Thank you for visiting our website. In this privacy notice, we inform you about the processing of your personal data when you use this website and our services.
Controller
MB Energy Holding GmbH & Co. KG Am Strandkai 1, 20457 Hamburg, Germany Phone: +49 40 37004-0 Email: post-germany@mbenergy.com
Our company Data Protection Officer will be pleased to provide you with any information you require, or respond to any feedback you have, concerning data protection:
Your personal data may be processed for the following purposes. The relevant data categories follow from the circumstances described in each section below.
Providing the website and ensuring its security — usage data such as IP address, browser information, pages visited, and timestamps (legitimate interest)
Cookies, analytics, and marketing technologies — online identifiers, device information, browsing behaviour, and interaction data (consent for statistics and marketing cookies; legitimate interest for strictly necessary cookies)
Customer account management — registration data such as name, email address, postal address, and login credentials (contract performance)
Order fulfilment and transactions — name, delivery address, contact details, payment information, and order details (contract performance, legal obligation, legitimate interest)
Customer care — name, contact details, order reference, and communication content (contract performance, legitimate interest)
Responding to enquiries via contact forms — name, contact details, and message content (legitimate interest, contract performance where applicable)
Marketing communications including newsletter — email address, name, communication preferences, and interaction data from tracking technologies (consent)
Fraud prevention and regulatory compliance — identity and transaction data for know-your-customer and anti-money laundering checks (legal obligation, legitimate interest)
Statistical analysis and service improvement — aggregated and pseudonymised usage, order, and interaction data (legitimate interest)
Group-internal sharing and cross-selling — contact, order, and usage data shared with MB Energy affiliates (legitimate interest, consent where applicable)
Corporate transactions — personal data as necessary in the context of mergers, acquisitions, or restructuring (legitimate interest)
Further details on each processing activity are set out below.
Usage Data
When you visit our website, our web server temporarily processes usage data to ensure proper operation and improve the website. This includes the name and address of the requested content, date and time of the request, data volume transferred, access status, the web browser and operating system used, the referral link indicating how you reached our website and the requesting computer’s IP address. The legal basis is our legitimate interest in providing and optimising the website.
We store the full IP address for a period of [seven] days, strictly for the purpose of detecting and preventing attacks on our website. After this period, the IP address is deleted or anonymised.
Cookies, Pixels, and Similar Technologies
We use cookies, pixels, and similar technologies (collectively "cookies") on our website. These technologies may process online identifiers, device information, browsing behaviour, and interaction data. Some cookies are strictly necessary for the website to function. Others are only set with your prior consent.
Our cookie banner and consent management tool (accessible via the cookie settings icon on our website) contain a detailed list of all cookies used, including their providers, purposes, storage durations, and third-country transfers. You can manage your preferences at any time through the consent management tool.
We use cookies in the following categories:
Necessary Cookies
These cookies are required for the basic functionality and security of the website, such as bot protection, session management, and storing your consent preferences. They are set without consent. The legal basis is our legitimate interest in providing a secure and functional website.
Statistics Cookies
With your consent, we use cookies that help us understand how visitors interact with the website — for example, which pages are visited and how users navigate. The data is used to improve the website. These cookies may be set by third-party providers who process data on our behalf or as independent controllers. Some of these providers may process data in countries outside the EU/EEA that do not provide an adequate level of data protection. In such cases, the transfer is based on your consent. You can find details on the specific providers and cookies in our consent management tool.
Marketing Cookies
With your consent, we use cookies for advertising, campaign measurement, and retargeting purposes. This includes displaying personalised advertising on third-party websites, measuring the effectiveness of advertising campaigns, and recognising your device across websites to show you relevant content based on your browsing behaviour.
These cookies may be set by third-party providers who process data on our behalf or as independent controllers. Some of these providers may process data in countries outside the EU/EEA that do not provide an adequate level of data protection. In such cases, the transfer is based on your consent. You can find details on the specific providers and cookies in our consent management tool.
Managing Your Preferences
You can withdraw or adjust your consent at any time via the consent management tool (cookie settings icon on the website, or click here). Withdrawal does not affect the lawfulness of processing before the withdrawal.
Customer Account
You may create a customer account on our website or place orders as a guest. When you register, we process the data you provide — typically your name, email address, postal address, and login credentials — to set up and manage your account, authenticate your identity, and provide you with access to your order history, saved preferences, and other account features. The legal basis is the performance of the contract with you.
If you use our website as a guest, we process the data necessary to fulfil your order (such as name, delivery address, email address, and payment details) without creating a persistent account. The legal basis is likewise the performance of the contract.
We store your account data for the duration of your account. You can request deletion of your account at any time by contacting data-protection@mbenergy.com, subject to any legal retention obligations.
Orders and Transactions
When you place an order through our website, we process the data necessary to fulfil the order. This typically includes your name, delivery address, email address, phone number, payment information, and the details of the products or services ordered. The legal basis is the performance of the contract with you.
We may also process your data for:
invoicing, payment processing, and dunning (contract performance and legal obligation),
fraud prevention and know-your-customer checks, including identity verification as required by applicable regulations (legal obligation and legitimate interest),
assessment of creditworthiness (legitimate interest),
delivery coordination with logistics partners (contract performance),
customer support related to your order (contract performance and legitimate interest),
statistical and business analysis purposes, including to improve our products, services, and commercial offerings (legitimate interest).
We retain order-related data for the duration required by applicable tax, commercial, and regulatory retention obligations (typically ten years after completion of the transaction).
Customer Care
When you contact us for support — whether via our contact forms, email, phone, or other channels — we process your data to handle your enquiry, resolve complaints, and improve our service quality. This typically includes your name, email address, phone number, order reference, and the content of your communication. The legal basis is the performance of the contract with you and our legitimate interest in maintaining customer relationships and service quality.
We may also use data from customer care interactions for internal training, quality assurance, and statistical analysis (legitimate interest, or where required consent).
Contact Forms
You can contact us via the contact forms on our website. We process the data you submit — typically your name, email address, phone number, and the content of your message — in order to respond to your enquiry (legitimate interest). We may also use your data for statistical analysis and to improve our services and offerings (legitimate interest). Where your enquiry leads to a contractual relationship, processing is based on the performance of that contract.
You have the right to object to processing based on legitimate interest at any time by contacting data-protection@mbenergy.com.
Marketing Communications
You can subscribe to our newsletter or opt in to marketing communications via our contact forms. We will only send you marketing communications if you have given your consent. The data processed includes your email address, name, communication channel preferences, and interaction data such as email open rates and link clicks.
Scope of consent
When you consent to marketing communications, you agree that MB Energy and its affiliated companies within the MB Energy group may contact you by email, phone, or other channels you have indicated, to inform you about products, services, offers, and related topics — including products and services offered by other entities within the group (cross-selling). You can find an overview of MB Energy group companies here:
B.W.O.C. Limited (formerly MB Energy Limited und Swindon Truckstop Limited) C/O Thomas Silvey Ltd Building A St James Court, Great Park Road, Bradley Stoke BS32 4QJ Bristol, United Kingdom
Benol Energieservice GmbH Carl-Benz-Straße 35 60386 Frankfurt am Main
Böttcher Energie Beteiligungs GmbH Maxhüttenstraße 7 93055 Regensburg
Böttcher Energie GmbH & Co. KG Maxhüttenstraße 7 93055 Regensburg
ZIEGLMEIER Energie GmbH Gerolsbacher Straße 9 86529 Schrobenhausen
When you receive marketing communications from us, we use tracking technologies such as tracking pixels and individualised links to measure whether and how you interact with our messages — for example, whether an email was opened and which links were clicked. This helps us improve our communications and measure engagement.
You can withdraw your consent to marketing communications at any time — by email to data-protection@mbenergy.com or by clicking the unsubscribe link included in every message.
Storage Periods
Unless specifically stated above, we delete personal data when it is no longer required for the stated purposes and no legal retention obligations or other legitimate reasons prevent deletion.
Recipients
We may share your personal data with the following categories of recipients, to the extent necessary for the purposes described in this notice:
Affiliates within the MB Energy group — we share personal data with affiliated companies for internal administrative purposes, customer relationship management, and to enable cross-selling and marketing across the group (legitimate interest and, where applicable, your consent). This includes sharing order, contact, and usage data to provide you with coordinated services and relevant offers from within the group.
Service providers supporting the operation of our website, order fulfilment, payment processing, delivery, marketing, analytics, consent management, IT, and customer care.
Financial institutions for payment processing and fraud prevention.
Professional advisors such as legal counsel, auditors, and tax advisors.
Know-your-customer and compliance providers for identity verification and anti-money laundering checks.
Credit reference agencies for, inter alia, assessment of creditworthiness.
Insurers where required to obtain insurance coverage or in relation to clams.
Public authorities where required by law or in response to lawful requests.
Our service providers are contractually bound to process data only in accordance with our instructions.
Corporate Transactions
In the context of corporate transactions — such as a merger, acquisition, restructuring, sale of assets, or similar event — your personal data may be disclosed to potential buyers, investors, advisors, or successor entities, to the extent necessary to evaluate or complete the transaction. In such cases, the legal basis is our legitimate interest in conducting the transaction. The recipient will be bound by applicable data protection requirements. Following completion of such a transaction, the acquiring or successor entity may become the controller of your personal data.
International Transfers
Some of the recipients described above are located outside the EU/EEA — in particular in the United States, but depending on the provider also in other countries worldwide. Where personal data is transferred to a country without an adequate level of data protection, we rely on appropriate safeguards such as standard contractual clauses or, where cookies and similar technologies are concerned, your consent.
Your Rights
Under the terms of the GDPR, you have the following rights as a so-called “data subject” – the right to information (article 15 GDPR); the right to rectification (article 16 GDPR); the right to erasure (article 17 GDPR); the right to restriction of processing (article 18 GDPR); the right to object (article 21 GDPR) and the right to data portability (article 20 GDPR). Your rights to information and erasure are subject to limitations in accordance with Sect. 34 and 35 BDSG (German Federal Data Protection Act). In addition, you have a right to lodge a complaint with a supervisory authority (article 77 GDPR in conjunction with section 19 BDSG).
Right to object (article 21 GDPR)
Should data be gathered on the basis of article 6 paragraph 1 lit. f GDPR (data processing for the purposes of legitimate interests), then you have the right to object to processing at any time on grounds relating to your particular situation. Should you do so, then we will no longer process your personal data unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
Under the terms of article 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes data protection law regulations. You can assert this right in particular with a supervisory authority in the member state of your habitual residence; place of work or the place of the alleged infringement.
