Privacy Policy

1. Overview – privacy policy

General information

The following information gives a general overview on how your personal data is dealt with when you visit our online shop.

Personal data is all data that can be used to identify you.

Data collection on our website

Who is responsible for the data collection on this website?

The collection of data on this website is performed by the website owner. You will find the website owner’s address data on the imprint page.

How the data is collected

Data is collected through you entering it in our forms, such as the contact form or the checkout process. Additionally there is technical data collected automatically like your internet browser, operating system or the time of your visit.

What we use your data for

Most of the data is used to offer you a functional use of our website. The rest of the data is used to analyse the user experience on our website.

Your rights

You have the right to get information about the origin, recipient and purpose of your stored personal data. Additionally you have the right to have your data corrected, blocked or deleted. In that case or for any additional questions concerning our privacy policy you can contact us through our contact form or using our address data below.

Analytic tools and third-party tools

When visiting our website your surf behaviour can be analysed statisticly. This is made possible by storing cookies and using analytic tools. The analysis of your surf behaviour is usually made anonymously and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For more information please see the following privacy policy.

Responsible

Responsible for all data processing on this webiste is:

Thermopad GmbH
Rudolf-Diesel-Str. 11
72250 Freudenstadt

Germany

phone: +49 (0) 7441 93281-0
eMail: info@thermopad.de

Responsible is the natural or legal person who decides on the purpose and means of data processing.

Cancellation of your data processing consent

Many data processing steps are only possible with your explicit consent. You can cancel that consent at any time by sending us an informal message by eMail. The cancellation doesn’t restrict the legitimacy of the data processing before the cancellation.

Right of appeal

In case of violation of your data privacy the person concerned has the right of appeal at the regulating authority. The appropriate regulation authority for data privacy is the Landesdatenschutzbeauftragte of the federal state of our place of business. You can find a list of all data privacy representatives: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right of data transmission

You have the right to receive copies of the data collected with your permission or automatically in order to have them transmitted to other providers. If you want to have the data transmitted to another responsible person, we can only provide them in the correct format, given the technical possibility.

Encryption by SSL or TLS

In order to secure your data, we transmit all inquiries, orders or contact mails with SSL. You can check the encryption by looking at the URL – it should be “https://” instead of “http://” and your browser should show a lock symbol.

Encrypted payment transfer

If you place an order and choose one of the immediate payment methods like Paypal or credit card, you will be forwarded to those payment providers after ordering. You are connected immediately only to those payment providers, we receive no further data than the message that the payment has been made or has been cancelled.

Information, blocking, deletion

You have the right to get information about the origin and recipient of the data being processed, about the nature of data processing and complete copies of the collected data. When indicated you have the right to correct or complete the data or to request the immediate deletion of all your data. For any questions concerning information, blocking or deletion of your data please contact us.

Objection of spam mails

We object hereby to the use of our address data for the unsolicited use for advertising mails like spam mails. The right to take legal action is expressly reserved.

3. Data acquisition on our website

Cookies

This website uses cookies. Cookies are small text files stored on your computer by your browser. These cookies process certain information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

Most of the used cookies are session cookies which are deleted when you close your browser. Other cookies will be stored on your device until you delete them yourself.

In the settings of your browser you can specify how the browser will handle cookies. You can block them for specific sites or in general or have your browser ask you for every cookie. If you disable the cookies the functionality of our website may be limited.

Cookies which are needed for the electronic communication or functionalities you want to use (like the cart) are stored according to Art. 6 Abs. 1 lit. f DSGVO.

Server log files

The provider of this website collects and automatically stores information transfered by your browser in so called server log files.

These information are:

• type and version of browser
• operating system
• referrer URL
• hostname
• time of your visit
• IP-Adresse

These information will not be accumulated with other data.

This kind of data processing is according to Art. 6 Abs. 1 lit. b DSGVO.

Contact form

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We use this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

You can object to this kind of data processing at any time by an informal eMail. We will store your data until you request its deletion or the storage is no longer necessary.

Customer accounts

If you create a customer account with us via our website, we will use the data you entered during registration exclusively for services leading up to your potential placement of an order or entering some other contractual relationship with us, to fulfill such orders or contracts, and to provide customer care. We also store your IP address and the date and time of your registration. This data will not be transferred to third parties. The data collected by us will be used exclusively to provide your customer account.

If you give your consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for this processing.

If the opening of the customer account is also intended to lead to the initiation of a contractual relationship with us or to fulfill an existing contract with us, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR.

You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.

The data previously collected will then be deleted as soon as processing is no longer necessary. However, we must observe any retention periods required under tax and commercial law.

User posts, comments, and ratings

We offer you the opportunity to post questions, answers, opinions, and ratings on our website, hereinafter referred to jointly as “posts.” If you make use of this opportunity, we will process and publish your post, the date and time you submitted it, and any pseudonym you may have used.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. You may revoke your prior consent under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.

In addition, we will also process your IP address and email address. The IP address is processed because we might have a legitimate interest in taking or supporting further action if your post infringes the rights of third parties and/or is otherwise unlawful.

In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in any legal defense we may have to mount.

Order processing

The data you submit when ordering goods and/or services from us will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.

In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment.

Inquiries by E-Mail, telefone or telefax

If you contact us by eMail, telefone oder telefax, we will save your inquiry including all address datat in order to process your inquiry. We will not forward this data.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR if an order is the consequence of your inquiry and Art. 6 Abs. 1 lit. f GDPR as we are interested in processing your inquiry.

4. Analyse tools

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.

Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at

https://www.google.com/intl/de/policies/privacy/partners,

including options you can exercise to prevent such use of your data.

In addition, Google offers an opt-out add-on at

https://tools.google.com/dlpage/gaoptout?hl=en

in addition with further information. This add-on can be installed on the most popular browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs Google Analytics’ JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein.

Google AdWords and Google Conversion-Tracking

Our website uses Google AdWords and conversion tracking. This is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google).

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

We use conversion tracking to provide targeted promotion of our site. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

If you click on an ad placed by Google, the conversion tracking we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and do not otherwise identify you personally.

If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you clicked on one of our ads placed on Google and that you were then forwarded to our website.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. In addition, we receive information about the number of users who clicked on our advertisement(s) as well as about the pages on our site that are subsequently visited. Neither we nor third parties who also use Google AdWords will be able to identify you from this conversion tracking.

You can also prevent or restrict the installation of cookies by making the appropriate settings in your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

In addition, Google provides further information with regard to its data protection practices at

https://services.google.com/sitestats/de.html

http://www.google.com/policies/technologies/ads/

http://www.google.de/policies/privacy/

in particular information on how you can prevent the use of your data.

Facebook Pixel

In order to track the conversion rate from facebook visitors, our website uses the so called “Facebook pixel” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

With this code the we can track the behaviour of users who werde forwarded to our website from a facebook advertising. That way we can control the effectivity of facebook ads and optimize future advertising campaigns.

The data is anonymous for us, we can not identify the users. But the data will be stored and processed by Facebook itself and will be linked to your user profile. According to the Facebook privacy policy they can use the data for advertising purposes. We have no influence on this data use.

The use of the Facebook pixel is a “legitimate interest” in terms of Art. 6 Abs. 1 lit. f DSGVO.

For more information please see the privacy policy from Facebook: https://de-de.facebook.com/about/privacy/.

At  https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen you can deactivate the remaketing function “Custom Audiences”.

If you don’t have a facebook account you can deactivate the userbased advertising by Facebook at: http://www.youronlinechoices.com/de/praferenzmanagement/.

5. Newsletter

If you register for our newsletter offered on our website, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be stored by us. During the registration process, we will obtain your consent to receive this newsletter and the type of content it will offer, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties.

The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.

You can revoke your consent to receive the newsletter at any time, for instance by clicking on the “unsubscribe”-Link in the newsletter. The data stored to provide the newsletter will only be used for the newsletter and will be deleted after your revocation.

6. Plugins and tools

Trusted Shops Trustbadge

In order to display the Trusted Shops trustbadge and the collected user reviews and in order to offer the Trusted Shops services to our users, the so called Trusted Shops trustbadge is implemented in our website.

The trustbadge and the offered services are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln.

The implementation of the trustbadge is part of an appealing presentation of contents on our website and is therefor a “legitimate interest” in terms of Art. 6 Abs. 1 lit. f DSGVO.

When the trustbadge is displayed the server automatically stores a server logfile that contains your IP address, date and time of your visit, the transfered data and the internet provider. This data will not be analyzed and is stored only for 7 days. Further personal data is only transfered to Trusted Shops, if you use one of their services.

YouTube

Our website uses YouTube, a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA.

When you visit one of our sites with an YouTube-Plugin Google learns that our website has been visited by your IP address. If you are logged into your Youtube account, you enable Youtube to connect your surf behaviour to your account. You can prevent this by logging out of your account.

The use of Youtube videos is part of an appealing presentation of contents on our website and is therefor a “legitimate interest” in terms of Art. 6 Abs. 1 lit. f DSGVO.

For more information about the data privacy policy on Youtube.: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

This website uses Web Fonts, offered by Google.  In order to enable the display of these web fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed.

This way Google learns that our website has been visited by your IP address.  The use of Google Web Fonts is part of an appealing presentation of contents on our website and is therefor a “legitimate interest” in terms of Art. 6 Abs. 1 lit. f DSGVO.

If your browser blocks Web Fonts it will use a standard font from your computer. For more information about Google Web Fonts please see https://developers.google.com/fonts/faq and the Google data privacy declaration:  https://www.google.com/policies/privacy/.

Google Maps

This website uses Google Maps to display our location. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043.

In order to offer the functionality of Google Maps it is necessary to store your IP address. These information is usually transferred to a Google server in the US and stored there. The website owner has no influence on this data transfer.

The use of Google Maps is part of an appealing presentation of contents on our website and is offered to make it easier for the user to find our company. This is a “legitimate interest” in terms of Art. 6 Abs. 1 lit. f DSGVO.

For more information about the use of data by Google please see: https://www.google.de/intl/de/policies/privacy/.

7. Payment

PayPal

On our website we offer Paypal as a payment method. Provider of this payment method is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).

If you choose payment via Paypal, the payment data is transfered to Paypal. The transfer is made according to Art. 6 Abs. 1 lit. a DSGVO and Art. 6 Abs. 1 lit. b DSGVO.

You have the possibility to revoke your consent of this data processing. Your revocation doesn’t touch past data processings.

Parts of the text from Model Data Protection Statement for Anwaltskanzlei Weiß & Partner