1. Data Protection – Simple and Compact:

The object of data protection is to protect you against improper use of your data.

When you visit a website, there is a flow of data and the website proprietor knows for certain that this data belongs to you. This data is referred to as personal data. This is always the same at our website and others. We would like (and we are required) to explain to you exactly what happens. Even a small amount of data requires an extensive explanation, so we would like to describe the most important elements here very briefly:

1.1. Responsible Data Processor

eltherm GmbH
Ernst-Heinkel-Straße 6-10
57299 Burbach

1.2. Data Protection Officer

Henning Welz
gds – Gesellschaft für Datenschutz Mittelhessen mbH
Auf der Appeling 8
35043 Marburg
welz(at)gdsm.de

or write to our postal address and add "Data Protection Officer" after the address.

1.3. Responsible Regulatory Authorities

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Representative for Data Protection and Freedom of Information, North Rhine-Westphalia)

Kavalleriestr. 2-4
40213 Düsseldorf
Telefon: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw.de

1.4 Your rights

In the context of GDPR regulations, you have the following rights:

• Right to information
• Right to correct.
• Right to deletion.
• Right to limit processing.
• Right to object.
• Right to data transferability.
• Right to file a complaint with a regulatory authority.

If you have questions about exercising these rights or their scope, please feel free to contact our Data Protection Officer.

1.5. What Data is Involved?

The first type of data is technical data, which is always recorded when you visit our website: IP address, date and time, nature of the request, amount of data transferred, browser type, operating system, language, requesting website. As mentioned previously, this is always the same.

We also use small packets of information that we store on your computer to make it easier for you to operate our website. These are called cookies. This is usually how it works, and it has to work this way for you to be able to use our website conveniently. However, you can also suppress this process (by making a setting in your browser). But then the website will not work as well.

If you enter data on our website, for example to create an account, subscribe to a newsletter or to contact us, we will use the data exclusively for the respective purpose.

We do not need your consent for any of these processes (or "processing" as we call it). If we intend to do something else with the data, we ask for your consent.

We ask for this consent at the very beginning of your visit, immediately after you pull up the page, in what is called a consent tool. In this tool you can also find detailed information about what data we require for which purpose, what technology we use to collect it and how long we will save it. By making changes to the settings in this consent tool, you can revoke details of consent you have previously given at any time.

For a summary of your settings made in the consent tool and a description of how to change them, refer to settings "3. Processing on the basis of your consent".

As a general rule: We store all data for as long as we need it for the respective purpose. We only store it longer than this if we are required to do so by law. If we are able to indicate an exact timespan, you will find it in the text that follows.

The information provided up to this point gives you a basic understanding of what is involved. For more detailed and comprehensive information, please read on:

2. Data Protection – Longer and not quite as Simple, but also Precise

2.1. Information about the Collection of Personal Data

2.1.1. Making Contact 

When you make contact with us by e-mail or using the contact form, we store the data you provide (your e-mail address and if applicable your name and phone number) so we can answer your questions. We delete the data that we receive in this context after there is no more need to store it, or we limit processing of the data if we are required by law to retain it. The legal basis for this is your request or contact with us (art. 6 para.1 let. b or let. f of GDPR).

2.2. Collection of Personal Data by and for Us during Your Visit to Our Website

2.2.1. Data that is always Processed

If the website is used entirely for purposes of information, in other words if you do not register or transmit information to us by other means, we only collect the personal data that your browser transmits to the server. If you would like to view our website, we collect the following data items, which we require for technical purposes so that you can view our website and to ensure stability and security. The legal basis is art. 6 para. 1 pg. 1 let. f of GDPR):

• IP address
• Date and time of the request
• Time zone difference relative to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• The amount of data transmitted
• The website from which the request was received
• Browser
• Operating system and its user interface
• Language and version of the browser software.

2.3 Newsletter

If you have registered for our newsletter, you will receive it. (it is possible you may receive it without registering for it. In this case you will find the relevant information in the Data Protection Declaration for Third Parties.) The legal basis for sending you the newsletter following registration is art. 6 para. 1 pg. 1 let. a of GDPR.

We use the "double-opt-in" procedure for registering to our newsletter. This means that after you register, we send you an e-mail to the e-mail address you indicated and ask for your confirmation that you want to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be locked and automatically deleted after one month. We also save the IP addresses you used and the time of your registration and confirmation. The purpose of this procedure is to verify your registration and to make it possible to clarify misuse of your personal data if applicable.

The only information you are required to submit to receive the newsletter is your e-mail address. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter unless it is the same e-mail address that we already use for normal communication with you within a contractual relationship. The legal basis is art. 6 para. 1 pg. 1 let. a of GDPR.

You can revoke your consent to having the newsletter sent to you at any time and desubscribe from the newsletter. To revoke your consent, click on the link that is provided in every newsletter e-mail or send a message to the contact data specified in the publishing information. If you provided an exclusive e-mail address for delivery of the newsletter, we will delete it.

We draw your attention to the fact that if you consented, we will evaluate your user behaviour when the newsletter is sent to you. The e-mails that are sent for this purpose contain web beacons and/or tracking pixels, which represent single-pixel image files that are stored on our website. For the evaluations we link the web beacons with your e-mail address and an individual ID. The data is collected exclusively in pseudonymized form, which means the IDs are not linked with any other personal data of you, thus precluding the possibility of direct personalized tracking.

You can refuse this tracking at any time by revoking your consent in the consent tool. The information is stored for as long as you are subscribed to the newsletter. After you desubscribe, we store the data only in statistical and anonymous form. Tracking as described above is not possible if you have deactivated display of images by default in your e-mail program. If you have done this, the newsletter will not be completely displayed and you may not be able to use all functions. If you show the images manually, the tracking described above will take place.

2.4. Social Media Content

If you have given your consent in the consent tool that appeared when the website first came up, we will use the social media services approved by you to be able to show you content from those social media services on our website. In this context, personal data will then be sent to these social media providers. Consent constitutes a legal basis within the meaning of art. 6 para. 1 let. a of GDPR as well as permission as the term is used in the German Telecommunications and Telemedia Data Protection Act (TTDSG) § 25 para. 1.

Depending on your consent in the consent tool, we also use plug-ins of social media providers, which make it possible to go to the relevant social media quickly. We use the two-click solution to do this. This means that just because you visited our site, personal data will not be forwarded to the providers of the plug-ins. The personal data will not be provided until you have activated the plug-in by clicking on it. In this case the data described in section 2.2.1 of this declaration is transmitted.

For more detailed information about the circumstances of processing your personal data, please consult the data protection declarations of the providers.

2.5. Analysis of the Website

If you have given consent, we use a suitable web analysis service to analyse activities on our website. We use the statistics gained in this manner to improve our services and to arrange them so they are more interesting for you as a user. The legal basis for this usage is art. 6 para. 1 let. a of GDPR and § 25 para. 1 of TTDSG.

2.5.1 Google Analytics

If you have given consent at the beginning of the visit for us to do so (art. 6 para. 1 let. a of GDPR), we use Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. Information on the user's utilization of the online offerings generated by the cookie is generally sent to a Google server in the United States and stored there. Google is under the EU – US data privacy framework and thereby guarantees to comply with European data protection law.

Google uses this information acting on our behalf to evaluate the use of our online services by the user to compile reports covering activities within this website and to provide us with additional services associated with the use of this website and internet usage. In the process, pseudonymous usage profiles of users can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that Google will shorten the IP address of the users within the member countries of the European Union or any other country that has signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. The IP address transmitted by the user's browser is not combined with other Google data. Users can prevent the storage of cookies by configuring their browser software accordingly. Users can also prevent the collection of data related to their use of the online offerings for Google and generated by cookies as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. You can find more information on Google’s data usage, as well as configuration and refusal options in Google’s data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated). Personal data of users is deleted or anonymized after 14 months.

2.5.2 Google AdSense / GA Audience

If you have consented, this website uses the online advertising service Google AdSense /GA Audience, which presents you with advertising adapted to your interests. When you visit our website, Google will be informed that you have pulled up our website. It is possible that your data will be forwarded to contract partners of Google, to third parties, and to authorities. The legal basis for the processing of your data is art. 6 para. 1 pg. 1 let. a of GDPR. You will receive further information on the purpose and scope of data collection and processing together with further information on your rights in this regard and configuration options to protect your private sphere at: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; data protection conditions for advertising: www.google.de/intl/de/policies/technologies/ads. Google has agreed to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

2.5.3 DoubleClick by Google

If you have consented, this website uses the Online Marketing Tool DoubleClick by Google. DoubleClick uses cookies to show advertisements that are relevant for the user, to improve reports for campaign performance, or to make sure the user doesn’t see the same advertisement multiple times. Google uses a cookie ID to record which advertisement has been displayed in which browser and can thus make sure that they aren’t displayed multiple times. Furthermore, DoubleClick can also use cookie IDs to record so-called conversions relating to advertisement queries. This is the case, for example, when a user sees a DoubleClick advertisement and then pulls up the website of the advertiser in the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. However, we require your consent due to the regulations in § 25 TTDSG. The legal basis for the processing of your data is therefore art. 6 para. 1 let. a of GDPR. You can find further information on DoubleClick by Google at www.google.de/doubleclick and support.google.com/adsense/answer/2839090, and on Google data protection in general: www.google.de/intl/de/policies/privacy.

2.5.4 Google Adwords Conversion-Tracking

If you have consented, we use the online advertising program “Google AdWords” and the conversion tracking offered as part of Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an advertisement displayed by Google, a cookie for conversion tracking will be deposited on your computer. These cookies expire after 30 days, do not contain any personal information, and thus do not facilitate personal identification. However, we require your consent due to the regulations of § 25 TTDSG. The legal basis for the processing of your data is therefore art. 6 para. 1 let. a of GDPR.

2.5.5 Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP-addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.

3. Processing on the Basis of Your Consent

As mentioned previously, when you accessed our website for the first time, we asked with a consent tool for your consent to use various services. This includes for example services that make certain fonts available for our website, that make it possible for you to navigate to us or, also briefly mentioned above, that set up a connection to social media channels or allow us to analyse website activities. The services for which we request your consent are subject to change. What they all have in common is that we will only use them if you have given your consent and we will stop using them immediately if you withdraw your consent. This revocation affects the future. Data that has already been collected will not be deleted. It will be processed within the confines of the consent that was given.

All service used within the confines of the consent given are used on the basis of § 25 para. 1 of TTDSG and in the context of art. 6 para. 1 let. a of GDPR.

The table below provides information about the status of your consent and the activities of each of the services to which you have consented:

4. Links

When you find links to other sites on our website, clicking on these links will take you from our website to the website of the other provider. This other provider is then responsible for everything that happens with your data. For more detailed information, see the data protection declaration of the relevant website.

5. Additional Information

If you would like to learn about how we process data from third parties outside of the website environment, please read our Data Protection Declaration for Third Parties.

Download