Website data protection statement

and at the same time information for data subjects pursuant to Article 13 and Article 14 of the EU General Data Protection Regulation

 

General Information

Information about the controller

Company:                                                            Ness Wärmetechnik GmbH

Legal representative:                                        Dr. Andreas J. Ness, Dietmar B. Ness

Address:                                                              Remsstraße 24, D-73630 Remshalden

Contact details for data protection officer:   datenschutz@ness.de

 

 

General data processing information

Affected data:

Personal data is only collected if you communicate it to us yourself. Apart from that, no personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permission is only possible on the basis of your express consent.

Processing purpose:
Contract execution.

Categories of recipients:
Public authorities in the event of priority legislation.
External service providers or other contractors.
Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
As part of contractual execution, processors could also be used outside the European Union.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Specific information about the website

Use of a newsletter

When registering for our newsletter, you provide us with your email address and, on an optional basis, other information. We use these data solely for the purpose of sending you the newsletter. We retain the data that you disclose in your newsletter application until you cancel your subscription to our newsletter. You can unsubscribe at any time via the link in the newsletter intended for this purpose, or by sending us the appropriate notification. By unsubscribing, you revoke the use of your email address.

We also use your email address, which we receive in connection with the sale of a product or service, exclusively for direct advertising in the form of our newsletter for products or services that we sell that are similar to the ones you ordered, provided that you have not objected to having your email used in this way. You may object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates. Your objection (and thus the cancellation of our newsletter) can be communicated by sending the appropriate message to our email address (see the Legal Notice).

 

Web analytics using Matomo (formerly PIWIK)

Scope and processing of personal data

Our website integrates the software tool Matomo (formerly PIWIK) to analyse the visitors‘ behaviour. The software sets a cookie (a small piece of information) on the user’s device. Upon visit of individual pages of our website, the following data will be stored:

  • Two bytes of the IP address of the user’s system
  • The accessed page
  • The website from which the user has been redirected to the accessed page (referrer)
  • The subpages that are accessed from the previous page
  • The amount of time the user spends on the page
  • The frequency of access of our website

This information is processed on our servers exclusively. The data will not be shared with a third party.

The software is configured to shorten stored IP addresses (e.g. 100.60.xxx.xxx). In this way the IP addresses cannot be associated to individual devices anymore.

Legal basis of the processing of personal data

The legal basis of the processing of the users’ personal data is provided in Art. 6 (1 f) GDPR.

Purpose of data processing

The statistical analysis of the usage of our website enables us to improve its content and design.

Time span of storage

The stored data will be deleted after 180 days.

Procedure of objection and removal

Below, we offer a procedure to deactivate the analysis of your visit on this website. The procedure will set a cookie in your browser to instruct Matomo not to process your visit.

 

Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

 

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to determine whether data entered on our websites (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behaviour of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

The data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. It is in the website operators legitimate interest, to protect the operator’s web content against misuse by automated industrial espionage systems and against SPAM.

For more information about Google reCAPTCHA and to review the Data Privacy Declaration of Google, please follow these links: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html.

 

Use of our own “cookies”

This website uses its own “cookies” to increase user-friendliness (“cookies” are text files sent by the web server to the user’s browser and stored there for later retrieval). Our own “cookies” never store any personal information. You can prevent the use of “cookies” in general if you set your browser to disallow the storage of “cookies.”

 

Social Media:

The Buttons to Social Media platforms are simple links and not plugins from the social media platforms. Therefore no data is sent to the platforms.

 

Information about other data processing procedures

Specific information about the application process

Affected data:
Application information

Processing Purpose:
Implementation of application process

Categories of recipients:
Public authorities in the event of priority legislation.

Third-country transfers:
-No-.

Duration of data storage:
Application data will generally be deleted within four months after communication of the decision, unless consent has been given for a longer period of data storage.

 

Specific information for the processing of customer data/prospective parties’ data

Affected data:   
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.

Processing Purpose:
Contract execution, et al Offers, orders, sale and invoicing, quality assurance.

Categories of recipients:
Public authorities in the event of priority legislation.

External service providers or other contractors, et al for data processing and hosting, for shipping, transport and logistics, service providers for the printing and dispatch of information and call centers.

Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest, et al for the credit check on purchase on account, for the electronic dispatch of information, for quality assurance purposes.

Third-country transfers:
-No-.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Specific information on the processing of employee data

Affected data: 
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.

Processing Purpose:
Contract execution within the employment relationship.

.

Categories of recipients:
Public authorities in the event of priority legislation, et al Tax Office, Social Insurance Institution, Professional Association, Insurances.

External service providers or other contractors, et al for data processing and hosting, for payroll, for travel expenses, for insurance benefits, for vehicle use.

Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest, et al for order acquisition, insurance benefits.

Third-country transfers:
– No -.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Specific information for the processing of supplier data

Affected data:
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.

Processing Purpose:
Contract execution, et al Inquiries, Purchasing, Quality Assurance.

Categories of recipients:
Public authorities in the event of priority legislation, et al Tax Office, Customs.

External service providers or other contractors, et al for data processing and hosting, accounting, payment processing, shipping, transport and logistics.

Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.

Third-country transfers:
-No-.

Duration of data storage:
The duration of data storage depends on the statutory storage requirements and is usually 10 years.

 

Further information and contacts

In addition, you may invoke your rights to information, correction or deletion at any time, to restrict processing, to object to processing, and to data portability. Here you will find the option to contact us by email to datenschutz@ness.de or letter. You also have the right to contact the data protection supervisory authority for complaints.