We are pleased that you have visited our website. In the following, we would like to take the opportunity to inform you how we handle your data in accordance with Art. 13 General Data Protection Regulation (GDPR).

Controller

The party responsible for the collection and processing of data described below is the body stated in the Legal Notice.

ACO Passavant GmbH
Ulsterstraße 3
36269 Philippsthal
Telefon: 06620 77-0
Fax: 06620 77-52
E-Mail: haustechnik@aco.com

Usage data

When you visit our web pages, so-called usage data is temporarily evaluated on our web server for statistical purposes as a protocol to improve the quality of our web pages. This data set consists of

• the name and address of the requested content,
• the date and time of access,
• the transmitted data volume,
• the access status (content transmitted, content not found),
• the description of the web browser and operating system used,
• the referral link, which indicates which page linked you to ours,
• the IP address of the requesting computer, which is shortened so that a personal identification is no longer possible.

The specified protocol data will only be evaluated anonymously. The legal basis for processing usage data is Article 6(1) sentence 1 letter f of the GDPR. Processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimised display.

Storage of the IP address for security purposes

In addition, we store the complete IP address transmitted by your web browser strictly for the purpose of detecting, limiting and eliminating attacks on our websites for a period of seven days. After this period of time we delete or anonymise the IP address. The legal basis is Art. 6 para. 1 sentence 1 letter f GDPR.

Necessary Cookies

We use cookies on our websites that are necessary for the use of our website or for the use of the function (configurator). Cookies are small text files which can be stored and read out on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond an individual session. We do not use these necessary cookies for analysis, tracking or advertising purposes.

In some cases, these cookies only contain information on certain settings and cannot be traced back to individuals. They may also be necessary to enable user guidance, security and implementation of the site. We use these cookies on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser to inform you about the use of cookies. This ensures that the use of cookies is transparent for you. You can also delete cookies at any time using the appropriate browser settings and prevent the use of new cookies. Please note that our web pages may then not be able to be displayed and some functions may no longer be available for technical reasons.

Consent banner

On our websites, we use a consent management platform (consent or cookie banner). The processing related to the use of the consent management platform and the logging of the settings you have made is based on Art. 6 para. 1 sentence 1 lit. f GDPR, in our legitimate interest to display our content according to your preferences and to be able to prove your consent(s). The settings you have made, the consents you have given and parts of your usage data are stored in a cookie. This ensures that it remains intact for subsequent page requests and that your consent can still be traced. Further information can be found under the heading "Required cookies".

Traffic management

We use web analysis tools to design our websites according to your needs. This creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In addition, we may also access recognition features on your browser or end device (e.g. a so-called browser fingerprint or your unabridged IP address). This enables us to recognise returning visitors and count them as such.

In addition, we use the following functions for traffic management:

• We supplement the anonymous data with additional data provided by third parties. In this way, we are able to record demographic characteristics of our visitors, such as age, gender and place of residence.
• We use a recognition method that allows us to record and subsequently evaluate the mouse pointer movement of our visitors.
• We use contextual data, including usage history on other sites with cookies also enabled, to create exploratory click paths and browsing behaviour analyses.

Data processing is carried out on the basis of your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. Within the scope of the Google Analytics service, Google Ireland Limited supports us as a processor in accordance with Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with other sub-processors. Data processing is carried out on the basis of your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do this, please follow the link at the bottom of our page and make the appropriate settings via our banner.

Which third-party providers do we use in this context?

Third-party tracking technologies for advertising purposes

We use cross-device tracking technologies so that, based on your visit to our websites, targeted advertising can be displayed to you on other websites (e.g. on external business portals) and we can determine how effective our advertising measures were or place tailored advertisements on third-party websites. Data processing is carried out on the basis of your consent, provided that you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does tracking work?

When you visit our websites, it is possible that the third party providers listed below may access recognition features of your browser or end device (e.g. a so-called browser fingerprint), evaluate your IP address, store or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels. The tracking we provide takes place exclusively on our website.

The individual features can be used by the third-party providers to recognise your end device on other websites. We may commission the display of advertisements from the relevant third party providers based on the pages visited on our website.

What does cross-device tracking mean?

If you log on to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. For example, if the third-party provider has created a separate feature for each of the laptops, desktop PCs, smartphones or tablets you use, these individual features can be assigned to each other when you use a third-party service with your credentials. This allows the third-party provider to effectively manage our advertising campaigns across different end devices.

Configurator (selection wizard)

Our website features a configurator that allows you to create customised installation designs. You decide at any time which data you wish to provide.

We collect and process the data you provide and transmit to us in the configurator (such as your email address or the DWG drawing) exclusively for the purpose of fulfilling the contract or for pre-contractual measures in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR in order to be able to provide you with a tailor-made offer. The data is also used for the subsequent building services engineering planning phase. If we request further personal data in this context, this data processing will be carried out within the scope of legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. This data will be deleted as soon as the purpose for which it was collected no longer applies and statutory retention obligations have expired.

Integration of other technical third-party content and functions

We use the technical functions and contents of third party providers listed below to display our websites.

Opening our pages leads to the downloading of content from third party providers who provide these functions and contents. This informs the third party provider that you have accessed our site and the technical usage data required in this context. We have no influence on any further data processing carried out by the third party provider. The embedding is based on Art. 6 para. 1 sentence 1 lit. f GDPR and in the interest of making our website as appealing and informative as possible. Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA).

For transfers to the USA, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

Other processors

Within the scope of processing in accordance with Art. 28 GDPR, we pass on your data to service providers who support us in the operation of our websites and related processes. These are e.g. hosting service providers. Our service providers are strictly bound by our instructions and the corresponding contractual obligations. In the following, we will name the processors with whom we work, if we have not already done so in the above text of the data protection declaration. If data may be processed outside the EU or the EEA within this framework, we will inform you of this in the table below.

Storage duration

Unless we have already informed you about the storage period in detail, we will delete personal data if it is no longer required for the above-mentioned processing purposes and no legal storage obligations prevent deletion.

When processing your personal data, the GDPR grants you certain rights as a data subject:

Right of access (Art. 15 GDPR)

You have the right to obtain information as to whether your personal data has been processed; if this is the case, you have the right to access this personal data and the information specifically listed in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to obtain the immediate rectification of incorrect personal data concerning you, and where necessary to request the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to demand that personal data relating to you is erased immediately if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of the examination by the controller.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed specifically in Art. 20 GDPR, you have the right to receive your personal data in a structured, common and machine-readable format, and/or request transmission of this data to a third party.

Right of withdrawal (Art. 7 GDPR)

If data is processed on the basis of your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the withdrawal only applies to the future. Processing that took place before the withdrawal is not affected.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 para. 1 sentence 1 letter f GDPR (data processing to safeguard legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 letter e GDPR (data processing to safeguard public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data, unless there are demonstrable and compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing is carried out in order to assert, exercise or defend legal claims.

Right to lodge an appeal with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR, if you believe the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State in which you are habitually resident, in which you work, or in which the alleged violation took place.

Unless otherwise described above, please contact the party named in the Legal Notice to assert your rights.

Contact details for the Data Protection Officer

Our external data protection officer will be happy to provide you with information on data protection via the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

If you contact our data protection officer, please also indicate the responsible party named in the Legal Notice.