Privacy policy for www.aquatherm.de


This data protection information applies to data processing on the website www.aquatherm.de, which is carried out by the following data controller:

aquatherm GmbH
Biggen 5
57439 Attendorn
Tel: +49 2722 950 0
Fax: +49 2722 950 100
Email: info@aquatherm.de

The external company data protection officer of aquatherm GmbH can be reached at the following contact details:

Markus Weber
dokuworks GmbH
Birlenbacher Str. 20
57078 Siegen
Email: datenschutz@doku.works

Collection and storage of personal data as well as type and purpose of their use

When visiting the website
When you visit our website www.aquatherm.de, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion, usually after one week:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring a comfortable use of our website,
  • Evaluation of system security and stability
  • Clarification of possible abusive page accesses (DoS/DDoS attacks or similar) as well as
  • for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. As a rule, we do not use the collected data for the purpose of drawing conclusions about your person. We reserve the right to do this at most in the event that this becomes necessary in order to clarify abusive page accesses.

In addition, we use cookies and analysis services when you visit our website (see Cookies and Analysis Tools).


Data protection in the context of our business relations

We are pleased that you are interested in us and our offers and that you get in contact with us.

The protection of your data is very important to us. With this data protection notice, we provide you with the following information in accordance with data protection law. Art. 13 DSGVO to process your personal data in connection with our business relationship.

We only process personal data that we receive from you or, if applicable, from our customers in the course of our business relationship or in the course of our projects. from publicly available sources.

Personal data in the sense of Art. 4 No. 1 DSGVO can be: Names, telecommunication data and address data. In addition, we also process quotation, inquiry and order data, data from the fulfilment of our contractual obligations, product data, documentation data, as well as other data comparable with the categories mentioned. These dates may vary depending on the project.

The provision of your personal data is necessary for the initiation, implementation and processing of the contractual relationship. In case of non-provision, we are unfortunately not able to contact you in order to clarify the pre-contractual or contractual issues.

The processing of your personal data is carried out in accordance with the legal provisions of the DSGVO and the Federal Data Protection Act for the fulfilment of contractual obligations or for measures to initiate contracts (Art. 6 para. 1 p. 1 lit. b DSGVO),
Furthermore, we may use this data for additional purposes within the scope of our business relationship. Depending on the project (e.g. GAP Year), it may be that we also need your consent in accordance with the GAP Year. Art. 6 para. 1 lit. a DSGVO need to process your data.

We process and store your personal data for the duration of our business relationship and at least in accordance with the statutory retention periods such as the German Commercial Code or the German Fiscal Code.

We use the personal data only for the agreed purposes in the course of the business relationship. In the event that third parties are involved in work processes that would require us to disclose your data for processing solely for this purpose, we apply the same high standards and oblige the third party to comply with the data protection provisions as part of a commissioned data processing agreement pursuant to Art. 28 DSGVO.

If applicable. your data will be passed on to technical service providers who will use your data exclusively on our behalf and under no circumstances for their own business purposes.

 


Data protection notice for applicants

We are pleased that you are interested in our company and are applying or have applied for a position.

The protection of your data is very important to us. With the data protection notice we provide you with the following information on the processing of your personal data in connection with your application.

We process the personal data provided to us in connection with your application in order to assess your suitability for the position (or any comparable other vacancies/positions in our company) and to carry out the application process.

An automated decision-making process does not take place.

Without the provision of the data, it is not possible to carry out the application process and unfortunately we cannot consider you for the respective position(s).

 

The legal basis for the processing of your personal data in the application procedure is Art. 6 para. 1 S. 1 lit. b DSGVO or in conjunction with Art. 88 para. Art. 88 para. 1 DSGVO in conjunction with. § 26 para. 1 P. 1 BDSG. If applicable. the processing is carried out on the basis of your consent within the meaning of Art. 6 Para. 1 S. 1 lit. a GDPR (see below).

Your application data will be processed for the duration of the application procedure and, in the event of rejection, deleted after 6 months at the latest.

If you would like us to include your data in our applicant pool for the next possible vacancy, your applicant data will be deleted after 2 years at the latest. In this case, we require a corresponding consent, which you can revoke at any time without giving reasons with effect for the future. The lawfulness of the processing operations prior to the date of withdrawal shall remain unaffected.

Should the application process result in a position being filled, the data from the application system will be transferred to our personnel system.

In individual cases, the storage period may be longer. The storage period then depends on the legal storage obligations, such as the German Commercial Code or the German Fiscal Code.

After receipt, your application documents will be evaluated by employees of the personnel department or by other responsible managers or specialists of our company. In the company itself, only the persons responsible for the application process have access to your data.

If applicable. your data will be passed on to technical service providers who will use your data exclusively on our behalf and under no circumstances for their own business purposes.

A passing on to other third parties does not take place regularly.

Your data will not be processed in a third country and such processing is not planned.



When registering for our newsletter

Insofar as you have given your consent in accordance with Art. 6 para. 1 S. 1 lit. a DS-GVO, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address.

You can also voluntarily provide us with your title, surname and first name (Art. 6 para. 1 lit. a DS-GVO). We may process this additional data on the basis of your consent to personalise our newsletter for you, i.e. to address you personally as the recipient.

The registration for our newsletter is carried out in a so-called double opt-in procedure, i.e. after registration you will receive an e-mail in which you are asked to confirm your registration. The subsequent confirmation will be logged by us for verification purposes; the time of registration and confirmation will be stored together with your e-mail address.

The dispatch of our newsletter takes place via the provider CleverReach GmbH & Co KG. The e-mail addresses of our newsletter recipients, as well as their further data described in the context of these notes, are stored exclusively on servers in the European area. CleverReach uses your e-mail address to send and evaluate the newsletter. In addition, CleverReach offers us the possibility to analyze whether the newsletter was opened and which articles were clicked on. We use this information to optimize the content of our newsletter for you. For more information about CleverReach, please visit the following link: https://www.cleverreach.com/de/datenschutz/.

Unsubscribing from newsletters is possible at any time, for example via a link at the end of each newsletter.

You can revoke your consent regarding the use of your title, surname and first name, as well as a request to unsubscribe from the newsletter as a whole, at any time by sending an e-mail to info@aquatherm.de.

If you unsubscribe from the newsletter, your data provided to us in addition to the e-mail address will also be deleted from the distribution list.



When using our contact form

For questions of any kind, we offer you the possibility to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know from whom the request originates and so that we can answer it. Further information can be given voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 S. 1 lit. a DS-GVO on the basis of your voluntarily given consent.



When registering to download planning data

We provide planning data for download on our website. It is necessary to provide a valid e-mail address so that we know from whom the request originates and to inform you if any data changes. Further information can be given voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 S. 1 lit. a DS-GVO on the basis of your voluntarily given consent.

 

information disclosure

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal information with third parties if:

You have provided us with your personal data in accordance with Art. 6 para. 1 S. 1 lit. a DS-GVO have given express consent to this,

the disclosure according to Art. 6 para. 1 S. 1 lit. f DS-GVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

in the event that for the disclosure according to Art. 6 para. 1 S. 1 lit. c DS-GVO a legal obligation exists, as well as

this is legally permissible and in accordance with Art. 6 para. 1 S. 1 lit. b DS-GVO is necessary for the processing of contractual relationships with you.

 

Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Information is stored in the cookie that is related to the specific end device used. This does not mean, however, that we thereby gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after leaving our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see analysis tools). These cookies enable us to automatically recognise that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time.

We only use cookies if you have given us your consent to do so, Art. 6 para. 1 lit. a GDPR. In this case, we process the data collected about them for the purposes mentioned above.

You can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.

Analysis tools

Tracking Tools
The tracking measures listed below and used by us will only be carried out with your consent on the basis of Art. 6 Para. 1 S. 1 lit. a DS-GVO is carried out. With the tracking measures that are used as a result, we want to ensure that the design and ongoing optimisation of our website are in line with requirements. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. The respective data processing purposes and data categories can be found in the information texts for the corresponding tracking tools.

i) Google Analytics
For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc.(https://www.google.de/intl/de/about/) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”). On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. We carry out this processing exclusively on the basis of the consent you have previously given us (see above under Cookies).

Google Analytics creates pseudonymised usage profiles for us. The information generated by the Google Analytics cookie about your use of this website such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help.

(ii) Matomo Analytics

Purpose of the data processing

This website uses Matomo 54, an open source, self-hosted software to collect anonymous usage data for this website.

The visitor behavior data is collected to find out any problems like not found pages, search engine problems or unpopular pages. Once the data (number of visitors who see error pages or only one page, etc.) is processed, Matomo generates reports for website owners to act on. (layout changes, new content, etc.)

Matomo processes the following data:

  • Cookies
  • Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
  • Pseudo-anonymized location (based on the anonymized IP address
  • Date and time
  • Title of the accessed page
  • URL of the called page
  • URL of the previous page (if allowed)
  • Screen resolution
  • Local time
  • Files that have been clicked and downloaded
  • External links
  • Duration of the page load
  • Country, region, city (with low accuracy due to IP address)
  • Main language of the browser
  • User agent of the browser
  • Interactions with forms (but not their content)

 

iii) HubSpot Analytics

Nature and scope of the processing

We use HubSpot Analytics from HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors spend on the site.

HubSpot Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process data with the help of HubSpot Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent according to. Art. 6 para. 1 lit. a. GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot Germany GmbH. For more information, please see the HubSpot privacy policy.

Analytics:
https://www.hubspot.de/data-privacy/gdpr
.

HubSpot Chat

Nature and scope of the processing

We have integrated components of the customer communication platform HubSpot Chat on our website. HubSpot Chat is a service provided by HubSpot Germany GmbH and allows us to communicate with visitors to our website via chat and provide targeted assistance with questions. HubSpot Chat uses cookies and other browser technologies to evaluate user behavior and recognize users. Furthermore, HubSpot Chat is used to store and transmit data entered in chats via cookies, including your IP address. In this case, your data will be passed on to the operator of HubSpot Chat, HubSpot Germany GmbH, Berlin.

Purpose and legal basis

HubSpot Chat is used on the basis of our legitimate interests, i.e. interest in optimizing our online offering pursuant to Art. 6 para. 1 lit. f. GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot Germany GmbH. For more information, please see the HubSpot privacy policy.

Chat:
https://www.hubspot.de/data-privacy/gdpr
.

HubSpot CDN

Nature and scope of the processing

We use HubSpot CDN to properly deliver content to our website. HubSpot CDN is a service of HubSpot Germany GmbH, which acts as a content delivery network (CDN) on our website to ensure the functionality of other services of HubSpot Germany GmbH. For said services, you will find a separate section in this privacy policy. This section is only about using the CDN.

A CDN helps to provide content of our online offer, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you connect to HubSpot Germany GmbH servers, where your IP address and possibly browser data such as your user agent are transmitted. This data will be used exclusively for the above-mentioned purposes and to maintain the security and

functionality of HubSpot CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer according to Art. 6 Para. 1 lit. f. GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot Germany GmbH. For more information, please see the HubSpot privacy policy.

CDN:
https://www.hubspot.de/data-privacy/gdpr
.

HubSpot Pixel

Nature and scope of the processing

We use HubSpot Pixel from HubSpot Germany GmbH to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, to determine conversion rates and to subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with HubSpot Germany GmbH.

Purpose and legal basis

We process your data with the help of HubSpot Pixel for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with the German Data Protection Act. Art. 6 para. 1 lit. a. GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot Germany GmbH.

For more information, please see the HubSpot privacy policy.
Pixel:
https://www.hubspot.de/data-privacy/gdpr
.

HubSpot LeadFlow

Nature and scope of the processing

We have integrated HubSpot LeadFlow on our website. HubSpot LeadFlow is a service from HubSpot Germany GmbH that identifies anonymous website visitors, provides full contact details and insights into visit history.

HubSpot LeadFlow uses cookies and other browser technologies to evaluate user behavior and recognize users.

Among other things, HubSpot LeadFlow tells us which companies have visited our website, tracks your visit history, including all pages you have visited and viewed, and the length of time you have been on this website.

HubSpot LeadFlow collects and processes data about businesses such as company name, phone number, address, web address, industry, company profile, revenue, and key people on LinkedIn.

Purpose and legal basis

We process your data with the help of HubSpot LeadFlow for the purpose of optimizing our website and for marketing purposes on the basis of our legitimate interest as defined in the German Data Protection Act. Art. 6 para. 1 lit. f. GDPR.

Storage period and location

The concrete storage period of the processed data cannot be influenced by us, but is determined by HubSpot Germany GmbH. For more information, please see the HubSpot privacy policy.

LeadFlow:
https://www.hubspot.de/data-privacy/gdpr
.

The data is stored in an EU data center of HubSpot Germany GmbH. For more information, please see:
https://www.hubspot.de/eu-data-centre
.

Hubspot Newsletter Dispatch

Our newsletter is also sent via HubSpot. The following information explains our newsletter, its registration, dispatch and evaluation procedures as well as your right of revocation. The subscription to our newsletter is at the same time your declaration of consent to the receipt and the presented procedure of the newsletter.

Content of the newsletter: The basic prerequisite for sending newsletters, e-mails and other e-messages with advertising information (hereinafter referred to as “newsletter”), such as white papers, is the consent of the recipient or a legal permission (in particular § 7 para. 3 UWG). In the event that individual newsletters are described in concrete terms with regard to registration, then this execution is decisive for the consent of the newsletter subscriber. Without a separate description, our newsletters contain interesting information about our

product range, offers and campaigns as well as company-relevant information.

Double-Opt-In: The registration procedure for our newsletter is called Double-Opt-In. This means that you will receive an e-mail from us directly after your newsletter registration, in which we ask you once again to confirm your registration. In this way, we ensure that only persons who actually have access to the listed e-mail address register for the newsletter. The newsletter registrations including the storage of registration and confirmation time and with your IP address are logged by us as proof that the registration process complies with the legal requirements. Changes to your stored data with the newsletter service provider are also recorded in the log.

According to the information of the newsletter service provider, the latter uses the data pseudonymously without user allocation to improve its services. The newsletter service provider is not permitted to use the recipient data of the newsletter for its own purposes or to pass it on to third parties.

To subscribe to the newsletter, simply enter your e-mail address. Further data such as first and last name, company and telephone number are optional and serve only your personal address in the newsletter.

The so-called web beacon, which is included in all newsletters, is a pixel-sized file that the HubSpot server automatically retrieves when the newsletter is opened. Technical information, e.g. on the browser and system, on your IP address and on the time of the retrieval, is created in the process. They serve the technical service optimization and are used with the help of technical data or the target groups and your reading behavior on the basis of their retrieval locations (which are determinable with the help of the IP address) or the access times. Also the indications, if and when the newsletters are opened and which links are clicked, are contents of the statistical collection. An assignment to individual newsletter recipients is thus possible. However, a related observation of individual users is neither our intention nor that of the service provider. Our sole purpose is to learn more about the reading habits of our users and to tailor our content accordingly or to publish different content according to their interests.

The consent of the recipients according to. Art. 6 para. 1 Sentence 1 lit. a DSGVO, Art. 49 para. 1 Sentence 1 lit. a DSGVO, Art. 7 DSGVO in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission according to § 2 No. 3 UWG. § 7 para. 3 UWG is a basic requirement for our newsletter dispatch and its success measurement.

The newsletter subscription process is logged based on our legal interests as per. Art. 6 para. 1 Sentence 1 lit. f DSGVO and is at the same time proof of consent for receiving the newsletter. It is up to you to unsubscribe from our newsletter at any time by revoking your consent. At the end of each newsletter you will find a corresponding cancellation link. As soon as you have cancelled your newsletter subscription, your personal data will be automatically deleted.

 

Indirect data collection

Server logs

When you use this website, the call is made by the host of the website ([Webhost]) recorded. This log contains your IP address, which indirectly identifies you through your Internet service provider. The recording of this data is mandatory by law and necessary for safety. There is no opt-out option, but the data will never be used for any other purpose.

Web fonts

This website uses fonts from Google Fonts 1, which are loaded by Google servers when the page is called up. More information on data protection can be found in the FAQs8.

More tools

i) Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

  1. ii) 360° tour
    Our website allows you to take part in a 360° virtual tour in which you can get to know our company better. These tours are provided and hosted by our service provider, intersyst GmbH, Wittenberger Str.55, 01309 Dresden.

The following data is regularly processed by our service provider:

IP address

  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.
  • Statistical data on access time and duration of data transmissions

To protect your personal data, you can only start the tour after you have agreed to a data transfer to our hosting partner.

We ourselves have concluded an order processing agreement with the hosting partner, which enables the data processing by the hosting partner and will regularly review this for adequacy.

You can also opt-out of future data processing at any time by adjusting your choice in our Consent Management Tool, which you can access by following the link below: [Link]

(iii) Oxomi

In order to make digitised publications available to the users of our website, we use the Oxomi service via an API. The provider is scireum GmbH, Eisenbahnstr. 24, 73630 Remshalden, Germany, phone: +49 (0) 7151 90316-0.

For the use of this information, data is collected by the provider by means of server access, which is transmitted and stored on the provider’s servers with the server location in Germany. As the provider of this website (aquatherm GmbH), we have no influence on the transmission of data.

According to Art. 6 para. 1 lit. f DSGVO there is a legitimate interest to use Oxomi for the presentation of the information.

In the privacy policy of scireum GmbH / Oxomi: www.scireum.de/scireum/datenschutz you will find further information about the handling of user data.

To prevent the processing of data by Oxomi, you have the option to disable the execution of script code by your browser or to activate a script blocker in your browser.

social media plug-ins

  1. i) Facebook
    The controller has integrated components of the company Facebook on this website. Facebook is a social network.

A social network is a social meeting place operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and network via friend requests, among other features.

Facebook’s operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the data controller is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

By each call of one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Within the framework of this technical procedure, Facebook receives information about which specific sub-page of our website is visited by the person concerned.

If the data subject is logged into Facebook at the same time, Facebook recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the data subject activates one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.

Facebook’s published data policy, which is available at https://de-de.facebook.com/about/privacy/, provides information about Facebook’s collection, processing and use of personal data. Furthermore, the settings options offered by Facebook to protect the privacy of the data subject are explained there. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

  1. (ii) YouTube
    Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information on how we handle user data, please see YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

iii) LinkeId
The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect with existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the U.S., LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each individual call-up of our website that is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the data subject to download a corresponding representation of the component from LinkedIn. More information about LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. Within the scope of this technical procedure, LinkedIn receives information about which specific sub-page of our website is visited by the person concerned.

If the data subject is logged in to LinkedIn at the same time, LinkedIn recognises which specific sub-page of our website the data subject is visiting with each call-up to our website by the data subject and for the entire duration of the respective stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the data subject activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is logged into LinkedIn at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our website.

LinkedIn offers the ability to unsubscribe from email messages, SMS messages, and targeted ads, as well as manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

  1. iv) Instagram
    The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data on other social networks.

The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

By each call of one of the individual pages of this website, which is operated by the controller and on which an Instagram component (Insta button) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. Within the scope of this technical procedure, Instagram receives information about which specific sub-page of our website is visited by the data subject.

If the data subject is logged in to Instagram at the same time, Instagram recognises which specific sub-page the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the person concerned. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website.

Further information and Instagram’s applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

  1. v) Xing
    The controller has integrated components of Xing on this website. Xing is an Internet-based social network that allows users to connect with existing business contacts and make new business contacts. Individual users can create a personal profile of themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing.

The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

By each call of one of the individual pages of this website, which is operated by the controller and on which a Xing component (Xing plug-in) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plug-ins can be found at https://dev.xing.com/plugins. Within the scope of this technical procedure, Xing receives information about which specific sub-page of our website is visited by the person concerned.

If the data subject is logged into Xing at the same time, Xing recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the person concerned. If the data subject activates one of the Xing buttons integrated on our website, for example the “Share” button, Xing assigns this information to the personal Xing user account of the data subject and stores this personal data.

Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged into Xing at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject does not want this information to be transmitted to Xing, he or she can prevent the transmission by logging out of his or her Xing account before accessing our website.

The data protection provisions published by Xing, which can be accessed at https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by Xing. Furthermore, Xing has published data protection information for the XING Share button at https://www.xing.com/app/share?op=data_protection.

Data subject rights

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 DS-GVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. We may only refuse to provide you with information if and insofar as the information would disclose information that must be kept secret in accordance with a legal provision or by its nature, in particular due to the overriding legitimate interests of a third party (§ 29 para. 1 sentence 2 BDSG), the competent public authority has determined to us that the disclosure of the data would endanger public security or order or otherwise be detrimental to the welfare of the Federal Government or a Land (Section 34 para. 1 no. 1 BDSG in conjunction with Section 33 para. 1 no. 2 lit. b BDSG), or the data is only stored because it may not be deleted due to legal or statutory storage regulations, or exclusively serves the purpose of data security or data protection control and the provision of information would require disproportionate effort and processing for other purposes is excluded by appropriate technical and organisational measures (Section 34 (1) No. 2 BDSG).

in accordance with Art. 16 DS-GVO to demand the correction of inaccurate or incomplete personal data stored by us without delay;

pursuant to Art. 17 DS-GVO to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

to demand the restriction of the processing of your personal data in accordance with Art. 18 DS-GVO, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DS-GVO;

pursuant to Art. 20 DS-GVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;

pursuant to Art. 7 para. 3 DS-GVO to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future,

insofar as your personal data is collected on the basis of legitimate interests pursuant to Art. 6 para. 1 S. 1 lit. f DS-GVO, you may object to the processing of your personal data pursuant to Article 21 DS-GVO, provided that there are grounds for doing so which arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

In addition, you have a general right of appeal to the data protection supervisory authority responsible for you. The authority responsible for us is the “Landesbeauftragte für den Datenschutz Nordrhein-Westfalen”.

If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to info@aquatherm.de.

Data security

We use the widespread SSL procedure (Secure Socket Layer) within the website visit in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Actuality and change of this privacy policy

This privacy policy is currently valid and is as of May 2018. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://www.aquatherm.de/datenschutz.