The controller for the processing of personal data is Vaillant Group International GmbH, Berghauser Straße 40, 42859 Remscheid, Germany ("we", "us").
You can find more information and our contact details in our legal notice
We are a company of the Vaillant Group. The Vaillant Group means Vaillant GmbH (Vaillant GmbH, Berghauser Str. 40, 42859 Remscheid, Germany) and the companies affiliated with Vaillant GmbH. The Vaillant Group includes the brands Vaillant, Saunier Duval, awb, Bulex, DemirDöküm, Glow worm, Hermann Saunier Duval and protherm. You can find more information about Vaillant Group here
We generally process your personal data on the basis of your consent, for the initiation or performance of a contract or to the extent necessary for the purposes of the legitimate interests pursued by us or by a third party (Art. 6 (1) (a), (b) and (f) DSGVO). In particular, we process personal data in order to answer your enquiries, to offer you assistance in using our products and services, to prepare or conclude repair, maintenance and other service contracts, to provide you with requested information or services via our website or other means, to adapt our internet offers, products and services to your interests or to improve them and to support our marketing. Further details on this can be found in the following notes.
Use of the website
You can use our website without identifying yourself or registering. When you use our website, you transmit data to us via your browser that is technically necessary to establish the connection and use our website. This includes, in particular, the date and time of the connection, your IP address, requested web pages and downloaded files, data on the transmission and use of the website, information on the browser and browser settings, operating system and device and the internet address from which you accessed our site. The data is stored and processed for technical reasons. We use this information to ensure the security of our web pages, to measure the effectiveness of internet advertising, to compile statistics and to measure the activities on the website with the aim of improving our offer. We generally do not store this data for longer than thirty days.
Download or order information material
As a rule, you can download information and brochures on products and services directly from the website without providing any personal data. In certain cases, we offer the possibility of receiving selected information material by email or by post. For this purpose, you provide us with details of the information you require and your name, title, email address and postal address. In individual cases, we may request further information that is necessary for the respective service.
Contact for individual advice
We offer the possibility to request an individual consultation. For this purpose, you provide us with details of the information you require and your name, title, email address and your place of residence or full address. In individual cases, further information may be requested, in particular information about your heating system or your needs. With your consent, we will forward your enquiry to a suitable local sales partner. We may also pass on your details to Vaillant Group companies where this is necessary to respond to your enquiry or provide the service. If you have provided us with your mobile number, we will also communicate with you via SMS to process your enquiry.
Data use for postal advertising and your right to object
To the extent permitted by law, we reserve the right to use your name and postal address – insofar as we have received this information from you within the framework of the contractual relationship – for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. You can object to the use of your data for these purposes at any time by sending us a message, in particular by email or post.
Transfer of personal data within the Vaillant Group and to third parties
Personal data is processed by us as the controller and, for the purpose of providing services, is passed on to processors within the Vaillant Group and external processors who process the data exclusively on our behalf and in accordance with our instructions. If we use third-party providers who also use the data for their own purposes, we have described this in particular in connection with the information on cookies.
With your consent, we also pass on personal data to specialist tradesmen or other third parties if this is necessary for the provision of certain services.
The transfer of personal data to domestic and foreign courts, authorities or other governmental institutions shall take place exclusively within the framework of the statutory provisions.
Data processing by third parties and processing outside the EU or EEA
Personal data is processed by us as the data controller and, for the purpose of providing services, is passed on to data processors within the Vaillant Group and external data processors who process the data exclusively on our behalf and in accordance with our instructions.
In some circumstances, data processing is carried out on our behalf by a processor outside the EU or EEA. In such a case, unless there is an adequacy decision by the Commission in relation to the recipient country, we will agree with an appropriate service provider on adequate safeguards for the protection of personal data, in particular by agreeing the applicable EU standard contractual clauses.
Particularly in connection with the use of analysis tools, tracking and targeting technologies from third-party providers or the integration of social media offers, it is possible that the third-party providers also process data outside the EU or the EEA. In particular, third-party providers may process personal data in the USA. The US currently does not provide adequate protection under the GDPR in particular because government authorities in the US have the right to access personal data held by companies in certain circumstances without adequate remedies available to data subjects.
We apply technical and organisational security measures to protect the personal data we manage against destruction, loss, alteration or unauthorised disclosure of, or access to, personal data. All personal data provided by you when using personalised services will be transmitted to us in encrypted form. We use a state-of-the-art encryption process for this purpose. Your data is password protected in the systems in which it is stored. The persons who have access to it are prohibited by strict security regulations from disclosing your data to third parties. Our security measures are continuously improved.
You have the right to request access to and rectification or erasure of personal data concerning you or restriction of processing, or to object to processing as well as the right to data portability, in each case in accordance with the statutory provisions.
Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You can also contact our data protection officer to assert your above rights.
You have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions if you are of the opinion that the processing of personal data concerning you infringes the statutory provisions. For this purpose, you may in particular contact the authority in the EU Member State of your habitual residence or of the place of the alleged infringement.
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for us. You can find their current contact details at www.ldi.nrw.de.
Contact details of the data protection officer
If you have any questions or suggestions on the subject of data protection, please feel free to send them by email or letter to our data protection officer, who can be reached at the following contact details:
By email: firstname.lastname@example.org
By post: Vaillant GmbH, Data Protection Officer, Berghauser Str. 40, D-42859 Remscheid, Germany.
Subject to change
Status: October 2022