""
""

Data protection declaration



For our Information sheet in accordance with Art. 13 & Art. 14 of the General Data Protection Regulation please click here.

1. General

Responsible authority               
The responsible party as per the General Data Protection Regulation, other data protection laws valid in the member states of the European Union and other regulations relating to data protection, is:

Glen Dimplex Deutschland GmbH               
Management               
Am Goldenen Feld 18               
95326 Kulmbach

Data protection agent               
You can contact our data protection agent at: E-mail: [email protected].

Protecting your personal data is important to us. This is why we carry out our activities in accordance with the applicable legal regulations for the protection of personal data and data security. Below, you will find information on data protection for our website.

Definition of terms               
The data protection declaration of Glen Dimplex Deutschland GmbH is based on the terminology used by the European directive issuing body and regulators in the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and understand for the general public, as well as for our customers and business partners. To ensure this, we will explain some of the terms used below. The following terms are used in this data protection declaration:

a) Personal details               
Personal details are all information relating to an identified or identifiable person (referred to in the following as “affected person”). The term identifiable refers to a natural person who can be identified, directly or indirectly, in particular through connection to an identifier such as a name, identification number, location data, online ID or one or multiple unique features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

b) Affected person               
An affected person is any identified or identifiable natural person whose personal details are processed by the person responsible for processing.

c) Processing               
Processing refers to any process carried out with or without the help of automated methods or any such series of processes in connection with personal details, such as collecting, logging, organising, sorting, saving, amending or changing, reading out, querying, using, publishing by sending or distribution, or any other form of supplying the information, comparing or linking, restricting, deleting or destroying the information.

d) Limiting the processing               
Limiting processing involves marking saved personal details with the goal of limiting their future processing.

e) Profiling               
Profiling is any form of automated processing of personal details, where these personal details are used to evaluate specific personal aspects relating to a natural person, in particular to analyse or predict aspects connected to work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or changes in location of this natural person.

f) Pseudonymization               
Pseudonymization is the processing of personal details in such a way that the personal details can no longer be linked to a specific affected person without additional information, providing this additional information is stored separately and technical and organisational measures are in place to ensure that the personal details are not assigned to an identified or identifiable natural person.

g) Responsible person or person responsible for processing               
A responsible person or person responsible for processing is the natural or legal person, authority, organisation or other entity responsible for making decisions regarding the purpose and means of processing personal details, either alone or as a collective.

h) Order processor               
An order processor is a natural or legal person, authority, organisation or other entity responsible for processing personal details on behalf of the responsible person.

i) Recipient               
A recipient is a natural or legal person, authority, organisation or other entity who receives personal details, regardless of whether or not they are a third party. Authorities, who receive personal details as part of an investigation request in accordance with European Union law or the law of the member states, are not regarded as recipients, however.

j) Third party               
A third party is a natural or legal person, authority, organisation or other entity apart from the affected person, the responsible person, the order processor and the persons authorised to process personal details under the direct authority of the responsible person or the order processor.

k) Consent               
Consent is any notification of intent given for the specific case in an informed and unambiguous way in the form of a declaration or other clearly confirming action, with which the affected person states that they consent to the relevant personal details being processed.

2. Data collection, data transfer and usage               
a) Data collection               
Your visit to our website will be logged. The main pieces of data that are logged are the IP address currently used by your PC, the date and time, the browser type and the operating system of your PC, as well as the pages you view. It is not usually possible to relate this information to a specific person and this is also not intended. This information is only logged for the purposes of data protection and to optimize our web content. No other evaluation of the data takes place, except for statical purposes exclusively in anonymous form. No personal surf profiles or similar are created or evaluated.

b) Data transfer and usage               
The personal information you provide via a website or via e-mail (e.g. your name and address or your e-mail address), will only be used for correspondence with you and for the purpose for which you provided the information. If service providers are used to carry out and complete work processes, the contractual relationships will be regulated in accordance with the Federal Data Protection Act and the EU General Data Protection Regulation.

3. Consent and revocation               
Personal data provided via our website will only be stored until the purpose for which it was provided is fulfilled. In special cases, a use beyond the legal retention periods may take place if this is required as evidence for or for the protection of legal claims or to defend against legal action. The use of your e-mail address, telephone and/or mobile number and fax number for the purposes of advertising or market and opinion research requires separate consent. You can give this consent electronically when entering your details and revoke it at any time for the future. If you are no longer happy for your personal details to be stored or if these details are no longer correct, we will arrange for your details to be deleted on request (where possible according to the valid law), for your details to be blocked or for the necessary corrections to be made. On request, we can provide information on all personal details we have stored relating to you free of charge.

4. Internal security measures               
We guarantee the confidentiality and security of your personal details by only using the details provided via our website or in e-mail communication to fulfil your request or concern. Our employees adhere to confidentiality obligations, our security measures adequately correspond to the current state of technology and our systems are regularly checked for security so that we can guarantee lasting protection from any damage, losses and access to data held by us.

5. Notes on improving personal data security               
You can configure your browser so that you are notified as soon as cookies are to be created so that you can generally accept the use of cookies, accept them on an individual basis, or generally reject the use of cookies. For further information on browser configuration, see the relevant product pages (Google Chrome, Microsoft Internet Explorer, Firefox etc.).

6. Use of cookies               
Cookies are small text files stored on the PC of the internet user. They are used to control the internet connection during your visit to our websites. Cookies also provide us with information that enables us to optimize our websites to suit the requirements of the user. Some cookies are only used for the duration of the visit to the website.

7. Google Analytics               
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses so-called cookies. These are text files which are stored on your computer and enable an analyse of your usage of the website. The information produced by the cookie concerning your use of this website is generally transmitted to Google servers in the USA and stored there. If IP anonymization is activated on this website, your IP address will be abbreviated beforehand by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on the website activities and to provide additional services connected with the use of the website and internet use for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google. You can prevent cookies from being created by activating the relevant setting in your browser software; we would like to point out, however, that not all functions of this website may be available in this case. You can prevent the data generated by the cookie relating to your use of the website (incl. your IP address) from being sent to Google and this information being processed by Google by downloading and installing the browser plugin under the following link https://tools.google.com/dlpage/gaoptout?hl=en. You can prevent logging by Google Analytics by clicking on the following link. An opt-out cookie is created, which prevents your details from being recorded in the future when you visit this website: Deactivate Google Analytics. Further information on the terms and conditions of use and data protection is available at https://www.google.com/analytics/terms/gb.html or https://www.google.de/intl/en/policies/. We would like to point out that Google Analytics has been supplemented with the code "anonymizeIp" on this website to guarantee anonymous recording of IP address (known as IP masking).

8. Google Maps (route planning / map display)               
We use the software module Google Maps to display locations and routes. If you use this service, Google may receive information on your actual location (such as GPS signals transmitted by a mobile device) or information that can be used to determine your approximate location (e.g. the cell ID). Further information on the processing of your data by Google is available under the following link: Google data protection regulations.

9. Web services & apps               
Our online offering provides a range of tools, for example for calculating the heating load, an operating costs calculator and many other request options, reporting options, etc. Personal data is sometimes collected and processed in these offers. This is only done for the intended purpose of the application. In some cases, the data is statistically analysed in anonymised form. In some applications, data is also passed on to third parties. In these cases, this is explicitly indicated in the application. If you use a user account with an application, your entries will be saved for later use. GDD also provides various services and benefits in the form of web applications and smart device applications. These can be installed via the Google Play Store or Apple App Store. When you open our app, information of a general nature is automatically collected. This information includes, for example, the type of device, the operating system used and similar. This is exclusively information that does not allow any conclusions to be drawn about your person. Anonymous information of this kind is statistically evaluated by us in order to optimise our app and the technology behind it. The app uses the "crashlytics" analysis programme from Fabric for this purpose. This analysis program uses users' IP addresses for analysis purposes, although these are used anonymously. It is therefore not possible to draw any conclusions about a specific person. You can find more information here: http://try.crashlytics.com/terms/

10. Payment processing in the Dimplex spare parts shop               
The payment process in the Dimplex spare parts shop is managed by Heidelpay. Heidelpay (Heidelberger Payment GmbH) is a payment institution recognized by the Federal Financial Supervisory Authority. You remain on the Dimplex website during the payment process, the entire payment process is carried out by Heidelpay in the background. Once the process is complete, we only receive information on the payment status from Heidelpay (payment successful or unsuccessful). We don't receive any personal banking information. You can view the data protection declaration of Heidelpay here.

11. Links to other websites               
Occasionally, we include links to third-party websites. Although we select these third parties carefully, we can not provide any guarantee or accept any liability for the correctness or completeness of the content and data security of third-party websites. This data protection declaration also does not apply for linked third-party websites.

12. Updates to this data protection declaration               
We reserve the right to amend this data protection declaration from time to time so that it always corresponds to the latest legal requirements or to implement changes to our services in the data protection declaration, e.g. when new services are introduced. The new data protection declaration then applies for your subsequent visit.

13. Liability               
All information on this website has been checked carefully. However, we cannot guarantee that the information will be correct, complete and up-to-date at all times. If you notice an error, we would be grateful if you would let us know. We will then correct it as soon as possible.

14. Control and information centre               
If you are not satisfied with the data protection measures outlined here or if you have any questions relating to the recording, processing and/or use of your personal details, please get in touch. We will do our utmost to answer your questions and implement your suggestions as quickly as possible.

15. Use of personal data during the newsletter registration               
As part of the registration process for the free GDD Newsletter, you agree to your personal data being collected. This data is only used for sending the newsletter and is not passed on to third parties. If you no longer want to receive newsletters from GDD in the future, click on the link in the newsletter to unsubscribe.

16. Contact form               
For legal reasons, the website of Glen Dimplex Deutschland GmbH contains information that enables quick electronic contact with our company and direct communication with us, including a general address for so-called electronic mail (e-mail address). If an affected person contacts the person responsible for processing via e-mail or via a contact form, the personal details provided by the affected person are saved automatically. Such personal details provided voluntarily by an affected person to the person responsible for processing are saved for the purposes of processing or for contacting the affected person. No personal details are passed on to third parties.

17. Online application form               
The personal details provided by you during the application process are processed exclusively for the purpose of filling jobs within our company. Your details will only be forwarded to the internal positions and specialist departments explicitly responsible for the concrete application process within our company. The information will not be used for any other purpose, nor will it be passed on to third parties. The application details and files provided by you are forward to our human resources department and processed in accordance with the internal guidelines and legal regulations. Once your documents have been evaluated, we will contact you. If we no longer require your details, they will be deleted.

18. Rights of the affected person               
a) Right to information               
b) Right to correction               
c) Right to deletion (right to be forgotten)               
d) Right to limited processing               
e) Right to data portability               
f) Right of appeal               
g) Right to revoke consent given in line with data protection regulations

19. Legal basis for processing               
a) Consent               
Our company uses Art. 6 I lit. a GDPR as a legal basis for processing methods, for which we obtain consent for a specific purpose.

b) Fulfilling an agreement               
If it is necessary to process personal details in order to fulfil an agreement, where a contractual party is the affected person, as with processing methods required for delivering goods or providing a different service or return service, for example, the processing is carried out in accordance with Art. 6 I lit. b GDPR.

c) Precontractual measures               
The same applies for processing methods required to carry out precontractual measures, such as for processing enquiries relating to our products or services.

d) Legal obligations               
If our company is subject to a contractual obligation which makes it necessary to process personal details,for fulfilling tax obligations, for example, the processing is carried out based on Art. 6 I lit. c GDPR.

e) Vital interests of the affected parties               
In rare cases, it may become necessary to process personal details to protect the vital interests of the affected person or another natural person. This would be the case, for example, if a visitor to our company were to be injured and their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. The details would be processed based on Art. 6 I lit. d GDPR in this case.

f) Justified interests of our company               
Finally, processing methods may be based on Art. 6 I lit. f GDPR. Processing methods are carried out on this legal basis if they are not covered by any of the legal bases outlined above, if the processing is necessary to preserve a justified interest of our company or a third party, providing the interests are not outweighed by the interests, basic rights and basic freedoms of the affected party. We are authorised to carry out these processing methods in particular because they have been specifically referred to by the European legislator. The legislator maintained that a justified interest could be assumed if the affected person is a customer of the responsible party (Recital 47 Paragraph 2 GDPR). If the processing of personal data is based on 6 I lit. f GDPR, our justified interest is carrying out our business activity for the benefit of all our employees and shareholders.

20. Retention period for personal data               
The relevant legal retention period is the criteria dictating how long personal details are stored for. Once this retention period has elapsed, the relevant details are deleted routinely, providing they do not need to be retained to fulfil the agreement or for contract initiation or for enforcing, executing or defending legal claims.

21. Use of automated decision making               
As a responsible company, we refrain from using automated decision making or profiling.

22. transfer of your data to Facebook, Instagram and LinkedIn for marketing purposes            
So that we can send you advertising information, we process your e-mail address, country and language and, if necessary, transmit these to the following companies on the basis of your consent (Art. 6 para. 1 lit. a GDPR):

23. Facebook and Instagram

23.1 Information on transmission to Facebook            
We want to ensure that the adverts are only displayed to users who are interested in our advertising information. We therefore use Facebook services to show you personalised advertising. The operator of Facebook and Instagram for users outside the USA and Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the USA and Canada, the operator is Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA.            
If you have a Facebook profile, Facebook can compare this data with the data already available about you on Facebook. Facebook may also merge this data with other data.            
Facebook may share your data within the Facebook group of companies or with other third parties. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. According to Facebook's own information, Facebook uses EU standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection for data transfers to the USA and other third countries for which there is no adequacy decision by the EU Commission.            
Basic information about the further processing and use of your data by Facebook as well as your setting options for protecting your privacy on Facebook can be found in Facebook's privacy policy at https://www.facebook.com/privacy/policy/ entnehmen.

23.2 Custom audiences            
We use the "Custom Audiences from File" method. If you have given your consent, we will transmit your email address or telephone number stored with us to Facebook in hashed form. Facebook will match this information with the information stored by Facebook. If Facebook identifies a "match", Facebook will display personalised advertising.

24. Our social media presence           
We operate pages and profiles on various social media platforms. In this context, personal data is processed as described below.           
If you interact with us via our social media presences or our posts, we will collect and process the information you provide in this respect, including your user name and any profile photo, for example if you mark a post with "Like", share or "retweet", comment or provide other content. The data processing in this regard is regularly carried out on the basis of our legitimate interest in providing the corresponding functions on our social media pages (Art. 6 para. 1 lit. f GDPR) and, if applicable, on the basis of your consent to the operator of the respective network (Art. 6 para. 1 lit. a GDPR) or your contractual relationship with the operator (Art. 6 para. 1 lit. b GDPR). Please also note that this content is published on our relevant social media pages in accordance with your account settings and can be accessed by anyone worldwide.           
Further data processing may be carried out by us in order to receive and process enquiries or messages via our social media pages (Art. 6 para. 1 lit. b GDPR).           
In addition, the respective operators collect and process your personal data under their own responsibility under data protection law when you visit our social pages and/or interact with them or our posts. This applies in particular if you are registered or logged in to the relevant network. Even if you are not registered with a network, the operators collect certain personal data when you visit the site, such as unique identifiers that are linked to your browser or device. Please note that this data may be merged across different platforms and services if they are operated by the same operator. For example, both Facebook and Instagram are operated by Facebook Ireland Limited and Facebook Inc. respectively. Further information can be found in the data protection notices of the respective operators, to which we refer below.

Specifically, we operate the following social media presences:           
24.1.1 Facebook           
You can find our Facebook fan page at https://www.facebook.com/dimplex.deutschland          
For users outside the USA and Canada, Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). For users in the USA and Canada, Facebook is operated by Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA.          
If you visit or like our Facebook page as a registered Facebook user, Facebook collects personal data from you. Even if you are not registered with Facebook and visit our Facebook page, Facebook may collect pseudonymised usage data from you. Further information can be found in Facebook's data policy at https://www.facebook.com/privacy/policy/ and at https://www.facebook.com/legal/terms/information_about_page_insights_data. In the data policy you will also find information on the setting options for your Facebook account.          
Facebook may share your information within the Facebook group of companies (transfer to Facebook in the USA) or with other third parties. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. According to Facebook's own information, Facebook uses EU standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection for data transfers to the USA and other third countries for which there is no adequacy decision by the EU Commission.          
As part of the operation of our Facebook page, we are also jointly responsible with Facebook for the processing of so-called Page Insights. With the help of these Page Insights, Facebook analyses the behaviour on our Facebook page and provides us with this information in a non-personalised form. For this purpose, we have concluded an agreement with Facebook Ireland on joint data protection responsibility, which you can view at the following link: https://de-de.facebook.com/legal/terms/page_controller_addendum. In this agreement, Facebook undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Page Insights and to fulfil all obligations under the GDPR with regard to the processing of Page Insights. The processing serves our legitimate economic interests in the optimisation and needs-based design of our Facebook fan page, Art. 6 para. 1 lit f. GDPR.

24.1.2 Facebook Pixel         
If you have given your consent, the remarketing function "Facebook Pixel" is used on our website. This is a JavaScript code. The Facebook pixel is used to record when you perform certain actions on our website or visit certain areas of our website. Facebook pixels also collect usage data (such as URL, referrer URL, IP address, device and browser properties and timestamps). The Facebook pixel generates a checksum (hash value) from this information and transmits this hash value to Facebook. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log in there, you can be presented with targeted, individualised advertising on Facebook based on the data transmitted by the pixel. Data from users who do not have a Facebook profile is discarded by Facebook without being used. For more information on the collection and use of data by Facebook and your rights and options for protecting your privacy in this regard, please refer to Facebook's privacy policy at https://de-de.facebook.com/privacy/explanation.      
The operator of Facebook for users outside the USA and Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the USA and Canada, the operator is Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA.         
Facebook may share your information within the Facebook group of companies or with other third parties. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. According to Facebook's own information, Facebook uses EU standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection for data transfers to the USA and other third countries for which there is no adequacy decision by the EU Commission.         
The use of this function and the associated further processing of your data is based on your consent, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

24.2 Instagram         
You can find our Instagram page at: https://www.instagram.com/dimplex_deutschland  
For users outside the USA and Canada, Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). For users in the USA and Canada, Facebook is operated by Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA. The Instagram privacy policy can be found at: https://help.instagram.com/519522125107875. There you will also find information about the settings options for your account.;   
Your personal data may also be made available to other Facebook or Instagram companies. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. In this case, Facebook will use the standard contractual clauses approved by the EU Commission. Further information can also be found in the Instagram Privacy Policy.         
Your personal data may also be made available to other Facebook or Instagram companies. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. In this case, Facebook will use the standard contractual clauses approved by the EU Commission. Further information can also be found in the Instagram Privacy Policy. In addition, we are jointly responsible with Facebook for the processing of Instagram Insights as part of the operation of our Instagram page. With the help of these Instagram Insights, Facebook analyses the behaviour on our Instagram page and provides us with this information in a non-personalised form. For this purpose, we have concluded an agreement with Facebook on joint data protection responsibility, which you can view at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. In this agreement, Facebook undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Instagram Insights and to fulfil all obligations under the GDPR with regard to the processing of Page Insights. The processing serves our legitimate economic interests in the optimisation and needs-based design of our Instagram page, Art. 6 para. 1 lit f. GDPR.

24.3 Twitter         
You can find our Twitter account at https://twitter.com/glendimplex_de    
For users outside the USA, Twitter is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland. For users in the USA, Twitter is operated by Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.    
You can find Twitter's privacy policy at https://twitter.com/en/privacy. There you will also find information on the setting options for your Twitter account.   
Twitter will also transfer your personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer takes place, Twitter will use the standard contractual clauses approved by the EU Commission.   
We also use the Twitter Analytics function. As part of this function, we receive non-personal information from Twitter International about the use of our account. We can use this information to analyse and optimise the effectiveness of our Twitter activities. The processing carried out in this respect is based on our legitimate interests in optimising our Twitter activities (Art. 6 para. 1 lit. f GDPR).

24.4.1 LinkedIn         
You can find our LinkedIn account at https://www.linkedin.com/company/dimplex-deutschland   
For users outside the USA, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. You can find Twitter's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.  
There you will also find information on the settings options for your LinkedIn account.  
LinkedIn will also transfer your personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission.         
We also use the LinkedIn Insights function. As part of this function, we receive non-personal information from LinkedIn about the use of our account. We can use this information to analyse and optimise the effectiveness of our LinkedIn activities. The processing carried out in this respect is based on our legitimate interests in optimising our LinkedIn activities (Art. 6 para. 1 lit. f GDPR).

24.4.2 LinkedIn Insight Tag        
This website uses the "Insight Tag" function of LinkedIn Ireland Unlimited, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland ("LinkedIn"). The Insight Tag is a small JavaScript code snippet added to this website to enable detailed advertising campaign reports and to gain valuable information about you as a visitor to this website. We use the Insight tag to track conversions, retargeting and to gain additional information about you as a LinkedIn member when you view one of our adverts. The Insight tag enables LinkedIn to collect data such as URL, referrer URL, IP address, device and browser characteristics, timestamps and page views when you visit this website. This data is encrypted by LinkedIn, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data with us, but only provides summarised reports on the website target group and display performance. LinkedIn also offers us the possibility of retargeting via the Insight tag, so that we can use the data collected to display targeted advertising outside this website without identifying you.        
Please note that LinkedIn also transfers personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission. Corresponding information can be found at https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de.        
For more information on the collection and use of data by LinkedIn and your rights and options for protecting your privacy in this regard, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?_l=de_DE.        
The use of this function and the associated further processing of your data is based on your consent, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

Cookie information

For our Information sheet in accordance with Art. 13 & Art. 14 of the General Data Protection Regulation please click here.

General
I. Responsible authority
The responsible party as per the General Data Protection Regulation, other data protection laws valid in the member states of the European Union and other regulations relating to data protection, is:

Glen Dimplex Deutschland GmbH
Geschäftsleitung
Am Goldenen Feld 18
95326 Kulmbach
www.glendimplex.de
[email protected]
T: + 49 (0) 9221 / 709-101

II. Data protection agent
You can contact our data protection agent at: E-mail: [email protected].

Protecting your personal data is important to us. This is why we carry out our activities in accordance with the applicable legal regulations for the protection of personal data and data security. Below, you will find information on data protection for our website.

III. Definition of terms
The data protection declaration of Glen Dimplex Deutschland GmbH is based on the terminology used by the European directive issuing body and regulators in the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and understand for the general public, as well as for our customers and business partners. To ensure this, we will explain some of the terms used below. The following terms are used in this data protection declaration:

a) personal data
Personal details are all information relating to an identified or identifiable person (referred to in the following as “affected person”). The term identifiable refers to a natural person who can be identified, directly or indirectly, in particular through connection to an identifier such as a name, identification number, location data, online ID or one or multiple unique features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

b) Affected person
An affected person is any identified or identifiable natural person whose personal details are processed by the person responsible for processing.

c) Processing
Processing refers to any process carried out with or without the help of automated methods or any such series of processes in connection with personal details, such as collecting, logging, organising, sorting, saving, amending or changing, reading out, querying, using, publishing by sending or distribution, or any other form of supplying the information, comparing or linking, restricting, deleting or destroying the information.

d) Limiting the processing
Limiting processing involves marking saved personal details with the goal of limiting their future processing.

e) Profiling
Profiling is any form of automated processing of personal details, where these personal details are used to evaluate specific personal aspects relating to a natural person, in particular to analyse or predict aspects connected to work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or changes in location of this natural person.

f) Pseudonymization
Pseudonymization is the processing of personal details in such a way that the personal details can no longer be linked to a specific affected person without additional information, providing this additional information is stored separately and technical and organisational measures are in place to ensure that the personal details are not assigned to an identified or identifiable natural person.

g) Responsible person or person responsible for processing
A responsible person or person responsible for processing is the natural or legal person, authority, organisation or other entity responsible for making decisions regarding the purpose and means of processing personal details, either alone or as a collective.

h) Order processor
An order processor is a natural or legal person, authority, organisation or other entity responsible for processing personal details on behalf of the responsible person.

i) Recipient
A recipient is a natural or legal person, authority, organisation or other entity who receives personal details, regardless of whether or not they are a third party. Authorities, who receive personal details as part of an investigation request in accordance with European Union law or the law of the member states, are not regarded as recipients, however.

j) Third party
A third party is a natural or legal person, authority, organisation or other entity apart from the affected person, the responsible person, the order processor and the persons authorised to process personal details under the direct authority of the responsible person or the order processor.

k) Consent
Consent is any notification of intent given for the specific case in an informed and unambiguous way in the form of a declaration or other clearly confirming action, with which the affected person states that they consent to the relevant personal details being processed.

1. Use of cookies
a) Description and scope of data processing
Cookies are small text files that are stored on the Internet user's PC. They are used to control the Internet connection during your visit to our websites. At the same time, these cookies provide us with information that enables us to optimize our websites to the needs of visitors. We use cookies in part only for the duration of your visit to the website.

Cookie-Informationen

Strictly Necessary Cookies

First-Party

Host Name Details
dimplex.eu OptanonAlertBoxClosed Description: This cookie is set by websites that use certain versions of OneTrust's cookie compliance solution. It is set after visitors have seen a cookie notice, in some cases only after they actively close the notice. It enables the website to display the message to a user no more than once. The cookie has a lifetime of one year and does not contain any personal data.
Lebensdauer: 1 Year
Sicherheit: Http only
dimplex.eu OptanonConsent Description: This cookie is set by OneTrust's cookie compliance solution. It stores information about the categories of cookies used by the website and whether visitors have given or withdrawn their consent to the use of each category. This allows website operators to prevent cookies of each category from being set in the user's browser if consent has not been given. The cookie has a normal lifespan of one year, so that the preferences of returning visitors to the website remain stored. It does not contain any information that could be used to identify the visitor to the website.
Lebensdauer: 1 Year
Sicherheit: Http only

Performance Cookies

First-Party

Host Name Details
dimplex.eu _hjSession_xxxxxx Description: A cookie that stores the current session data. This ensures that subsequent requests within the session window are assigned to the same Hotjar session.
Lifespan: a few seconds
Security: Http only
dimplex.eu _ga Description: To distinguish users through Google Analytics – third-party analytics cookies: Google Analytics for statistical purposes. Type of data processed: IP addresses. To maximize the privacy of users/visitors, we use the “IP masking” function, which requires the system to obscure the last 8 digits of the user/visitor's IP address before any type of processing, thereby anonymizing the analyzed data. Purpose: To collect information in aggregate form about the number of users and their visits to our website in order to compile statistics.
Lifespan: 1 Year
Security: Http only
dimplex.eu _gid Description: To distinguish users through Google Analytics – third-party analytics cookies: Google Analytics for statistical purposes. Type of data processed: IP addresses. To maximize the privacy of users/visitors, we use the “IP masking” function, which requires the system to obscure the last 8 digits of the user/visitor's IP address before any type of processing, thereby anonymizing the analyzed data. Purpose: to collect information in aggregate form about the number of users and their visits to our website in order to compile statistics.
Lifespan: a few seconds
Security: Http only
dimplex.eu _hjTLDTest Description: When the Hotjar script runs, we attempt to determine the most generic cookie path we should use, rather than the hostname of the page. This is done so that cookies can be shared across subdomains (if applicable). To determine this, we attempt to store the “_hjTLDTest” cookie for different URL substrings until it fails. After this check, the cookie is removed.
Lifespan: Session
Security: Http only
http://www.dimplex.eu/www.dimplex.eu _ga_xxxxxxxxxx Description: Used by Google Analytics to identify and track a single session with your device.
Lifespan: 1 Year
Security: Http only
dimplex.eu _ga_xxxxxxxxxx Description: Used by Google Analytics to identify and track a single session with your device.
Lifespan: 1 Year
Security: Http only

Targeting Cookies

First-Party

Host Name Details
dimplex.eu _gat_UA- Description: This is a sample cookie set by Google Analytics. The sample element in the name contains the unique identification number of the account or website to which it relates. It is a variant of the “_gat” cookie, which is used to limit the amount of data recorded by Google on high-traffic websites.
Lifespan: a few seconds
Security: Http only

Third Party

Host Name Details
youtube.com VISITOR_PRIVACY_METADATA Description: YouTube is a Google platform for hosting and sharing videos. YouTube collects user data via videos embedded in websites, which is combined with profile data from other Google services to display targeted advertising to web visitors on a variety of its own and other websites.
Lifespan: 5 Months
Security: Http only
youtube.com __Secure-xxxxxxx Description: YouTube is a Google platform for hosting and sharing videos. YouTube collects user data via videos embedded in websites, which is combined with profile data from other Google services to display targeted advertising to web visitors on a variety of its own and other websites.
Lifespan: 5 Months
Security: Http only
twitter.com __cf_bm Description: This is a CloudFoundry cookie.
Lifespan: a few seconds
Security: Http only
youtube.com YSC Description: YouTube is a Google platform for hosting and sharing videos. YouTube collects user data via videos embedded in websites, which is combined with profile data from other Google services to display targeted advertising to web visitors on a variety of its own and other websites.
Lifespan: Session
Security: Http only
youtube.com VISITOR_INFO1_LIVE Description: This cookie is used as a unique identifier to track video viewing.
Lifespan: 5 Months
Security: Http only

Unknown

Third Party

Host Name Details
hydraulikfinder-aegrg9heh6dbbaff.westeurope-01.azurewebsites.net ARRAffinitySameSite Description:
Lifespan: Session
Security: Http only
hydraulikfinder-aegrg9heh6dbbaff.westeurope-01.azurewebsites.net ARRAffinity Description:
Lifespan: Session
Security: Http only
konfigurator.dimplex.de ARRAffinitySameSite Beschreibung:
Lifespan: Session
Security: Http only
hydraulikfinder-aegrg9heh6dbbaff.westeurope-01.azurewebsites.net .AspNetCore.Antiforgery Description: .AspNetCore.
Lifespan: Session
Security: Http only
dimplex.de __cf_bm Description: Dies ist ein CloudFoundry‑Cookie.
Lifespan: a few seconds
Security: Http only
konfigurator.dimplex.de ARRAffinity Description:
Lifespan: Session
Security:

b) Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR, whereby the purpose of and interest in processing results from the purpose of the respective cookie, unless otherwise stated.
The legal basis for the processing of personal data using cookies that are not technically necessary is Art. 6 (1) (a) GDPR, provided that the user has given their consent. The use of these cookies is based on § 25 (1) TDDDG.

c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
The purpose of using analytics cookies is to improve the quality of our website and its content. Analytics cookies tell us how the website is used, enabling us to continuously optimize our offering.

e) Duration of storage, right to object and right to erasure
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's functions to their full extent.

IV. General information on data processing
1. Scope of personal data processing
We only process our users' personal data to the extent necessary to provide a functional website and our content and services. We usually receive the personal data we process about you directly from you. You are not obliged to provide this data. However, if you do not provide us with the data, it may not be possible to use our website and the functions offered on it or to carry out the purposes described here.

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject, or if the data must be retained for the assertion, exercise, or defense of legal claims.

V. Provision of the website and creation of log files
1.    Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

(1)    Information about the browser type and version used
(2)    The user's operating system
(3)    The user's IP address
(4)    Date and time of access
(5) Websites from which the user's system accesses our website
(6) Websites accessed by the user's system via our website

2. Legal basis for data processing
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's functions to their full extent.

3. Purpose of data processing
The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 (1) lit. f GDPR. The anonymization of the IP address takes into account the interests of users in the protection of their personal data.

4. Duration of storage
In our case, this is the case after up to five months.

In our case, this is the case after up to five months.

If you give your consent, we will delete your data when you withdraw your consent.

5.1. Right to object and right to erasure
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's functions to their full extent.

VII. Webservices & Apps
Our online offering provides a range of tools, for example for calculating heating loads, an operating cost calculator, and many other options for submitting requests, reporting issues, etc. Some of these offerings involve the collection and processing of personal data. This is done solely for the purpose intended by the application. In some cases, the data is evaluated statistically in anonymized form. For some applications, data is also passed on to third parties. In these cases, this will be explicitly indicated in the application. If you use a user account for an application, your entries will be saved for later use. We also provide various services in the form of web applications and smart device applications. These can be installed via the Google Play Store or Apple App Store. When you open our app, general information is automatically collected. This information includes, for example, the type of device, the operating system used, and similar details. This is exclusively information that does not allow any conclusions to be drawn about your person. We evaluate anonymous information of this kind statistically in order to optimize our app and the technology behind it. The app uses the “crashlytics” analysis program from Fabric for this purpose. This analysis program uses the IP addresses of users for analysis purposes, but these are anonymized. It is not possible to draw any conclusions about a specific person. Further information can be found here: http://try.crashlytics.com/terms/.

VIII. Rights of the data subject
a) Right of access
b) Right to rectification
c) Right to erasure (right to be forgotten)
d) Right to restriction of processing
e) Right to data portability
f) Right to object
g) Right to withdraw consent to data processing without affecting the lawfulness of processing based on consent before its withdrawal
i) Right to lodge a complaint with a supervisory authority

XII. Internal security measures
We guarantee the confidentiality and security of your personal data by only using the personal data you provide to us via our website or in email communications to fulfill your request or concern. Our employees are subject to confidentiality obligations, our security measures correspond to the current state of the art to an appropriate extent, and our systems are regularly checked for security so that we can protect you in the long term against any damage, loss, or access to data stored with us.

XIII. Tips for improving personal data security
You can configure your browser so that you are informed as soon as cookies are to be set, in order to accept them generally or in each individual case, or to reject them generally. For more information on configuring your browser, please refer to the relevant product pages. (Google Chrome, Microsoft Internetexplorer, Firefox etc.).

6. Use of cookies
Cookies are small text files that are stored on the Internet user's PC. They are used to control the Internet connection during your visit to our websites. At the same time, these cookies provide us with information that enables us to optimize our websites to the needs of visitors. We use cookies in part only for the duration of your visit to the website.

V. Web analysis by Google Analytics
1. Scope of personal data processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link https://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plugin. You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when you visit this website: Google Analytics deaktivieren. For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/de/ or at https://policies.google.com/?hl=de&gl=en. Please note that on this website, Google Analytics has been extended by the code “anonymizeIp” to ensure anonymous collection of IP addresses (so-called IP masking).

8. Google Maps (route planning/map display)
We use the Google Maps software module to display locations and routes. When you use this service, Google may receive information about your actual location (e.g., GPS signals transmitted from a mobile device) or information that can be used to determine your approximate location (e.g., cell ID). For more information about how Google processes your data, please visit the following link: Google Privacy Policy.

XV. Links to other websites
We occasionally refer to third-party websites. Although we carefully select these third parties, we cannot assume any liability or guarantee the accuracy or completeness of the content or data security of third-party websites. This privacy policy also does not apply to linked third-party websites.

XVI. Updating this privacy policy
We reserve the right to occasionally amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

XVII. Liability
All information contained on this website has been checked with great care. However, we cannot guarantee that the information is correct, complete, and up to date at all times. If you notice an error, we would be grateful if you would inform us. We can then correct it at short notice.

XVIII. Control and Information Center
If you are not satisfied with the data protection measures described here or if you have any questions regarding the collection, processing, and/or use of your personal data, we would be happy to hear from you. We will endeavor to answer your questions as quickly as possible and implement your suggestions.

XIV. Existence of automated decision-making
Unless otherwise expressly stated, automated decision-making, including profiling, does not take place.

24. Our social media presence
We operate pages and profiles on various social media platforms. In this context, personal data is processed as described below.
If you interact with us via our social media presences or our posts, we will collect and process the information you provide in this respect, including your user name and any profile photo, for example if you mark a post with "Like", share or "retweet", comment or provide other content. The data processing in this regard is regularly carried out on the basis of our legitimate interest in providing the corresponding functions on our social media pages (Art. 6 para. 1 lit. f GDPR) and, if applicable, on the basis of your consent to the operator of the respective network (Art. 6 para. 1 lit. a GDPR) or your contractual relationship with the operator (Art. 6 para. 1 lit. b GDPR). Please also note that this content is published on our relevant social media pages in accordance with your account settings and can be accessed by anyone worldwide.
Further data processing may be carried out by us in order to receive and process enquiries or messages via our social media pages (Art. 6 para. 1 lit. b GDPR).
In addition, the respective operators collect and process your personal data under their own responsibility under data protection law when you visit our social pages and/or interact with them or our posts. This applies in particular if you are registered or logged in to the relevant network. Even if you are not registered with a network, the operators collect certain personal data when you visit the site, such as unique identifiers that are linked to your browser or device. Please note that this data may be merged across different platforms and services if they are operated by the same operator. For example, both Facebook and Instagram are operated by Facebook Ireland Limited and Facebook Inc. respectively. Further information can be found in the data protection notices of the respective operators, to which we refer below.

Specifically, we operate the following social media presences:
2.1.1 Facebook
You can find our Facebook fan page at https://www.facebook.com/dimplex.deutschland
For users outside the USA and Canada, Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). For users in the USA and Canada, Facebook is operated by Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA.
If you visit or like our Facebook page as a registered Facebook user, Facebook collects personal data from you. Even if you are not registered with Facebook and visit our Facebook page, Facebook may collect pseudonymised usage data from you. Further information can be found in Facebook's data policy at https://www.facebook.com/privacy/policy/ and at https://www.facebook.com/legal/terms/information_about_page_insights_data. In the data policy you will also find information on the setting options for your Facebook account.
Facebook may share your information within the Facebook group of companies (transfer to Facebook in the USA) or with other third parties. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. According to Facebook's own information, Facebook uses EU standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection for data transfers to the USA and other third countries for which there is no adequacy decision by the EU Commission.
As part of the operation of our Facebook page, we are also jointly responsible with Facebook for the processing of so-called Page Insights. With the help of these Page Insights, Facebook analyses the behaviour on our Facebook page and provides us with this information in a non-personalised form. For this purpose, we have concluded an agreement with Facebook Ireland on joint data protection responsibility, which you can view at the following link: https://de-de.facebook.com/legal/terms/page_controller_addendum. In this agreement, Facebook undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Page Insights and to fulfil all obligations under the GDPR with regard to the processing of Page Insights. The processing serves our legitimate economic interests in the optimisation and needs-based design of our Facebook fan page, Art. 6 para. 1 lit f. GDPR.

2.1.2 Facebook Pixel
If you have given your consent, the remarketing function "Facebook Pixel" is used on our website. This is a JavaScript code. The Facebook pixel is used to record when you perform certain actions on our website or visit certain areas of our website. Facebook pixels also collect usage data (such as URL, referrer URL, IP address, device and browser properties and timestamps). The Facebook pixel generates a checksum (hash value) from this information and transmits this hash value to Facebook. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log in there, you can be presented with targeted, individualised advertising on Facebook based on the data transmitted by the pixel. Data from users who do not have a Facebook profile is discarded by Facebook without being used. For more information on the collection and use of data by Facebook and your rights and options for protecting your privacy in this regard, please refer to Facebook's privacy policy at https://de-de.facebook.com/privacy/explanation.
The operator of Facebook for users outside the USA and Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the USA and Canada, the operator is Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA.
Facebook may share your information within the Facebook group of companies or with other third parties. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. According to Facebook's own information, Facebook uses EU standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection for data transfers to the USA and other third countries for which there is no adequacy decision by the EU Commission.
The use of this function and the associated further processing of your data is based on your consent, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

2.2 Instagram
You can find our Instagram page at: https://www.instagram.com/dimplex_deutschland
For users outside the USA and Canada, Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). For users in the USA and Canada, Facebook is operated by Facebook Inc, 1601 South California Avenue, Palo Alto, CA 94304, USA. The Instagram privacy policy can be found at: https://help.instagram.com/519522125107875. There you will also find information about the settings options for your account.
Your personal data may also be made available to other Facebook or Instagram companies. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. In this case, Facebook will use the standard contractual clauses approved by the EU Commission. Further information can also be found in the Instagram Privacy Policy.
Your personal data may also be made available to other Facebook or Instagram companies. This may result in the transfer of personal data to the USA and other third countries for which there is no adequacy decision by the EU Commission. In this case, Facebook will use the standard contractual clauses approved by the EU Commission. Further information can also be found in the Instagram Privacy Policy. In addition, we are jointly responsible with Facebook for the processing of Instagram Insights as part of the operation of our Instagram page. With the help of these Instagram Insights, Facebook analyses the behaviour on our Instagram page and provides us with this information in a non-personalised form. For this purpose, we have concluded an agreement with Facebook on joint data protection responsibility, which you can view at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. In this agreement, Facebook undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Instagram Insights and to fulfil all obligations under the GDPR with regard to the processing of Page Insights. The processing serves our legitimate economic interests in the optimisation and needs-based design of our Instagram page, Art. 6 para. 1 lit f. GDPR.

2.3 X (Twitter)
You can find our Twitter account at https://twitter.com/glendimplex_de
For users outside the USA, Twitter is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland. For users in the USA, Twitter is operated by Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
You can find Twitter's privacy policy at https://twitter.com/en/privacy. There you will also find information on the setting options for your Twitter account.
Twitter will also transfer your personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer takes place, Twitter will use the standard contractual clauses approved by the EU Commission.
We also use the Twitter Analytics function. As part of this function, we receive non-personal information from Twitter International about the use of our account. We can use this information to analyse and optimise the effectiveness of our Twitter activities. The processing carried out in this respect is based on our legitimate interests in optimising our Twitter activities (Art. 6 para. 1 lit. f GDPR).

2.4.1 LinkedIn
You can find our LinkedIn account at https://www.linkedin.com/company/dimplex-deutschland
For users outside the USA, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. You can find LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.
LinkedIn will also transfer your personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission.
We also use the LinkedIn Insights function. As part of this function, we receive non-personal information from LinkedIn about the use of our account. We can use this information to analyse and optimise the effectiveness of our LinkedIn activities. The processing carried out in this respect is based on our legitimate interests in optimising our LinkedIn activities (Art. 6 para. 1 lit. f GDPR).

2.4.2 LinkedIn Insight Tag
This website uses the "Insight Tag" function of LinkedIn Ireland Unlimited, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland ("LinkedIn"). The Insight Tag is a small JavaScript code snippet added to this website to enable detailed advertising campaign reports and to gain valuable information about you as a visitor to this website. We use the Insight tag to track conversions, retargeting and to gain additional information about you as a LinkedIn member when you view one of our adverts. The Insight tag enables LinkedIn to collect data such as URL, referrer URL, IP address, device and browser characteristics, timestamps and page views when you visit this website. This data is encrypted by LinkedIn, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data with us, but only provides summarised reports on the website target group and display performance. LinkedIn also offers us the possibility of retargeting via the Insight tag, so that we can use the data collected to display targeted advertising outside this website without identifying you.
Please note that LinkedIn also transfers personal data to third countries outside the European Economic Area for which there is no adequacy decision by the EU Commission. If such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission. Corresponding information can be found at https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de.
For more information on the collection and use of data by LinkedIn and your rights and options for protecting your privacy in this regard, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?_l=de_DE.
The use of this function and the associated further processing of your data is based on your consent, Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

IV.    Contact form and email contact
1.    Description and scope of data processing
Our website features a contact form that can be used to contact us electronically. If a user chooses to do so, the data entered in the input mask will be transmitted to us and stored. This data includes:

  • Last name
  • First name
  • Street number
  • Postal code
  • City
  • Company
  • Country
  • Email address
  • Phone number

The following data is also stored when the message is sent:
(1)    The user's IP address
(2)    Date and time of registration
(3)    Information provided by the user
For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy.

Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

In this context, no data will be passed on to third parties. The data will be used exclusively for processing the conversation.

2. Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

3. Purpose of data processing
The processing of personal data from the input mask serves us solely for the purpose of processing the contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and that sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Right to object and right to erasure
The user may revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

You can do this by sending an email to [email protected].

All personal data stored in the course of establishing contact will be deleted in this case.

 

II. Newsletter
1. Description and scope of data processing
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us.

In addition, the following data is collected during registration:
(1)    Date and time of registration
(2)    IP adress
For the processing of data, your consent will be obtained during the registration process and reference will be made to this privacy policy.

In connection with data processing for the purpose of sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.
The website also uses newsletter tracking.
The following data is collected for this purpose:
(1)    Delivery status
(2)    Link-Klicks
(3)    openings
(4)    Opening times

2. Legal basis for data processing
The legal basis for processing data after the user has subscribed to the newsletter is Art. 6 (1) (a) GDPR, provided that the user has given their consent.

Insofar as personal data is necessary in the interest of and for the purpose of proving your consent and for legal defense (Art. 6 (1) (c) in conjunction with Art. 5 (1) (a), (2), Art. 7 (1) GDPR and 6 (1) sentence 1 lit. f) GDPR), it may be stored for up to three years.

When you subscribe to our newsletter, we use the so-called double opt-in procedure for the purpose and in our interest of being able to verify your subscription to the newsletter and your consent, as well as to prevent registration with a third-party email address (Art. 6 (1) (c) in conjunction with Art. 5 (1) (a), (2), Art. 7 (1) GDPR and 6 (1) sentence 1 lit. f) GDPR).

3. Purpose of data processing
The user's email address is collected for the purpose of delivering the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used, as well as for verification purposes.

The collection of data on newsletter openings serves the purpose of analyzing the performance of our newsletter content in order to improve our offering.

4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription is active.

5. Right to object and right to erasure
The newsletter subscription can be canceled by the user concerned at any time. For this purpose, a corresponding link is provided in each newsletter.
This also enables the revocation of consent to the storage of personal data collected during the registration process.

III. Registration
1. Description and scope of data processing
On our website, we offer users the opportunity to register by providing personal data. Users can register on the portal as specialist partners, private customers, or business customers. The data is entered into an input mask, transmitted to us, and stored. The data is not passed on to third parties. The following data is collected during the registration process:

  • Salutation
  • First name
  • Last name
  • Phone number
  • Mobile phone number
  • Department
  • Job title
  • Email address
  • Customer number
  • Company name
  • VAT ID / ATU
  • Street and house number
  • Postal code
  • City
  • Country

The following data is also stored at the time of registration:

(1)    The user's IP address
(2)    Date and time of registration
During the registration process, the user's consent to the processing of this data is obtained.

2.    Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given their consent. In addition, registration may be necessary in the context of pre-contractual contact with the user, which may also constitute our legitimate interest. In this case, the legal basis is Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.

3.    Purpose of data processing
User registration is required in order to provide certain content and services on our website.

The portal offers the following options:

  • Register device
  • Create customer account
  • Order service packages and system check
  • Order warranty packages
  • Order maintenance packages
  • Set up online connection
  • Manage customer data
  • Display service requests

4. Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

This is the case for data collected during the registration process if the registration on our website is canceled or modified.

5. Right to object and right to erasure
As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time.

6. Use of cookies