Privacy policy

We appreciate your visit to our website, wasser-geraete.de, and your interest in our company.

The protection of your personal data—such as your date of birth, name, phone number, address, etc.—is very important to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

Person in Charge

The controller, as defined in Article 4(7) of the GDPR, is the entity that, alone or jointly with others, determines the purposes and means of the processing of personal data.

With regard to our website, the controller is:

Wasser – Geräte GmbH
Max-Planck-Str. 20
78549 Spaichingen
Deutschland
E-Mail: info@wasser-geraete.de
Tel.: +49 7424 9599-0
Fax: +49 7424 9599-20

 

Contact Information for the Data Protection Officer

We have appointed a Data Protection Officer in accordance with Article 37 of the GDPR. You can contact our Data Protection Officer using the following contact information:

Julia Glöckler
Max-Planck-Str. 20
78549 Spaichingen
Deutschland
E-Mail: datenschutz@wasser-geraete.de
Tel.: +49 7424/9599-19
Website: http://www.wasser-geraete.de/

 

Website Hosting and Log File Generation

Every time our website is accessed, our system automatically collects data and information about the device used to access it (e.g., computer, cell phone, tablet, etc.).

What personal data is collected, and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the device used to access the site;
(3) The hostname of the accessing computer;
(4) The IP address of the device used to access the site;
(5) The date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Indication of whether the request was successful;
(9) Amount of data transferred

This data is stored in our system’s log files. This data is not stored together with the personal data of any specific user, so individual site visitors cannot be identified.

Legal Basis for the Processing of Personal Data

Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of Data Processing

The temporary (automated) storage of data is necessary for the website visit to proceed and to enable the website to be displayed. Personal data is also stored and processed to ensure that our website remains compatible for as many visitors as possible, as well as to combat misuse and resolve technical issues. To this end, it is necessary to log the technical data of the accessing computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions in our website’s functionality. In addition, we use this data to optimize the website and to generally ensure the security of our IT systems.

Duration of Storage

The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the website’s compatibility for all visitors, but no later than 3 months after the website is accessed.

Right to Object and Right to Erasure

You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and request the erasure of your data in accordance with Article 17 of the GDPR. You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.

Automated Credit Assessment / Scoring

If you wish to enter into a contract with us, we reserve the right to process your personal data exclusively by automated means in order to assess your creditworthiness. We are also authorized to make such an automated decision pursuant to Article 22(2)(a) of the GDPR. Whether or not the contract can be concluded depends on the result of the automated credit assessment. During a credit check, statistical probabilities of default are calculated. The credit report may include probability values (score values) calculated using scientifically recognized mathematical and statistical methods. In this process, a wide range of factors—such as income, address information, occupation, marital status, and past payment history—are used to assess the customer’s future risk of default. The result is expressed as a payment value (known as a “score”). The information obtained in this way forms the basis for our decision regarding the establishment, execution, or termination of a contractual relationship. If you believe that you have been wrongfully excluded from entering into a contract as a result of the credit check, please feel free to explain your position to us via email. We will then review the automated decision in accordance with Article 22(3) of the GDPR on a case-by-case basis. In order to conduct the credit check, we are permitted to store and process your personal data in accordance with Article 6(1)(b) of the GDPR.

Based on the pending contract, we will transfer your data to the following provider(s) in the cases listed below:

• Creditreform Reutlingen Degner KG:

  Our company regularly checks your creditworthiness when entering into contracts and, in certain cases where there is a legitimate interest, also for existing customers. To this end, we collaborate with Creditreform Reutlingen Degner KG, Auwiesenstraße 30, 72770 Reutlingen, Germany (http://www.creditreform-reutlingen.de), from which we receive the necessary data. On behalf of Creditreform Reutlingen Degner KG, we are providing you with the following information in advance, in accordance with Article 14 of the EU GDPR:

  Creditreform Reutlingen Degner KG is a consumer credit reporting agency. It operates a database in which creditworthiness information about private individuals is stored.

  On this basis, Creditreform Reutlingen Degner KG provides credit reports to its clients. Clients include, for example, credit institutions, leasing companies, insurance companies, telecommunications companies, debt collection agencies, mail-order, wholesale, and retail companies, as well as other businesses that supply goods or provide services. In accordance with legal provisions, some of the data contained in the credit information database is also used to supply other corporate databases, including for address-based marketing purposes.

  The database of Creditreform Reutlingen Degner KG stores, in particular, information regarding the name, address, date of birth, email address (if applicable), payment history, and ownership interests of individuals. The purpose of processing the stored data is to provide credit reports on the creditworthiness of the person in question. The legal basis for the processing is Article 6(1)(f) of the EU GDPR. According to this provision, information regarding this data may only be provided if a customer credibly demonstrates a legitimate interest in obtaining this information. If data is transferred to countries outside the EU, this is done on the basis of the so-called “Standard Contractual Clauses,” which you can find at the following link:

  http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE

  view or have them sent to you from there.

  The data will be stored for as long as access to it is necessary to fulfill the purpose of storage. Access is generally necessary for an initial storage period of three years. After this period expires, a review is conducted to determine whether continued storage is necessary; if not, the data is deleted to the exact day. In the event that a matter is resolved, the data is deleted to the exact day three years after resolution. Entries in the debtor registry are deleted to the exact day in accordance with Section 882e of the German Code of Civil Procedure (ZPO) three years after the date of the order to enter the information.

  Legitimate interests within the meaning of Article 6(1)(f) of the EU GDPR may include: credit decisions, business development, ownership interests, claims, credit checks, insurance contracts, and enforcement information. You have the right to request information from Creditreform Reutlingen Degner KG regarding the data stored there about you. If the data stored about you is incorrect, you have the right to have it corrected or deleted. If it cannot be immediately determined whether the data is incorrect or correct, you have the right to have the relevant data blocked until the matter is clarified. If your data is incomplete, you may request that it be completed.

  If you have given your consent to the processing of the data stored by Creditreform Reutlingen Degner KG, you have the right to revoke this consent at any time. Revocation does not affect the lawfulness of the processing of your data that took place on the basis of your consent up until the time of revocation.

  If you have any objections, requests, or complaints regarding data protection, you may contact the Data Protection Officer at Creditreform Reutlingen Degner KG at any time. The Data Protection Officer will assist you promptly and confidentially with all data protection matters. You may also file a complaint regarding the processing of your data by Creditreform Reutlingen Degner KG with the State Data Protection Commissioner responsible for your federal state.

  The data that Creditreform Reutlingen Degner KG has stored about you comes from publicly available sources, from debt collection agencies, and from their clients.

  To assess your creditworthiness, Creditreform Reutlingen Degner KG calculates a score based on your data. This score incorporates data on age and gender, address information, and, in some cases, payment history. These data points are weighted differently in the score calculation. Creditreform Reutlingen Degner KG’s clients use these scores as a tool to assist them in making their own credit decisions.

  Right to Object:

  The processing of data stored by Creditreform Reutlingen Degner KG is carried out for compelling legitimate reasons related to creditor and credit protection, which generally outweigh your interests, rights, and freedoms, or serves to assert, exercise, or defend legal claims. You may object to the processing of your data only if there are reasons arising from your specific situation that must be substantiated. If such specific reasons are demonstrably present, the data will no longer be processed. If you object to the processing of your data for advertising and marketing purposes, the data will no longer be processed for these purposes.

  The controller within the meaning of Article 4(7) of the EU GDPR is Creditreform Reutlingen Degner KG, Auwiesenstraße 30, 72770 Reutlingen, Germany (http://www.creditreform-reutlingen.de). You can contact Creditreform Reutlingen Degner KG regarding any questions using the following contact information: Tel.: +49 (0) 7121 9509-0, Fax: +49 (0) 7121 9509-30, Email: info@reutlingen.creditreform.de

  You can contact the responsible data protection officer using the following contact information: Creditreform Reutlingen Degner KG, Data Protection Officer, Auwiesenstraße 30, 72770 Reutlingen, Germany, http://www.creditreform-reutlingen.de.

  Integration of External Web Services and Processing of Data Outside the EU

  On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. In some cases, this may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. Doing so may result in limited functionality on the websites you visit.

  We use the following external web services:

• Google

  On our website, we use the Google service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States, email: support-de@google.com, website: http://www.google.com/. Data processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.

  We use Google to load additional Google services on our website.

  You may withdraw your consent at any time. You can find more detailed information on how to withdraw your consent either in the consent form itself or at the end of this Privacy Policy.

  For more information on how the transferred data is handled, please refer to the provider’s Privacy Policy at https://policies.google.com/privacy.

• Google Fonts

  On our website, we use the Google Fonts service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, email: support-de@google.com, website: http://www.google.com/. Data processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection required by the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.

  The legal basis for the transfer of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  Fonts are loaded onto our site via the Google Fonts service so that we can display the site to you in a more visually appealing format.

  You may withdraw your consent at any time. For more information on withdrawing your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider’s privacy policy at https://policies.google.com/privacy.

• Google Maps

  • What personal data is collected, and to what extent is it processed?
    On our website, we use the map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as well as its parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, email: support-de@google.com, website: http://www.google.com/. (hereinafter: Google Maps). Google Maps is integrated into the website via the Google API to visualize location data and display it in the form of a map. Processing the IP address by Google Maps is technically necessary for the map to be displayed. With regard to other web services integrated via Google APIs, the provisions in the respective section of this Privacy Policy regarding Google APIs apply. It cannot be ruled out that personal data may also be transferred by Google and its affiliated companies to countries outside the EU, in particular to the United States. In those countries, government authorities may be able to access the data even without a court order.
  • Legal Basis for the Processing of Personal Data
    The legal basis for the transfer of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.
  • Purpose of Data Processing
    On our behalf, Google will use the information collected via Google Maps to display the map to you. Google Maps allows you to find us more quickly and accurately than a simple, non-interactive map would. The relevant data is also used to identify website visitors who view our Google Maps map—potentially using the Google Advertising ID—and to link them to physical visits and accesses of other contact information listed on Google. This allows Google to estimate expected visitor traffic.
  • Duration of Storage
    Google will store the data relevant to the operation of Google Maps for as long as necessary to fulfill the booked web service. Data is collected and stored in an anonymized form. If the data can be linked to specific individuals, it will be deleted immediately, provided it is not subject to any statutory retention requirements. In any case, the data will be deleted once the retention period has expired.

  • Right to Object and Right to Erasure
    You can prevent the collection and transmission of personal data to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser, or enabling the “Do Not Track” setting in your browser. Google’s security and privacy policies can be found at https://policies.google.com/privacy.

  • Joint Processing
    We have entered into a joint processing agreement with Google regarding Google Maps. You can find the terms of the agreement at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

• Google APIS

  On our website, we use the Google APIs service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, email: support-de@google.com, website: http://www.google.com/. Data processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.

  We use Google APIs to load additional Google services on the website.

  For the processing itself, the service or we collect the following data: IP address

  You may withdraw your consent at any time. You can find more detailed information on withdrawing your consent either in the consent form itself or at the end of this Privacy Policy.

  Further information on how the transferred data is handled can be found in the provider’s Privacy Policy at https://policies.google.com/privacy.

• Gstatic

  On our website, we use the Gstatic service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States of America, email: support-de@google.com, website: http://www.google.com/. Data processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary under the GDPR cannot be guaranteed during the transfer, as it cannot be ruled out that, for example, government authorities in the third country may access the collected data.

  The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you provided on our website.

  Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and preload necessary catalog files.

  You may withdraw your consent at any time. For more information on withdrawing your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For further information on how the transferred data is handled, please see the provider’s Privacy Policy at https://policies.google.com/privacy.

• website-check.de

  We use the “Website-Check Siegel” service on our site, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: http://www.website-check.de/. The transmission and processing of personal data take place exclusively on servers located in the European Union.

  The legal basis for the transfer of personal data is our legitimate interest in the processing, in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  The Website-Check GmbH script involves the technical integration of the Website-Check seal. With this seal, we wish to demonstrate that we take data protection very seriously. Due to the integration of the Website-Check seal, non-personal data is transferred to Website-Check GmbH, as the issuer of the seal, so that they can technically deliver it.

  With regard to this processing, you have the right to object as set forth in Article 21. Further information can be found at the end of this privacy policy.

  Additional information on how the transferred data is handled can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.

  Information on the Use of Cookies

Scope of the Processing of Personal Data

We integrate and use cookies on various pages to enable certain features of our website and to integrate external web services. These so-called “cookies” are small text files that your browser can store on your device. These text files contain a unique string of characters that uniquely identifies your browser when you return to our website. The process of storing a cookie file is also referred to as “setting a cookie.” Cookies can be set both by the website itself and by external web services.

Legal Basis for the Processing of Personal Data

Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) or Art. 9(2)(a) GDPR (consent).

The applicable legal basis is specified in the cookie table provided later in this section.

In general, for cookies collected on the basis of a legitimate interest, our legitimate interest consists of ensuring the functionality of our website and the services integrated into it (technically necessary cookies). In addition, cookies may enhance user-friendliness and enable a more personalized experience. In this regard, we have balanced your interests against our own.

We can only identify, analyze, and track individual website visitors using cookie technology if the website visitor has consented to the use of cookies in accordance with Article 6(1)(a) of the GDPR.

Purpose of Data Processing

Cookies are set by our website or external web services to maintain the full functionality of our website, improve user-friendliness, or to serve the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, such as unique or random IDs, so that we can offer more personalized services. Details are listed in the table below.

Storage Duration

Die nachfolgend aufgelisteten Cookies werden in Ihrem Browser gespeichert, bis sie gelöscht werden oder, im Falle eines Session-Cookies, bis die Sitzung abgelaufen ist. Details sind in der folgenden Tabelle aufgeführt:

Cookie Name	Server	Provider	Purpose	Legal Basis	Retention period	Type
PHPSESSID	wasser-geraete.de	Website operators	A cookie required by applications based on the PHP language. The cookie is stored for the duration of the session. It is needed to save certain website settings during the visit (session).	Consent	Meeting	Configuration
cookieconsent	wasser-geraete.de	Cookie Consent (Silktide Ltd, Brunel Parkway Pride Park, DE24 8HR Derby, Vereinigtes Königreich)	This cookie records whether the cookie banner or cookie notice was displayed correctly to you and what choice you made regarding the use of cookies on our website.	Compliance with legal obligations	about 7 days	Cookie Banner

Sofern wir Cookies aufgrund ihrer ausdrücklichen Einwilligung gesetzt haben, können Sie jederzeit ihre Einwilligung im Rahmen unseres Cookiebanners widerrufen. Ihre Einstellungen können Sie hier anpassen.

Right to Object, Withdrawal of Consent, and Deletion

You can configure your browser according to your preferences to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or accept them by default. Cookies can be used for various purposes, such as to recognize that your device is already connected to our website (persistent cookies) or to save the most recently viewed content (session cookies). If you have expressly granted us permission to process your personal data, you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation.

 

Data Security and Privacy, Communication via Email

Your personal data is protected through technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend encrypted communication or sending information by mail for information requiring a high level of confidentiality.