Data types
For account use: In-App (Security & Technical use):
- IP address
- Date and time of the request
- The time zone difference to Greenwich Mean Time (GMT)
- The content of the request (concrete page)
- Access status/HTTP status code
- The amount of data transferred in each case
- The website from which the request comes
- Browser
- The operating system and its interface
- The language and version of the browser software
Forwarding of data
Ext. IT service provider (for maintenance)
Cloud use
No cloud use
Tracking
Google Analytics
Advertising
in principle no advertising, only within the legal limits during updates and similar products per email
Data Policy regulations
§ 1 Information on the collection of personal data and provider identification
(1) In the following, we inform you about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The responsible party pursuant to Art. 4 (7) of the EU General Data Protection Regulation (DS-GVO) is Bundesverband der Deutschen Heizungsindustrie e. V.. , Frankfurter Straße 720-726, 51145 Cologne, info@bdh-industrie.de (see our imprint). Our data protection officer is Dr. iur. Andreas Pinheiro LL.M., info@ap-datenschutz.de.
(3) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
§ 2 Rights, in particular to access and revocation
(1) You have the following rights in relation to us in respect of personal data relating to you:
- Right to access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
(2) If you have given consent for the use of data, you can revoke this at any time. Should the lawfulness of the processing be based on consent, it remains valid until the exercise of the revocation.
(3) All requests for information or objections to data processing should be sent by e-mail to info@bdh-industrie.de or to the address mentioned in § 1, section 2.
(4) You can request us to delete your data at any time. There may be legal retention periods that allow us to keep your data until the expiry of the period. This planned storage period is 2 years.
(5) If your data should be incorrect, you have the right to request us to correct it. We will comply with this request without delay.
(6) You have the right to receive your personal data provided to us from us in a readable format, as far as technically possible, in order to make it available to another company (right to data portability).
(7) You have the right to complain to the supervisory authority responsible for you. A list of data protection officers and their contact details can be found at the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
§ 3 Data privacy
(1) We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers during data transmissions and from third parties gaining knowledge. These are adapted to the current state of the art.
§ 4 Collection of personal data for informative use and contacting
(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
- IP address
- Date and time of the request
- The time zone difference to Greenwich Mean Time (GMT)
- The content of the request (concrete page)
- Access status/HTTP status code
- The amount of data transferred in each case
- The website from which the request comes
- Browser
- The operating system and its interface
- The language and version of the browser software
(2) When you contact us by e-mail or via the contact form, your e-mail address, name and, if you so indicate, your telephone number will be stored by us. The purpose of this storage is only to contact you in order to answer your questions.
(3) The legal basis for the collection of data is the consent you have given by visiting our website and confirming the cookie banner or sending the contact form (Art. 6 para. 1 lit. a DSGVO).
(4) We will only use your data to the extent permitted by law for the purpose of advertising. In particular, we will only use your e-mail address for direct advertising for our own similar goods or services. You can object to the use of your data for advertising purposes at any time in writing or in text form (e-mail to info@bdh-industrie.de). In doing so, we refer to our legitimate interest in advertising our products to our customers in accordance with Art. 6 Para. 1 lit. f DSGVO.
(5) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case by us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
§ 5 Cookies
(1) We use cookies on our website. Such cookies are necessary to allow you to move freely around the site and use its features, including accessing secure areas of the site. Cookies allow us to track who has visited the site(s) and to deduce how frequently certain pages are visited, which parts of the site are particularly popular. Session cookies store information about your activities on our website.
(2) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (temporary use)
- Persistent cookies (time-limited use)
- Third-party cookies
(3) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This enables your computer to be recognised when you return to the website. The session cookies are deleted when you log out or close your browser.
(4) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
(5) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.
(6) The following cookies are used:
Name | Persistence | Description |
---|---|---|
_ga | 2 years | Cookie for the use of Google Analytics |
_gid | 1 day | Cookie for the use of Google Analytics |
_gat | 1 minute | Cookie for the use of Google Analytics |
cookieconsent_dismissed | 1 year | Cookie for the use of Google Analytics |
personalization_id | 2 years | Cookie for the use of Twitter |
ga-opt-checked | 37 years | Cookie for storing the Google Analytics settings |
ga-opt-out | 37 years | Cookie for storing the Google Analytics settings |
allow-twitter | 1 year | Cookie for storing the Twitter settings |
tx_cookies_accepted | Session | Cookie for storing the cookie banner consent |
NID | Session | The NID cookie contains a unique ID that Google uses to store preferred settings and other information, including your preferred language (for example, German). |
§ 6 Data transfer for the maintenance of the website
(1) We will not share your personal information with third parties unless we inform you that we will share it with them.
(2) Our IT service providers have access to our stored data in order to correct errors and to enable us to carry out the required technical organisational measures. In doing so, we invoke our legitimate interest in securing our IT in accordance with Art. 6 Para. 1 lit. f DSGVO or the fulfilment of legal obligations in accordance with Art. 6 Para. 1 lit. c DSGVO.
(3) The IT service provider(s) have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly monitored by us. The service providers will not pass this data on to third parties.
(4) Your data will not be passed on outside the EU (EEA) area..
§ 7 Social media plug-ins
(1) We currently use the following social media plug-ins: Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by marking the box with its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 4 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, personal data is therefore transmitted from you to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
(2) We have neither influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information about your rights in this regard and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection notices:
(a) Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
www.google.com/analytics/terms/de.html, verview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: www.google.de/intl/de/policies/privacy
b) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA;
https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
§ 8 Webtracking - Google Analytics
(1) This website uses, if you have given your consent, Google Analytics, a web analytics service provided by Google Ireland Limited. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.
(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.
(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.
(6) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed via the conclusion of so-called standard data protection clauses (SDK) pursuant to Art. 46 (2) lit. c DSGVO that a comparable level of data protection is ensured when transferring data to your third country. For more information, please visit: https://privacy.google.com/businesses/compliance/#!#gdpr.
(7) The legal basis for the use of Google Analytics is your consent, therefore Art. 6 para. 1 p. 1 lit. a DS-GVO.
(8) Third-party provider information: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, user terms: http://www.google.com/analytics/terms/de.html, Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de.
(9) [This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data"].
(10) Click here to turn off Google Analytics
§ 9 PLUG-IN: YouTube
(1) We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.
(2) By visiting the website, YouTube (and thus always Google) receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 4 of this statement are transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) The legal basis for the transfer of personal data to YouTube is your consent, therefore Art. 6 (1) p. 1 lit. a DS-GVO.
(4) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de.
(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed via the conclusion of so-called standard data protection clauses (SDK) pursuant to Art. 46 (2) lit. c DSGVO that a comparable level of data protection is ensured when transferring data to your third country. For more information, please visit: https://privacy. google.com/businesses/compliance/#!#gdpr.
§ 10 PLUG-IN: Integration of Google Maps
(1) On this website we use the offer Google Maps. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.
(2) By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under § 4 of this statement will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) The legal basis for the transfer of personal data to Google is your consent, therefore Art. 6 para. 1 sentence 1 lit. a DS-GVO.
(4) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.
(5) For the exceptional cases in which personal data is transferred to the USA, Google Ireland has agreed via the conclusion of so-called standard data protection clauses (SDK) pursuant to Art. 46 (2) lit. c DSGVO that a comparable level of data protection is ensured when transferring data to your third country. For more information, please visit: https://privacy.google.com/businesses/compliance/#!#gdpr.
§ 11 Data collection for the purpose of the application
(1) We offer vacancies on our homepage. If you apply for a position, we will store your application documents received by post or e-mail until the application process has been completed.
(2) If we do not decide in your favour, we will destroy your application documents four months after the application deadline. We refer here to our legitimate interest in an efficient legal defence according to Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with § 21 para. 5 AGG. The preclusion period for such actions is 2 months.
(3) The processing of your applicant data is based on § 26 para. 1 BDSG, because it is necessary for the establishment of an employment relationship.