The controller for the processing of personal data is Vaillant GmbH, Berghauser Straße 40, 42859 Remscheid ("we", "us").
You can find more information and our contact details in our legal notice.
We are a company of the Vaillant Group. The Vaillant Group means Vaillant GmbH (Vaillant GmbH, Berghauser Str. 40, 42859 Remscheid, Germany) and the companies affiliated with Vaillant GmbH. The Vaillant Group includes the brands Vaillant, Saunier Duval, awb, Bulex, DemirDöküm, Glow worm, Hermann Saunier Duval and protherm. You can find more information about Vaillant Group here.
We generally process your personal data on the basis of your consent, for the initiation or performance of a contract or to the extent necessary for the purposes of the legitimate interests pursued by us or by a third party (Art. 6 (1) (a), (b) and (f) DSGVO). In particular, we process personal data in order to answer your enquiries, to offer you assistance in using our products and services, to prepare or conclude repair, maintenance and other service contracts, to provide you with requested information or services via our website or other means, to adapt our internet offers, products and services to your interests or to improve them and to support our marketing. Further details on this can be found in the following notes.
You can use our website without identifying yourself or registering. When you use our website, you transmit data to us via your browser that is technically necessary to establish the connection and use our website. This includes, in particular, the date and time of the connection, your IP address, requested web pages and downloaded files, data on the transmission and use of the website, information on the browser and browser settings, operating system and device and the internet address from which you accessed our site. The data is stored and processed for technical reasons. We use this information to ensure the security of our web pages, to measure the effectiveness of internet advertising, to compile statistics and to measure the activities on the website with the aim of improving our offer. We generally do not store this data for longer than thirty days.
For the use of personalised services, we require personal data, in particular so that you can use the respective service, register or so that we can contact you. The intended use of the data results from the respective purpose of the service offered. Not all of the following services are offered on all of our websites or at all times.
If you use personalised services or register, we store the personal data required for the service for the duration of the respective services or for the duration of your registration and thereafter for as long as required and permitted by law. If you are a customer, we have a contract with you, you have registered for certain services on our website or for the use of applications, we may also be able to associate and link your enquiries and orders with your existing customer data.
When we ask you to provide us with certain personal information, we indicate whether the information is necessary to provide you with the particular service. Required information is marked with an asterisk (*) or otherwise. All other information you provide to us is voluntary.
If you choose not to provide us with personal data when using services on our website, your decision will not have any material adverse consequences for you. However, you may then not be able to receive certain information via the website, you may not be able to use personalised services or register, or we may not be able to respond to enquiries fully or at all.
We may pass on your data to companies of the Vaillant Group if this is necessary for the provision of the respective service or the processing of your enquiries and requests.
Insofar as the processing of your personal data is based on your consent, you can withdraw your consent for the future at any time. You can use the contact details below for this purpose. We will promptly process any withdrawal notice.
As a rule, you can download information and brochures on the company, products and services directly from the website without providing any personal data. In certain cases, we offer the possibility of receiving selected information material by email or by post. For this purpose, you provide us with details of the information you require and your name, title, email address and postal address. In individual cases, we may request further information that is necessary for the respective service.
We offer newsletters in general or on specific topics, to which you can subscribe. If you would like to subscribe to a newsletter, we need your email address.
After registering for a newsletter, you will receive an email so that you can confirm your registration. By confirming, you allow us to send you regular information about our products and services in the form of a newsletter.
When we send a newsletter, we collect data about the sending and use of the newsletter. For this purpose, newsletters contain links to image files stored on our web servers. When you open a newsletter, your email program uploads these image files from our web server. This allows us to track whether and when our newsletters were opened and what content was read. We use the information collected in this way to make your use of the newsletters more attractive, to control the sending of newsletters and for statistical purposes.
You can unsubscribe from a newsletter you have subscribed to at any time by sending a message to us or via an unsubscribe link provided for this purpose in the newsletter, without incurring any costs other than the transmission costs according to the basic rates.
We use our own cookies, in particular functional cookies, to make our website more user-friendly, to facilitate navigation and the use of forms, to simplify logging in and registration, to provide certain functions, to store the consent or rejection of cookies and to ensure the security of our website and our systems. The corresponding cookies are therefore necessary in order to be able to use our website functionally. Consent is not required for these necessary cookies.
We also use third-party cookies, particularly in connection with the use of analytics tools, tracking and targeting technologies.
Measurement and analysis tools are used to better understand the use of our website and to optimise it accordingly. With the corresponding cookies, we collect information about how you interact with our website and which pages you have visited. The information we collect or store with these cookies is aggregated and not linked to you personally. Such cookies are activated with your consent, and you can withdraw your consent at any time.
Tracking and targeting technologies are used to optimise the delivery of advertising and other marketing on the internet. These cookies track and collect information about your online activities to help advertisers deliver more relevant advertising to you according to your interests. These cookies may share this information with other organisations or advertisers. Such cookies are activated with your consent, and you can withdraw your consent at any time.
In principle, you can also view our website without cookies. However, most browsers automatically accept cookies as the default setting. However, you can prevent or restrict the storage of cookies on your end device. Please refer to the instructions of your browser manufacturer for details of how this works. You can also delete cookies that have already been set at any time via your browser. You can also use the "Do Not Track" settings of your browser to manage cookies. You can also deactivate cookies from certain third-party providers on the page of the "Digital Advertising Alliance" at https://www.aboutads.info/choices/ or on the page "Your Online Choices" at https://www.youronlinechoices.com. If you do not accept necessary cookies, this may lead to functional restrictions of our offers.
When using cookies from other providers ("third party cookies"), it is possible that the collected data may be transferred by the respective provider to a country outside the EU or the EEA that does not offer an adequate level of data protection. In particular, the US currently does not offer adequate protection under the GDPR because government authorities in the US have the right to access personal data held by companies under certain circumstances without adequate remedies being available to data subjects.
For more information on the privacy terms of the cookie consent management tool used, please visit: https://www.consentmanager.net/privacy.php.
Personal data is processed by us as the controller and, for the purpose of providing services, is passed on to processors within the Vaillant Group and external processors who process the data exclusively on our behalf and in accordance with our instructions. If we use third-party providers who also use the data for their own purposes, we have described this in particular in connection with the information on cookies.
With your consent, we also pass on personal data to specialist tradesmen or other third parties if this is necessary for the provision of certain services.
The transfer of personal data to domestic and foreign courts, authorities or other governmental institutions shall take place exclusively within the framework of the statutory provisions.
Personal data is processed by us as the data controller and, for the purpose of providing services, is passed on to data processors within the Vaillant Group and external data processors who process the data exclusively on our behalf and in accordance with our instructions.
In some circumstances, data processing is carried out on our behalf by a processor outside the EU or EEA. In such a case, unless there is an adequacy decision by the Commission in relation to the recipient country, we will agree with an appropriate service provider on adequate safeguards for the protection of personal data, in particular by agreeing the applicable EU standard contractual clauses.
Particularly in connection with the use of analysis tools, tracking and targeting technologies from third-party providers or the integration of social media offers, it is possible that the third-party providers also process data outside the EU or the EEA. In particular, third-party providers may process personal data in the USA. The US currently does not provide adequate protection under the GDPR in particular because government authorities in the US have the right to access personal data held by companies in certain circumstances without adequate remedies available to data subjects.
We apply technical and organisational security measures to protect the personal data we manage against destruction, loss, alteration or unauthorised disclosure of, or access to, personal data. All personal data provided by you when using personalised services will be transmitted to us in encrypted form. We use a state-of-the-art encryption process for this purpose. Your data is password protected in the systems in which it is stored. The persons who have access to it are prohibited by strict security regulations from disclosing your data to third parties. Our security measures are continuously improved.
You have the right to request access to and rectification or erasure of personal data concerning you or restriction of processing, or to object to processing as well as the right to data portability, in each case in accordance with the statutory provisions.
Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You can also contact our data protection officer to assert your above rights.
You have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions if you are of the opinion that the processing of personal data concerning you infringes the statutory provisions. For this purpose, you may in particular contact the authority in the EU Member State of your habitual residence or of the place of the alleged infringement.
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for us. You can find their current contact details at www.ldi.nrw.de.
If you have any questions or suggestions on the subject of data protection, please feel free to send them by email or letter to our data protection officer, who can be reached at the following contact details:
By email: firstname.lastname@example.org
By post: Vaillant GmbH, Data Protection Officer, Berghauser Str. 40, D-42859 Remscheid, Germany.
Status: October 2022