Operator data

SenerTec Kraft-Wärme-Energiesysteme GmbH respects the fact that protecting your personal data is important to you. We have drafted this Privacy Statement to tell you what types of personal data we record about you via our website and how your personal data is managed and used.This Privacy Statement also applies to the dachsportal.senertec.de website. On the websites operated by other providers which you may access via our site, their privacy statements will apply.


1. CONTROLLER’S NAME AND ADDRESS
The controller as defined in the GDPR and other national data protection laws within the member states and other provisions of data protection legislation is:
SenerTec Kraft-Wärme-Energiesysteme GmbH
Carl-Zeiss-Straße 18
D-97424 Schweinfurt
Germany
Telephone +49 (0) 9721 651 0 | Fax +49 (0) 9721 651 272 | Email: info@senertec.com
Website: www.senertec.de

SenerTec Kraft-Wärme-Energiesysteme GmbH is part of the BDR Thermea Group (https://www.bdrthermeagroup.com)

The contact details for our Data Protection Officer can be found at the end of this statement.


2. GENERAL DATA PROCESSING INFORMATION
2.1. Extent of the processing of personal data
We process personal data in compliance with the stipulations of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection rules to be complied with, where such processing is necessary in order to provide a functioning website and our content and services.


2.2. Legal basis for the processing of personal data
• Where we obtain consent from the data subject for personal data processing operations, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) will be the legal basis.
• Where the processing of personal data is necessary in order to fulfil a contract for which the user is a contracting party, Art. 6(1)(b) of the GDPR will be the legal basis. This also applies to processing operations which are necessary in order to perform pre-contractual measures.
• Where the processing of personal data is necessary in order to fulfil a legal obligation incumbent upon our company, Art. 6(1)(c) of the GDPR will be the legal basis.
• Where the processing is necessary in order to safeguard a legitimate interest of our company or a third party, and where the data subject’s interests or fundamental rights or freedoms do not override the former interest, Art. 6(1)(f) of the GDPR will be the legal basis for the processing. In such cases, you have the right to object pursuant to Art. 21 of the GDPR.


2.3. Data erasure and storage period
Personal data will be erased as soon as the purpose of the storage ceases to apply. Data may also be stored when required by European or national legislators under union regulations, laws or other stipulations to which the controller is subject. Data will also be blocked or erased when a retention period required under the aforementioned standards expires, except where there is a need to store the data further for the conclusion or fulfilment of a contract.


3. PROVISION OF THE WEBSITE
3.1. Server log files
Upon every visit to our website, your computer system automatically sends data and information to our web server. This data is required so you can use our website with your computer system. This data includes:
• Type and version of the browser you are using,
• Type and version of the operating system you are using,
• The URL of the page you arrived at our site from,
• Date and time of your visit to our website,
• Name of the subpages you visited,
• The IP address of your computer system,
• The volume of data transferred in each case.

This data will be saved by us for the duration of the session. The temporary storage of your IP address by our server is necessary to enable delivery of the website to your computer system. The legal basis for this temporary storage of the data listed above is Art. 6(1)(f) of the GDPR.

With the exception of the IP addresses, the data will be stored in the server log files for our system. This data will not be stored together with other personal data about the user.Recording data in order to provide the website is absolutely necessary for operation of the site. The user therefore has no ability to object.


3.2. Use of Cookies
Our website uses cookies. Cookies are text files which are saved in the internet browser or by the internet browser to your computer system. When a user visits a website, a cookie may be stored on the user’s computer system. Cookies are used to make our site more user friendly, more effective and more secure. Some features of our website may not work without the use of cookies.
We use so-called “functional cookies” which make surfing and navigating our website more convenient for you for example. They can be used to save website settings, the user’s login status or language preferences for instance. These cookies will either be deleted again immediately after you close your browser or they will be stored on your computer system for a specified period of time. Once this period expires, they will be deleted automatically. The storage period can vary depending on the cookie
The legal basis for the processing of personal data using cookies is Art. 6(1)(f) of the GDPR. Our legitimate interest is clear from the

data collection purposes set out above. Under no circumstances do we use the data collected to draw conclusions about you.
If you do not agree to the use of cookies, you can prevent cookies from being stored, or limit the same, with the appropriate settings in your internet browser. Previously saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our site in general, it may not be possible to make full use of all of the website's functions.


3.3. Internal area
Apart from the login/registration page, the entire website is access protected. Only registered system operators have access.


4. DATA SUBJECTS’ RIGHTS
When your personal data is processed, you become the data subject as defined in the GDPR and have the following rights in respect of the controller.
In accordance with Art. 15 of the GDPR you have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, if so, you have the right to access this personal data and obtain a copy of the personal data being processed.
In accordance with Art. 16 of the GDPR, you are entitled to demand the immediate rectification of your personal data, or to have the same completed, by us where the personal data processed about you is incorrect or incomplete.
In accordance with Art. 17 of the GDPR, you have the right to ask us to immediately erase the personal data held about you.
In accordance with Art. 18 of the GDPR you have the right to demand restriction of the processing of the personal data about you.
If you have asserted your right in respect of us to rectify, erase or restrict the processing of your data, we will notify all recipients to whom the personal data concerning you has been disclosed about said rectification or erasure of the data or the restriction on processing, except where this is not possible or entails a disproportionate amount of effort. In accordance with Art. 19 of the GDPR, you have the right to ask us to inform you of any such recipients.
In accordance with Art. 20 of the GDPR you have the right to obtain the personal data about you that you provided us with in a structured, commonly used and machine-readable format and to transmit this data to another controller. You also have the right
to have the personal data about you sent by us to another controller directly where this is technically feasible.
In accordance with Art. 21 of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of the personal data about you which is based on Art. 6(1)(f) of the GDPR. This also applies to profiling based on this provision.
Where the personal data about you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data about you for the purposes of such direct marketing. This also applies to profiling where it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
If you wish to exercise one or more of your rights set out above, please contact our Data Protection Officer.
In accordance with Art. 7(3) of the GDPR, you are entitled to revoke the declaration of consent granted by you under data protection laws at any time. Revoking consent will not affect the legality of any processing performed prior to the revocation on the basis of the consent.
In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state where you reside or work, or where the alleged infringement took place, if you believe that the processing of your personal data is in breach of the GDPR.


5. DATA PROTECTION OFFICER CONTACT DETAILS
SenerTec Kraft-Wärme-Energiesysteme GmbH
Data Protection Officer
Carl-Zeiss-Straße 18

D-97424 Schweinfurt
Germany
Email: datenschutz@senertec.com
Website: www.senertec.de


6. CURRENCY OF AND AMENDMENTS TO THIS PRIVACY STATEMENT
This privacy statement is currently valid and was last updated in May 2018.