point (f) GDPR). You can object to this at any time without incurring any costs other than the transmission costs at basic rates.

12. Analytics and marketing technologies (only with consent)

With your consent, we use the following technologies in order to analyse the use of our shop, to measure the effectiveness of our advertising and to show you interest-based advertising. In doing so, information such as your IP address, device and browser data, pages accessed, products viewed, shopping cart and order processes and identifiers (cookie IDs, advertising IDs) is collected. In part, the data is also transmitted server-side. The legal bases are Art. 6(1) sentence 1 point (a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time (see section 5). The withdrawal does not affect the lawfulness of the processing carried out until then.

Google (Google Analytics 4, Google Ads, Google Shopping): We use the Google channel of Shopify with the Google tags G-MLYKG2PM84 and AW-11416844692 for reach measurement, conversion measurement and remarketing as well as functions for Google Shopping. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transmitted to Google LLC in the USA. The transfer is based on the adequacy decision of the European Commission on the EU-U.S. Data Privacy Framework, insofar as Google LLC is certified there, and additionally on standard contractual clauses. More information: policies.google.com/privacy.

Meta (Facebook and Instagram, Meta Pixel and Conversions API): We use the Meta Pixel (Pixel ID 1872583873137586) and the Conversions API to measure visitor and order data and to target advertisements on Facebook and Instagram. The provider is Meta Platforms Ireland Limited, Ireland. In this use, we and Meta are jointly responsible for the collection and transmission of the data (Art. 26 GDPR); for further processing, Meta is solely responsible. Data may be transmitted to Meta Platforms, Inc. in the USA. More information: facebook.com/privacy/policy.

TikTok (TikTok Pixel): We use the TikTok Pixel (pixel code CIUNIABC77U4DE8RLS7G) to measure page views and purchases and to target advertising on TikTok. The provider for the European Economic Area is TikTok Technology Limited, Ireland. Data may be transmitted to countries outside the EEA. More information: TikTok privacy notices.

Pinterest (Pinterest Tag): We use the Pinterest Tag (tag ID 2612656679400) to measure page views and purchases and to target advertising on Pinterest. The provider for the European Economic Area is Pinterest Europe Ltd., Ireland. Data may be transmitted to Pinterest, Inc. in the USA. More information: policy.pinterest.com/de/privacy-policy.

Shopify Analytics: For the statistical evaluation of the use of our shop, we use the analytics functions of Shopify (Web Pixel Manager). Processed data includes page views, referral sources and order data, among other things.

13. Electronic withdrawal function

If you withdraw from your contract via our page "Withdraw from contract", we process the data you provide (name, details identifying the contract, where applicable the items concerned, email address for the confirmation of receipt, and date and time of receipt) in order to handle your withdrawal and to confirm receipt to you. The transmission takes place via the form of our shop system (Shopify). Your declaration arrives in our email inbox; we send you the confirmation of receipt from there by email. We receive your declaration in our inbox and in our shop system (Shopify). The legal basis is Art. 6(1) sentence 1 point (c) GDPR in conjunction with Section 356a BGB and Art. 6(1) sentence 1 point (b) GDPR. We store the data for the duration of processing and beyond that in accordance with the retention periods under commercial and tax law.

14. Recipients and transfers to third countries

Recipients of your data, in addition to the service providers mentioned above, may be public authorities, insofar as we are legally obliged to do so. A transfer to countries outside the European Economic Area takes place only if there is an adequacy decision of the European Commission, appropriate safeguards such as standard contractual clauses exist, or you have expressly consented (Art. 44 et seq. GDPR). Where a transfer to the USA is based on your consent, we point out that a lower level of data protection compared with the European Union may exist there and that authorities may under certain circumstances have access to the data.

15. Your rights

You have the following rights towards us with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to withdraw consent once given with effect for the future (Art. 7(3) GDPR),
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6(1) sentence 1 point (f) GDPR (Art. 21 GDPR). If your data is processed for direct marketing, you can object at any time without giving reasons.

To exercise your rights, a message to kontakt@energie24.shop or to the address stated above is sufficient.

Supervisory authority: The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach (postal address: Postfach 1349, 91504 Ansbach), telephone +49 981 180093-0, email poststelle@lda.bayern.de, complaint form at www.lda.bayern.de/de/beschwerde.html. You can also contact the supervisory authority at your place of residence.

16. Obligation to provide data, automated decisions

The provision of the data required for ordering and contract performance is required by contract and in part by law. Without this data, we cannot conclude or perform the contract. Exclusively automated decision-making, including profiling, under Art. 22 GDPR does not take place on our part. Payment service providers may, depending on the payment method, carry out their own credit or fraud checks (see section 7).

17. Data security

The shop is delivered via an encrypted connection (TLS/HTTPS). We take technical and organisational measures to protect your data.

18. Changes to this privacy policy

We adapt this privacy policy when our services or the legal situation change. The current version applies in each case.

Status: 21 October 2026