Privacy Policy

1. Controller

The controller for the processing of personal data on this website is:

Neon Neue Energieökonomik GmbH
Schönleinstraße 31
10967 Berlin, Germany

Managing directors: Lion Hirth, Silvana Tiedemann
Commercial register: Amtsgericht Charlottenburg, HRB 159715 B

For questions about data protection and to exercise your rights, please contact weigelt@neon.energy.

2. Your rights

You have the right to obtain information about the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict processing, to data portability, and to object to processing based on a balancing of interests. Where you have given consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal is not affected.

A short message to weigelt@neon.energy is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

No automated decision-making, including profiling, takes place.

3. Visiting our website

When you open our website, technical access data is processed, in particular IP address, date and time of access, the page requested, the volume of data transferred, browser and operating system. This data is necessary to deliver the website and to ensure its secure and functioning operation, for example to fend off attacks. The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Our website is delivered via Cloudflare. We do not use any analytics or tracking tools. There is no audience measurement, no profiling, and no advertising networks. Fonts are hosted on our own server and are not loaded from third parties.

4. Cookies

As a rule our website sets no cookies. No cookies are used for analytics or advertising purposes, and the browser’s local storage is not used. If Cloudflare shows a visitor a security check in an individual case, Cloudflare sets a technically necessary cookie in the process. Cookies are set for signing in to our internal area at intern.neon.energy, where they are required for authentication.

5. Contacting us

There is no contact form on our website. If you call us or send an email, we process the information you provide in order to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry serves the preparation or performance of a contract, and otherwise Art. 6(1)(f) GDPR. We process email via Microsoft 365.

6. Registering for a course

To register for our executive courses we collect your name, email address, position and institution, together with the information we need for invoicing, in particular invoice recipient, invoice address and invoice email address. Where applicable we also process information about a discount granted. This information is required for the registration; without it we cannot process your participation.

We use this data to handle your registration, confirm your place, inform you about the organisation of the course, and invoice your participation. The legal basis is Art. 6(1)(b) GDPR.

Registration currently runs through a form provided by Google. The data you enter there is processed by Google and then transferred into our own administration in Microsoft 365.

To handle and evaluate registrations, for example for participant overviews and name badges, we also use the AI service provided by Anthropic. Anthropic processes the data solely on our behalf and does not use it to train its models.

If a course is fully booked we keep a waiting list. We process the information required for this in order to offer you a place that becomes available or to inform you about a future date.

7. Applying for a scholarship

For our executive courses we award a limited number of free places to doctoral researchers and postdocs. Applications are submitted through a form provided by Google.

We process the data and documents you provide with your application, in particular name and contact details, CV, master’s certificate with transcript, a paper you submit, information about your supervisor, information on the status of your doctorate, and the profile links you provide. The processing serves the conduct of the application procedure and the selection of candidates.

The legal basis for processing the information required for the application and selection is Art. 6(1)(b) GDPR, insofar as the processing is necessary for pre-contractual measures taken at your request. Where we process further data on the basis of consent, this is done pursuant to Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

Recipients are Google as the provider of the application form and Microsoft as the provider of our file storage. If you name a supervisor, we may contact that person as part of the selection process.

We delete application documents twelve months after the selection process is concluded. If you are offered a place, the information required for participation is transferred into the course registration and is subject to the periods stated there.

8. Running the course

To run the course we process in particular your name, position and institution, for example for name badges and internal participant overviews. The legal basis is Art. 6(1)(b) GDPR.

9. Participant list

After the course we make a list of the group available to participants on request, so that the professional exchange can continue. The list contains name, institution and email address.

You are included only with your explicit consent. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time. Lists already distributed before the withdrawal cannot be recalled.

10. Photographs and participant feedback

Photographs, including group pictures, are taken during our courses. Some participants also provide us with feedback which we use as a quotation together with their name and institution.

We publish photographs and quotations on our website and on our profiles on social networks, in particular LinkedIn. This is done only with the consent of the person shown or quoted. Consent for photographs is obtained during the course; anyone who does not agree is not photographed. The legal basis is Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future. We then remove the photograph or quotation from our website and our profiles. Content that third parties have already shared further cannot be recalled by us.

11. Certificate and digital badge

After the course you receive a certificate of participation and a digital badge. For this we use the service virtualbadge.io (FutureNext GmbH, Mannheim, Germany). We transmit your name, email address and the course title to the service. The legal basis is Art. 6(1)(b) GDPR.

12. Information about new courses

If you have given your explicit consent, we will inform you about future course dates. For this we process your name and email address on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time; every message contains a note on how to unsubscribe.

13. Embedded content and external data sources

Recordings of our webinars are embedded on individual project pages and are hosted by Vimeo. The video player is loaded only when you click the preview image. As long as you do not click, no player is loaded and Vimeo sets no cookies.

The preview image itself is currently loaded from a Vimeo server. This transmits your IP address to Vimeo.

If you click the preview image, the player is loaded from Vimeo. Vimeo then receives your IP address and may set cookies. The processing is additionally governed by Vimeo’s privacy information.

On individual pages we display current electricity market data. Your browser loads this data directly from www.smard.de, operated by the German Federal Network Agency, and in the event of an outage from api.awattar.de. The respective provider receives your IP address in the process. The legal basis is our legitimate interest in presenting current market data pursuant to Art. 6(1)(f) GDPR. No further external content is embedded on our website.

14. Invoicing and accounting

We process invoicing and accounting data in order to meet our contractual and tax obligations. The legal bases are Art. 6(1)(b) and (c) GDPR. Recipients may in particular be our tax advisors and, as part of payment processing, our bank.

Invoice records are kept in accordance with the statutory retention periods, as a rule for ten years.

15. Retention

As a matter of principle we store personal data only for as long as this is necessary for the respective purpose or as long as statutory retention obligations exist.

We do not store technical access data of the website ourselves. Cloudflare processes the IP address as a processor insofar as this is necessary for the delivery and security of the website; the duration of that processing is governed by Cloudflare’s own information. Enquiries by email or telephone without a contractual context are deleted at the latest twelve months after the enquiry has been dealt with; correspondence with a contractual context is subject to the statutory retention periods.

Course registration details are kept for up to five years after the end of the course, so that we can answer queries and confirm participation. Invoicing and accounting records are subject to the statutory retention periods. Data based solely on consent is deleted after that consent is withdrawn, unless another legal basis or a statutory retention obligation applies.

16. Transfers to third countries

Some of the services named above also process data outside the European Union, in particular in the United States. We base these transfers on the safeguards provided for this purpose, such as standard contractual clauses or the provider’s participation in the EU-US Data Privacy Framework.

The service providers named process data solely on our behalf and on our instructions. Your data is not passed on for other purposes, in particular not for third-party advertising.

17. Changes to this privacy policy

We will update this privacy policy when the procedures, services or legal framework we work with change.

Last updated: 8 September 2026