Data protection

We appreciate your trust and apply the utmost care and highest security standards to protect your personal data from unauthorized access. The processing of personal data on our website is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR).

1. responsible body / data protection officer

The controller within the meaning of the GDPR is

Wolf Power Systems Holding GmbH
Mettmanner Strasse 25
40699 Erkrath
Represented by: Diego Falsini
Phone: +49211 93671720
E-Mail: zentrale@kesselheld.de

If you have any questions about the collection and processing of your personal data, as well as questions about the rights to which you are entitled as a person affected by data processing, you can contact our data protection officer at

ZB Datenschutz und -sicherheit GmbH & Co. KG
Hansestr. A1/79
51149 Köln DE
Ulrich Braunbach
ubraunbach@zb-datenschutz.de

2. data processing when visiting our website

When you visit our website, our web server temporarily stores every access in a log file. The following data is recorded and stored until it is automatically deleted

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed
  • Amount of data transferred
  • Message as to whether the retrieval was successful
  • Identification data of the browser and operating system used.

This data is processed for the purpose of enabling the use of the website (connection establishment), system security, technical administration, network infrastructure and optimization of the website.

The legal basis for data processing is Art. 6 para. (1) sentence 1 lit. f) GDPR. Our legitimate interest is to be able to offer you a functional, user-friendly and secure website.

3. use of technically necessary cookies

Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system. Technically necessary cookies are usually deleted when you close your browser. Please note that certain cookies are already set as soon as you visit our website.

The legal basis for this processing is Art. 6 para. 1 sentence 1 f GDPR. Our legitimate interest is the functionality of our website.

If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser.

4. sending advertising e-mails / newsletters

If you register to receive advertising emails, we will use your email address for advertising purposes. We also store your registration in order to be able to prove that you have registered and consented.

For the purpose of sending the advertising emails, we store your data until you withdraw your consent or until the sending of the advertising emails is finally discontinued; for the purpose of proving consent until March 31 of the fourth calendar year following the last sending of advertising emails.

The legal basis for processing for the purpose of sending advertising emails is Art. 6 (1) sentence 1 lit. a) GDPR. The legal basis for processing for the purpose of proving consent is Art. 6 (1) sentence 1 lit. c) in conjunction with Art. 5 (2) and Art. 7 (1) GDPR and Art. 6 (1) sentence 1 lit. f) GDPR, whereby our legitimate interest is to defend ourselves against possible legal claims.

5. making contact

We process your personal data (such as your name, your e-mail address, your telephone number or your address) if you provide it to us voluntarily when you contact us (by telephone, e-mail or via a contact form). We use the data you provide without your separate consent exclusively for communication with you.

We base the processing on our legitimate interest in being able to contact and communicate with you (Art. 6 para. 1 sentence 1 lit. f GDPR). If you are interested in our offers, we base the processing on the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR).

6. Data processing for job applications

You can submit your application to us by e-mail or by post. Within our company, your data will only be processed by the persons responsible for personnel selection. Data will not be passed on to external bodies.

The following categories of data are processed as part of the application process: Name, address, other contact details, date and place of birth, data on professional qualifications (e.g. CV, references, certificates, details of training and professional experience, etc.) and the results of the personnel selection process.

This data is generally collected from you yourself, unless it is provided to us by another party that you may have named to us as a reference. We process your personal data for the purpose of carrying out the application process, insofar as this is necessary. Data processing is carried out on the legal basis of Section 26 (1) BDSG in conjunction with Art. 88 GDPR.

After completion of the application process, we process your personal data on the basis of our legitimate interest in defending ourselves against possible legal claims. The legal basis for data processing in this respect is Art. 6 para. (1) sentence 1 lit. f) GDPR.

If you have consented to the processing of your personal data beyond the end of the application process, the legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR in conjunction with Section 26 (2) BDSG.

We store any consent given to us in order to be able to prove that consent has been given to us. The legal basis for processing for the purpose of proving consent is Art. 6 para. (1) sentence 1 lit. c) in conjunction with Art. 5 para. (2), Art. 7 para. (1) and Art. 24 para. (1) GDPR and Art. 6 para. (1) sentence 1 lit. f) GDPR.

We generally store your personal data for the duration of the application process and for a further 6 months thereafter.

If you have consented to your personal data being considered for further vacancies after the end of the application process (talent pool), we will store your data until you withdraw your consent.

7. Data processing regarding repair, maintenance or installation via the “Your portal for heating” portal

If you contact us via the “Ihr Portal Rund um die Heizung” portal, we reserve the right to either answer your inquiry ourselves or to forward your inquiry to third parties, e.g. DAA Deutsche Auftragsagentur GmbH, a heating engineer or an appliance manufacturer for answering. The legal basis for this is Art. 6 para. (1) sentence 1 lit. b) GDPR (contract fulfillment or answering a pre-contractual request).

If you send us an inquiry regarding an installation via the “Ihr Portal Rund um die Heizung” portal, we will forward this inquiry to up to 5 heating engineers for the purpose of preparing a quotation, or to DAA Deutsche Auftragsagentur GmbH for the purpose of referring you to their partner companies. Depending on the agreement with the respective heating engineer, we reserve the right to carry out an on-site appointment, planning, consultation and quotation on behalf of the respective heating engineer. The contract itself is carried out by the respective heating engineer.

For organizational reasons, the selection of our partner companies to which we forward your request for this purpose can only be made after we have received your request. However, you will receive a confirmation e-mail within 24 hours with the exact details of which of our partner companies we have forwarded your data to, giving you the opportunity to directly check and assert all the rights to which you are entitled and thus retain control over your data at all times.

The legal basis for this is Art. 6 para. (1) sentence 1 lit. b) GDPR. When customer inquiries are placed with partner companies or DAA Deutsche Auftragsagentur GmbH via our online form, an order is concluded between us and you, for the execution of which the processing of personal data is necessary.

As part of your inquiry, we process the personal data that you provide us with (first name, surname, e-mail address, telephone number, details of the desired heating fuel, data on the property for which you are requesting the offer (zip code, fuel of the current heating appliance, type of building, year of construction, heated area, number of floors, number of people in the household, condition of the roof, windows and masonry, any photographs of the appliance sent to us, etc.) in order to initiate and, if necessary, execute the contractual relationship in question.

We store your personal data for the duration of the contract initiation or execution of the contract/order and, due to tax law retention obligations, for a period of up to ten years beyond that, strictly for the intended purpose. The legal basis for the retention of your personal data under tax law is Art. 6 para. (1) sentence 1 lit. c) GDPR in conjunction with §§ 147 AO, 257 HGB.

Furthermore, we have a legitimate interest in the processing of your personal data for the purpose of exercising legal claims or defending against legal claims. The data processing is carried out on the legal basis of Art. 6 (1) sentence 1 lit. f) GDPR.

As part of your request, it may be necessary for us to contact you by telephone on the telephone number you provided for the purpose of contacting you before forwarding your request in order to obtain additional information.

The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR.

If we record a telephone call with you for verification purposes, this is done exclusively on the basis of your prior consent.

The legal basis for the recording of the telephone call is Art. 6 (1) sentence 1 lit. a) GDPR. For the purpose of proving consent, we store your data until March 31 of the fourth calendar year following the recording of the telephone call. The legal basis for processing for the purpose of proof of consent is Art. 6 (1) sentence 1 lit. c) in conjunction with Art. 5 (2) and Art. 7 (1) GDPR and Art. 6 (1) sentence 1 lit. f) GDPR, whereby our legitimate interest is to defend ourselves against possible legal claims.

If necessary, your personal data will be processed by IT service providers acting on our behalf.

8. Google Analytics

If you agree, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and enable us to analyze your use of our website. The cookies are stored by Google on your computer for a period of up to two years. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We have added the code “gat._anonymizeIp();” to Google Analytics on this website to ensure that your IP address is not recorded in full length, but only in abbreviated form (so-called IP masking). Although this makes it more difficult to identify you, it cannot be ruled out that Google may link your IP address to other identifiers and assign it to you.

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR.

Information on how Google processes your data can be found in Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de and https://policies.google.com/privacy

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

9. Google Ads and conversion tracking

If you agree, we use the advertising component Google AdWords with conversion tracking on our website, a web analysis service of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Ads enables us to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. This allows us to determine how successful individual advertising measures are.

These advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured.

If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies generally lose their validity after 30 days. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser.

If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers.

We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. You can find information on how Google processes your data at https://policies.google.com/technologies/ads?hl=de

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR.

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

10. Microsoft Advertising and conversion tracking

If you agree, we use the advertising component Microsoft Advertising (formerly Bing Ads) with conversion tracking on our website, a web analysis service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”)

Microsoft Advertising enables us to draw attention to our attractive offers with the help of advertising material on external websites. This enables us to determine how successful individual advertising measures are.

If you access our website via a Microsoft ad, Microsoft will store a cookie on your device. These cookies generally lose their validity after 30 days. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Microsoft and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers.

We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Microsoft. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Information on how Microsoft processes your data can be found at https://privacy.microsoft.com/de-de/privacystatement

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR.

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

11. Google Remarketing

If you agree, we use the marketing and remarketing services (“Google Marketing Services”) of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Marketing Services enable us to target ads for our website in order to present users only with ads that match their interests.

When you visit a website that uses Google Marketing Services, (re-)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie is stored in your web browser for a period of 365 days (comparable technologies can also be used instead of cookies). With the help of the cookie, Google collects information about which websites you have visited, which content you are interested in and which advertisements you have clicked on, as well as technical information about the browser and operating system, referring websites, visiting times and other information about the use of the website.

This information may be combined by Google with such information from other sources. If you then visit other websites, ads tailored to your interests can be displayed. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA.

We use the Google marketing service “Google AdWords” if you agree to this. Each AdWords customer receives a different “conversion cookie”. Users can therefore not be tracked via the websites of more than one AdWords customer.

The information collected with the help of the cookie is used to generate conversion statistics. We learn the total number of users who clicked on our ads and were redirected to a page with a conversion tracking tag, but no information that identifies users. You can find more information on the use of data by Google for marketing purposes at https://www.google.com/policies/technologies/ads. You can find Google’s privacy policy at https://www.google.com/policies/privacy.

The legal basis for data processing is Art. 6 para. (1) sentence 1 lit. a) GDPR.

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

12. Google AdSense

If you agree, this website uses Google AdSense, a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the integration of advertisements.

Google AdSense uses cookies, which are stored on your computer for a period of 365 days and enable your use of the website to be analyzed. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on these pages.

The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The legal basis for data processing is Art. 6 para. (1) sentence 1 lit. a) GDPR.

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

13. Google Tag Manager

On our website, if you agree, we use the “Google Tag Manager” of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This service allows website tags to be managed via an interface. Tags are small code elements on a website that are used to measure visitor traffic and behavior on our website, to measure the impact of online advertising and social channels, and to test and optimize the website. Google Tag Manager implements tags and uses a set of trigger rules that determine when these tags should be used on a website. When you visit our website, the specified tags are triggered and the corresponding cookies are loaded into your browser. However, Google Tag Manager does not access this data. By using Google Tag Manager, your use of our website will be more efficient and faster, as the management of the correct tags will speed up our website. If the Google Tag Manager has been deactivated at domain or cookie level, it will remain in place for all tracking tags if they are implemented with the Google Tag Manager.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

Information on how Google processes your data can be found in Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de and https://policies.google.com/privacy

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

14. Google Maps / Google Earth

If you agree, our website uses Google Maps/Google Earth from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When Google Maps is used, Google also collects, processes and uses data about the use of the Maps functions by visitors to the websites. You can find the terms of use for Google Maps at https://www.google.com/intl/de_DE/help/terms_maps/ and Google’s privacy policy at https://policies.google.com/technologies/partner-sites?hl=de

The storage period for cookies set for Google Maps is up to six months. The legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR.

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

15. Hotjar

If you agree, this website uses Hotjar, a web analysis service of Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta, Europe (hereinafter “Hotjar”).

Hotjar is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Hotjar enables us to record and evaluate your usage behavior on our website, such as your mouse movements or mouse clicks. However, your visit to our website is anonymized. In addition, Hotjar analyzes information about your operating system, your Internet browser, incoming or outgoing links, the geographical origin as well as the type and triggering of the terminal device you use and processes it for statistical purposes. Hotjar can also obtain direct feedback from you.

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a) GDPR.

Further information on data protection at Hotjar can be found at: https://www.hotjar.com/privacy and https://help.hotjar.com/hc/en-us/sections/360007812474-Compliance.

16. YouTube

If you agree, this website uses the YouTube button of the social network YouTube, which is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA (“YouTube”); parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you access the embedded video, a connection is established to the servers of the provider YouTube in the USA and certain information (e.g. your IP address) is sent to the provider, even if you are not logged in to YouTube. We have no knowledge of the type and scope of the data collected by YouTube and have no influence on its use. The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information: https://policies.google.com/privacy. The cookies used when using YouTube are stored for a period of up to one year.

The legal basis for data processing is Art. 6 para. (1) sentence 1 lit. a) GDPR.

Information on how Google processes your data can be found in Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de

During processing, personal data is processed in a third country outside the EU or the EEA (USA). There is currently no adequate level of data protection in the USA. It can therefore not be ruled out that US security authorities may issue orders to our service provider in order to gain access to data. In addition, legal protection options are currently only available to a limited extent.

17. Facebook plugin (Like button)

If you agree, this website uses the so-called “Facebook Like button” of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 (parent company: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (“Facebook”).

Since we have implemented the plugin together with the so-called “Shariff” solution, a direct connection between your browser and the Facebook server is only established when you activate the plugin button (consent).

After activating the button, Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at: https://www.facebook.com/privacy/explanation.

The Facebook plugins are used on the basis of Art. 6 para. (1) sentence 1 lit. a) GDPR.

18. Twitter plugin

If you agree, this website uses plugins from Twitter International Unlimited Company
, One Cumberland Place
, Fenian Street, 
Dublin 2
, D02 AX07, 
Ireland

Since we have implemented the plugin together with the so-called “Shariff” solution, a direct connection between your browser and the Twitter server is only established when you activate the plugin button (consent).

After activating the button, Twitter receives the information that you have visited our site with your IP address. If you click on the plugin while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter.

The Twitter plugins are used on the basis of Art. 6 para. (1) sentence 1 lit. a) GDPR.

19. Amazon partner program

On our websites, we include links and advertisements to the offers and services of Amazon.

If users follow these links or subsequently take advantage of the offers, we may receive a commission or other benefits from Amazon. In order to be able to track whether users have taken up the offers of a link we have used, it is necessary for Amazon to know that users have followed an Amazon link used on our websites.

The assignment of the links to the respective business transactions or other actions serves the sole purpose of commission settlement and is canceled as soon as it is no longer required for this purpose. If you agree to this, cookies are used for the purpose of the aforementioned assignment of the links, which are stored on your computer for a maximum period of 365 days and which enable Amazon to trace the origin of the orders. This allows Amazon to track who clicked on the link on our website.

For more information on Amazon’s use of data, please refer to Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

The legal basis for data processing is Art. 6 para. (1) sentence 1 lit. a) GDPR.

20. other recipients

In order for us to process your data in accordance with the purposes described above, it may also be necessary to transfer your data to other recipients for processing.

If we use external service providers to process your data, these have been carefully selected and commissioned by us and are regularly monitored.

We ensure that personal data is used in accordance with instructions by concluding corresponding processing contracts with the commissioned service providers.

In order to provide you with this website, we use the services of web hosting providers who provide the following services for us: Infrastructure and platform services, provision of computer capacity and storage space as well as technical maintenance services. The data processed as part of their service provision includes your IP address and, if applicable, other communication data, as well as usage and contact data provided by you via our website.

21 Data transfers to a country outside the European Economic Area

When data is transferred to a country outside the EU, contractual regulations generally guarantee that a level of data protection equivalent to that of the European Union is maintained.

We would like to point out that there is no adequate level of data protection in the USA comparable to that in the EU. You are therefore at risk of access to this data by a government agency. In addition, legal protection options are currently only available to a limited extent. This risk may also exist with regard to other third countries. The permissibility of these data transfers to the USA and other third countries concerned follows from Art. 49 para. (1) sentence 1 lit. a) GDPR.

22. Duration of storage

We process and store your personal data for as long as is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, execution to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. It is possible that personal data will be stored for the period in which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible.

23. Data security

We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization and controls.

24. Rights of the data subject

General information

You have the following statutory data subject rights within the scope of the data protection law applicable to you and insofar as provided therein (such as in the case of the GDPR), provided that their requirements are met:

Right to information about your data stored by us,
Right to rectification of inaccurate data,
Right to erasure of the data stored by us,
Right to restriction of processing of the data stored by us,
Right to data portability,
Right to revoke any consent given to us at any time,
Right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates the provisions of the GDPR.

(2) Right to object
If your personal data is processed on the basis of legitimate interests (e.g. Art. 6 para. 1 sentence 1 lit. f GDPR), you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

(3) Objection to advertising
If a contractual or order relationship has been established between you and us, as an existing customer you will receive information from us about similar services or invitations to satisfaction surveys via the e-mail address you have provided, based on our legitimate interest in direct advertising. You can object to this use of your e-mail address at any time, either as a whole or for individual processing operations, without incurring any costs other than the transmission costs according to the basic rates. Data processing is carried out on the legal basis of Art. 6 (1) sentence 1 lit. f) GDPR in conjunction with Art. §7 Section 3 UWG.

Please send your objection to: info@zb-datenschutz.de

Find out all about the gas absorption heat pump: