Privacy policy
Privacy policy of Nordlicht Offshore Wind GmbH regarding the use of the website
Last updated: March 2026
We are delighted that you have visited our website and are interested in Vattenfall. We take the protection of your data very seriously and want you to feel safe and comfortable when visiting our website. Below, we would like to inform you about what personal data we collect when you visit our website, how we process this data, and what rights you have in relation to your personal data.
Data controller for the website:
Nordlicht Offshore Wind GmbH
Amerigo-Vespucci-Platz 2, 20457 Hamburg
Email: NDL@vattenfall.com
Contact details of the Data Protection Officer:
You can contact the Data Protection Officer at:
Email: datenschutz@vattenfall.de
Data security
To protect your data as comprehensively as possible against unauthorised access, manipulation or loss, we implement technical and organisational measures that reflect the current state of the art. We use an encryption method on our websites. Your data is transmitted from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognise this by the fact that the padlock symbol in your browser’s status bar is closed and the address bar begins with https://.
Reporting security vulnerabilities via ‘responsible disclosure’
Vattenfall attaches the utmost importance to the security of its information and communication systems. In principle, security vulnerabilities cannot be ruled out entirely. The exploitation or misuse of these security vulnerabilities is illegal.
To prevent identified security vulnerabilities from being exploited by attackers, the German Federal Office for Information Security (BSI) also recommends applying the principle of “responsible disclosure”. Applying this principle guarantees coordinated and trust-based cooperation between the discoverer of the security vulnerability and the affected manufacturer or service provider.
Informing and reporting a security vulnerability
Technically necessary usage data and log files
If you visit our websites purely for information purposes, i.e. without submitting any data (e.g. via a contact form), we collect the data that your browser transmits to us. Specifically, this includes the following data:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Amount of data transferred
- Website from which you are visiting us (referrer URL)
- Website you are visiting
- Browser type and version used
- Operating system and its interface
- Language and version of the browser software
Purpose of processing: This data is collected and processed in order to display the website to you, to ensure and improve its stability, and for security reasons. The creation of technically necessary log files is essential for the operation of the website.
Legal basis: This processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR).
Retention period: The data will be deleted as soon as it is no longer required for the aforementioned purposes. In the event that an IP address is stored, it will be deleted or anonymised after 30 days at the latest.
Your rights
With regard to the processing of your personal data, you have the right to access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to be informed under Article 19 of the GDPR, and the right to data portability under Article 20 of the GDPR.
If you have any questions regarding the processing of your personal data, you can contact our Data Protection Officer directly at: datenschutz@vattenfall.de .
Withdrawal of consent
Where data is processed on the basis of your consent, you are entitled under Article 7(3) of the GDPR to withdraw your consent to the processing of your personal data at any time. Please note that the withdrawal of consent only applies to future processing. Processing carried out prior to the withdrawal is not affected.
Right to object (Article 21 of the GDPR)
Where we process your data on the basis of legitimate interests (Article 6 (1) lit. f of the GDPR) and where there are grounds relating to your particular situation for objecting to such processing, you have the right to object to such processing in accordance with Article 21(1) of the GDPR. In the event of an objection, we will no longer process your data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
You may submit your objection at any time, in any form, to: datenschutz@vattenfall.de .
Right to lodge a complaint
Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Article 77 of the GDPR. You can contact the data protection supervisory authority responsible for Nordlicht Offshore Wind GmbH at:
The Hamburg Commissioner for Data Protection and Freedom of Information :
Ludwig-Erhard-Str. 22
20459 Hamburg
Automated decision-making / profiling
No automated decision-making, including profiling, takes place.