Legal Notices and Privacy Policy
Data Protection Principles
1. Who is responsible for data processing and who can you contact?
The responsible parties are:
Email: info@stiebel.de
Email: info@stiebel.de
For questions regarding data protection, you can reach us at:
2. What sources and data are used?
We process personal data that we receive in the course of your use of the website, the use of our portals, the receipt of newsletters, and within the scope of our business relationships from our customers, business partners, and website visitors.
3. For what purposes do we process your data and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable legal regulations.
You can use almost our entire internet offering without us requiring personal data from you. However, the following offers and services available on our pages require the provision of personal data for their use.
3.1 General communication, use of portals, and newsletters – for the fulfilment of contractual obligations and based on your consent:
- General communication, in particular via the contact form,
- Processing of other inquiries,
- Use of our portals,
Newsletters
The processing of your personal data in this context is generally a prerequisite for us to conclude and perform a contract with you or to enter into a pre-contractual relationship with you. While you are not legally obligated to provide your personal data, without this data we cannot carry out the respective contract with you. The legal basis for this processing is Art. 6(1)(b) GDPR. This provision permits the processing of personal data when the processing is necessary for the performance of a contract to which the data subject is party, or for the implementation of pre-contractual measures.
Insofar as you have given us consent to process personal data for specific purposes (e.g., newsletter distribution), this consent constitutes the legal basis for data processing (Art. 6(1)(a) GDPR). Consent given may be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into effect, i.e., before 25 May 2018. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to its revocation.
3.2 Analysis of user behaviour and direct marketing – for the protection of legitimate interests:
- Review and optimisation of procedures for needs analysis for the purpose of direct customer outreach,
- Advertising or market and opinion research, insofar as you have not objected to the use of your data,
- Measures for business management and the further development of services and products.
The legal basis for the processing of your personal data in this context is Art. 6(1)(f) GDPR, unless we have obtained consent in individual cases. Accordingly, the processing of personal data is permissible if it is necessary for the protection of legitimate interests, provided that the interests or certain rights of the data subject in the non-processing of personal data do not outweigh these. We have a legitimate interest in aligning and optimising our offerings based on customer behaviour. We believe that these interests outweigh others, as we, as an internationally operating company, must monitor and optimise our offerings and products in order to meet the requirements placed upon us. Aligning with our customers allows us to offer and optimise services and products in accordance with the needs and interests of our customers. We protect the data concerned such that we do not see any overriding disadvantages for you.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website (including your IP address) is transmitted to and stored on a Google server in the USA. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website and internet usage. Google may also transfer this information to third parties where required to do so by law or where third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data.
You can prevent the installation of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all features of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes described above. You may object to the collection and storage of data at any time with effect for the future.
3.3 Risk management and compliance – for the protection of legitimate interests:
- Assertion of legal claims and defence in legal disputes,
- Prevention and investigation of criminal offences,
- Ensuring IT security and IT operations,
- Risk management within the corporate group.
The legal basis for the processing of your personal data in this context is Art. 6(1)(f) GDPR. Our legitimate interest consists of compliance with applicable legal provisions, maintaining the security of our IT systems, and, in the event of violations of legal requirements or breaches of security regulations, responding appropriately to such circumstances, for example by asserting legal claims. We believe that these interests outweigh others, as we as a company are subject to a considerable number of regulatory requirements and we bear the responsibility towards our customers to ensure that corresponding requirements and security regulations are observed. We protect the data concerned such that we do not see any overriding disadvantages for you.
3.4 Cookies
On this website, data is collected and further processed in anonymised form for the continuous optimisation and analysis of our web offering. Under no circumstances will the data be used to personally identify a visitor (insofar as this would even be technically possible) or be associated with data about the bearer of a pseudonym.
3.5 Use of Web Fonts
We use external fonts on our website, known as Google Web Fonts. Google Fonts is a service provided by Google Inc. (“Google”). These web fonts are integrated through a server call, usually to a Google server in the USA. This transmits to the server which of our web pages you have visited. The IP address of the browser on the visitor’s device is also stored by Google. Further information can be found in Google’s privacy notices, which you can access here:
4. Who receives your data?
Within the corporate group, those departments that require access to your data to fulfil our contractual and legal obligations will receive it. Service providers and agents engaged by us may also receive data for these purposes, provided they comply with data protection requirements. With regard to the transfer of data, we have committed to maintaining confidentiality regarding all customer-related facts and assessments of which we become aware.
We only pass on information about you to third parties if legal provisions require this, you have given your consent, or we are otherwise authorised to do so. Under these conditions, recipients of personal data may include:
- Public bodies and commissions, federal and state ministries, tax authorities and offices where a legal or regulatory obligation exists.
- Service providers that process data on our behalf (e.g., data centres).
Further data recipients may be those bodies for which you have given us your consent to the transfer of data or for which you have released us from the obligation to maintain confidentiality regarding your data pursuant to an agreement or consent.
5. How long is your data stored?
The duration for which personal data is stored depends on the respective processing purposes. It is not possible to individually list the various retention periods in a reasonable format at this point. The criteria for determining the respective retention periods in a specific individual case are as follows:
- Insofar as we process data solely for the purposes of performing a contractual relationship, we store the data for the duration of the contractual relationship.
- Insofar as we process data in connection with anticipated legal disputes, we store the data until the final conclusion of the court proceedings or the expiry of the limitation period for the claims in question in accordance with the relevant civil law provisions. The standard limitation period is three years.
- In addition, we are subject to various retention and documentation obligations arising from, among others, the German Commercial Code (HGB), the German Fiscal Code (AO), and the German Anti-Money Laundering Act (GwG). The retention or documentation periods specified therein range from two to ten years.
- When using the online version of the electronic form collection, the entered data is only retained on our server in the main memory for the duration of use of the applications after the beginning of the session for a transaction duration of currently one hour. Data is neither temporarily nor permanently stored.
6. What data protection rights do you have?
Subject to the relevant legal requirements, you are entitled to the following rights under Articles 15 to 22 GDPR:
- Right of access under Art. 15 GDPR, i.e., the right to obtain confirmation from us as to whether personal data concerning you is being processed and, if so, to receive information about this data and further details;
- Right to rectification under Art. 16 GDPR, insofar as personal data concerning you is inaccurate;
- Right to erasure under Art. 17 GDPR, for example when personal data is no longer necessary for the purposes for which it was processed;
- Right to restriction of processing under Art. 18 GDPR.
The right of access and the right to erasure are subject to the restrictions under Sections 34 and 35 BDSG.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Right to withdraw your consent
You may freely withdraw consent given to data processing at any time. However, this does not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal. Insofar as you withdraw your consent or effectively object to further processing on the basis of your consent, we will no longer process the data for these purposes.
Information about your right to object
Insofar as we process personal data for the purpose of direct marketing, you may object to the processing at any time and without giving reasons.
The objection may be made in any form. Please address your objection to:
Stiebel-Getriebebau GmbH & Co.KG, Industriestraße 12, D-51545 Waldbröl
or to
Stiebel Ing. Service GmbH & Co.KG, Friedrich-Engels-Straße 22, D-51545 Waldbröl
info@stiebel.de
Case-specific right to object under Art. 21 of the General Data Protection Regulation (GDPR)
Right to object under Section 15 of the German Telemedia Act