Data protection – for your security when visiting our website

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data when visiting our website (www.terranets-bw.de).

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose?
We process your personal data only if we have received your consent or if processing your data is otherwise permitted by law.

a) Collecting technically required data and logfiles
If you visit our website purely for informational reasons, do not register (e.g. by signing up for our newsletter) or transmit data in any other way (e.g. by using our contact form), we collect the data that your browser transmits to us. In detail, this is the following data:

• IP address (including the date and time of your visit)
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/http status code
• Respective transmitted data volume
• Website from which you are visiting us (referrer URL)
• Website that you visit (including subpages)
• Browser type and version used
• Operating system and its interface
• Language and browser software version

We collect and process this data in order to be able to display the website to you, to ensure and improve its stability as well as for security purposes. The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest). Your data is deleted as soon as it is no longer required for the above-mentioned purposes. In the case that an IP address is saved, it is deleted or anonymised after 7 days at the latest. It is essential to collect and store this data in logfiles for the operation of the website. 

b) Using cookies
In addition to this, cookies are used when using our website. Cookies are small text files that we store on your computer and information is thereby transmitted to the respective party that sets the cookie. Cookies are always assigned to a specific browser. Using cookies does not make it possible to execute programs or transmit viruses to your PC.
You may configure your browser settings according to your preferences and, for example, reject third-party cookies or all cookies. This might, however, lead to you not being able to use all the functions of our website without restriction. Your browser settings also enable you to delete all cookies at any time.

Using technically required cookies
We use technically required cookies in order to make our website user-friendly and to ensure that it functions effectively. Details on the purposes of the cookies used can be found at information on cookie settings.

The legal basis for this data processing is Article 6(1)(f) GDPR (legitimate interest). Using these cookies serves to facilitate your use of our website. Some functions of our website do not work if cookies are not used and therefore cannot be provided. Our legitimate interest in processing cookies arises from the above-mentioned purposes. You can delete the cookies via your browser settings.

c) Web analysis by Matomo 
On our website, we use the open-source Matomo software tool to analyse the surfing behaviour of our visitors. The software places a cookie on your end-device (please see above for cookies). When the main page or subpages are accessed, the following data is saved:

• Two bytes of the IP address of the requesting system
• The website you are visiting
• The website from which you accessed our site (referrer)
• Subpages that are viewed on the visited website
• Time spent on the website
• Frequency of website visits

The software runs exclusively on the servers of our website. The information generated by the cookie about your use of this online service is also stored on our own servers located on our premises in Germany. The software is configured so that complete IP addresses are not stored. Instead, two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This means it is no longer possible to assign the shortened IP address to the user´s computer.

The legal basis for this processing is Article 6(1)(a) GDPR (consent granted). Using the open-source Matomo software tool enables us to analyse your surfing behaviour. By evaluating the collected data, we are able to compile information on the use of single components of our website, helping us to continuously improve our website and its usability.

The cookies are deleted as soon as they are no longer required for our recording purposes. This is the case after three months at the latest.

Further details on the privacy settings of the Matomo software are available at: https://matomo.org/docs/privacy/

d) Using a contact form
If you contact us by using a contact form on www.terranets-bw.de, this is generally done using 128-bit encryption.
The data keyed into the input form is transmitted to us and stored. 

This data comprises

• first name, last name
• where applicable, the company you work for
• email address
• where applicable, telephone number

At the time the message is sent, the following data ist saved:

• the user's IP address
• the date and time the request was submitted

You may also contact us using the email addresses provided. Please note that you should take your own security measures to ensure the confidentiality of your message. In this case, personal data transmitted with your email will be processed.

Depending on the content of your enquiry, the legal basis for processing your data is Article 6(1)(b) or (f) GDPR ((pre-) contractual measures and legitimate interest). Processing personal data from the input mask serves exclusively to process the contact submission. The required legitimate interest in processing the data also lies in this purpose. Other personal data processed during the submission process serves to prevent misuse of the contact form, ensure the security of our information technology systems and to defend against spam or repeated messages in particular.

The data you send us as part of your enquiry is deleted as soon as the respective purpose has been achieved. Normally, this purpose is fulfilled when the respective conversation has ended. This is usually the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved. If the enquiry submitted relates to a contract concluded with us, your enquiry is deleted as set out in the data protection information of the respective contract. Additional personal data collected during the submission process is deleted no later than seven days after submission.

e) Newsletter
On our website, you have the option to subscribe to newsletters. Should you do this, we will regularly inform you about the topic specified in the newsletter registration. If you wish to subscribe to a newsletter, you need to provide a valid email address to sign up for the newsletter. We subsequently test your email address to ensure that you are actually the real owner of this email address or rather if you have access to the email account specified (double-opt-in procedure). We use your email address only for sending the newsletter. As part of the registration process and for verification purposes, we also log your IP address, the date and time of your registration in order to prevent misuse and ensure the security of our information technology systems.

Data collected when you order a newsletter is not combined with other data collected by our website. The legal basis for this data processing is the consent you granted to receive the newsletters (Article 6(1)(a) GDPR). If you wish to stop receiving a newsletter, you can unsubscribe at any time. You may withdraw your consent to receive the newsletter at any time by sending an email to the following email address(es):

• newsletter "SEL": revoke receipt by email to sel[at]terranets-bw.de
• newsletter "SPO": revoke receipt by email to spo[at]terranets-bw.de
• newsletter "RHYn Interco”: revoke receipt by email to rhyninterco[at]terranets-bw.de

By sending the email, you withdraw your consent  to receive the respective newsletter. The lawfulness of the data processing up to the time you withdraw your consent remains unaffected.

The data collected in connection with a newsletter is processed for as long as you receive the newsletter. As soon as you unsubscribe or withdraw your consent, this data is deleted without undue delay. Information relating to your unsubscribing or withdrawing your consent is retained for a further three years  after the end of the calendar year in which you unsubscribed or withdrew your consent. It is subsequently deleted. 

f) Using YouTube videos on our website
As part of the media library provided on our website, videos are embedded via the YouTube platform (YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using YouTube can result in the processing of personal data.

The videos are embedded using YouTube´s enhanced privacy mode. According to information provided by YouTube, no information about visitors is generally stored as long as no video is actively played. If a video is accessed or played, your IP address in particular may be transmitted to YouTube. If you are at the same time signed into YouTube or a Google service, your use of the video may be associated with your user account.

We are unable to influence the further processing of data by YouTube or Google. Additional information on how Google and YouTube process personal data is available in Google´s privacy notice.

The legal basis for embedding the videos is your consent in accordance with Article 6(1)(a) GDPR providing consent was granted using the implemented consent management tool. If no consent is granted, the corresponding content is not activated.

Please note that, when using YouTube, it cannot be ruled out that personal data is also processed in countries outside the European Union or European Economic Area, in particular in the USA.

Additional information on data protection at Google is available at: https://policies.google.com/privacy.

3. What is the legal basis für the processing?
The legal basis for processing your personal data can be Article 6(1)(b) and/or f) GDPR ((pre-)contractual measures and legitimate interest). For cases where you have granted your consent, the legal basis is Article 6(1)(a) GDPR (please refer to information provided above). 

4. Are you obliged to provide your data?
With the exception of technically required data for displaying our website, any provision of data by you is voluntary. If there are exceptional cases where this differs, it is explicitly mentioned in the corresponding place in this notice.

5. Who is your personal data disclosed to?
We process your data solely for the purpose and within the scope described in section 2.

At our company, only those functions have access to your personal data that require such access to fulfill their assigned tasks.

Personal data is exclusively disclosed to third parties if this is required for the purposes mentioned above and legally permitted. Such third parties might be, for example, service providers tasked by terranets bw to support our corporate communication such as IT service providers, advertising and communication agencies, file and data carrier disposal companies and authorities.

Where we disclose your personal data to external parties, we as a general rule arrange contractual provisions with these parties to protect your personal data.

6. From da data protection perspective, what must you take into account when using links?
Our website might contain links to other providers (external website operators) where our data protection policy does not apply. When selecting links to external platforms (e.g. LinkedIn or YouTube), you leave our website. The respective operators of the linked platforms are exclusively responsible for the processing of personal data on their platforms.

7. What about the security of your personal data - how is it ensured?
terranets bw GmbH implements state-of-the-art technical and organisational security measures to protect the personal data you have provided to us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological advancement.

8. What applies in the case of personal data of children and adolescents?
We strongly recommend that parents and legal guardians supervise their children´s online activities. Children and adolescents should not submit personal data to us without the consent of their parents or legal guardians. We do not knowingly ask for and/or process personal data from children and adolescents.

9. What rights do you have with respect to the processing of your personal data?

As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Where the legal basis for processing your data is consent, you may withdraw your consent in accordance with Article 7(3) GDPR at any time.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

This data protection notice supplements the already existing data protection information published by terranets bw with specific information concerning the use of the media library.

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data when visiting our media library.

1. Who is responsible for processing your personal data?
You can reach us using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de.

2. How is your data processed when you visit the media library?
We collect and process your data exclusively when we have been granted your consent to process your data or when the processing is legally permitted.

When you use our media library, we process personal data where necessary (e.g. data required for the purpose of controlling access to the media library or data transmitted to us by your browser).

The data collected includes in particular: 

• where applicable, first and last name, 
• where applicable, email address,
• where applicable, organisation that you work for,
• IP address (including data and time of the request)
• browser data (e.g. browser type and version used, language settings and the operating system version used).

We collect this data solely when you voluntarily provide it when using the media library or when such collecting of data becomes legally permitted at a later time. We process this data in particular to give you access to the media library by providing an access link and/or by setting up a user account, to ensure and improve its stability and for security reasons as well as to protect the system against misuse. Processing the data serves the purpose of ensuring a user-friendly, secure and effective use of the media library while constantly improving its quality. Data such as your IP address, browser type, language settings and the operating system version used is exclusively used to create usage statistics and to analyse errors. As far as technically possible, this data is not linked to other personal data. The legal basis for this processing is generally Article 6(1)(f) GDPR (legitimate interest). The data is deleted as soon as it is no longer required for the purposes described above.

3. What is the legal basis for the processing?
The legal basis for the processing is Article 6(1)(f) GDPR (legitimate interest).

Our legitimate interest lies in a secure, technical provision of the media library and access control, ensuring IT security, preventing misuse as well as safeguarding stable and functional operation.

Your interests, fundamental rights and liberties are taken into consideration when processing your data. We process your data only to the extent required to fulfil the purposes described above and insofar as no overriding legitimate interests on your part prevent such processing

4. How long is your data stored?

We store your personal data for the period required to fulfill the purposes set out above or for as long as we are obliged to do so by law. We delete your data when it is no longer required for the purposes described above. We also generally delete your personal data when further storage is not required.

Technical access data, in particular IP address, browser type and operating system information are processed by the provider of the media library to ensure its operation, analyse errors and for security purposes. No personal usage data is collected for reporting purposes from non-authenticated visitors; downloads and other activities are analysed exclusively on an anonymous basis.

If a personal account has been set up for you to access the media library, the user data required for this purpose will be processed for the duration of the existing access. If a user access is deleted, the user profile and the associated shared collections are removed by the provider of the media library without undue delay. 
If your data is processed in order to solve an open issue, your data is retained for another three years after the end of the year in which the issue is finally resolved.

5. Who is your personal data disclosed to?
We process your data solely for the purpose set out in Section 2 and to the extent that you have consented to. This means that we publish your data as part of our external corporate communication, resulting in an indefinite number of people gaining knowledge of your personal data.

Within our company, access to your personal data is only granted to those functions that require it in order to perform their assigned tasks.

We disclose personal data only to third parties (services providers tasked by terranets bw to support its corporate communication such as IT service providers, photographers, PR companies, advertising and communication agencies) when this is required for the purposes described above and legally permitted.

If we disclose your personal data to external parties, we conclude contractual agreements with these parties as a general rule to safeguard your personal data.

6. Are you obliged to provide your data?
It is neither legally nor contractually obligatory to provide your data. If you do not provide the data required to set up access (e.g. first and last name, email address), it is not possible to set up an access account or use the media library. 

7. What else must you take into account when using the media library?
You may only use the content provided in the media library within the scope of the respective usage rights granted. It is not permitted to disclose or publish content to unauthorised third parties unless separate approval has been granted by terranets bw.

8. What rights do you have with respect to the processing of your personal data?
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data when visiting our social media platforms.

As part of its external communication strategy, terranets bw uses social media platforms in order to provide fast, direct and transparent information about current topics, projects and measures. Such platforms are also used to present terranets bw as an employer. Our social media presence complements our classical communication channels (e.g. website, press relations, print media) and provides an opportunity to enter into a direct exchange with interested parties and stakeholders. Using social media platforms complements our existing information channels and is offered on a voluntary basis for information and communication purposes.
 

Platforms an channels
terranets bw is currently active on the following platforms: (terranets bw and the "Hydrogen for Baden-Württemberg" initiative)

• LinkedIn 
• XING
• YouTube

For the information services offered, terranets bw uses the technical platforms provided by 

• LinkedIn Ireland Unlimited Company, Wilton Place, Grand Canal Dock, Dublin 2, Irland (referred to as "LinkedIn")
• New Work SE, Baumwall 7, 20459 Hamburg [valid for XING]
• YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

All information about the data protection policies is available at:

• LinkedIn: https://privacy.linkedin.com/de-de 
• XING: https://privacy.xing.com/de/datenschutzerklaerung
• YouTube: www.google.de/intl/de/policies/privacy   

Please note that we do not have full control of how data is processed by the respective platform operator. Using the platforms lies therefore within the sole responsibility of the users. This applies, in particular, when using interactive functions (e.g. commenting, sharing, rating). When you communicate with us via social media platforms (e.g. by commenting, reacting or writing direct messages), the content you provide to us is processed to the extent necessary for handling your matter.

Alternatively, you may access some of the information provided on our social media profiles mentioned above by visiting our websites at www.terranets-bw.de, www.terranets-sel.deand www.h2-fuer-bw.de.

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:  

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de.

2. What data about you is processed and for what purpose? What are the sources of this data?
When visiting our social media profile (fan pages), the platform operators automatically collect personal user data, including your IP address and other information. The information is used to evaluate user activity and behavioural patterns or to report misconduct. This data collection process does not depend on whether you are logged in or registered on the platform during your visit. As a rule, the platform operators provide us with anonymised usage statistics (e.g. page views, post reach, interactions). These so-called page insights or performance metrics enable us to evaluate the usage statistics of our social media profiles and help us tailor our information services to user needs.

The information collected and processed by the platform operators is described in detail in their respective privacy policies at:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• XING: https://privacy.xing.com/de/datenschutzerklaerung
• YouTube: www.google.de/intl/de/policies/privacy

3. What is the legal basis for using the data?
The legal basis for the processing including the purposes for using your data are described in detail at 

• LinkedIn: https://privacy.linkedin.com/de-de 
• XING: https://privacy.xing.com/de/datenschutzerklaerung
• YouTube: www.google.de/intl/de/policies/privacy

You can control the use of your data by adjusting your account settings.

Processing personal data related to operating our social media profile is based on Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in modern public relations and our wish to inform the public about our tasks and projects as well as to communicate with interested parties and stakeholders.

Our aims when we use social media are in particular:

• Promoting direct and transparent communication related to current topics, projects and to terranets bw as an employer
• Strengthening terranets bw´s public visibility 
• Reaching new, especially younger target groups
• Promoting stakeholder participation formats and events
• Developing a strong employer brand: terranets bw as a future-proof, diverse employer

We also use social media platforms to observe trends in topics related to our fields of activity and to evaluate the reach and impact of our communication measures.

4. Who is your personal data disclosed to?
Depending on your account and browser settings, the data collected about you is processed by the platform operators and may be disclosed to third parties, including countries outside the European Union.

In particular, personal data might by transferred to countries outside the European Union (so-called third countries) when using US American platform providers. As a rule, the data is then transferred on the basis of an adequacy decision by the European Commission, the European Commission´s Standard Contractual Clauses (SCCs) or comparable safeguards in accordance with Article 46 GDPR.
Further information on the disclosure of your data to third parties is available at:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy (Section 3)
• XING: https://privacy.xing.com/de/datenschutzerklaerung
• YouTube: www.google.de/intl/de/policies/privacy

5. Is your personal data tracked and analysed by the platform operators?
When you access a page of one of the social media platforms mentioned above, the IP address assigned to your end device is transmitted to the respective platform operator.

• According to information published by LinkedIn, this IP address is anonymised (for "German" IP addresses) and deleted after 90 days. LinkedIn additionally stores information about users´ end devices (e.g. as part of the "login notification" function). This means that LinkedIn may be able to assign IP addresses to individual users.
  If you are currently signed in to LinkedIn as a user, a cookie is installed on your end device with your LinkedIn identifier. This enables LinkedIn to track that you have visited this page and how you have used it. This also applies to all other LinkedIn pages. Further information about this topic is available here: https://de.linkedin.com/legal/cookie-policy.
• According to information published by XING, when you visit XING pages, personal data is processed by the platform operators. This can include, in particular, IP addresses, device information, interaction data and information about viewed content. This data is used by XING in order to provide the platform, analyse how it is used and to improve content and functionality. If you are signed in to XING, XING can assign your visit to our XING page to your user account. Even if you do not have your own XING profile or are not signed in, it cannot be ruled out that XING collects and processes technical information about your behaviour as a user. Additional information on how XING processes personal data and your options to configure your settings and object are available in the XING privacy notice at:  https://privacy.xing.com/de/ihre-privatsphaere.
• According to information published by YouTube, your IP address is transmitted to YouTube and cookies are installed on your device as soon as you access a page containing embedded videos. terranets bw, however, has embedded the YouTube videos on its website using the enhanced data protection mode (in this case, YouTube still contacts Google´s DoubleClick service, but according to Google´s privacy notice, no personal data is analysed). This means that YouTube no longer stores information on visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube will know that you have watched the video. If you are signed in to YouTube, this information is also assigned to your user account.
  We have neither knowledge of nor influence over any subsequent collecting and use of your data by YouTube. Additional information about this topic is available here: www.google.de/intl/de/policies/privacy. 

LinkedIn buttons embedded in websites enable LinkedIn to track your visits to these websites and assign them to your LinkedIn profile. Using this data, tailored content or advertising can be offered to you.
If you wish to avoid this, you should log out of LinkedIn or deactivate the "stay logged in” function, delete the cookies installed on your device and close and restart your browser. This deletes LinkedIn information that makes it possible to identify you directly. This allows you to use our LinkedIn page without disclosing your LinkedIn identifier. If you access interactive features (liking, commenting, sharing, messaging etc.), the LinkedIn Login Mask will appear. After logging in, you are once again clearly identifiable for LinkedIn as a specific user.

Analysis of the statistical data provided by the platform operators is conducted exclusively in aggregated form. It is fundamentally not possible for terranets bw to directly assign the data to individual users.

6. What rights do you have with respect to the processing of your personal data?
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data in connection with processing business contact data.

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose? What are the sources of this data?
We process the personal data that you provide to us as part of concluding a contract (e.g. concluding a contract to sell shipping capacities or a service contract) or when establishing a contractual relationship. We also process data received from you for the purposes of making and maintaining contact (e.g. when exchanging business cards) or for providing information about your organisation and produts.

Usually, this is the following data: 

• first and last name, where applicable, title
• (business) address
• (business) contact details (email, telephone, mobile telephone)
• where applicable, business organisational data (name of your organisation or authority, department, administrative office).

We need this data

• to initiate a contractual relationship with you or the organisation etc. you are employed by,
• to fulfill a contract concluded (where applicable, subsequently concluded) with you or the organisation etc. you are employed by,
• to clarify an outstanding issue, e.g. correspondence with representatives of authorities to obtain a permit or approval under public law,
• for the purpose of exchanging information and common interests,
• for the purpose of public relations and marketing (e.g. information about our company, products, projects and events) and/or
• for the purpose of maintaining contact (e.g. sending greeting cards)

If we did not collect your personal data directly from you, your data was provided either by third parties (e.g. by your colleagues) or obtained from other sources, e.g. the website of your company or authority where you work.

3. What is the legal basis for the processing?
If a contractual relationship with the organisation or authority where you work exists or is in the process of being established, the legal basis for processing your personal data is Article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in processing your data because we would otherwise be unable to exercise the rights and fulfil the obligations arising from our (pre-)contractual relationship.

Where we have entered into or are in the process or establishing a contractual relationship with an unincorporated company or partnership, we process the personal data of the respective business contacts (e.g. partners or authorised representatives) to implement pre-contractual measures as well as to fulfill the contract in accordance with Article 6(1)(b) GDPR.

Article 6(1)(f) GDPR (legitimate interest) is also the legal basis for data processing if we are clarifying an outstanding issue with you or the organization where you work. In this case, we have a legitimate interest because we would otherwise be unable to operate our transmission system and other facilities in compliance with applicable legal stipulations or exercise our rights or fulfill our other obligations.

The legal basis for processing your data for the purpose of exchanging information and common interests, for the purpose of public relations and marketing as well as for the purpose of maintaining contact is either Article 6(1)(a) GDPR (consent granted) or Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest  then lies in our interest in maintaining contact and fostering customer relationships with our (business) partners.

4. How long is your data stored?
As a general rule, we process and store your personal data only for the duration required for the respective processing purposes.

If your personal data is processed to prepare, perform or manage a contract, we store this data for the duration of the contractual relationship. After the contractual relationship has ended, the data is initially stored as long as required under statutory retention obligations. This applies in particular to retention periods under the German Commercial Code (HGB) and the German Fiscal Code (AO). When the respective retention period expires, the data is erased unless further processing is required to establish, exercise or defend legal claims. In this case, the data is stored until the applicable limitation periods expire.

If your personal data is processed as part of initiating a contract and no contract is concluded, your data is stored as a general rule until the statutory limitation periods expire if this is required to establish, exercise or defend legal claims. If statutory retention obligations under the German Commercial Code apply, in particular where the data relates to business letters, such obligations remain unaffected.

If your data is processed to clarify an open issue, this data is stored until the issue is conclusively resolved. If continued storage is required to establish, exercise or defend legal claims, such data is retained until the applicable limitation periods expire.

If your data is processed in connection with planning, constructing, operating, maintaining, documenting, decommissioning or dismantling our facilities, we store this data as a general rule until the respective facility is finally decommissioned and, if required, completely dismantled insofar as this is required to ensure safe and legally compliant operation of the facility or to fulfil statutory verification and documentation obligations.

If your personal data is processed for the purpose of exchanging information and interests, public relations, marketing or maintaining contact, we store your data as a general rule until we become aware that there is no further interest in such communication, for example after you leave the relevant organisation, object or withdraw consent that had been granted. The data is subsequently deleted unless statutory retention obligations or other legitimate reasons require continued retention.

When the respective processing purpose no longer applies and any statutory retention periods and applicable limitation periods expire, the personal data is deleted or anonymised in accordance with data protection regulations.

5. Is there an obligation to provide your data or is provision required to conclude a contract? 
Providing your personal data is neither legally nor contractually required. There is no obligation to provide your personal data. Where we collect your data to conclude a contract with you or the organisation where you work, your data is required to fulfill the contract.

6. Who is your personal data disclosed to? 
Depending on the purpose of collecting your data (see Section 2), we may disclose your personal data to various external parties on a case-by-case basis as required.

Where we have collected your data to initiate a contractual relationship with you or the organisation where you work, or to be able to fulfil a contract, we may disclose your data to third parties to fulfill these purposes. The third parties (e.g. engineering companies, construction companies, authorities and other partners) are tasked by terranets bw to support us with performing the contract.

If we have collected your data to clarify an outstanding issue, we may disclose your data to third parties to fulfill this purpose. The third parties (e.g. engineering companies, construction companies, (other) authorities as well as further partners) are tasked by terranets bw to assist us in clarifying the issue.

If your data was collected for the purpose of exchanging information and common interests, for the purpose of public relations and marketing or for the purpose of maintaining contact, we may disclose your data, where required, to third parties tasked by terranets bw to assist us in exchanging information and interests with you, in public relations and marketing activities or in maintaining contact (e.g. marketing service providers, printing companies).

Within our company, access to your personal data is only granted to those functions that require such access to perform their assigned tasks.

Where we disclose your personal data to external parties, we conclude as a general rule contractual agreements with these parties to safeguard your personal data.

7. What rights do you have with respect to the processing of your personal data? 
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Where the legal basis for processing your data is consent, you may withdraw your consent in accordance with Article 7(3) GDPR at any time.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data in the context of events. 

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose? What are the sources of this data?
We process the personal data you have provided to us during our business relationship (e.g. email communication, by exchanging business cards) or that you give to us in connection with organising or running an event.

This usually comprises the following data: 

• First and last name and, where applicable, title
• (Business) address
• (Business) contact details (email, telephone, mobile phone)
• If applicable, business organisational details (the name of your organisation or authority, department, administrative office).

At certain events, we also take photographs and/or record videos for internal and/or external communication purposes.

We need this data to organise and run events. Initially, we process your personal data to send you an invitation to the event (e.g. by post or electronically) and to process your registration confirmation. When you take part in one of our events, we process your personal data in order to organise the event, e.g. to issue name badges for the event, send event materials where necessary and, where applicable, for the purposes of internal and external reporting.
We process your personal data after the event, where applicable, to send you invitations to future events.

If we did not collect your personal data directly from you, your data was provided either by third parties (e.g. by your colleagues) or we collected it from other sources, e.g. the website of your organisation or authority where you work.

If photographs are taken and/or videos made at our events, we inform you about this both in the invitation and at the event itself. We also inform you about the purpose of taking photographs or making videos, e.g. for internal and/or external reporting. 

3. What is the legal basis for the processing? 
If you are interested in one of our events or take part in such an event, the legal basis for processing your personal data, sending invitations, managing registration confirmations, sending event materials and issuing name badges is Article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in processing your data because we are otherwise not able to inform you about the event and its content and it would otherwise be impossible to run the event and not possible for you to attend. If you take part in the event, we process your personal data such as photos and/or videos on the basis of our legitimate interest according to Article 6(1)(f) GDPR. We have a legitimate interest in future communication with you as part of our business relationship and additionally in reporting about the event.

We take targeted pictures or make targeted recordings of individual people or small groups (e.g. portraits, interviews or featured reports) only on the basis of your prior consent. Your consent is voluntary and you may withdraw your consent at any time with effect for the future.

Additionally, Article 6(1)(f) GDPR is the legal basis for processing your data if we need to clarify an outstanding issue relating to the event with you. Here we have a legitimate interest as it would otherwise not be possible to fulfill our obligations related to the event.

4. How long is your data stored?
Your personal data is retained for three years after the end of the year in which the event took place.

Should your data be processed in order to clarify an open issue, your data is stored for three years after the end of the year in which the issue was finally resolved.

If additional statutory retention periods apply, e.g. relating to commercial law or tax law, we store your personal data for the duration of this applicable retention obligation. On expiry of these retention periods, we review if it is necessary to extend the processing.

After these retention periods, your personal data is deleted or destroyed in compliance with data protection regulations.

5. Is providing your data obligatory or is it necessary to provide your data to take part in the event?
It is neither legally nor contractually required to provide your personal data. There is no obligation to provide your personal data. Your data is required, however, to organise the event and your participation.

6. Who is your personal data disclosed to? 
Depending on the event type and location, it may be necessary for us to disclose your personal data to various external parties on a need-to-know and purpose-specific basis. This could include, for example, external  service providers who support us in running events. It may also be necessary for us to disclose your data to conference venues, for example, to be able to hold our event there.
If we disclose your data to external parties, we as a general rule conclude contractual agreements with these parties to safeguard your personal data. This becomes unnecessary if your personal data is protected in another way, for example by already existing legal stipulations.

Within our company, access to your personal data is only granted to those functions that require such access to fulfill their assigned tasks.

7. What rights do you have with respect to the processing of your personal data?
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Where the legal basis for processing your data is consent, you may withdraw your consent in accordance with Article 7(3) GDPR at any time.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026
This data protection information replaces the data protection information for property owners and holders of rights of use in connection with existing and new construction pipelines owned by terranets bw GmbH, dated July 2020.

Protecting your personal data is very important for us. We therefore process your data exclusively on the basis of applicable legal stipulations (e.g. the GDPR). Below, we inform you on how we process your personal data as part of obtaining and managing rights of way for our transmission system pipeline and our telecommunications network (the "facilities") particularly in connection with planning, constructing, modifying, operating, maintaining and dismantling facilities owned by terranets bw GmbH.

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose? Where does this data originate from?
We process, where applicable, the following personal data: 

• First and last name, where applicable title
• Address and contact details, 
• Bank account information/IBAN,
• Information relating to properties (e.g. parcel numbers, land registry entries), 
• Information on the relationship to the property (e.g. owner, holders of rights of use [e.g. lessees, tenants, leaseholders and other holders of rights of use under rights in rem or the law of obligations]) 
• Nature and extent of the property use
• Information on compensation payments
• Correspondence, proceedings and project data

This data is needed to obtain and manage rights of way for our facilities. We require your contact data, for example,  to contact you regarding access to your property or to carry out work on your property. Your bank details/IBAN are required to make compensation payments to you.

a) Existing pipelines
In the case of existing pipelines, we process your personal data in particular:

• for managing existing rights of way,
• for carrying out inspections, maintenance and repairs,
• for preparing and executing site access,
• for ensuring our pipeline facilities are operated safely,
• for processing claims for damages,
• for making compensation payments,
• for meeting statutory operator obligations.

b) New projects
In the case of new construction projects, we process your personal data in particular:

• for route planning,
• for carrying out spatial planning, planning approval and other approval procedures,
• for conducting public participation,
• for obtaining, ordering and managing rights of way,
• for coordinating site access,
• for executing construction and land surveying measures,
• for processing objections, suggestions and enquiries,
• for paying compensation payments.

c) Source of your data
Where we do not obtain your personal data directly from you, such data is collected in particular from the following sources:

• official cadastral land registry information systems,
• land registries,
• population registers,
• public registers,
• authorities,
• courts,
• notaries,
• other property owners or holders of rights of use,
• network operators,
• engineering, surveying or rights-of-way service providers commissioned by terranets bw.

The data is collected from both publicly accessible and non-publicly accessible sources.

3. What is the legal basis of the processing?
There may be various legal bases for processing your personal data, depending on the circumstances of each individual case.

Where a contractual relationship exists or is being initiated between you and us related to using the property you own or use, we process your personal data on the basis of Article 6(1)(b) GDPR (pre-contractual measures). Processing your data is required in these cases to prepare, execute and process the contractual relationship. Such a contractual relationship can exist, in particular, in the form of a limited personal easement, a licensing agreement, a building permit or another agreement granting the right to use the property. Processing your personal data comprises, in particular, establishing and managing rights of use and processing compensation payments.

Insofar as no contractual relationship with you exists yet to use property you own or property you use, the legal basis for processing your data is generally Article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in processing your personal data as we would otherwise be unable to fulfil tasks that are in the public interest to construct and operate our transmission system and telecommunications network.

Insofar as statutory retention, evidentiary or documentation obligations apply, we process your data additionally on the basis of Article 6(1)(c) GDPR (fulfilling legal obligations). On this basis, personal data may also continue to be processed after termination of a contractual relationship or when personal data is no longer directly related to a property (e.g. after decommissioning a pipeline) whenever this is required to fulfil statutory obligations.

Depending on circumstances, we also process your personal data on the following specific legal bases:

a) Existing pipelines
Article 6(1)(f) GDPR, based on our legitimate interest in the safe and economically efficient operation of our pipeline facilities, in managing existing rights of way, in carrying out inspections, maintenance, servicing and repair measures as well as safeguarding against hazards and disruptions affecting our facilities. We have a legitimate interest in processing the data as we would otherwise be unable to fulfil our statutory obligations and actual obligations as an operator and could not ensure the safe operation of our facilities.

b) New construction projects
Article 6(1)(c) GDPR (fulfilling legal obligations), in particular insofar as processing is required to carry out legally prescribed approval procedures, in particular planning approval procedures and other participation procedures.

Article 6(1)(e) GDPR in conjunction with Sections 43 et seq. of the German Energy Industry Act (EnWG) in conjunction with 72 et seq. of the German Administrative Procedure Act ( VwVfG) (public interest), insofar as processing is conducted in connection with fulfilling legally assigned tasks in the public interest.

Article 6(1)(f) GDPR on the basis of our legitimate interest in planning, implementing and safeguarding infrastructure measures, as well as in communicating with affected property owners and holders of rights of use for the purpose of planning and constructing our facilities.

4. How long is your data stored?
We store your personal data for as long as required to fulfil the respective purpose.

In the case of existing pipelines, personal data is generally retained for as long as the respective rights of way or other legal relationships apply or for as long as the personal data is required to safely operate the pipeline facility.

Data required to operate, document or legally protect our pipeline facilities may be stored until the respective facility is decommissioned and, where applicable, dismantled.

In the case of new construction projects, personal data is generally retained until the respective measure is completed, including resolution of any compensation and legal disputes.

Furthermore, personal data is retained insofar as statutory retention periods apply or the data is required to establish, exercise or defend legal claims.

As soon as the purposes and statutory retention periods no longer apply, the data is deleted or destroyed in accordance with applicable data protection regulations.

5. Are you required to provide your data or is providing your data required? 
Generally, you are under no statutory obligation to provide your personal data.

Providing personal data is generally voluntary where we collect personal data directly from you.

However, providing certain personal data can be required to conclude a contract related to claiming or using a property or to make a compensation payment to you. Without the required information, the relevant contract may, under certain circumstances, not be concluded or fulfilled, or a compensation payment may not be possible.

Insofar as we require personal data to plan, construct, operate, maintain or legally protect our pipeline facilities, we may obtain this data, where applicable, from publicly accessible sources or from authorities. I

6. Who is your personal data disclosed to?
In our company, your data is disclosed only to those functions that require access as part of their assigned tasks.

Where required and legally permissible, your personal data is disclosed to the following recipients, in particular:

• engineering companies,
• surveying companies,
• rights-of-way service providers,
• construction companies,
• technical experts,
• notaries,
• land registry offices,
• cadastral authorities,
• courts,
• public authorities,
• other service providers commissioned by terranets bw.

We disclose personal data to third parties (e.g. public authorities and service providers commissioned by terranets bw) only where this is required for the above-mentioned purposes and where it is legally permissible.

Where we disclose your personal data to external parties, we contractually agree on regulations to safeguard your personal data as a general rule. This may not apply where your personal data is protected in another way, e.g. by already existing statutory regulations.

7. What rights do you have with respect to the processing of your personal data? 
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG.
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data solely on the basis of legal stipulations (e.g. the GDPR). Below we inform you on how we process your personal data in connection with your proposals regarding the planning or implementation of construction projects.

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose?
We process, where applicable, the following personal data: 

• first and last name, title where applicable 
• address and contact details 
• information about properties (e.g. parcel number, land registry entries) and your relationship to the property (e.g. owner, authorised user (e.g. lessee)
• type of use of the property

We also collect your suggestions and the reasons behind the planning and process your data when evaluating your suggestions. We additionally process personal data that we have assigned to you. 
You provided this data to us as part of the public participation process in the planning or implementation of construction projects. We organise information events in municipalities affected by construction projects, where you have the opportunity to provide suggestions concerning the planning and implementation of such projects. You also have the option of submitting your suggestions by telephone, email or other means (e.g. by post). We use your data in particular to evaluate your suggestions, consider them during the planning and construction work, contact you if we have questions and inform you about the progress of your suggestion. If your suggestion concerns a property you own or use that is affected by a construction project, we will use your suggestion to manage our wayleave rights.

3. What is the legal basis for the processing?
The legal basis for the processing is fundamentally Article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in the data processing because we would otherwise not be able to evaluate your suggestion, where applicable, and contact you in the case of any follow-up questions.

To implement a planning approval procedure in accordance with Section 43 of the German Energy Industry Act (Energiewirtschaftsgesetz) in conjunction with Sections 72 et seq. of the German Administrative Procedure Act (Verwaltungsverfahrensgesetz), your personal data is normally processed on the legal basis of Article 6(1)(c) GDPR (legal obligation) because such processing is required to fulfill a legal obligation to which we, as project developers, are subject. Under statutory procedural provisions, we are obliged in particular to organise public participation and collect, review and document objections as well as involve individuals affected.

To the extent your data is processed in connection with performing a legally assigned task in the public interest, the processing is based on Article 6(1)(e) GDPR in conjunction with Section 43 of the German Energy Industry act (EnWG).

The processing is restricted to the extent respectively required for the implementation of the construction project.

4. How long is your data stored?
Your personal data is stored for as long as required to fulfill the respective purpose.

If you submit suggestions to us without owning or using a property affected by a construction project, your data is retained for one year after completion of the construction project.

If your personal data is processed to clarify an outstanding issue, your data is retained for three years following the end of the year in which the issue is finally resolved.

If your data is processed in connection with a project relating to our facilities, your personal data is retained until our facilities are finally decommissioned and, where applicable, dismantled. This is required to ensure the technical safety and safe operation of our facilities in the public interest.

After expiry of these retention periods, your personal data is deleted or destroyed in compliance with data protection regulations.

5. Are you obliged to provide your data or is the provision of data necessary?
Providing your personal data is neither legally nor contractually required. There is no obligation to provide your personal data.

If you do not provide your personal data, this will especially result in our not being able to contact you in the case of follow-up questions and inform you about the progress of your suggestion.

6. Who is your personal data disclosed to?
Depending on the purpose of collecting the data (see Section 2), we may disclose your personal data to various external parties on a case-by-case basis as required.

Within our company, access to your personal data is only granted to those functions that require it within the scope of their assigned tasks, e.g. for evaluating your suggestions, taking them into account in the planning or implementation of construction projects, contacting you in the case of follow-up queries and informing you on the progress of your suggestion as well as for managing wayleave rights relating to planned construction projects.

We disclose personal data to third parties (e.g. service providers tasked by terranets bw and authorities) when this is required for the purposes set out above and permitted by law.

If we disclose your personal data to third parties, we as a general rule conclude contractual agreements with these parties to safeguard your personal data. This may be unnecessary if your personal data is otherwise protected, for example by already existing legal provisions.

7. What rights do you have with respect to the processing of your personal data?
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG. 
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: July 2026

Protecting your personal data is very important for us. We therefore process your data exclusively on the basis of applicable legal stipulations (e.g. the GDPR, the German Telecommunications Act (TKG) and the German Telecommunications Digital Services Data Protection Act (TDDDG)). Below, we provide you with information on how we process your personal data in connection with providing telecommunications services and other related services.

1. Who is responsible for processing your personal data?
You can reach us by using the following contact details:

terranets bw GmbH
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use our contact form, which is available on our website.

You may reach our Data Protection Officer at datenschutz[at]terranets-bw.de

2. What data about you is processed and for what purpose? Where does this data originate from?
We process the personal data you provide to us in your role as contact person for a business customer as part of initiating, concluding and implementing a contract for telecommunications services. We also process the data that is generated as part of using our telecommunications services.

This is normally the following data:

• First and last name, if applicable form of address, if applicable title
• (Business) address 
• Contact details (business email address and telephone number) 
• Business organisational data (company, department, position)
• Contract and customer data (e.g. customer number, offer and contract number, booked telecommunications services, term of contract)
• Billing and payment data
• Subscriber data in the sense of the German Telecommunications Act (TKG) and the German Telecommunications Digital Services Data Protection Act (TDDDG) 
• Traffic data insofar as its processing is permissible under applicable telecommunications regulations 
• Technical connection and access data (e.g. IP address, connection identifier, MAC address, access credentials) 
• Porting data as part of changing provider 
• Information related to service, support and error resolution processes
• Communication data from business correspondence
• Credit rating and financial information insofar as permissible when processing such data as part of initiating or implementing a contract

We need this data

• to initiate a contractual relationship for telecommunications services with you or with the organisation where you work,
• to perform a contract concluded for telecommunications services,
• to provide, configure and administer the agreed telecommunications services,
• to implement a change of provider and data porting,
• to receive and process service, support and error resolution requests,
• to identify, contain and eliminate faults as well as to ensure the security and integrity of our telecommunications networks and services,
• to bill for agreed services,
• to fulfil statutory obligations in accordance with GDPR, the German TKG and TDDDG as well as statutory retention obligations under commercial and tax law,
• to establish, exercise and defend legal claims.

Unless your personal data has been provided directly by you, this data is obtained insofar as it is necessary for the respective purpose from, for example

• public registers (e.g. the German Commercial Register), 
• credit enquiry agencies as part of a permissible credit check, 
• authorities or 
• other third parties, insofar as a legal basis for this exists or you have granted your consent.

3. What is the legal basis of the processing?
Depending on the purpose of the processing, there may be various legal bases for processing your personal data.

If the processing is required to carry out pre-contractual measures or to perform a contract for telecommunications services, the processing occurs on the basis of Article 6(1)(b) GDPR.

Insofar as we are subject to legal obligations, especially under the German Telecommunications Act (TKG), the German Telecommunications Digital Services Data Protection Act (TDDDG), commercial or tax regulations or any other legal obligations, the processing is carried out on the basis of Article 6(1)(c) GDPR.

Insofar as the processing is required to protect our legitimate interests, this processing is done on the basis of Article 6(1)(f) GDPR. Our legitimate interests consist of, in particular,

• ensuring secure and error-free operation of our telecommunications networks and services,
• IT and information security,
• preventing misuse and fraud,
• establishing, exercising or defending legal claims,
• improving our services,
• implementing a permissible credit check as well as
• processing and documenting customer requests.

4. How long is your data stored?
We store your personal data for varying periods depending on the purpose of the data processing.

As a general rule, insofar as your personal data is required to perform a contract for telecommunications services, this data is retained for the duration of the contractual relationship.

Once the contractual relationship ends, your personal data is initially retained for the duration of the statutory limitation periods insofar as this is required to establish, exercise or defend legal claims or to fulfil statutory retention obligations.

Inventory data, traffic data and other telecommunications data are processed exclusively to the legally permissible extent and solely for the purposes permitted under the German Telecommunications Act (TKG) and the Telecommunications Digital Services Data Protection Act (TDDDG). The data is deleted once the respective statutory retention period ends.
Insofar as your personal data is processed for billing purposes, the relevant data is stored in accordance with statutory requirements. Traffic data no longer needed for billing purposes or no longer required to fulfil statutory obligations is deleted without delay.

Should there be additional statutory retention obligations, in particular under the German Commercial Code or German Fiscal Code, we store your personal data for the duration of these retention obligations.

Once the respective retention periods expire, we assess whether continued processing is required. If this is not the case, your personal data is deleted or anonymised in accordance with data protection regulations.

5. Are you required to provide your data or is providing your data required to conclude a contract? 
In some cases, providing your personal data is a legal obligation and otherwise required to initiate, conclude and perform a contract for telecommunications services.

If the personal data required for the above-mentioned purposes is not provided, we are generally unable to conclude or implement the requested contract.

Insofar as statutory identification or verification obligations apply, we are legally obliged to collect the personal data required for these purposes.

6. Who is your personal data disclosed to? 
Depending on the purpose of processing your data (please see section 2), it may be necessary to disclose your personal data to various recipients.

These include in particular

• IT and telecommunications service providers commissioned by terranets bw,
• processors acting on our behalf in accordance with Article 28 GDPR (for example printing, mailing and billing service providers, document and data carrier disposal services)
• service providers for installing, commissioning and trouble-shooting telecommunications connections,
• network operators and other telecommunications companies insofar as this is required, in particular to switch provider or port your data,
• credit enquiry agencies as part of a permissible credit check,
• debt collection agencies and legal advisers required to assert legitimate claims,
• authorities and other public organisations insofar as we are legally obliged to disclose your data to them.

In our company, access to your personal data is granted solely to those functions that require such access as part of their assigned tasks.

Where we disclose your personal data to external service providers, this occurs exclusively on the basis of statutory requirements. Insofar as required, we conclude data processing agreements with these service providers pursuant to Article 28 GDPR.

7. Is your personal data transferred to third countries?
As a general rule, your personal data is processed within the European Union or the European Economic  Area.

If, in individual cases, it is necessary to transfer personal data to recipients in a third country, such transfers occur solely in accordance with Article 44 ff. GDPR.

In particular, this is only carried out

• when an adequacy decision for the relevant third country has been adopted by the European Commission,
• suitable guaranties have been agreed upon, in particular the European Commissions´ Standard Contractual Clauses (SCCs) or
• another legally permissible basis for the transfer to third countries exists.

Insofar as service providers located in the United States of America are used, personal data is only transferred if the legal requirements are fulfilled, in particular when the service providers are certified according to the EU-US Data Privacy Framework or present other appropriate guaranties in accordance with Article 46 GDPR.

8. Is the decision-making process automated?
As a general rule, decision-making based exclusively on automated processing, including profiling, in the sense of Article 22 GDPR does not take place.

If automated assessment procedures carried out by credit enquiry agencies are used as part of a credit check, these procedures serve solely to support our decision on concluding or implementing a contractual relationship. No decision is taken by terranets bw exclusively based on automated processes.

9. What rights do you have with respect to the processing of your personal data? 
As a data subject and related to the processing of your personal data, you have the following rights. In accordance with 

• Article 15 GDPR you have the right to request information on the data processed by us concerning your person. Please note the restrictions of § 34 BDSG.
• Article 16 GDPR you have the right to rectification of inaccurate data.
• Article 17 GDPR you have the right to erasure of personal data. Please note the restrictions of § 35 BDSG.
• Article 18 GDPR you have the right to restrict processing.
• Article 20 GDPR you have the right to data portability.

Right to object according to Article 21 GDPR
Where we process your data based on a legitimate interest (Article 6(1)(f) GDPR) and if there are reasons arising from your particular situation that oppose such processing, you have the right according to Article 21(1) GDPR to object to this processing. In the case of an objection, we will refrain from processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and liberties or the processing serves the establishment, exercise or defence of legal claims.
According to Article 21(2) GDPR, you also have the unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority in accordance with Article 77 GDPR at any time.

As of: March 2026

Safeguarding your personal data is very important to us. We therefore process your data exclusively in accordance with legal stipulations (e.g. the GDPR). In the following, we inform you about how we process your personal data as part of our visitor management policy at the terranets bw GmbH headquarters in Stuttgart.

1. Who is responsible for processing your personal data?
You can reach us via the following contact details:

terranets bw GmbH 
Am Wallgraben 135
70565 Stuttgart

For enquiries, please use the Contact Form on our website. 

You can reach our Data Protection Officer at datenschutz[at]terranets-bw.de.

2. What data of yours do we process and for what purpose?
We process your personal data for the purpose of access control as part of our visitor management system. 

We process the following personal data

☐ Photo(s)
☐ Video
☐ Audio
☒ First name and surname and, where applicable, business-related 
   data, e. g. organisational unit, contact details, company name
☒ Date and time of your visit, arrival and departure times
☒ Visit-related data (e. g. reason for your visit)

for the purposes set out below:

• To exercise property rights
• To prevent unauthorised access
• To verify the identity of visitors and service providers
• To issue and manage visitor and service provider badges
• To record arrival and departure times
• To check presence in the event of evacuation
• To investigate security-relevant incidents

To verify identity (ID card/passport), we process the following data (electronically):

• First name and surname

The following data in particular is not stored or is redacted:

• Serial number
• Nationality
• Photo
• Other ID data

Processing specifically comprises collecting, storing, processing, using and disseminating your personal data specified above.

3. What is the legal basis for the processing?
The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interests are in particular: 

• ensuring building security
• verifying the identity of authorised persons
• enforcing property rights
• protecting employees, visitors and the company, specifically facilities of critical infrastructure

4. How long is your data stored?
Your personal data is automatically deleted 90 days after your last visit unless legal or security-relevant reasons require a longer retention period. 

5. Is it mandatory that you provide your data?
Providing your personal data is required to access the building. Access is not permissible without identity verification and data collection.

6. Who will your personal data be shared with?
We process and treat your data confidentially and exclusively for the purpose and to the extent set out in Section 2. Within terranets bw GmbH, your data is disclosed only to those roles that require access to your data to perform the tasks assigned to them and for the purposes outlined above.

Personal data is only disclosed to third parties if this is required for the purposes described above and is permissible by law.

In addition to the recipients already specified above, we also make use of services provided by other service providers (processors) to meet our obligations. The following categories of recipients may receive data:

• IT service providers
• Document and data media disposal companies
• Authorities

Processing is carried out electronically using the visitor management system together with the access control system. Reception staff may additionally carry out manual recording. Your data is processed according to a data processing agreement pursuant to Art. 28 GDPR. 

7. How is your data protected?
terranets bw GmbH implements technical and organisational security measures in accordance with current state-of-the-art technology (Art. 32 GDPR) to safeguard the data you provide from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continually optimised in line with technological advancements. 

8. What rights do you have regarding processing your personal data?
As a data subject, you have the following rights concerning the processing of your personal data. In accordance with

• Art. 15 GDPR you have the right to obtain information on the personal data processed about you. Please note the restrictions under § 34 BDSG.
• Art. 16 GDPR you have the right to rectify inaccurate data
• Art. 17 GDPR you have the right to request deletion of personal data. Please note the restrictions under § 35 BDSG.
• Art. 18 GDPR you have the right to request restriction of processing
• Art. 20 GDPR you have the right to data portability

Right to object under Art. 21 GDPR
If we process your data based on legitimate interests (Art. 6(1)(f) GDPR) or to perform a task carried out in the public interest (Art. 6(1)(e) GDPR) and if there are reasons arising from your specific situation that oppose this processing, you have the right to object to this processing in accordance with Art. 21(1) GDPR. In the event of an objection, we will refrain from processing your data for these purposes unless we can present compelling legitimate reasons for the processing that override your interests, rights and liberties or the processing serves to enforce, exercise or defend legal claims.
According to Art. 21(2) GDPR, you also have an unrestricted right to object to any kind of processing for direct marketing purposes.

If you are of the opinion that the processing of your personal data violates applicable law, you may lodge a complaint with a data protection supervisory authority under Art. 77 GDPR at any time.