Privacy Policy

Information on the handling of personal data

We are very pleased about your interest in our website – and thus in our company. The protection of your personal rights and freedoms is important to us; we only use your data for the purposes intended. Because it is important to us that you are always aware of how we collect, use, and potentially share your data with third parties, we provide you with comprehensive information below on how we process your personal data collected by us or stored by us.

Visiting our website is generally possible without providing any (personal) data; if there are exceptions to this for selected services, we will explain these in the following sections. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and, where applicable, other data protection-related regulations.

Name and address of the controller

• Company Name : Kantar Heizung und Bad GmbH
• General Manager : Aysegül Kablan Kantar
• Address : Kurfürstendamm 224 D-10719 Berlin
• Registration : Amtsgericht Charlottenburg, HRB 271480
• VAT-IdNr.: DE454715482
• E-Mail: info@conforta.de

Rights of the data subject

The General Data Protection Regulation (GDPR) guarantees every data subject certain rights with regard to their personal data. These include:

• The right to information: Every data subject has the right to obtain confirmation from us as to whether personal data is being processed and to access this data, as well as further information and copies of this data.
• The right to rectification: Every data subject has the right to request the immediate rectification of inaccurate personal data.
• The right to erasure (“right to be forgotten”): Every data subject has the right to request the immediate erasure of his or her personal data.
• The right to restriction of processing: Every data subject has the right to request the restriction of the processing of his or her personal data.
• The right to data portability: Every data subject has the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format.
• The right to object: Every data subject has the right to object at any time to the processing of personal data concerning him or her based on Art. 6 (1) (e) or (f) GDPR, for reasons related to his or her particular situation. If we process personal data concerning the data subject for direct marketing purposes, the data subject may object to such processing pursuant to Art. 21 (2) and (3) GDPR.
• Right to revoke data protection consent: Every data subject has the right to withdraw consent to the processing of personal data at any time.

The data subject also has the right to lodge a complaint with a supervisory authority if he or she considers that the processing of his or her personal data violates the GDPR.

The supervisory authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit

General information on the legal basis for data processing 

"Personal data" is all information relating to a specific individual. We process this data in accordance with applicable data protection laws, in particular the GDPR and the BDSG (German Federal Data Protection Act). We may only process personal data if one of the following legal permissions applies:

Storage period of personal data

We only store your data for as long as necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations, unless otherwise stated in the following information. Statutory retention periods may arise from commercial or tax law regulations. After the end of the calendar year in which we collected the data, we will retain personal data contained in our accounting documents for ten years and personal data contained in business letters and contracts for six years. Furthermore, we will retain data related to verifiable consents, as well as complaints and claims, for the duration of the statutory limitation periods. Data stored for advertising purposes will be deleted if you object to processing for this purpose.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information – as shown in the table below:

Information about specific data processing on the website

Where applicable, deviating from or supplementing the general information above, you will find details below regarding individual data processing on our website.

Cookies

We use cookies on this website; these are small text files that are placed or saved on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies serve to ensure the security of your data or the website, and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that allows websites and servers to be assigned to the saving browser.

Cookies that are necessary to transmit a message over a public telecommunications network and cookies that are absolutely necessary to provide you with a function you have expressly requested are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies require your consent (Section 25 (1) TDDDG); if necessary, this is regulated by our consent management platform.

We use some cookies only for the duration of your visit to the website, some for a predefined period, and some permanently. You can delete all of these cookies at any time, either manually or automatically, via your web browser.

Our services may be used without cookies (although they may not be fully functional). Most browsers are set to accept cookies automatically. However, you can disable cookies or configure your browser to notify you when cookies are sent.

Contact form

Our contact form is used to process and, if necessary, answer inquiries from form senders. Processing is carried out to fulfill a contract in accordance with Art. 6 (1) (b) GDPR if the inquiry serves to clarify a contractual relationship. For all other inquiries, processing is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, as we are interested in responding to your inquiry quickly.

The data will not be transferred to third parties and/or to a third country and this is not planned.

The duration of data storage is determined by the general data deletion periods. There is no obligation to provide personal data, and there are no consequences for not providing the required data. We do not use automated decision-making in this context.

The data comes directly from the data subject. No specific categories of personal data are collected.

There is no planned change of purpose.

Customer account and product order

When you create a customer account and order products, we collect certain personal data to fulfill the contract with you. This includes your title, first name, last name, street, house number, postal code, city, country, and optionally your date of birth for unique identification of the customer account, processing the product purchase, delivery, payment transactions, and handling complaints.

We also collect your email address and a password for authentication and self-reset passwords. Providing your phone number is optional and will be used to contact you by phone.

The legal basis for processing this data is the fulfillment of the contract pursuant to Art. 6 (1) (b) GDPR. If necessary, we will share your data with parcel delivery providers, logistics service providers, and payment service providers. Data transfer to a third country does not occur and is not planned.

The duration of data storage depends on the general data deletion periods. Providing the data in the mandatory fields is contractually required. Without this information, creating a customer account is not possible.

We do not use automated decision-making in this context, and the data either comes directly from the data subject or has been provided by him or her.

There is no planned change of purpose.

User-Login

Our user login allows users to access certain functions or content on our website. Usernames and passwords are processed for the purpose of authentication and granting access.

The legal basis for this processing arises from the protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR, as well as the fulfillment of a contract in accordance with Art. 6 (1) (b) GDPR and the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR.

Your data will not be passed on to third parties, and there are no plans to transfer it to a third country.

The duration of data storage depends on the general data deletion periods. There is an obligation to provide personal data, as without this data, no user account can be created. Failure to provide the required data will result in the inability to create a user account.

There is no automated decision-making in this context, and the data comes directly from you.

There is no planned change of purpose.

Google Maps

We use Google Maps to provide maps on our website. The associated personal data is processed based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. The data may be forwarded to Google Ireland Limited, Google LLC, and Alphabet Inc. in the United States of America, where it may be transferred, stored, and processed.

The data transfer is based on the standard contractual clauses of the EU Commission, and Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

The duration of data storage depends on the general deadlines for data deletion.

The data typically originates from the data subject, but can also originate from third parties. Possible categories of personal data include IP address, date and time of visit, location information, URL, usage data, search terms, geographic location, and user agent.

The provider’s data protection officer can https://support.google.com/policies/contact/general_privacy_formkontaktiert Further information on data processing by Google can be found here: https://business.safety.google/privacy/ 

Google Fonts

We use Google Fonts to provide fonts on our website. The processing of the associated personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. If necessary, the data will be forwarded to Google Ireland Limited, Google LLC, and Alphabet Inc. in the United States of America, where it may be transferred, stored, and processed.

The data transfer is based on the standard contractual clauses of the EU Commission, and Google LLC is certified according to the EU-US Data Privacy Framework (DPF).

The duration of data storage depends on the general deadlines for data deletion.

The data usually originates from the data subject, but can also originate from third parties. Possible categories of personal data include IP address and the date and time of the visit.

The provider’s data protection officer can https://support.google.com/policies/contact/general_privacy_formkontaktiert Further information on data processing by Google can be found here: https://business.safety.google/privacy/ 

Google AdSense

This website uses Google Adsense, a web advertising service provided by Google Inc., USA ("Google"). Google Adsense uses so-called "cookies" (text files) that are stored on your computer and that enable an analysis of your website use. Google Adsense also uses so-called "web beacons" (small invisible graphics) to collect information. By using the web beacon, simple actions such as visitor traffic on the website can be recorded and collected. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the USA. Google will use this information to evaluate your use of the website with regard to the advertisements, to compile reports on website activity and advertisements for website operators, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where third parties process the data on Google's behalf. Google will never associate your IP address with any other data held by Google. You can prevent cookies from being saved on your hard drive and web beacons from being displayed by selecting "do not accept cookies" in your browser settings (in MS Internet Explorer under "Tools > Internet Options > Privacy > Settings"; in Firefox under "Tools > Settings > Privacy > Cookies"); however, we would like to point out that in this case you may not be able to use all of the functions of this website to their full extent. By using this website, you consent to the processing of the data collected about you by Google in the manner and for the purposes set out above.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Google will never associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can withdraw your consent to the collection and storage of your data at any time.widersprechen.

This website uses Google Analytics with the additional function "anonymizeIP()." This means that IP addresses are not stored and processed in their entirety, but only in abbreviated form to prevent direct inference to the individual.

TrustedShops

TrustedShops is used to collect and provide product reviews. The associated personal data is processed based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.

If necessary, the data will be forwarded to Trusted Shops AG, Subbelrather Straße 15c, 50823 Cologne, Germany, and processed there.

The duration of data storage depends on the general deadlines for data deletion.

The data usually comes directly from the data subject. The possible categories of personal data include for collection: Unique ID, Anonymous ID of the order process, Order number, Browser information, Device operating system, URL, Date and time of visit, User name, Email address, User agent, IP address and for delivery: User agent, IP address, Timestamp.

You can contact TrustedShops’ data protection officer atprivacy@trustedshops.com Further information on data processing can be found here:https://www.trustedshops.com/de/legal/datenschutz