Thank you for your interest in our website. Protecting your privacy is important to us when processing your personal data.
illwerke vkw handles your data responsibly. Of course, we also adhere to the legal provisions concerning the collection, processing and use of your data (EU General Data Protection Regulation (GDPR)). 
 

Data protection information

The following data protection information provides you with an overview of what data we collect, use, store and, if necessary, forward to third parties, what security measures we take to protect you and what rights of access you have in this regard.

Your contact person

Data protection officer
Weidachstraße 6
6900 Bregenz
datenschutz@illwerkevkw.at

ISO 27001 certification

illwerke vkw AG received the ISO 27001 certificate from an independent external auditing authority for the first time in December 2013. The ISO 27001 certification is an internationally recognized standard for assessing management systems for information security. For customers, it means compliance with clearly defined technical and organisational security provisions. This helps illwerke vkw ensure that risks to customer data are reduced to a minimum.

Cookies and web analysis services

illwerke vkw AG is responsible for processing your personal data on our website.
Our websites use what are known as cookies. These are small text files that are stored on your end device via the browser. They do not do any harm. We use cookies to make our web services more user-friendly. The legal basis for data processing is the legitimate interest of our company.
Some cookies are stored on your end device until you delete them. They allow us to recognize your browser the next time you visit our website. If you do not want them, you can set up your browser in such a way that it notifies you when cookies are set. This way, you can permit them on an individual basis. More information about cookies, including how you can view which cookies have been used and how you can manage, block and delete them can be found at www.allaboutcookies.org. Furthermore, you will likely be able to configure your browser to reject any cookies; if you do so, you should be aware that this may limit your use of our website and online services.
Our websites use functions from the following web analysis services:
Siteimprove (Burggasse 117, 1070 Vienna, Austria)
Google Analytics (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Detailed information about how user data is handled by Google Analytics can be found in the privacy policy of Google or Google Analytics.
Hotjar (Level 2, St. Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe)
User data (such as the IP address, time, clicks, screen size, device type, information about the browser, location (country only), preferred language, etc.) are pseudonymised before processing and storage and never combined with other data about the individual user. As a result, unique assignment of the data to an individual person is never possible. The information thus generated is transmitted to the server of the provider and stored there. We have concluded a corresponding data processing agreement with the providers.

Data protection information

of illwerke vkw for customers of vkw and vkw vlotte
We want to inform you of your rights regarding our collection and processing of your personal data. This information is provided in accordance with Article 13 of the General Data Protection Regulation (GDPR).

1. Who is responsible for data processing and whom can you contact in case of further questions?
   
   The controller for data processing is illwerke vkw AG, Weidachstrasse 6, 6900 Bregenz, Austria, registration number 59202 m, for you as a customer, business partner, interested party or contractual partner.
   In case of questions about the processing of your data or other concerns relating to data protection law, our data protection officer is available by mail at the address of the controller listed above – with the addition "Data protection officer" – or by email at datenschutz@illwerkevkw.at.
    
2. Which data are processed and where do these data come from?
   
   We process personal data that we receive as part of our business relationship with you.
   These personal data may include:
   
   - Master data (first name, last name, form of address, title, birth date, address, phone number, email address, business partner/customer number, VAT ID)
   
   - Data about business communications (date, means of communication, content)
   
   - Bidding and contract data (contract account number, offer date, delivery or service, product, delivery address, technical data of the installation such as the meter number of the business partner, legal representation e.g. of network operator or supplier)
   
   - Consumption, generation, supply and condition data for accounting or energy management (supply date, accounting period, quantity
   
   - supplied, invoice amounts with details)
   
   - Data about e-mobility charging processes performed (identification number, start and end times of the respective charging process, amount of energy charged, prices, location data for the charging stations used, credit card information, PayPal data)
   
   - Data about electric vehicles for product development (types, registration numbers, year of manufacture, approval data, technical data about the vehicle)
   
   - Data for payment processing (bank, SEPA mandate, account data of our business partner accounting department, dunning notice)
   
   - Data for the use of vkw online services (user profile, assignment to business partners/customer numbers, bonus points)
   
   - Data for the use of the vkw online shop (user account data, billing and delivery data)
   
   - Data about your personal opinion (feedback on events, customer satisfaction, etc.)
   
   - Property data (address, property number, area, number of people)
   
   - Data for making our websites more user-friendly (cookies)
   
   We also process data that we have properly obtained from publicly accessible sources (e.g. company register, association register, land register, professional register). We only process the necessary data. In individual cases, even less data than the data described above is sufficient.
    
3. What is the legal basis and the purpose for data processing?
   
   We process your personal data to fulfil contracts (e.g. electricity or gas supply, performance of energy services, consulting activities, event participation), to fulfil other legal obligations, based on your consent (in particular cookies, web analysis, use for advertising purposes such as sending the newsletter, feedback), and/or due to legitimate interest (e.g. direct advertising, customer survey), provided that these do not outweigh your interests regarding privacy.
   
   - To fulfil contractual duties (Article 6(1)(b) GDPR):
   Personal data are processed to perform our contractual duties, in particular to perform our contracts with you as well as all activities required for operation and management. The purposes of the data processing for contact fulfilment are first and foremost the supply of energy (electricity, gas or heat), the performance of energy services, accounting, dunning, management of contracts and contacts with business partners, processing of orders, as part of electricity registration and cancellation upon move-in and move-out, as well as the provision of vkw online services and the processing and supply of product orders via our vkw online shop. Comparison of customer data in utilisation of the discounted rate for vlotte.
   
   - For the fulfilment of legal obligations (Article 6(1)(c) GDPR):
   Personal data are also processed for the fulfilment of legal obligations, such as supervisory requirements, retention requirements according to commercial or tax law, reporting duties to the Austrian regulatory authority for the electricity and gas industry (E-Control), requirements according to procurement law, as well as information sent to law enforcement agencies and courts in legal cases. 
   
   - Based on your consent (Article 6(1)(a) GDPR):
   If you have given us your consent to process your personal data, processing is only performed in accordance with the purposes defined in the agreement and the scope agreed therein. You can revoke your granted consent at any time with effect for the future.
   
   - To safeguard legitimate interests, not outweighing your interests regarding privacy (Article 6(1)(f) GDPR):
   We also process your data for advertising our own products, products of other companies of the illwerke vkw group (more information under Item 5) and for marketing and opinion surveys. For advertising or making offers that are better attuned to your needs, we analyse the relevant data for our marketing purposes. We have legitimate interest in offering energy and energy-service products attuned to your needs (e.g. energy supply, energy generation, energy efficiency, electric mobility and other services concerning energy) for existing or potential business partners. You have the right to object to the processing of your personal data for direct advertising purposes (more information under Item 6).
    
4. To whom are your data forwarded?
   
   According to the legal regulations or if you have placed an order or granted your consent, we transfer personal data to the respective local electricity or gas network operators, to your former or future energy supplier as part of a supplier change or to a different recipient such as your bank (credits, debits), cooperation partners for energy services or an external energy consultant.
   We transmit personal data within the illwerke vkw group to the extent that this is necessary for processing the services you have purchased from us. This is true in particular between the following companies: illwerke vkw AG and energielösung4all GmbH (Weidachstrasse 6, 6900 Bregenz, Austria). If necessary for contract fulfilment, your data are also forwarded to third parties (e.g. collections, forwarding agency).
   Furthermore, commissioned data processors (e.g. IT service providers, such as Microsoft, mailing service providers, product manufacturers) receive your data from us if this is necessary for the fulfilment of the respective service. All data processors are contractually obligated to handle your data confidentially and only process the data within the scope of the assignment by us.
   In case of a legal or supervisory obligation, we transmit personal data to public authorities and institutions (e.g. the regulatory authority for electricity and gas industry (E-Control), Austrian energy agency as the legal monitoring authority for energy efficiency measures, law enforcement agencies, courts).
    
5. How long are your data processed and stored?
   
   We process your personal data only as long as this is necessary. Once your data are no longer needed, they are automatically deleted or anonymised. In all cases, we store the personal data necessary for contract fulfilment for the duration of the entire business relationship and beyond in accordance with the legal retention and documentation obligations.
    
6. What rights do you have?
   
   - Right of access
   If we are processing your personal data, you have the right to obtain information about the processing purposes, the categories of processed personal data, the recipients of these personal data, the storage duration, your vested rights, the source of the personal data as well as the existence of automated decision-making.
   
   - Rectification and erasure
   You are entitled to request the rectification of incorrect or incomplete personal data that pertain to you. You are also entitled to request the erasure of personal data that pertain to you, provided that the data are being unlawfully processed and there are no legal obligations on our part to object to erasure.
   
   - Restriction of processing
   You are entitled to request the restriction of processing of your data.
   
   - Data portability
   You are entitled to request the transmission of your data which you provided to us in a structured, commonly used and machine-readable format. You have the right to request that the personal data are transmitted directly from us to another controller, if technically feasible.
   
   - Right to object
   Even if the data pertaining to you are correct and complete and being lawfully processed by us, you can object to the processing of these data, especially in justified individual cases. You can also object to the transmission of direct advertising at any time.
    
7. Exercising your rights as the data subject
   
   - Identity verification
   In order to ensure that information about the processing of personal data is shared exclusively with the respective data subject, we ask for at least two pieces of data stored in our system (customer number, birth date, address, email address, phone number, etc.) in your inquiry to verify your identity. You can also submit or attach a copy of a photo ID. This copy will be deleted or destroyed after we have finished processing your inquiry.
   
   - Specification of the request for information
   We also ask you to specify your inquiry so that it is apparent to which contractual relationship with which of our companies you are referring (e.g. energy supply contract, advertiser, lessee, tenant). This information enables us to respond to your inquiry as quickly as possible.
   
   - Access via the customer portal
   Please note that you can conveniently access your data from home via the vkw customer portal at https://onlineservices.vkw.at/powercommerce/portal/start.
   
   - Complaints
   You have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, +43 1 531 15-202525, email: dsb@dsb.gv.at, if your rights concerning data protection have been violated. You also have the right to file a complaint with your local supervisory authority or workplace.
   
   Changes to this data protection statement are expressly reserved. The current version can be accessed at www.vkw.at/datenschutz.