Data Privacy Statement

1. On this data protection declaration

Protecting your private sphere is an important priority for us. We therefore urge you to read through the following summary of how our website, www.eltherm.com, works.

The data protection declaration shown here meets the requirements of the GDPR and the German federal data protection act (BDSG). It is meant to inform readers of the processing method for, purpose of, and use of personal data by the website operator eltherm GmbH and eltherm production GmbH.

Even though our page is equipped with various security safeguards, there is no way to guarantee the full protection of your data, since it cannot be ensured that there are no holes in security on the Internet. If you have any requests regarding the collection of your data, you will find corresponding contact information for our contact persons at the end of this text.

2. Personal data

The function and communication of our services is reliant on our users’ data. Personal data is especially sensitive here – personal data refers to any information that can be clearly traced back to a specific, natural person. According to the GDPR, we are obligated to list the full scope of all collected data of this nature.

The following personal information is collected from users, in accordance with GDPR, when they use this site:

• Name (mandatory field)
• E-mail address (optional)
• Company (mandatory field)
• Address (optional)
• Country (mandatory field)
• Phone (optional)
• Message (mandatory field)

This data is accumulated when you use the following features:

• Contact form
• Exhibition contact sheet

When you make contact with us (e.g. via the contact form, e-mail, phone, or through social media), the information entered by the user is used to process and act on the contact query pursuant to art. 6 para. 1 lit. b) GDPR. The user’s information may be stored in a customer relationship management system (“CRM System”) or comparable query organization. We delete queries if they are no longer needed. A review of necessity is performed every two years; the legal archiving requirements also apply.

3. How we collect data

3.1. Log files

A log file is created during the course of the automatic protocol of a processing computer system. This means that information from the end device you are using is stored on a server in the form of log files.

We also perform log file analyses. As a page provider/Our page provider records the following information this way:

• Access on the page: Date, time, frequency
• How you got to the page (previous page, hyperlink, etc.)
• Quantity of data sent
• Which browser and which version of the browser you are using
• Your IP address

Here too, data is used only to enhance our offerings. We/The operator can only further store, release, or later access server log files if this is legally permitted (e.g. if there is suspicion of illegal activity).

3.2. Cookies

This website uses cookies. These are small text files placed in your browser history that reconstruct previously used settings and other changes you may have made next time you visit the website. Cookies allow us to personalize our services and make them more user-friendly.

You are able to block the placement of cookies and delete cookies that have already been placed. In such cases, we must inform you that certain features on the page will no longer work or may have limited functionality.

3.3. Newsletter and subscriptions

We send a newsletter to the users' e-mail addresses we have on file once a month. In order to do so, we store the corresponding e-mail address. If you no longer wish to receive these newsletters, you can unsubscribe from the newsletter at any time. Your e-mail address will then immediately be deleted from the distributor.

Newsletters are sent using message distribution service “MailChimp”, a newsletter distribution platform provided by the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection conditions of the distribution service provider here: mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and hereby guarantees adherence to European standards of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The distribution service provider is used on the basis of our justified interests pursuant to art. 6 para. 1 lit. f GDPR and an order processing contract pursuant to art. 28 para. 3 pg. 1 GDPR. The distribution service provider may use the data of the recipient in pseudonymous form, meaning without assignment to a specific user, to optimize or enhance its own services, for example for technical optimization of sending and display of the newsletter or for statistical purposes. The distribution service provider will not use the data of our newsletter recipients to contact recipients itself or forward the data to third parties.

3.4 Competition

For what purposes do we process your data?
If you would like to participate in a competition offered by us, we will process your data provided for participation in the competition or otherwise collected in this context (competition data) in order to carry out the competition. This includes contacting you to inform you about a possible prize.
We also process your  data to comply with statutory retention periods and to prevent or prosecute criminal offences against us or against you (e.g. attempted fraud, identity theft).

On what legal basis do we process your data? What legitimate interests are we pursuing?
The personal data provided by you in the context of a sweepstakes, we process on the basis of Art. 6 para. 1 lit. b DSGVO (implementation of the offer or the sweepstakes contract).

The legal basis for storing the data to comply with statutory retention periods is Art. 6 (1) c DSGVO in conjunction with the relevant statutory retention period (esp. § 257 HGB, 147 AO).

The legal basis for processing for the purpose of preventing or prosecuting criminal offenses against us or you is Art. 6 para. 1 lit. f DSGVO. It serves our and, if applicable, your legitimate interest to protect our or your assets and to protect other interests protected by criminal law.

Who is involved in the processing of my data?
Involved in the processing of your data are:
⦁ Internal departments as part of the handling of business processes.
Your data will not be transferred to other third parties.

How long will my data be stored?
We only store your sweepstakes data for as long as is necessary for the execution of the sweepstakes. After the competition has ended and been processed, your data will be deleted immediately.
Is there an obligation for you to provide your data or is this necessary for the conclusion of a contract and what happens if you decide against it?
Of course, you are free not to participate in one of our sweepstakes. However, participation cannot take place without the provision of the sweepstakes data.

4. Web analysis services

On the basis of our justified interests (meaning interest in analysis, optimization, and economic operation of our online offerings as defined in art. 6 para. 1 lit. f. GDPR), we make use of Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. Information on the user's utilization of the online offerings generated by the cookie is generally sent to a Google server in the United States and stored there. Google is certified under the Privacy Shield Agreement and thus guarantees compliance with the European data privacy laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate how users utilize our online offerings, to compile reports about activities within this online offering, and to provide additional services associated with the use of this online offering and Internet use for us. In the process, pseudonymous usage profiles of users can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that Google will shorten the IP address of the users within the member countries of the European Union or any other country that has signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. The IP address transmitted by the user's browser is not combined with other Google data. Users can prevent the storage of cookies by configuring their browser software accordingly; users can also prevent the collection of data related to their use of the online offerings for Google and generated by cookies as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can find more information on Google’s data usage, as well as configuration and refusal options in Google’s data protection declaration  (https://policies.google.com/technologies/ads) and in the settings for the display of  advertisements by Google (https://adssettings.google.com/authenticated). Personal data of users is deleted or anonymized after 14 months.

Use of Google AdSense/GA Audience

This website uses the online advertising service Google AdSense/GA Audience, which presents you with advertising adapted to your interests. We use this to pursue the goal of showing you advertisements that might interest you in order to make our website more interesting. To do this, statistical information is collected about you and processed by our advertising partners. These advertisements can be recognized by the note “Google Ads” in the respective display. When you visit our website, Google will be informed that you have pulled up our website. In order to accomplish this, Google uses a web beacon to place a cookie on your computer. The data described in section three of this declaration is transmitted. We do not have any influence over the data collected and we are not aware of the full scope of data collection and the duration of storage. Your data is transmitted to the United States and analysed there. If you are logged into your Google account, your data can be directly assigned to this account. If you don’t want the data associated with your Google profile, you will have to log out. It is possible that your data will be forwarded to contract partners of Google, to third parties, and to authorities. The legal basis for the processing of your data is art. 6 para. 1 pg. 1 lit. f GDPR. This website will not display advertisements from third party providers through Google AdSense. There are various ways to prevent the installation of cookies from Google AdSense/Audience: a) by configuring your browser software accordingly, the suppression of third party cookies will ensure you don’t receive advertisements from third party providers in particular; b) by deactivating interest-related advertisements with Google at the link http://www.google.de/ads/preferences, but it should be noted that this setting will be deleted if you delete your cookies; c) by deactivating the interest-related advertisements from the provider, which are part of the self-regulation campaign “About Ads”, via the link http://www.aboutads.info/choices, but it should be noted that this setting will be deleted if you delete your cookies; d) through permanent deactivation in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. We would like to point out that if you do this, you may not be able to use all of the features of the offering to the full extent possible. You will receive further information on the purpose and scope of data collection and processing together with further information on your rights in this regard and configuration options to protect your private sphere at: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; data protection conditions for advertisements: http://www.google.de/intl/de/policies/technologies/ads. Google has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of DoubleClick by Google

This website still uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to show advertisements that are relevant for the user, to improve reports for campaign performance, or to make sure the user doesn’t see the same advertisement multiple times. Google uses a cookie ID to record which advertisement has been displayed in which browser and can thus make sure that they aren’t displayed multiple times. Furthermore, DoubleClick can also use cookie IDs to record so-called conversions relating to advertisement queries. This is the case, for example, when a user sees a DoubleClick advertisement and then pulls up the website of the advertiser in the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. As a result of the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no control over the scope and further use of the data collected through the use of this tool by Google and are therefore informing you of what we currently know: Through the DoubleClick connection, Google will learn that you have pulled up the corresponding part of our internet presence or clicked on one of our advertisements. If you are registered with a Google service, Google will be able to associate the visit with your account. Even when you are not registered with Google and haven’t logged in, it is possible that the provider will learn of your IP address and save it. There are various ways for you to prevent your participation in this tracking process: a) by configuring your browser software accordingly, the suppression of third party cookies will ensure you don’t receive advertisements from third party providers in particular; b) by deactivating cookies for conversion tracking by configuring your browser so that cookies from the domain “www.googleadservices.com” are blocked http://www.google.de/ads/preferences, but it should be noted that this setting will be deleted if you delete your cookies; c) by deactivating the interest-related advertisements from the provider, which are part of the self-regulation campaign “About Ads”, via the link http://www.aboutads.info/choices, but it should be noted that this setting will be deleted if you delete your cookies; d) through permanent deactivation in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. We would like to point out that if you do this, you may not be able to use all of the features of the offering to the full extent possible. The legal basis for the processing of your data is art. 6 para. 1 pg. 1 lit. f GDPR. You can find further information on DoubleClick by Google at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can also visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org. Google has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Use of Google Adwords Conversion Tracking

We use the online advertising program “Google AdWords” and the conversion tracking offered as part of Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an advertisement displayed by Google, a cookie for conversion tracking will be deposited on your computer. These cookies expire after 30 days, do not contain any personal information, and thus do not facilitate personal identification.
If you visit certain internet pages of our website and the cookie hasn’t expired yet, Google and we will be able to detect that you clicked on the advertisement and were forwarded to this page. Every Google AdWords customer receives a different cookie. There is therefore no way for cookies to be tracked through the websites of AdWords customers.
The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have chosen conversion tracking. For this, customers learn the total number of users who have clicked their advertisement and been forwarded to a page equipped with a conversion tracking tag. They do not, however, receive any information that could be used to personally identify the user.
If you don’t want to participate in tracking, you can refuse this use by preventing installation of the cookies with a corresponding configuration of your browser software (deactivation option). You will then be excluded from the conversion tracking statistics. Further information and the data protection declaration of Google can be found at:

http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/

Use of Smartlook

In order to provide a technically flawless online offer, we use the Smartlook analysis software from Smartsupp.com s.r.o., Millay Horakove 13, 602 00 Brno, Czech Republic.

This software records anonymised mouse movements and interactions on the page. Your personal data will not be transferred and no record will be assigned to any user. If personal data of you or a third party is displayed on the Website, Smartlook will automatically fade it out and does not record it at any time. If you do not agree with the recording, you can deactivate it using the opt-out switch under Smartlook Opt-Out (https://www.smartlook.com/opt-out).

5. Incorporation of Services and Content from Third Parties

As part of our online offerings and on the basis of our justified interest (meaning interest in analysis, optimization, and economic operation of our online offerings as defined in art. 6 para. 1 lit. f. GDPR) we use content and service offerings of third parties to incorporate content and services such as videos or fonts (hereinafter referred to collectively as “content”). This always requires that the third party provider of this content learns the IP address of the user, since they would not be able to send the content to the user’s browser without the IP address. The IP address is thus essential to the display of this content. We take care only to use such content from providers that use the IP address to deliver the content. Furthermore, third party providers can also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to analyse information, such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and can, among other things, contain technical information on the browser and operating system, referring websites, visiting time, and other information on the usage of our online offerings, and can also be connected with such information from other sources.

6. Data Forwarding to Third Parties

We generally will not transmit your data to third parties. Additionally, we also take appropriate measures and use regular monitoring to ensure that the data we collect cannot be viewed from outside or accessed by third parties.

7. Social Bookmarks

On our website, we do not offer the option to share content on social networks or via e- mail through external links. We incorporate videos from the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt out: https://adssettings.google.com/authenticated.

8. Your Rights

When it comes to the collection of your data, it goes without saying that you have rights. According to the applicable laws, we are obligated to inform you of your rights. The assertion and exercise of these rights won’t cost you anything.

Right to Withdraw

You have the right to withdraw your agreement to the collection of data at any time. This right applies and is effective into the future; the data collected until the withdrawal goes into affect remains unaffected by this.

Right to Data Transferability

You have the right to request that we transfer your data to another office.

Right to Correction, Deletion, or Blocking

You have the right to have your information corrected, deleted, or blocked.  The last option is used when the legal situation doesn’t allow for deletion.

Right to Complain

You have the right to submit a complaint to a regulatory authority or a responsible office, if you have a reason to complain. To exercise this right and the two previously mentioned ones, please contact the contact persons listed at the end of this data protection declaration.

9. Responsible for Data Collection

You can contact the following persons for questions, requests for information, requests, complaints, or criticism regarding our data protection policies:

Daniel Eichert

Datenschutzverantwortlicher(at)eltherm.com

eltherm GmbH
Ernst-Heinkel-Straße 6-10
57299 Burbach
Germany

Data Protection Officer

An external data protection officer oversees the correct implementation of data protection. If you have a request regarding the processing of your personal data, you can also contact this person directly.

Datenschutzbeauftragter(at)eltherm.com

10. Change to the Data Protection Declaration

As the responsible entity, we reserve the right to change the data protection declaration at any time in regards to the applicable data protection provisions. Current status is (May 2018).