DATA PRIVACY INFORMATION

This privacy statement informs you about how we treat your data. To make the processing of your data transparent, we would like to provide you with the following information to give you an overview of these processing operations. To keep things fair, we additionally want to inform you about your rights pursuant to the EU-General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

We will inform you in detail about
I. General Information
II. Data Processing on our Website
III. Data Processing on our Social Media
IV. Further Data Processing

Landwärme GmbH is the controller of the data processing (hereinafter referred to as ‘we’ or ‘us’).

 

I. General Information

 

1. Contact

If you have any questions or feedback concerning this information or wish to contact us to exercise your rights, please send your enquiry to
Landwärme GmbH
Ungererstr. 40
80802 München
Germany
Tel.: +49 89 24 88 200 11
E-Mail: info@landwaerme.de
Website: www.landwaerme.de

 

2. Legal Basis

The data protection term “personal data” refers to all information that relates to an identified or identifiable person.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal authorisation. We only process personal data with your consent (§ 25 section 1 TTDSG or Art. 6 section 1 letter a) GDPR), for the fulfilment of a contract to which you are a party or at your request for the implementation of pre-contractual measures (Art. 6 section1 letter b) GDPR), for the fulfilment of a legal obligation (Art. 6 section 1 letter c) GDPR) or if processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 section 1 letter f) GDPR).

If you apply for an open position in our company, we will, additionally, process your personal data to decide on whether to hire you (section 26 para. 1 sentence 1 BDSG).

 

3. Period of Storage

Unless otherwise stated in the following, we will only store your data for as long as required to achieve the intended processing purpose or to fulfil our contractual or statutory obligations. In particular, such statutory retention requirements may result from regulations under commercial or tax law. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting data for ten years and personal data contained in commercial letters and contracts for six years.

 

4. Recipients of Data

For certain processing activities, we rely on service providers. These processing activities include, for example, hosting, maintenance and support for IT systems, customer and client management, accounting, marketing or destruction of paper files and data carriers. A ‘processor’ is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Processors process data not for their own purposes but solely for the controller and are contractually obliged to implement appropriate technical and organizational measures ensuring data protection.

Apart from that, we may transfer your data to postal and delivery services, our bank, consultants/auditors or the fiscal authority if necessary.

Should your data be transferred to further recipients, you can find this information under the description of the respective processing activity.

 

5. Data Transfer to third countries

Our data processing may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permitted if the European Commission has determined that an adequate level of data protection is required in such a third country. If there is no such adequacy decision by the European Commission, personal data will only be transferred to a third country if there are suitable guarantees in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

If there is no adequacy decision and nothing else is specified below, we use the EU standard data protection clauses as suitable guarantees for the transfer of personal data to third countries. You have the option of obtaining or viewing a copy of these EU standard data protection clauses. Please contact us at the address given under Contact.

If you consent to the transfer of personal data to third countries, the transfer takes place on the legal basis of Art. 49 section 1 letter a) GDPR.

 

6. Processing in the Exercise of your Rights pursuant to Art. 15 to 22 GDPR

If you exercise your rights pursuant to Art. 15 to 22 GDPR, we process the personal data transferred in order for us to grant you your rights and to acquire proof thereof. For the purpose of providing information and preparing such information, we will process the stored data only for this purpose as well as for purposes of data protection control and otherwise restrict processing in accordance with Art. 18 GDPR. These processing operations are based on Art. 6 section 1 letter c) GDPR in combination with Art. 15 to 22 GDPR and section 34 para. 2 BDSG.

 

7. Your rights

As the data subject, you are entitled to exercise your rights against us. In particular, you have the following rights:

  • Pursuant to Art. 15 GDPR and section 34 BDSG, you have the right of access to information confirming whether and, if so, to what extent we are processing personal data concerning you.
  • Pursuant to Art. 16 GDPR, you have the right to rectification of your data.
  • Pursuant to Art. 17 GDPR and section 35 BDSG, you have the right to erasure of your personal data.
  • Pursuant to Art. 18 GDPR, you have the right to require us to restrict the processing of your personal data.
  • Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transfer such data to another controller.
  • Where you have granted us specific consent to a processing activity, you can withdraw such consent at any time pursuant to Art. 7 section 3 GDPR. Any such withdrawal of consent shall not affect the lawfulness of processing based on that consent prior to its withdrawal.
  • If you are of the view that the processing of your personal data infringes GDPR provisions, you have the right to lodge a complaint with a supervisory authority pursuant to Art.77 GDPR.

 

8. Right to object

Pursuant to Art. 21 section 1 GDPR, you have the right to object to processing activities based on Art. 6 section 1 letter e) or letter f) GDPR on grounds relating to your particular situation. If we process your personal data for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 section 2 and section 3 GDPR.

 

9. Data protection officer

You can contact our data protection officer via the following address:
E-Mail: datenschutzbeauftragter@landwaerme.de
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
www.datenschutzkanzlei.de

 

 

II. Data processing on our website

 

During use of our website, we collect information that you provide yourself. We also automatically collect certain information about your use of the site during your visit to the site. In data protection law, the IP address is also considered personal data. An IP address is assigned to each device connected to the internet by the internet provider so that it can send and receive data.

 

1. Processing of Server-Log-Files

When using our website for informative purposes only, general information that your browser transfers to our server is initially stored automatically (not via registration). This includes by default: browser type/-version, operating system used, page called, the previously visited page (referrer URL), IP address, date and time of server request and HTTP status code. The processing is carried out in pursuit of our legitimate interests and is based on Art. 6 section 1 letter f) GDPR. This processing serves the technical administration and security of the website. The data collected will be deleted after eight weeks unless there is a justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are unable to identify you as a data subject based on the information collected. Art. 15 to 22 GDPR therefore do not apply pursuant to Art. 11 section 2 GDPR, unless you provide additional information to enable your identification in order to exercise the rights set out in these articles.

 

2. Cookies

We use cookies and similar technologies (“cookies”) on our website. Cookies are small data records that are stored by your browser when you visit a website. This identifies the browser used and can be recognised by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in the security settings of your browser. You can object to the use of cookies through your browser settings in principle or for certain cases.

The use of cookies is in part technically necessary for the operation of our website and is therefore permitted without the user’s consent. We may also use cookies to offer special functions and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with § 25 section 1 TTDSG and, if applicable, Art. 6 section 1 letter a) GDPR.

Information on the purposes, providers, technologies used, stored data and the storage duration of individual cookies can be found in the cookie settings of our Consent Management Tool.

 

3. Consent Management Tool

This website uses the Borlabs Consent Management Tool from Borlabs GmbH (Germany, EU) to control cookies and the processing of personal data.

The consent banner enables users of our website to give their consent to certain data processing operations or to withdraw their consent. By confirming the “I accept” button or by saving individual cookie settings, you consent to the use of the associated cookies.
The legal basis under data protection law is your consent within the meaning of Art. 6 section 1 letter a GDPR.

The banner also helps us to be able to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and other log data relating to this declaration. Cookies are also used to collect this data. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 section 1 letter c in conjunction with Art. 7 section 1 GDPR).

 

4. Google Analytics

We use the Google Analytics service provided by Google Ireland Limited (Ireland, EU) on our website.

Google Analytics is a web analytics service that enables us to collect and analyse data about user behaviour on our website. Google Analytics enables us to measure interaction data from different devices and from different sessions. This allows us to contextualise individual user actions and analyse long-term relationships.

Google Analytics uses cookies for this purpose, which enable us to analyse the use of our website. Personal data in the form of IP addresses, device identifiers and information about interaction with our website is also processed. Some of this data is information that is stored on the device you are using. In addition, further information is stored on your device via the cookies used.
Google Ireland will process the data collected in this way on our behalf in order to analyse the use of our website by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the Internet. Pseudonymised user profiles can be created from the processed data.

The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 section 1 letter a) GDPR. You can revoke this consent at any time via our Consent Management Tool with effect for the future.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is truncated by Google Ireland within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data. The IP address is truncated on servers in the EU.

The data on user actions is stored for a period of 2 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.

Further information on how Google uses data from websites or apps for advertising purposes can be found in Google’s information at: www.google.com/policies/technologies/ads/.

 

5. YouTube

We use the YouTube service of Google Ireland Limited (Ireland, EU) on our website to integrate videos. For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies. We use YouTube in “extended data protection mode” so that YouTube does not set any cookies to analyse user behaviour.

Your data is processed on the basis of your consent in accordance with Art. 6 section 1 letter a GDPR. Your consent is managed via our Consent Management and can be revoked at any time.

Further information on data protection at Google can be found in Google’s privacy policy at https://www.google.com/policies/privacy.

 

III. Data processing on our social media accounts

 

We are represented on several social media platforms with company accounts. In this way, we would like to offer additional options for information about our company and for dialogue. Our company has company accounts on the following social media platforms:

 

  • Facebook of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter “Meta“;
  • Instagram of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter “Meta“;
  • LinkedIn of LinkedIn Ireland Unlimited Company, (Ireland, EU), hereinafter “LinkedIn“;
  • XING of NEW WORK SE, (Germany, EU), hereinafter “XING“.

 

When you visit or interact with an account on a social platform, personal data about you may be processed. The information associated with a social media account used also regularly constitutes personal data. This also includes messages and statements made using the profile. In addition, certain information is often automatically collected during your visit to a social media account, which may also constitute personal data.

 

1. Data processing during the visit of a social media account

When you visit our social media accounts, which we use to present our company or products from our portfolio, certain information about you is processed. Sole controllers for this processing of personal data are the operators of the social media platforms. Further information on the processing of personal data can be found in their privacy policies, which we link to below:

 

 

The operators of the social media platforms collect and process event data and profile data and provide us with anonymized statistics and insights for our accounts, with help us to gain knowledge about the types of actions that people taken on our site (so-called “insights”). The insights are created based on certain information about people who have visited our site. This processing of personal data is carried out by the operators of the social media platforms and us as joint controllers. The processing serves our legitimate interest in analyzing the types of actions taken on our site and improving our site based on these findings. The legal basis for this processing is Art. 6 section 1 letter f) GDPR. We cannot assign the information obtained through insights to individual user profiles that interact with our accounts. We have entered into agreements with the operators of the social media platforms on processing as joint controllers, in which the distribution of data protection obligations between us and the operators is specified. Details on the processing of personal data for the creation of insights and the agreement concluded between us and the operators can be found at the following links:

 

 

You also have the option of asserting your against the operators. You can find further information on this under the following links:

 

We have agreed with Meta and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority for the processing for insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see https://www.dataprotection.ie/) or any other supervisory authority.

 

 

2. Communication via social media accounts

We also process information that you have made available to us via our company accounts on the respective social media platform. Such information may include the username used, contact details or a message to us. This processing is carried out by us as the sole controller. We process this data based on our legitimate interest in contacting enquiring persons. The legal basis for this data processing is Art. 6 section 1 letter f) GDPR. Further data processing may take place if you have given your consent (Art. 6 section 1 letter a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 section 1 letter c) GDPR).

 

 

IV. Further data processing

1. Contact via E-Mail

If you send us a message via our contact email address, we will process the transferred data in order to process the request. We process this data in pursuit of our legitimate interest to reach out to persons submitting requests. The legal basis for this is Art. 6 section 1 letter f) GDPR.

 

2. Contractual relationship

In order to establish and execute the contractual relationship with our customers, suppliers and business partners it is regularly necessary to process the master, contract and payment data provided to us. If we process personal data of our contact persons at commercial customers, suppliers and business partners in the course of this, this happens in pursuit of our legitimate interests and is based on Art. 6 section 1 letter f) GDPR. In addition, we process customer and potential customer data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 section 1 letter f) GDPR and serves our interest in further developing our product range and informing you specifically about products by Landwärme GmbH.

Further data processing can take place if you have consented (Art. 6 section 1 letter a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 section 1 letter c) GDPR).

 

3. Applications

When you apply for a position at our company, we process your application data exclusively for purposes related to your interest in current or future employment with us. Your application will only be processed and acknowledged by the responsible contact person. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you a position, we will retain the data you provide for up to two months for the purpose of potentially answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of presenting evidence or if you have expressly consented to longer storage. Legal basis for the data processing is section 26 para. 1 BDSG. If we keep your applicant data for a period of two months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 section 3 GDPR. Such a withdrawal of consent does not affect the lawfulness of the processing, which has taken place prior to the withdrawal.

 

4. Webinars

We organise online webinars for our customers and interested parties. The processing of personal data (name, e-mail address) is required for registration. If further data is processed during the webinar, we will inform you of this separately. The data provided may also be used to send materials relating to the webinar. The processing of the data provided is carried out for the purpose of providing the service and is based on the legal basis of Art. 6 section 1 letter b) GDPR.

We work with Anew Climate Europe GmbH and Anew Gas GmbH as a processor for the execution of the contract.

Last update: February 2025