Data Policy

Data types

For account use: In-App (Security & Technical use):

  • IP address
  • Date and time of the request
  • The time zone difference to Greenwich Mean Time (GMT)
  • The content of the request (concrete page)
  • Access status/HTTP status code
  • The amount of data transferred in each case
  • The website from which the request comes
  • Browser
  • The operating system and its interface
  • The language and version of the browser software

Forwarding of data

Ext. IT service provider (for maintenance)

Cloud use

No cloud use

Tracking

Google Analytics

Advertising

in principle no advertising, only within the legal limits during updates and similar products per email

Data Policy regulations

§ 1 Information on the collection of personal data and provider identification

(1) In the following, we would like to inform you about the collection of personal data when you use this website. Personal data covers all data that can be related to you personally, for example your name, address, email addresses, user behaviour.

(2) The Controller pursuant to Art. 4 (7) of the EU General Data Policy Regulation (GDPR) is the Bundesverband der Deutschen Heizungsindustrie e. V., Frankfurter Straße 720–726, 51145 Cologne, info@bdh-koeln.de (please refer to our legal notices).
Our Data Policy Officer is Dr. iur. Andreas Pinheiro LL.M., info@ap-datenschutz.de.

(3) If we rely on service providers for individual functions of our offers or if we wish to use your data for promotional purposes, we will inform you below in detail of the respective operations, naming the criteria used to determine the storage period.

§ 2 Rights, in particular to access and revocation

(1) You have the following rights vis-à-vis ourselves with respect to the personal data concerning you:

  • Right to access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

(2) If you have granted your consent to the use of data, this can be revoked at any time. If the legitimacy of the processing is based on your consent, this remains in force until you exercise your right of revocation.

(3) All requests for information or objections to data processing should be sent per email to info@bdh-koeln.de or to the contact data shown under § 1 (2).

(4) You can request that we delete your data at any time. Statutory storage periods may apply in this case that allow us to keep your data until expiry of the period. This planned storage period is 2 years.

(5) If your data is incorrect, you have the right to request that we rectify this. We will comply with this request immediately.

(6) You have the right to receive the personal data you have provided us in a legible format, wherever technically possible, so as to make this available to another company (right to data portability).

(7) You have the right to lodge a complaint with the supervisory authority responsible for you. A list of Data Policy Officers and their contact data can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

§ 3 Data privacy

(1) We maintain current technical measures to guarantee data privacy, in particular to protect your personal data against risks during data transmission and against this becoming known to third parties. These measures are adjusted to satisfy the latest state-of-the-art. 

§ 4 Collection of personal data for informative use and for contact purposes

(1) If you only use the website for informative purposes, in other words without registering or otherwise sending any information, we only collect the personal data sent to our server by your browser. If you wish to view our website, we collect the following data, which is technically necessary for us to show you our website and to guarantee its stability and security (the legal basis being point (f) of Art. 6 (1) GDPR):

  • IP address
  • Date and time of the request
  • The time zone difference to Greenwich Mean Time (GMT)
  • The content of the request (concrete page)
  • Access status/HTTP status code
  • The amount of data transferred in each case
  • The website from which the request comes
  • Browser
  • The operating system and its interface
  • The language and version of the browser software

(2) If you contact us per email or via the contact form your email address, your name and, if you have provided this, your telephone number will be saved by us. These are only stored for the purpose of contacting you to answer your questions.

(3) The legal basis for the aforementioned collection is the consent you gave by visiting our website and confirming the cookie banner or sending the contract form (point (a) of Art. 6 (1) GDPR).

(4) We will only use your data to the statutorily allowed extent for advertising purposes. In particular, we will only use your email address for direct advertising for our own similar goods or services. You can object to the use of your data for advertising purposes at any time in a text form (email to info@bdh-koeln.de). We hereby refer to our legitimate interests in advertising our products to our customers in accordance with point (f) of Art. 6 (1) GDPR.

(5) In addition to the aforementioned data, cookies will also be saved on your computer when you use our website. Cookies are small text files that are assigned to the browser you use and saved on your hard drive and that send certain information to the body that has set the cookie (in this case, us). Cookies cannot run any programs or transmit any viruses to your computer. They serve to make website more user-friendly and effective on the whole.

§ 5 Cookies

(1) We use cookies on our website. These cookies are necessary so that you can navigate the website freely and use its features; this also includes access to protected areas of the website. Cookies allow us to track who has visited the page(s) and derive how often certain pages are visited and which parts of the site are particularly popular. Session cookies save information about your activities on our website.

(2) This website uses the following types of cookies, whose scope and mode of operation will be explained below:

  • Transient cookies (temporary use)
  • Persistent cookies (use for a restricted time)
  • Third-party cookies

(3) Transient cookies are deleted automatically when you close your browser. These include in particular the session cookies. These cookies save a so-called session-ID, with which various inquiries from your browser can be assigned to the common session. This means that your computer can be recognised the next time you visit the website. Session cookies are deleted when you log out or close your browser.

(4) Persistent cookies are deleted automatically after a pre-set time, which may differ depending on the cookie. You can delete the cookies at any time in the security options of your browser.

(5) You can configure your browser settings according to your wishes and reject third-party cookies or all cookies, for example. However, we would like to point out that in this case you may not be able to use all of the functions offered by this website.

(6) The following cookies are used:

_gaCookie used by Google Analytics2 years
_gidCookie used by Google Analytics1 day
_gatCookie used by Google Analytics1 minute
cookieconsent_dismissedCookie used by Google Analytics1 year
personalization_idCookie used by Twitter2 years
ga-opt-checkedCookie for saving Google Analytics settings37 years
ga-opt-outCookie for saving Google Analytics settings37 years
allow-twitterCookie for saving Twitter settings1 year
tx_cookies_acceptedCookie for saving cookie settings1 year

 

§ 6 Data transfer for website maintenance

(1) We will not disclose your personal data to third parties unless we inform you of this.

(2) Our IT service providers have access to our stored data to fix bugs and to allow us to carry out the necessary technical organisational measures. We hereby refer to our legitimate interest in securing our IT pursuant to point (f) of Art. 6 (1) GDPR and the discharge of statutory obligations pursuant to point (c) of Art. 6 (1) GDPR.

(3) The IT service provider(s) is/are chosen by ourselves carefully and commissioned in writing. They are bound by our instructions and audited by ourselves on a regular basis. The service provider(s) will not disclose this data to third parties.

(4) Your data will not be transferred outside the EU (EEA). 

§ 7 Social media plug-ins

(1) We currently use the following social media plug-ins: Twitter
We hereby employ the so-called two-click solution. This means that when you visit our site, no personal data will initially be forwarded to the plug-in provider. The plug-in provider can be recognised by the marking on the box via his initial letter or logo. We give you the opportunity to communicate directly with the plug-in provider via the button. The plug-in provider only receives the information that you have accessed the corresponding website of our online presence if you click and therefore activate the marked field. The data named in § 4 of this declaration is also transferred. In the case of Facebook and Xing, the IP address is anonymised immediately after collection according to the instructions of the respective provider in Germany. Your personal data will therefore be sent to the plug-in provider when the plug-in is activated and saved by them (in the USA in the case of US-American providers). Because the plug-in provider collects the data via cookies in particular, we recommend that you delete all cookies via the security options of your browser before clicking the greyed-out box.

(2) We have no influence over the data that is collected or the data processing procedures, nor are we aware of the full extent of the data collection, the purpose of its processing and the storage periods. Nor do we have any information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider saves the data collected about you as a usage profile and uses this for advertising and market research purposes and/or for the needs-based design of its website. This kind of analysis is carried out in particular (including for users that are not logged in) to show needs-based advertising and to inform other users on social networks of your activities on our website. You have the right to object to the generation of these users’ profiles, whereby this right has to be exercised against the respective plug-in provider. We give you the opportunity to interact with social networks and other users via the plug-ins so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is point (f) of Art. 6 (1) GDPR.

(4) Data transfer takes place irrespective of whether you have an account with this plug-in provider and are logged in there. If you are logged into the plug-in provider, the data collected by us will be assigned directly to your account with the plug-in provider. If you press the activated button and link the page, protection (e.g., the plug-in provider also saves this information in your user account and informs your contacts of this publicly. We recommend that you log out of a social network regularly after use, though particularly before activating the button to avoid any assignment to your profile by the plug-in provider.

(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the following communicated privacy policies of these providers. You will also find further information on your rights in this respect as well as setting options to protect your privacy.

(6) Addresses of the respective plug-in provider and URL with their privacy policies:

a) Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
www.google.com/analytics/terms/de.html, data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data policy declaration: http://www.google.de/intl/de/policies/privacy

 

b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 8 Web tracking - Google Analytics

(1) This website uses Google Analytics, a web analysis service from Google Ireland Limited, if you have given your consent to this. (“Google”). Google Analytics uses so-called “cookies”, text files that are saved on your computer and that allow an analysis of how you use the website. The information generated by the cookie about your use of this website is usually sent to and stored on a Google server in the USA. If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to render further services for the website operator connected with the use of the website and the Internet.

(2) The IP address sent from your browser within the scope of Google Analytics will not be combined with other data from Google.

(3) You can prevent cookies from being saved through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all of the functions provided on this website. You can also prevent the data that is generated by the cookie and related to your use of the website (incl. your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available from the following link: tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are abbreviated before further processing so that they cannot be associated directly with persons. As soon as the data collected about you can be linked to you personally, this will be also ruled out immediately and the personal data therefore deleted immediately.

(5) We use Google Analytics so as to be able to analyse the use of our website and improve this regularly. We can improve our offer and make it more interesting for you the user by using the statistics obtained. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is your consent, thus point (a) of Art. 6 (1) GDPR.

(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Conditions: http://www.google.com/analytics/terms/de.html, data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data policy declaration: http://www.google.de/intl/de/policies/privacy.

(7) This website also uses Google Analytics for a multi-device analysis of visitor flows, which is carried out via a User-ID. You can deactivate the multi-device analysis of your usage in your customer account under ”My data”, “personal data”.

§ 9 PLUG-IN: YouTube

(1) We have integrated YouTube videos in our online presence that are saved on www.YouTube.com and can be played directly from our website. All of these are integrated in the “advanced privacy mode”, i.e. no data about you as a user will be sent to YouTube if you do not play the videos. The data named in § 2 will only be transferred if you play the videos. We have no influence over this data transfer.

(2) When you visit the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. The data named in § 4 of this declaration is also transferred. This takes place irrespective of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged into Google, this data will be assigned directly to your account. If you do not wish this assignment to your profile with YouTube you will have to log out before activating the button. YouTube saves your data as a usage profile and uses this for advertising and market research purposes and/or for the needs-based design of its website. This kind of analysis is carried out in particular (even for users that are not logged in) to provide needs-based advertising and to inform other users on social networks of your activities on our website. You have the right to object to the generation of these users’ profiles, whereby this right has to be exercised against YouTube.

(3) Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the privacy policies. You will also find further information on your rights as well as setting options to protect your privacy. https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 10 PLUG-IN: Integration of Google Maps

(1) We use Google Maps on this website. This allows us to show you interactive maps directly in the website and lets you use the map function comfortably.

(2) When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. The data named in § 4 of this declaration is also transferred. This takes place irrespective of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged into Google, this data will be assigned directly to your account. If you do not wish this assignment to your profile with Google you will have to log out before activating the button. Google saves your data as a usage profile and uses this for advertising and market research purposes and/or for the needs-based design of its website. This kind of analysis is carried out in particular (even for users that are not logged in) to provide needs-based advertising and to inform other users on social networks of your activities on our website. You have the right to object to the generation of these users’ profiles, whereby this right has to be exercised against Google.

(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the privacy policies of the provider. You will also find further information on your rights in this respect as well as setting options to protect your privacy. http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

 

 

Cookie settings

Cookies are necessary for this website to work correctly. We use cookies to make all functions of this website available to you. We do this to save your login data, also to secure them, to optimise the website functions by collecting statistical data (e.g. user flow on the website) and to offer you content tailored for you. You can check and adjust your current cookie settings here:

Currently, for you cookies on this page are