Skip to main content

Data protection

1.Data protection information

We're looking forward to your visit on our website and want to infrom you about the usage of your data.

During your visit on our website personal data is collected. We collect data to consider ur settings or even to make the site useable for you and maybe in-formations you can give us through the contact options on this site.

We only use this data to secure a proper funktionality of this site and that we can work with your requests.

In the following we inform u about the usage oft he data and about your rights and contact data from us and from our data protection officer.

2.Contact and data protection officer

This data protection declaration applies to the website of

SmartHeat Deutschland GmbH
Am Augraben 10, 18273 Güstrow
eMail: info@smartheat.de
Tel.: +49 3843 22 79-0
Fax: +49 3843 683 132
www: smartheat.de

Our data protection officer is the following:

ECOVIS Keller Rechtsanwälte PartG mbB
Rechtsanwalt Axel Keller, LL.M. / Senior Associate Karsten Neumann
Am Campus 1 - 11, 18182 Rostock-Bentwisch
Tel.: +49 381 12 88 49 - 0
eMail: dsb-nord(at)ecovis.com
www: www.ecovis.com/datenschutzberater

You have the right at any time to contact our data protection officer, free of charge and, if you wish, confidentially, to support you in enforcing your data protection rights.

3. Purposes and legal basis of data processing, processor and transfer to thrid parties in third countries

We use your data only for the purposes, you agreed for.

Legal basis for processing your data may in particular be

  • your consent in accordance wit Article 6 Paragraph 1 lit. a GDPR, for example by agreeing tot he use of cookies or analysis,
  • the initiation and processing oft he contract in accordanve with Article 6 Paragraph 1 Letter b oft he GDPR, for example if you contact us using the form,
  • our legitimate interest in accordance with Article 6 Para-graph 1 Letter f oft he GDPR, for example in the context of public relations, ensuring the necessary funtionalities oft he website, IT and internet security, quality assurance, fraud prevention and the prosectuin of criminal offenses.

If you gave us an purposeful agreement, u can revoke fort he future. The rev-ocation of consent does not affect the lawfulness oft he processing carried out based on the consent before ist revocation.

A transfer from personal data to state institutions and authorities, this occurs exclusively due to mandatory national legal regulations.

The people we commission to process the data are obligated to maintain confidentiality and to precessing lawful with data.

We use the support of external service providers (processors) for certain tech-nical processes regarding data analysis, processing and/or storage. Both we and the processor are obligated to comply with the technical and or-ganizational measures in accordance with Art. 32 GDPR and the external ser-vice provider is also obligated to maintain confidentiality. Processing takes place exclusively on our behalf and on our instructions. Any processing of your personal data that goes beyond this order will only take place with your explicit consent or in cases ordered by la wand by authorities or courts.

Data transfer to third countries ( countries outside the European Economic Area - EEA) only takes place if this is necessary to fulfill the contract, is required by law, you have given your consent tot he data processing or to ensure various functionalities on the website is required. We will inform you about details separately, if required by law.

4. Duration of data storage

In connection with the purely informational use of our website, we store the data that your browser transmits to our server for the period necessary to re-solve malfunctions or error messages. Deletion usally takes place within 7 days of the end of the internet connection.

Further deletion periods depend on your use of the website.

If you contact us with a concern using our contact options, we will store your collected personal data from the time of collection. We store the data collected in this way fort he duration of our business relationship, which includes, among other things, the initiation and processing of a contract. In addition we are subject to various storage and documentation obligations, which arise, among other things, from the Commercial Code (HGB), the TAX CODE (AO) or other tax law. The retention periods prescribed there are up tot en years af-ter the end oft he year in which the contractual relationship was terminated. Finally, with regard tot he possibility of defending against legal claims and proof of fulfillment of data protection obligations, the storage period is also as-sessed according to the statutory limitation periods, which, according to Sections 195 ff. oft he Civil Code (BGB), are generally 3 years from the end oft he year in which the data was created.

In the event of further deletion periods, you will be informed further in the data protection declaration.

5. Other Data protection hints

Please also note our special data protection hints for applicants, suppliers and business partners, employees and customers at https://www.smartheat.de/allgemein/datenschutz.html

6. Rights of affected people (informations for affected people according to chap-ter 3 GDPR)

You have the following rights:

  • the right of information according to article 15 GDPR,
  • the right of rectification according to article 16 GDPR,
  • the right of deletion according to article 17 GDPR,
  • the right to restrict the processing with personaal data in ac-cordance to article 18 GDPR,
  • the right to data portability according to article 20 GDPR and
  • the right of contraction against the processing of your per-sonal data according to article 21 GDPR.

In addition , according to article 77 GDPR, there is a right to lodge a complaint with a data protection authority. The complaint can be lodged with the data protection authority of the federal state where you reside or work or where the alleged violation occurred. If the data protection authority of another member state is responsible fort he body about which you are complaining, the national data protection authority will coordinate with the other data protection authority. You can find an overview here:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsable for us is

The state Comissioner for Data Protection and Freedom of Information Mecklenburg-Western Pomerania
Schloss Schwerin, Lennéstraße 1, 19053 Schwerin
Tel.: +49 385 594 94 0
Fax: +49 385 594 94 58
eMail: info@datenschutz-mv.de
www: www.datenschutz-mv.de
contact: www.datenschutz-mv.de/kontakt/kontaktformular/

7. Funktionality and depiction of the website

7.1 Cookies

We use cookies. Cookies are text datas, which are saved on a comput-ersystem through your browser.

Cookies contain the Cookie-ID. The Cookie-ID is a unic identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the websites and servers you visit to distinguish your individual browser from other internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the usage of cookies we can give the user more userfriendly ser-vices. Information and offers on our website can be optimized with the user in mind, for example by recognizing the user of the website. This means that access data does not have to be entered again each time you cisit the website, as this i staken over by the website stored on the user's computer system.

However, when using cookies, a distinction must be made with regard to different purposes. To the extent that these small files are absolutely neces-sary to display the website properly, their use is not voluntary. The legal basis for the integration of cookies in this case is Art. 6 (1) lit.f GDPR.

In addition, cookies are also used on the website for the purpose of analyz-ing user behavior or for marketing purposes. However, this use only occurs if you have given us your consent when you first access the website. How-ever, you can prevent the setting of cookies through our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common internet browsers. If the setting of cookies is deactivated in the Internet browser used, not all functions of our website may be fully usable.

7.2 Server-Log-Files

The provider of our website autmatically collects and stores information in socalled server log files, which are automatically transmitted to us by your browser. It can be recorded the

  • browser types and versions used,
  • operating system used by the accessing system,
  • website from which an accessing system accesses our website (so-called referrer),
  • sub-websites that are accessed via an accessing system on our website,
  • date and time of access to the website,
  • internet protocol address (IP address),
  • internet service provider of the accessing system and
  • other data and information that serves to avert danger in the event of attacks on our information technology systems.

When using this general data and Information, we do not draw any conclu-sions about you. Rather, this information is needed to

  • deliver the content of our website correctly,
  • optimize the content of our website and the advertising for it,
  • ensure the longterm functionality of our information technology systems and the teechnology of our website and
  • provide law enforcement authorities wiht the information necessary for criminal prosecution in the event of a cyber attack.

We therefore evaculate this data and information statistically and also with the aim of increasing data protection and data security in our company in ordert to ultimately ensure an optimal level of protection for the personal data we process. The processing takes place within the scope of our legiti-mate interest in accordance with Art. 6 (1) f GDPR. The anonymous data in the server log files is stored separately from all of the personal data you provide. This data will not be merged with other data sources. However, if there are indications of illegal use of our website, we may subseqently check this data.

7.3 Google Fonts (local)

On our website we have integrated fonts from the provider Google for a unifrom display oft he fonts. We have installed Google Fonts locally, which means that a connection to Google's servers is not established. This means that no data is transferred to Google. The integration oft he fontss is based on our legitimate interest in accordance with Art. 6 (1) f GDPR.

The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, vertreten in der EU durch Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Further information and the applicable data protection regulations from Google can be found at developers.google.com/fonts/faq, policies.google.com/privacy and policies.google.com/terms.

8. Communication

8.1 Contact and contact form

Our website contains information that enables quick electronic contact with our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address).

We have also integrated a contact form that you can use to contact us. You have the option to provide your title, first name, last name and telephone number on a voluntary basis. However, in order to communicate with us, it is absolutely necessary that you include your email address and your spe-cific request in the message.

If you contact us by email or using the contact form, the personal data you provide will be saved automatically. Such personal data transmitted on a voluntary basis will be stored for the purposes of processing or contacting you. This personal data will not be passed on to third parties.

Data transmission via the contact form is voluntary and takes place in ac-cordance with Article 6 paragraph 1 Letter a) GDPR. If the processing is necessary for the fulfillment of a contract or as part of the implementation of a pre-contractual measure, the data processing takes place in accordance with Article 6 Paragraph 1 Letter b) GDPR.

We use an external service provider (processor) for this technical process. Both we and the processor are obliged to comply with the technical and or-ganizational measures in accordance wit Art. 32 GDPR and the external service provider is also obliged to maintain confidentiality. Processing takes place exclusively on our behalf and on our instructions.

9. Maps/route planner

Google Maps

As part of our website, for example to find our company's locations, the use of interactive maps from the "Google Maps API" map service and the associated data processing takes place with your prior consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time.

The operating company is Google LLC; 1600 Amphitheater Parkway; Moun-tain View, CA 94043;USA, represented in the EU by Google Ireland Ltd., Gor-don House, Barrow Street, Dublin 4, Ireland. The parent company Google Inc., 1600 Amphitheater Parkway, Mountain View CA 94043 is certified in the Data Privacy Framework List. According to the decision of the EU Commission, an adequate level of data protection must therefore be assumed.

When you use this service, information about your use of the website, as well as your IP address, is transmitted to Google servers and stored.

We cannot rule out a transfer of your data by Google to third parties, for ex-ample in the case of legally required transfers or the processing of data by third parties on behalf of Google. Further information and Google's applicable data protection regulations can be found at https://policies.google.com/privacy and https://policies.google.com/terms.

10. Social Media

10.1 Use of social-media-plugins

The website also uses the integration of social media platforms such as Facebook, Twitter and Instagram These platforms include sometimes buttons and plugins that transmit data to the operaters of the respective network platform when the page loads, i.e. without any further activity on the part of the user.

10.2 Facebook (link via icon)

We have integrated components of the company Meta Platforms, Inc. ("Meta") as a link on this website. Facebook is a social network. A social network is a social meeting place operated on the Internet, i.e. an online community that usally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for ex-changing opinions and experiences or allows the Internet community to provide personal or company related information. Facebook allows users of the social network to, among other things, create private profiles, upload photos and network via friend requests.

If you voluntarily click on the icon, you will be redirected to facebook, over which we have no control.

Facebook's operating company is Meta Platforms Inc., 1 Hacker Way, Menlo park, CA 94025, USA. If a data subject lives outside the person responsible for processing personal data is Meta Platforms Ireland Ltd., $ Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you do not want data to be processed by Facebook, please do not click on the link.

Facebook's published data policy, located at Meta | Privacy Center | Manage your privacy on Facebook, Instagram and Messenger | Face-book Privacy] provides information about the collection, processing and use of personal data by Facebook. It also explains what setting options Facebook offers to protect your privacy.

The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to facebook, the data collected will also be transferred to the USA and other third coun-tries. The parent company Meta Platforms, Inc., 1 Meta Way, Menlo Park, California 94025-1453 (Facebook USA) is certified in the Data Privacy Framework List. According to the decision of the EU Commission, an appropriate level of data protection must therefore be assumed.

Insight data analysis

The Conference of independent Federal and State Data Protection Authorities (Data Protection Conference - DSK) has pointed out that Facebook is obliged to obtain effective consent to use data from all visitors to the Facebook page. The operators of a Facebook fan page, on the other hand, are obliged to obtain the necessary information about data usage from Facebook.

When you visit our fan page, Facebook collects personal data from users within the scope and scope of their responsibility. Such data collection by Facebook can also occur from visitors to this page who are not logged in to Facebook or registered as members. Information about data collection and further processing by Facebook as well as Information about the implementation of your rights and decision-making options can be found in Facebook's data protection information.

By using the Facebook platform, we assume no responsibility for the processing of personal data and its transmission outside the European Union, in particular no responsibility for the implementation of the rights of those affected and the effectiveness of the consent.

We have no influence on the scope and no full access to the data col-lected or your profile data. You decide which information we receive through your Facebook settings when you visit a publicly accessible page, within the framework of Facebook's exclusive responsibility. In ad-dition, you have the option in your Facebook settings to actively hide your "likes" or to stop following the fan page. Then your profile will no longer appear in the list of fans of this page.

We receive anonymous statistics from Facebook about th use and usage of the fan page. The following information is provided here, for example (so-called insight data):

  • followers: Number of people who follow our fan page - including growth and development over a defined time frame
  • reach: Number of people who see a specific post on our fan page and number of interactions on a post
  • ad performance: Number of people who saw an ad
  • demographics: Average age of visitors, gender, place of residence, language

We use these statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offering on Facebook and to better respond to the interests of our users. We cannot link the statistical data with our fans' profile data. You can use your Facebook settings to decide in which form targeted advertising is displayed to you.

We have entered into an agreement between joint controllers with Face-book regarding the processing of personal data in accordance with Arti-cle 26 GDPR.

As a result, facebook is the sole controller for the processing of Insight data. In this regard, Facebook is responsible for fulfilling information obligations in accordance with Articles 12 and 13 of the GDPR, for exercising the rights of those affected in accordance with Articles 15 to 22 of the GDPR, for data security and also for responsibility for reporting data protection violations (Articles 32 to 34 of the GDPR). Furthermore, Facebook remains the sole controller for the processing of other personal data.

We receive personal data via Facebook if you actively share it with us via personal message on Facebook or if you use a form to transmit the data to us and actively send the data to us by clicking on a button. We use the data you provide (e.g. first name, last name) to answer your request, if this is necessary.

10.3 YouTube (link via icon or video)

We have integrated components of the YouTube service as links on our website.

YouTube is an Internet video portal that enables video publishers to post video clips free of charge and allows other users to view, rate and com-ment on them free of charge. YouTube allows the publication of all types of videos, which is why complete films and television programs, as well as music videos, trailers or videos made by users can be accessed via the Internet portal.

YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA, rep-resented in the EU by Google Ireland Lrd., Gordon House, Barrow Street, Dublin 4, Ireland. The parent company Google LLC is certified in the Data Privacy Framework List. According to the decision of the EU Commission, an appropriate level of data protection can therefore be as-sumed.

As soon as you click on the link, data will be processed by YouTube. If you do not want such data processing, you can prevent the transmission by not clicking on the link. We have also embedded videos on our website, which are only activated when you actively click on the respective video and the data transfer to YouTube only starts from this point.

Whether and to what extent data is transmitted to YouTube after clicking on the link or a video and whether and to what extent data is also trans-mitted to the USA is not known to us and is not subject to our control.

Further information and the applicable data protection regulations of YouTube and Google can be found at policies.google.com/privacy.

10.4 Threads

We use the Threads information service and rely on the technical platform and services of Meta Platforms Inc., 1 Meta Way, Menlo park, CA 94025, USA.

We would like to point out that you use the Threads short message service and ist functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

The data collected about you when you use the service will be processed by Meta Platform, Inc. and may be transferred to countries outside the European Union. This includes, among other things, your IP address, the application used, information about the device you use (including device ID and application ID), information about websites accessed, your location and your mobile phone provider.

This data is assigned to your Threads account data or your Threads pro-file. We have no influence on the type and extent of data processed by Threads, the ype of processing and use or the transfer of this data to third parties. Information about which data is processed by Threads and for what purposes can be found in the supplementary data protection declaration of Threads (help.instagram.com/769983657850450/?helpref=uf_share) and the data protection policy of Meta Platforms Inc. (privacycenter.instagram.com/policy) as well as the possibility of viewing your own data on Meta Platform Inc. (https://privacycenter.instagram.com/guide/collection/.

The parent company Meta Platforms, Inc., 1 Meta Way, Menlo Park, Cali-fornia 94025-1453 (Facebook USA) is certified in the Data Privacy Framework List. According to the decision of the EU Commission, an adequate level of data protection must therefore be assumed.

You also have the option to request information using the Meta Platforms Inc. Privacy form or archive requests: www.facebook.com/help/contact/1650115808681298

As a provider oft he information service, we do not collect or process any data from your use of the short message service.

11. Analysis tools

Google Analytics (with anonymization function)

We have integrated the Google Analytics component (with anonymization function) on our website. Data processing takes place with your prior consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. However, the processing is lawful until the revocation.

The provider of this service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The data collected may also be transferred tot he USA and other third countries. The parent company Google LLC; 1600 Amphitheater Parkway; Mountain View, CA 94043; USA has certification in the Data Privacy Framework List. According to the decision of the EU Commission, an adequate level of data protection must therefore be assumed.

Google Analytics is a web analysis service. Web analysis ist he collection, collection and evaluation of data about the behavior of visitors to websites. A web analysis service collects, among other things, data about the website from which a data subject came to a website (so-called referrer), which sub-pages of the website were accessed or how often and for what duration a sub-page was viewed.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics sets a cookie in your system. Ervery time you acces one of the individual pages of this website on which a Google Analytics component has been integrated, your Internet Browser is automatically prompted by the respective Google Analytics component to transmit data to Google for the pur-pose of online analysis. The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by you, preferred language and browser. Each time you visit our website, this personal data, including the IP address you use, is transmitted to Google. This personal data is stored by Google.

During IP anonymization, your IP address is shortened by Google. The IP ad-dress transmitted by your browse as part of Google Analytics is not combined with other Google data.

You can prevent the setting of cookies at any time by making the appropriate settings in the Internet browser used and thus permanently object to the setting of cookies. The applicable data protection regulations can be accessed at https://policies.google.com/privacy.