Privacy Policy
Privacy Policy
1) Introduction and Contact Details of the Controller
1.1
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data means any data that can be used to identify you personally.
1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Hans Hofmann
Thermal Inspection
Elsa-Brandström-Str. 45
87527 Sonthofen
Germany
Phone: +49 8321 617 9413
Email: h.hofmann@thermal-inspection.de
The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1
When you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server, known as “server log files”.
When you access our website, we collect the following data, which is technically necessary in order to display the website to you:
-
The website accessed
-
Date and time of access
-
Amount of data transmitted in bytes
-
Source or referring page from which you accessed the website
-
Browser used
-
Operating system used
-
IP address used, where applicable in anonymised form
Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.
2.2
For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
3) Hosting and Content Delivery Networks
3.1 Amazon Web Services
For the hosting of our website and the display of website content, we use the system provided by:
Amazon Web Services, Inc.
410 Terry Avenue North
Seattle, WA 98109
USA
All data collected on our website is processed on the provider’s servers.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits the unauthorised disclosure of such data to third parties.
For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this ensures compliance with the European level of data protection.
3.2 Wix
For the hosting of our website and the display of website content, we use the system provided by:
Wix HQ
Nemal Tel Aviv St 40
6350671 Tel Aviv-Yafo
Israel
Data may also be transferred to:
Wix Inc.
500 Terry A. Francois Boulevard
San Francisco, California 94158
USA
All data collected on our website is processed on the provider’s servers.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits the unauthorised disclosure of such data to third parties.
Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this ensures compliance with the European level of data protection.
3.3 Google Cloud CDN
We use a content delivery network provided by:
Google Ireland Limited
Gordon House
4 Barrow Street
Dublin, D04 E5W5
Ireland
This service enables us to deliver large media files, such as graphics, website content or scripts, more quickly through a network of regionally distributed servers.
Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Data may also be transferred to Google LLC in the USA.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits the unauthorised disclosure of such data to third parties.
For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this ensures compliance with the European level of data protection.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies. Cookies are small text files that are stored on your device.
Some cookies are automatically deleted when you close your browser, known as “session cookies”. Other cookies remain on your device for a longer period and enable website settings to be saved, known as “persistent cookies”. In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
Where personal data is also processed by individual cookies used by us, processing is carried out:
-
In accordance with Article 6(1)(b) GDPR for the performance of a contract;
-
In accordance with Article 6(1)(a) GDPR where consent has been granted; or
-
In accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective website experience.
You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them. You can also exclude the acceptance of cookies in certain cases or generally.
Please note that the functionality of our website may be restricted if cookies are not accepted.
5) Contacting Us
When you contact us, for example by using the contact form or by email, personal data is collected.
The data collected when using a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry, contacting you and carrying out the related technical administration.
The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR.
Where your contact is aimed at concluding a contract, Article 6(1)(b) GDPR serves as an additional legal basis for processing.
Your data will be deleted once your enquiry has been conclusively processed. This is the case when the circumstances indicate that the matter concerned has been fully clarified and provided that no statutory retention obligations prevent deletion.
6) Use of Customer Data for Direct Advertising
Registration for Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers.
The only mandatory information required for sending the newsletter is your email address. Providing further information is voluntary and is used to address you personally.
We use the double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter.
We will then send you a confirmation email asking you to confirm, by clicking on the relevant link, that you wish to receive the newsletter in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR.
When you register for the newsletter, we store the IP address entered by your internet service provider, as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date.
The data collected by us when you register for the newsletter is used exclusively for advertising purposes by means of the newsletter.
You may unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a corresponding message to the controller named above.
After you have unsubscribed, your email address will be deleted from our newsletter mailing list without delay, unless you have expressly consented to the further use of your data or we reserve the right to make further use of the data where this is permitted by law and about which we inform you in this Privacy Policy.
7) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
4 Barrow Street
Dublin, D04 E5W5
Ireland
Google Analytics 4 enables us to analyse your use of our website.
By default, Google Analytics 4 places cookies when you visit the website. These cookies are stored as small text files on your device and collect certain information.
This information includes your IP address. However, Google shortens the final digits of the IP address in order to prevent it from being directly linked to a specific individual.
The information is transmitted to Google servers and processed there. This may also involve data transfers to Google LLC, based in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use.
The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
The data collected through the use of Google Analytics 4 is stored for a period of two months and subsequently deleted.
All processing described above, in particular the placement of cookies on the device used, takes place only where you have given us your express consent in accordance with Article 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the cookie consent tool provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits the unauthorised disclosure of such data to third parties.
Further legal information regarding Google Analytics 4 is available at:
https://business.safety.google/intl/en/privacy/
https://policies.google.com/privacy?hl=en
https://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the special “demographic features” function and may use it to generate statistics containing information about the age, gender and interests of website visitors.
This is carried out by analysing advertising and information from third-party providers. The information may be used to identify target groups for marketing activities.
However, the data collected cannot be attributed to a specific individual and is deleted after being stored for a period of two months.
Google Signals
Google Signals may be used on this website as an extension of Google Analytics 4 in order to generate cross-device reports.
Where you have activated personalised advertisements and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR, analyse your usage behaviour across different devices and create database models, including models relating to cross-device conversions.
We do not receive any personal data from Google, but only statistical information.
To stop cross-device analysis, you can deactivate the “Personalised advertising” function in your Google Account settings.
Please follow the instructions on the following page:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en
Further information about Google Signals is available at:
https://support.google.com/analytics/answer/7532985?hl=en
User IDs
The “User IDs” function may be used on this website as an extension of Google Analytics 4.
Where you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, have created an account on this website and log in to that account on different devices, your activities, including conversions, may be analysed across multiple devices.
For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this ensures compliance with the European level of data protection.
8) Retargeting, Remarketing and Conversion Tracking
Pinterest Retargeting Pixel
This website uses retargeting technology provided by:
Pinterest Europe Ltd.
Palmerston House
2nd Floor
Fenian Street
Dublin 2
Ireland
This technology makes it possible to target visitors to our website with personalised, interest-based advertising where those visitors have already shown an interest in our shop and our products.
Advertising is displayed on the basis of a cookie-based analysis of previous and current usage behaviour.
When retargeting technology is used, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and tailor advertising to the stored information.
These cookies are small text files that are stored on your computer or mobile device. This enables advertisements to be displayed that are highly likely to correspond to your product and information interests.
All processing described above, in particular the placement of cookies for reading information from the device used, is carried out only where you have given us your express consent in accordance with Article 6(1)(a) GDPR.
Without such consent, retargeting technology will not be used during your visit to the website.
You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the cookie consent tool provided on the website.
9) Tools and Other Services
Cookie Consent Tool
This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent.
The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface. Users can use checkboxes to grant consent for specific cookies and/or cookie-based applications.
The use of this tool ensures that all cookies and services requiring consent are loaded only where the respective user has granted the corresponding consent by selecting the relevant checkbox.
This ensures that such cookies are placed on the user’s device only where consent has been granted.
The tool places technically necessary cookies in order to store your cookie preferences. As a general rule, no personal user data is processed in this context.
Where, in individual cases, personal data such as an IP address is nevertheless processed for the purpose of storing, assigning or documenting cookie settings, such processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly cookie consent management and therefore in the legally compliant operation of our website.
Article 6(1)(c) GDPR also serves as a further legal basis for processing. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits the unauthorised disclosure of such data to third parties.
Further information about the operator and the configuration options of the cookie consent tool can be found directly in the relevant user interface on our website.
10) Rights of the Data Subject
10.1
The applicable data protection law grants you the following rights as a data subject in relation to the controller with regard to the processing of your personal data.
The respective legal basis governs the conditions under which these rights may be exercised:
-
Right of access in accordance with Article 15 GDPR
-
Right to rectification in accordance with Article 16 GDPR
-
Right to erasure in accordance with Article 17 GDPR
-
Right to restriction of processing in accordance with Article 18 GDPR
-
Right to be informed in accordance with Article 19 GDPR
-
Right to data portability in accordance with Article 20 GDPR
-
Right to withdraw consent in accordance with Article 7(3) GDPR
-
Right to lodge a complaint in accordance with Article 77 GDPR
10.2 Right to Object
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
WHERE YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED.
HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING WHERE WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR WHERE THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES.
YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
WHERE YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration for which personal data is stored is determined by the applicable legal basis, the purpose of processing and, where applicable, the relevant statutory retention period, such as retention periods under commercial and tax law.
Where personal data is processed on the basis of express consent in accordance with Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.
Where statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations on the basis of Article 6(1)(b) GDPR, such data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and we have no legitimate interest in continuing to store it.
Where personal data is processed on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object in accordance with Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object in accordance with Article 21(2) GDPR.
Unless otherwise stated in the information contained in this Privacy Policy regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.