Privacy / Legal Notice

1. Controller

The party responsible within the meaning of Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) for the processing of your personal data (“Controller”) is:

Sustainable Finance Risk Consulting GmbH
Gedonstraße 8
c/o Munich Re
80802 Munich
Germany

E-Mail: projects@aegf.net
Telephone: 089 21540863

Rights of Affected Parties / Your Rights Under The GDPR

Under the applicable data protection law, srf-consulting has to guarantee the following rights with regards to your personal data.

For better understanding and readability we have summarised the respective rights. For detailed information, please refer to the original text or contact us directly.

Right of Access, Art. 15 GDPR: You may request information from srf-consulting at any time as to whether and which personal information about you is processed by srf-consulting as well other important criteria, such as the purposes of processing or the duration of storage. The information will be provided to you by srf-consulting free of charge.

The right to information does not exist or exists only to a limited extent, if and to the extent that the information would reveal information subject to confidentiality requirements, for example information covered by the obligation of professional secrecy.

Right to Rectification, Art. 16 GDPR: If your personal data stored by srf-consulting is incorrect or incomplete, you have the right to request at any time that srf-consulting correct/complete it.

Right to Erasure, Art. 17 GDPR: You have the right to ask srf-consulting to delete your personal information if and when the data is no longer needed for the purposes for which it was collected or, if the processing is dependent on your consent, you have revoked your consent. In this case, srf-consulting must stop processing your personal information and remove it from its IT systems and databases.

A right to deletion does not exist, provided that:

• the data must not be deleted due to a legal obligation or must be processed due to a legal obligation;
• the processing of data is necessary for the establishment, exercise or defense of legal claims.

Right to Restriction of Processing, Art. 18 GDPR: Under certain conditions you have the right to request that srf-consulting restricts the processing of your personal data.

Right to Data Portability, Art. 20 GDPR: You have the right to receive from srf-consulting the data you provide in a structured, common, and machine-readable format and the right to have this information transmitted to another person responsible. This right exists only if:

• you have provided us with the information on the basis of consent or on the basis of a contract concluded with you, and
• the processing is done using automated procedures.

Right to Object to the Processing, Art. 21 GDPR: If the processing of your personal data by srf-consulting is based on Art. 6 para. 1 lit. f) of the GDPR, you can object to the processing at any time. In the event of an objection, we will no longer process your data. An exception exists if there are compelling reasons worthy of protection that outweigh your interests.

Any and all of the rights described above may be asserted if you direct your specific request to the following contact details:

By e-mail:
projects@aegf.net

By mail:
Sustainable Finance Risk Consulting GmbH
Gedonstraße 8
c/o Munich Re
80802 Munich

Right to Lodge a Complaint with a Data Protection Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 of the GDPR if you believe that the processing of your personal data violates data protection law.

3. Description of Data Processing on the Website and Legal Bases for Processing

3.1. Visiting Our Website (Logfiles)

When you visit our website, we collect the data that is technically necessary to display this website (logfiles). These are the following personal data that are automatically transmitted to our server by your browser:

• IP address
• Date and time of your request / your accessing of the website
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (information, which specific page was accessed by you)
• Access status / HTTP status code
• Website from which the requests come
• Browser (information about the browser you are using)
• Operating system and its user interface (operating system of the computer used by you to access the website)
• Geolocation (continent)

The processing of this personal data is based on Art. 6 para. 1 lit. f) of the GDPR. Logfiles are used for the display of the website as well as statistical evaluations for the purpose of the operation, security and optimisation of our services; there is a legitimate interest in ensuring the stability and security of the connection and thus the functionality and improvement of the quality of our website.

The information of the log files is stored for 7 days and then deleted.

This website is hosted by a service provider Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp “Mittwald”; the data collected on our website are therefore stored on the servers of the service provider. The servers are located

• exclusively in Germany.

A data transfer abroad does not take place.

3.2 Contact by E-Mail, Phone, Mail

You can contact us with questions about the African Energy Guarantee Facility (AEGF), our website, and other inquiries via the contact details published on our website by e-mail, telephone or mail.

When you contact us, the information provided by you (in particular your contact details - depending on the contact channel email address, telephone number or postal address - the text of your request, and any other information you provide, such as e.g. your first and last name) is processed by us in order to process your request and answer your questions.

Depending on the nature of your enquiry the data transmitted and its content (which may also contain personal data you have submitted) are either processed on the basis of Art. 6 para. 1 lit. b) GDPR, insofar as it concerns pre-contractual measures or a contract concluded with you, or due to our legitimate interest in accordance with Art. 6 para 1 lit. f) GDPR. Our legitimate interest is to respond to your contact.

The data resulting from your inquiry/contact will be deleted by us as soon as it is no longer required to process your request. As far as statutory storage obligations exist, the data are stored for the duration of the legal obligation to retain data.

Transfer of Data to a Primary Insurer

When you express interest in obtaining a guarantee of the AEGF we may transfer your data (name, contact details, other information you may have transmitted to us) to the relevant primary insurer.

This data transfer is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR or on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to facilitate your application. You can revoke your consent at any time.

A data transfer to countries outside of the European Economic Area (EEA) (“third countries”) may take place, depending on the location of the primary insurer in question. Some third countries are certified by the European Commission as having a level of data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. In the absence of an adequacy decision we currently only transfer your data to a third country if you have explicitly consented to the proposed transfer or if any other specific situation according to Art. 49 Sec. 1 GDPR applies.

3.3 Grievance Mechanism

You may submit a complaint regarding insured projects via e-mail or mail.

By e-mail:
complaints@aegf.net

By mail:
Sustainable Finance Risk Consulting GmbH
Gedonstraße 8
c/o Munich Re
80802 Munich

When you submit a complaint, the information provided by you (in particular your contact details - depending on the contact channel and the details of your complaint) is processed by us in order to process your complaint.

Depending on the nature of your complaint the data transmitted and its content (which may also contain personal data you have submitted) are processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR or on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to process your complaint.

The data resulting from your complaint will be deleted by us as soon as it is no longer required to process your complaint. As far as statutory storage obligations exist, the data are stored for the duration of the legal obligation to retain data.

Transfer of Data to a Primary Insurer/Guarantor
In order to process your complaint, we may transfer your data (name, contact details, other information you may have transmitted to us) to the relevant primary insurer or guarantor of the specific project.

This data transfer is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR or on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to process your complaint. You can revoke your consent at any time.

A data transfer to countries outside of the European Economic Area (EEA) (“third countries”) may take place, depending on the location of the primary insurer or the guarantor for the specific project. Some third countries are certified by the European Commission as having a level of data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. In the absence of an adequacy decision, we currently only transfer your data to a third country if you have explicitly consented to the proposed transfer or if any other specific situation according to Art. 49 Sec. 1 GDPR applies.

The processing of complaints can also be handled confidentially. In this case, consent to the transfer of data is not required, as such transfer does not take place.

3.4 Newsletter

With our newsletter, you will regularly receive up-to-date information on the African Energy Guarantee Facility. If you subscribe to the newsletter, we will save and process your e-mail address for the purpose of sending you the newsletter you have subscribed to.

The newsletter functionality is operated by an external service provider Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. The data collected on our website is therefore stored on the servers of the service provider. The servers are located

• exclusively in Germany.

A data transfer abroad does not take place.

The data processing for sending the newsletter is based on your consent (Art. 6 para. 1 lit. a GDPR). You can unsubscribe from the newsletter at any time, effective for the future, and thus revoke your consent.

You will find the corresponding link in every newsletter e-mail.

3.5 Integration of Vimeo

We have included Vimeo videos in our online offering, which are stored on http://www.vimeo.com and are directly playable from our website. Vimeo is a service of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.

All videos are integrated in the "extended privacy mode", that is, no information about you as a user will be transferred to Vimeo when you are not playing the videos. Only when you play the videos data will be transmitted. We have no influence on this data transfer.

By visiting the website, Vimeo receives the information that you have accessed the corresponding sub-page of our website. In addition, the data that is technically necessary to display the website mentioned above is transmitted. This happens regardless of whether Vimeo provides a user account that you are logged in to, or if there is no user account.

Further information on the purpose and scope of data collection and processing by Vimeo can be accessed in the privacy policy. You can obtain more information about your rights and privacy settings here: Vimeo and Vimeo Cookies.

3.6 Integration of Social Media

We are currently linking to our sites on following social media platforms: Twitter and LinkedIn.

When you visit our site, no personal data is transmitted to the providers of these platforms initially. We are, however, giving you the chance to link up directly to our profiles on these social media. The individual links can be found via the corresponding logos and names. Only by clicking on the logo or the link you will be redirected to our page at the corresponding social media platform, and only then will the social media service provider receive any data you have provided during your session with our own website provider. Thus through using the links, personal data will be transferred to the social media service provider and stored in the country where they are hosted.

We would like to make clear that social media services and their functions are to be used at your own responsibility. This is particularly relevant for their uses in interactive functions, such as sharing or evaluating.

Information about which data the respective social media provider processes and for what purposes they are used, as well as your rights and how to adjust your privacy settings can be found in the respective privacy policies of the social media providers:

Twitter and Twitter-Cookies

LinkedIn and LinkedIn-Cookies

We have no influence or control on the nature and extent of the data processed by the social media providers, the nature of the processing and use or the disclosure of this data to third parties.

3.7 Integration of Eventbrite

On our website, we offer the opportunity to register for certain events. For this we use the technical solution Eventbrite, which is operated by Eventbrite, Inc., 155 5th Street, Floor 7, San Francisco, CA 94103, USA.

Eventbrite has a representation for the purposes of European data protection legislation. This is Eventbrite NL BV, based in Silodam 402, 1013AW, Amsterdam, The Netherlands.

When you sign up for an event, you will be redirected to the Eventbrite website.

Eventbrite collects personal data if you voluntarily provide such information when registering for one of our events. Eventbrite then transmits this data to us as the organizer. To register for Eventbrite for an event, you must submit the following information to Eventbrite:

• Name, first Name
• E-mail address

For information on how Eventbrite uses personal data, please refer to the Eventbrite Privacy Policy: Eventbrite

As an organizer Eventbrite gives us access to the above-mentioned data of the participants of the booked event. We use the data for the purpose of preparation and follow-up of the booked events. In addition, registered participants may receive information about the booked event and our contact details by e-mail before and after the booked event.

The processing of the data is based on Art. 6 para. 1 lit. b) GDPR (processing to fulfil a contract).

The data resulting from your registration to an event will be deleted by us as soon as it is no longer required for purposes related to the event you registered for. A purpose related to the event could also be the request of feedback. The data will be deleted 30 days after termination of the event at the latest. As far as statutory storage obligations exist, the data is stored for the duration of the legal obligation to retain data.

3.8 Use of Cookies

We use cookies on our website. Cookies are small text files with configuration information that are sent to your browser from our web servers when you visit our website and are then kept by the latter on your computer for later retrieval.

With the help of cookies, our website can retrieve or save information from your browser. This can be information about you, your settings, or your device. Cookies are mostly used to ensure the expected function of the website. Typically, this information does not identify you directly. It can, however, offer you a more personalized web experience.

Most browsers are pre-set to automatically accept cookies. You may object to the creation of cookies by disabling cookies in the system settings of your browser. Please note, however, that some of the cookies are essential to the functioning of our website and without which the page can not be accessed and displayed. By disabling cookies, you will not (unrestrictedly) be able to use parts of the website.

Cookies which are not absolutely necessary for the functioning of our website are used only with your prior explicit consent.

In addition, you can also delete all currently stored cookies in your browser settings.

Technical Cookies

We use technical cookies on our website. These cookies are essential to the functioning of our website and can not be disabled on our systems. Typically, these cookies are only set in response to actions you take that match a service request, such as setting your privacy preferences. You can set your browser to block these cookies or to notify you about these cookies. However, if you do this, some parts of the site may not work.

The use of these technical cookies is based on Art. 6 para. 1 lit. f) of the GDPR. Without the use of these cookies, the offering of the website as well as access and use of the website by you are not technically possible.

Analytic Cookies

In addition, we use other cookies on our website that allow us to recognize your browser on your next visit and offer you an improved user experience.

These cookies remain stored on your device until the period of validity has expired or you delete them.

Some of the cookies used on our website are so-called third party cookies. These are cookies from third parties / service providers whose tools we use on our website and who use cookies for the performance of the corresponding function.

This may include, for example, cookies used by the providers of the tracking and analysis tool we use. For more information about third-party cookies, see the information about tracking and analysis tools and other features that use third-party cookies. In addition, you can see in our cookie information a list of all cookies used on this website, their function, and their storage duration.

Analytic cookies are only used with your express consent. The processing is based on Art. 6 para. 1 lit. a) GDPR.

If you have given us your consent, you can revoke it at any time. For more information on revoking your consent, see the information about tracking and analysis tools.

In addition to the option to revoke your consent, you also have the option to control the use of cookies yourself at any time via your browser settings.

Matomo

This website uses Matomo, a web analytics service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769 ("Matomo").

Matomo uses cookies. The information generated by the cookie about the users' use of this website are transmitted to the servers provided by Mittwald and are therefore stored exclusively in Germany. IP anonymization has been activated on this website so that the IP address of users is shortened beforehand.

On behalf of the operator of this website, Matomo will use this information to evaluate users' use of the website to compile reports on website activity and to provide other services to the website operator related to website activity and internet usage.

Matomo Analytics will only be used with your consent. You can revoke your given consent anytime by unchecking the box below.

You can prevent the storage of cookies by setting your browser software accordingly. Please be advised, however, that in this case you may not be able to fully use all functions of this website.

Alternatively, you may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

Overview Cookies

The following table lists all used cookies with their name, duration, and purpose.

5. Requirement to Provide Personal Data

You are under no statutory or contractually obligation to provide your personal data processed via our website, but you will not be able to use our website/services, or will only be able to use it to a limited extent, if personal data is not processed.