General
Thank you for your interest in our company. Your privacy is important to us and you should always feel safe and comfortable when visiting our website. That is why we have put both technical and organizational measures in place to ensure we observe the relevant legislation at all times. This document describes the information we may collect and how we handle it.

I. Who is responsible?
Community Offshore Wind, LLC
353 North Clark Street
30th Floor
Chicago, IL 60654
Email: info@communityoffshorewind.com

II. Provision of the website and logfiles
In the following, we will inform you how we process your personal data in connection with the provision of the website and creation of log files.

1. Which of your personal data is used by us?
Every time you visit our website, our system automatically collects data and information from the system of the accessing computer. In addition to non-personal data (e. g. the domain name of the website which you came from; the websites that you visited on our domain; the names of the retrieved files (incl. date and time of the retrieval); the name of your Internet service provider; and, if applicable, the operating system and browser version of your computer; host name of the accessing computer; language settings), your IP address is processed.

2. What are the sources of the data?
The data is collected from you by being automatically transmitted by your computer to our system.

3. What do we process your data for and on what legal basis?
The data is first collected in order to make the website technically available. In this case the legal basis is Art. 6 para. 1 lit. f) GDPR.

In addition, we store the data - in pseudonymized form in log files - for security purposes, in particular to recognize and counteract attacks on our website, for statistical purposes and to optimize our Internet presence. In these cases the processing is based on Art. 6 para. 1 lit. f) EU General Data Protection Regulation (GDPR). Our legitimate interest is to guarantee the above mentioned purposes.

4. To whom will your data be passed on?
In certain cases, the data may be passed on to other group companies. In addition, we use external service providers who may also receive personal data in the course of their duties. In these cases, we ensure that your personal data is processed in accordance with the provisions of the GDPR and the German Federal Data Protection Act.

As a matter of principle, your data will not be passed on to other third parties, unless we are obliged to do so by legal or official orders.

5. How long will your data be stored?
We store the data for a period of 30 days. 

6. Is there an obligation to provide your data? 
There is no legal or contractual obligation to provide the data. If you do not provide the data, it is not possible to use the website to its full extent.

III. Web analysis and web optimization through cookies
We use cookies on our website. Cookies are text files that contain a characteristic string of signs and enable a unique identification of the computer. They are stored in the Internet browser or by the Internet browser on the user's computer system when the website is accessed. When the website is opened again, the computer system can be identified in this way and certain information can be transferred automatically.

The information that is stored via cookies fulfils various functions. We categorize them as follows:

• Essential Cookies
• Analytical Cookies
• Convenience Cookies
  
  

1. Which of your personal data is used by us?
Depending on the cookie used, we collect different personal data. You can find a list of which data is involved in individual cases here.

2. What are the sources of the data?
All data that we collect in the form of cookies originate from you.

3. What do we process your data for and on what legal basis?
Depending on the cookie used, we pursue different purposes with the use of cookies. The first time you visit our website, you will be asked to select which cookies you wish to allow. Here you have the possibility to view and change your selection.

a. Essential Cookies
Essential cookies are required for the technical operation of our website and to ensure its stability. When you visit our websites, an info banner informs you about the use of cookies and refers you to this data protection information. The legal basis for this processing is Article 6 para. 1 lit. f GDPR. Our legitimate interest is to be able to guarantee the purposes mentioned.
The data collected from you in this way is pseudonymized by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.

b. Analytical Cookies
Analytical cookies enable us to analyze your surfing behaviour on our website so that we can measure and improve the performance of our pages. In doing so, we create statistical profiles that are not attributable to individuals but only to groups. These profiles are used to analyze visitor and click behaviour as well as demographic characteristics of the website visitors. 

When you visit our websites, our info banner informs you about the use of analysis cookies by referring to this data protection information. If you agree to the processing, you click on this cookie category and thereby give your consent, which serves as a legal basis, in accordance with Art. 6 para. 1 a) GDPR. 

The data collected from you in this way is pseudonymized by technical precautions and is not stored together with other personal data of yours. Hence we can no longer assign the data to you personally.

c. Convenience Cookies 
With convenience cookies we use marketing cookies and social media cookies. Marketing cookies help us to offer you personalized advertisements on and outside rwe.com that are tailored to your interests. Social media cookies allow you to connect directly to your social media account as needed. This approach makes it easier for you to share your website visit on social networks and share your experiences in that context. We also use these cookies to exchange data about you with the operators of social networks. This data also enables us to offer you advertisements tailored to your interests. 

When you visit our websites, our so-called cookie banner informs you about the use of convenience cookies by referring to this data protection information. If you agree to the processing, click on this cookie category and thereby give your consent, which serves as a legal basis, in accordance with Art. 6 para. 1 lit. a) GDPR.
The created usage profiles, including those exchanged with the operators of social networks, are pseudonymized and only then processed. This means that we can only assign the analyzed advertising interests to the pseudonym, but not to you personally.

4. To whom will your data be passed on?
In certain cases, the data may be passed on to other Group companies. In addition, third-party companies that offer the respective cookie will receive your data within the scope of data processing on our behalf pursuant to Art. 28 GDPR. 

5. How long will your data be stored?
We use two types of cookies: persistent cookies and session cookies. A persistent cookie lasts beyond the current session and will stay on your browser until they expire or you delete them. Session cookies last only as long as the session (usually the current visit to a website or a browser session). Third parties, such as our customers, partners and service providers may also use cookies in connection with our Services. The list will inform you in detail about the storage.

6. Is there an obligation to provide your data? 
There is no obligation to provide the data. However, the essential cookies are necessary for the website to function properly.

7. Your rights with regard to cookies 
In addition to the rights mentioned under point X, you have the right:

• to object to the use of the essential cookies at any time.
• to revoke/withdraw your consent here regarding the analytical and convenience cookies used by us.
  
  

IV. Contact Form
On our website you have the possibility to contact us via a form. In the following we explain to you how we process your data in this context.

1. Which of your personal data is used by us? 
We process the data you provide in the respective form. These are: 

• Name, 
• Title, 
• E-Mail, 
• Address, 
• Company.

In addition, you have the possibility to provide us with further data via a free text. 

2. What are the sources of the data?
You enter the data into the form yourself. 

3. What do we process your data for on what legal basis?
We need the data so that we know who has sent us the inquiry and to answer this inquiry. The legal basis of the processing is your consent under Art. 6 para. 1 lit. a) GDPR, which you give by sending the request. 

4. To whom will your data be passed on?
We will pass on your data to the Group company responsible for your request. In addition, we use service providers in certain cases who may also receive your data. 

5. How long will your data be stored?
The data will be stored as long as necessary to answer your request. In addition, your data will be stored within the legal retention periods. 

6. Is there an obligation to provide your data? 
There is no obligation to provide the data. Without the data, we are not able to answer your inquiry. 

7. Right to withdraw your consent
Within the scope of using the contact form you have the rights mentioned under point X. 

V. Newsletter
On our website and via embedded frames on our presences in social media we offer you the possibility to subscribe to our newsletter. Community Offshore Wind LLC is responsible for sending out the newsletter.

1. Which of your personal data is used by us? 
To send the newsletter we process your name and e-mail address. In addition, we collect data about your subscription behavior, for example, whether you read the newsletter or click on links listed there. These data are collected anonymously.

2. What are the sources of the data?
You enter your name and e-mail address during registration. In order to exclude errors, we use the so-called double opt-in procedure, in which after registration you receive an e-mail with a confirmation link and only if you have clicked this link you are added to the newsletter distribution list.

3. What do we process your data for (purpose of processing) and on what legal basis?
We use the data to send you our newsletter with information about the RWE Group. We also use the data about your subscription behavior to improve our newsletter in order to provide you with topics that interest you. The legal basis is your consent, which you grant as part of the registration process.

4. Who will your data be passed on to?
The data is passed on within the Group to other Group companies. In addition, we sometimes use service providers who also receive your data in order to send you the newsletter. Other third parties do not receive any of your data.

5. How long will your data be stored?
We store your data for as long as you are registered for the newsletter. After you have unsubscribed, we store your consent information for 1 year for verification purposes.

6. Is there an obligation to provide your data? 
There is no obligation to provide the data. However, we cannot send you a newsletter without the data provided.

7. Right to withdraw your consent
You have the possibility to withdraw your consent to receive the newsletter and to evaluate your subscription behaviour at any time. The easiest way to do this is to use the unsubscribe link at the end of each newsletter. 

VI. Third-party plug-ins and content – Youtube
We integrate functional and content elements into our online offer that are obtained from third-party providers. These can be, for example, graphics, videos or social media buttons and posts (hereinafter uniformly referred to as "content").

1. Which of your personal data is used by us? 
The integration always requires that the third-party providers of this content process the IP address of the user, as without the IP address they would not be able to send the content to their browser.
The IP address is thus required for the presentation of these contents or functions.

2. What are the sources of the data?
The data is collected from you.

3. What do we process your data for and on what legal basis?
We need the data so that we can offer the service of third-party providers.
When you access our websites, you will be informed about the use of marketing cookies in our so-called cookie banner by being referred to this data protection information. If you agree to the processing, you click on this cookie category and thereby give your consent, which serves as the legal basis, in accordance with Art. 6 Para. 1 lit. a) DSGVO.

4. To whom will your data be passed on?
With your consent, the data is passed on to the respective third-party provider. In the case of Youtube, the data is passed on to Google LLC and transferred to a server in the USA.

5. How long will your data be stored?
Google/Youtube stores your data. For more information on data processing by Google, please see Google's privacy policy https://policies.google.com/privacy?hl=en 

6. Is there an obligation to provide your data? 
There is no obligation to provide the data.

7. Right to withdraw your consent
In addition to the rights mentioned under point X, you have the right to withdraw your consent regarding the Google services here.

VII. Links to other Websites
The RWE websites contain links to other websites. As the provider of our websites, we are solely responsible for the content of our own online presence. A distinction must be made between our own content and the content provided by other providers, for which we cannot accept any responsibility and do not adopt their content as our own. We have no influence on whether the website operators linked to us adhere to the relevant data protection regulations. This declaration on data protection therefore does not apply to the websites of other providers, even if you access them via links on our website. Please therefore observe the respective data protection regulations of the other providers. We therefore accept no liability for the content of other websites. In the event that you should notice a relevant violation, we thank you for informing us. We will then remove the link after checking it, if necessary.

VIII. Does automated decision-making including profiling take place?
No automated decision-making including profiling takes place. 

IX. Is your data transferred to countries outside the European Union (so called third countries)?
We also use service providers located in third countries outside the European Union and the European Economic Area ("EEA") to process your data. To protect your personal data, we conclude standard data protection clauses provided by the EU Commission with service providers in third countries. These clauses provide appropriate safeguards for the protection of your data with service providers in the third country. 
You have the opportunity to request further information and to receive copies of the relevant agreements at any time. You can reach us at the contact details mentioned under point I or II.

X. What rights do you have in connection with the processing of your data?

1. Right of access
You may request confirmation from the data controller as to whether personal data concerning you is being processed by us. 
You also have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer. 

2. Right to rectification
You have the right to ask the data controller to rectify and/or complete the data, if the personal data processed concerning you is incorrect or incomplete. The data controller shall make the correction without delay.

3. Right to restriction of processing
Under the conditions laid down in the GDPR, you may request that the processing of personal data concerning you be restricted. 

4. Right to erasure
You may request the controller to delete the personal data concerning you and the controller is obliged to delete such data immediately, unless an exception is provided for by law. 

5. Right to data portability
You have the right to obtain your personal data, in a structured, commonly used and machine-readable format, which you have provided to the controller and the processing of which is based on consent or on a contract with you. 
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one data controller to another, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this. 

6. Right to withdraw your consent
You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the lawfulness of the processing that has taken place on the basis of your consent until revocation. This also applies to the revocation of declarations of consent that were issued to us prior to the validity of the GDPR, i. e. prior to 25 May 2018. In this case, all personal data stored on the basis of the consent will be deleted, unless the law provides another legal basis for further storage. 

7. How to excercise your rights
To exercise your above rights, please contact us using the contact details given under point I or II. 
If you want to revoke your consent regarding the Google services, you can change this setting here.
If you wish to revoke your consent to receive the newsletter, please use the unsubscribe link at the end of each newsletter.
Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

9. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the GDPR. The supervisory authority which the complaint has been lodged with shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR. To make it easier for you to assert your rights, you will find below the address of the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
T: +49 211 38424 – 0
F: +49 211 38424 – 10
E-Mail: poststelle@ldi.nrw.de

For an overview and contacts of all state data protection authorities and European Data Protection Commissioners, please visit here.

XI. Usercentrics

We use the consent management service Usercentrics, of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (Usercentrics). This allows us to obtain and manage the consent of website users for data processing. The processing is necessary for the fulfillment of a legal obligation (Art. 7 para. 1DSGVO) to which we are subject (Art. 6 para. 1 p. 1 lit. c DSGVO). The following data is processed for this purpose:

Date and time of access Browser information Device information Geographic location Cookie preferences URL of the visited page.

Usercentrics is a recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. For more information on objection and removal options vis-à-vis Usercentrics, please visit: https://usercentrics.com/de/datenschutzerklaerung/.
The data will be deleted after 3 years.