Privacy Policy
Privacy Policy
Below, we inform you about the processing of your personal data in the context of using our online services.
Responsable
IPROJEX GmbH
Hohe Bleichen 12
20354 Hamburg
Phone: +49 40 4230 7677
Fax: +49 4103 967 2339
Email: info@thermalhero.com
Contact
For questions regarding data protection, please contact the contact information provided above.
Storage Duration
We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.
If we have requested your consent and you have granted it, we will delete your personal data if you revoke your consent and there is no other legal basis for the processing.
We will delete your personal data if you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for direct marketing purposes or related profiling.
If deletion is not possible because processing is still necessary to fulfill a legal obligation (e.g., statutory retention periods) to which we are subject or for the establishment, exercise, or defense of legal claims, we will restrict the processing of your personal data.
You can also find further information on storage duration in the following sections.
Your Rights
You have the following rights concerning your personal data:
– Right to information
– Right to rectification
– Right to erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR (German DS-GVO), including profiling based on those provisions. We will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. We will no longer process your personal data for these purposes.
You have the right to withdraw your consent to the processing of your personal data at any time if you have given us your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by us.
Provision of Your Personal Data
The provision of your personal data is generally neither legally nor contractually required, nor necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. If this should be the case, we will inform you separately when collecting your personal data (e.g., by marking the mandatory fields in input forms).
Failure to provide your personal data will generally result in us not processing your personal data for any of the purposes described below, and you will not be able to take advantage of an offer related to the respective processing (example: without providing your email address, you will not receive our newsletter).
Web Hosting
We use external services for web hosting. These services may have access to personal data processed in the context of using our online services.
Security
For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this by the string “https://” and the lock symbol in the browser bar.
Contact
If you contact us, we will process your personal data to handle your request.
If we have requested your consent and you have granted it, the legal basis for the processing is Article 6.
If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6(1)(a) of the GDPR (German DS-GVO). If we have not asked for your consent, the legal basis for the processing is Art. 6(1)(f) of the GDPR (German DS-GVO). Our legitimate interest is the processing of your contact request. If the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures at your request, the additional legal basis for the processing is Art. 6(1)(b) of the GDPR (German DS-GVO).
For the provision and maintenance of our email accounts, we use external services. These services may have access to personal data processed in the context of contacting us.
Cookies and Similar Technologies
Cookies are used on our website. Cookies are text information stored on your device. a distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are deleted after a certain period of time.
In addition to cookies, similar technologies such as tracking pixels and web beacons may also be used. The following information on cookies also applies to similar technologies. These explanations also apply to other processing activities related to cookies and similar technologies (analytics, marketing, etc.). This also applies to any consent you may have given for the use of cookies, which also extends to other technologies and processing activities related to cookies and similar technologies.
Cookies can be used to enable certain functions. Cookies can also be used to measure the reach of our online offerings, tailor them to your needs and interests, and optimize our online offerings and marketing. Cookies can be used by us and by external services.
We use a consent tool to manage the cookies used and related consents. Details of the cookies used (purpose, storage period, external services, etc.) and the consent tool we use can be found in the following sections.
If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6(1)(a) of the GDPR (German DS-GVO). If we have not asked for your consent, the legal basis for the processing is Art. 6(1)(f) of the GDPR (German DS-GVO). Our legitimate interest is the management of the cookies used and related consents. Depending on the purpose of the processing, our legitimate interests can be found in the following sections.
You can prevent the storage of cookies by adjusting your browser settings. We provide links for typical browsers below, where you can find further information on managing cookie settings:
– Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
– Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
– Internet Explorer / Edge: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
– Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
– Opera: https://help.opera.com/en/latest/web-preferences/#cookies
– Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html
You can find further opt-out options at the following links: https://www.youronlinechoices.eu/ , https://youradchoices.ca/en/tools , https://optout.aboutads.info/?c=2&lang=EN , and https://optout.networkadvertising.org/?c=1 .
Please note that if you prevent the storage of cookies, the proper functioning of our online offerings may be impaired. If you delete all cookies, the above settings will be lost and will need to be re-applied.
Furthermore, you can activate the “Do-Not-Track” function of your browser to indicate that you do not want to be tracked. There are links below for typical browsers where you can find further information on how to enable the “Do-Not-Track” setting:
– Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
– Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
– Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
– Opera: https://help.opera.com/de/latest/security-and-privacy/
– Safari no longer supports the “Do-Not-Track” function since February 2019. However, you can prevent cross-site tracking in Safari by following this: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
– Yandex: https://browser.yandex.com/help/personal-data-protection/ytp.html
You can also revoke or manage your consent regarding the used cookies through the consent tool provided by us.
Newsletter
If we have requested your consent and you have given it, we process your email address for email marketing purposes and may process additional personal data to address you personally. The legal basis for the processing is Article 6(1)(a) of the GDPR (German DS-GVO). The content of the email marketing will be specifically described when obtaining your consent. Furthermore, the email marketing contains information about us, our products, and services.
We use the double-opt-in procedure to prevent potential misuse of your personal data. After collecting your email address, we will send you an email to the address provided, asking for confirmation that you indeed wish to receive email marketing. The legal basis for this processing is Article 6(1)(f) of the GDPR (German DS-GVO). Our legitimate interest is to carry out email marketing in compliance with the law.
We log the time of your consent, the time of your confirmation, your IP address, and the content of your consent statement to demonstrate the lawful obtaining of your consent. The legal basis for this processing is Article 6(1)(f) of the GDPR (German DS-GVO). Our legitimate interest is to carry out email marketing in compliance with the law.
You can revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out based on the consent before its revocation. To revoke your consent, you can use the provided link in the emails or contact us using the contact information provided above.
If you have revoked your consent, we reserve the right to process your personal data in a blacklist/blocklist to ensure that no further email marketing is conducted in relation to this personal data. The legal basis for this processing is Article 6(1)(f) of the GDPR (German DS-GVO). Our legitimate interest is to avoid unwanted email marketing.
Analytics & Marketing
We process your personal data to measure the reach of our online offering, tailor it to your needs and interests, and optimize our online offering and marketing.
If we have requested your consent and you have given it, the legal basis for the processing is Article 6(1)(a) of the GDPR (German DS-GVO). If we have not requested your consent, the legal basis for the processing is Article 6(1)(f) of the GDPR (German DS-GVO)
. Our legitimate interest is to optimize our online offering and marketing.
We use external services for analysis and marketing purposes, which may involve profiling (for advertising, personalized information, etc.). Profiling may also occur across different services and devices. For more information about the services used, the scope of data processing, the technologies and procedures used, whether profiling takes place, and if applicable, information about the involved logic, the significance, and the intended consequences of such processing for you, please refer to the detailed information about the services used provided at the end of this passage and the links provided there.
For further information on cookies and similar technologies, please refer to the information above.
Facebook-Pixel with Custom Audiences
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com/business/help/744354708981227?id=2469097953376494
Further information & privacy: https://www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224 , https://www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, https://www.facebook.com/privacy/policy/ , https://de-de.facebook.com/policies/cookies/ , https://www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
Facebook-Pixel with Custom Audiences and Advanced Matching
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com/business/help/744354708981227?id=2469097953376494
Further information & privacy: https://www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224 , https://www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE , https://de-de.facebook.com/business/help/611774685654668, https://www.facebook.com/privacy/policy/ , https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp, and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
Google Ads Conversion Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information & privacy: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Google Ads Enhanced Conversions
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/9888656?hl=de
Further information & privacy: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Google AdSense
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.com/intl/de_de/adsense/start/
Further information & privacy: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Google Analytics
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information & privacy: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Google Analytics 360
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Gordon House, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/about/analytics-360/
Further information & privacy: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Google Analytics 4
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further information & privacy: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and Google’s responsibility, please refer to the following link: [Link](https://business.safety.google/gdpr/). You can view a copy of the EU Standard Contractual Clauses there.
LinkedIn Insight Tag
Provider: If you are located in the EU, European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn
Ireland Unlimited Company, Ireland. If you are located outside of the EU, European Economic Area (EEA), or Switzerland,
This service is provided by LinkedIn Corporation, United States of America. The website for LinkedIn Insight Tag is https://business.linkedin.com/marketing-solutions/insight-tag , and you can find additional information and privacy details https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie-policy . The data transfer is covered by EU Standard Contractual Clauses, and you can request a copy of these clauses from LinkedIn.
LinkedIn Retargeting:
Provider: If you are located in the EU, European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside of the EU, EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/marketing-solutions/ad-targeting/retargeting
Further information & privacy: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie-policy
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from LinkedIn.
LinkedIn Website Demographics:
Provider: If you are located in the EU, European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside of the EU, EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/marketing-solutions/website-demographics
Further information & privacy:
https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie-policy
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from LinkedIn.
Social Media Presence:
We maintain social media presence on external platforms to communicate with users and optimize our online presence and marketing. This privacy policy also applies to the following social media platforms:
If we have asked for your consent and you have provided it, the legal basis for processing is Article 6(1)(a) of the GDPR (German DS-GVO). If we have not asked for your consent, the legal basis for processing is Article 6(1)(f) of the GDPR (German DS-GVO), and our legitimate interest is to optimize our online presence and marketing.
When using external platforms, profiling (for advertising, personalized information, etc.) may also occur. Profiling may also be cross-platform and cross-device. For more information about the services used, the extent of data processing, the technologies and procedures used by these services, and whether profiling takes place, including information about the logic involved, the significance, and the intended consequences for you, please refer to the additional information about the services we use below and the provided links.
Facebook:
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
The provider and we are joint controllers. We have entered into an appropriate agreement with the provider, and you can view this agreement https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum .
Further information & privacy:
https://developers.facebook.com/docs/plugins/ , https://www.facebook.com/legal/terms/information_about_page_insights_data , https://www.facebook.com/privacy/policy/ , https://www.facebook.com/policies/cookies/ , https://www.facebook.com/help/566994660333381?ref=dp , and https://www.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
Instagram:
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information & privacy:
https://help.instagram.com/581066165581870) and https://help.instagram.com/519522125107875)
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
LinkedIn:
Provider: If you are located in the EU, European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside of the EU, EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & privacy:
https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie-policy Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
WhatsApp:
Provider: If users reside in a country in the European Economic Area (including the European Union) or any other included country or territory (collectively referred to as the European Region), the service is provided by WhatsApp Ireland Limited, Ireland. If users reside in any country outside the European Region, the service is provided by WhatsApp LLC, United States of America.
Website: https://www.whatsapp.com/
Further information & privacy: https://www.whatsapp.com/privacy https://www.whatsapp.com/legal/ , and https://www.whatsapp.com/legal/privacy-policy-eea
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
YouTube:
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America. Website: https://www.youtube.com
Further information & privacy: https://policies.google.com/?hl=en
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and the responsibility of Google, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
Social media content/plugin
We use social media content/plugins from external services to display content and features of these external services and to optimize our online offering and marketing.
If we have requested your consent and you have given it, the legal basis for processing is Art. 6(1)(a) of the GDPR. If we have not requested your consent, the legal basis for processing is Art. 6(1)(f) of the GDPR. Our legitimate interest is the optimization of our online offering and marketing.
As part of the use of external services, profiling (for advertising, personalized information, etc.) may also occur. Profiling may also be cross-platform and cross-device. For further information on the services used, the extent of data processing, the technologies and procedures used with the respective services, as well as whether profiling takes place with the use of the respective services, and if so, information about the involved logic, significance, and intended consequences for you, please refer to the further information about the services we use at the end of this passage and the provided links.
To protect your personal data, we use Shariff. You can find more information about Shariff at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
Further information & privacy:
https://developers.facebook.com/docs/plugins/ , https://www.facebook.com/privacy/policy/ , https://www.facebook.com/policies/cookies/ , https://www.facebook.com/help/566994660333381?ref=dp , and https://www.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information & privacy: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
LinkedIn
Provider: If you are located in the EU, European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside of the EU, EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & privacy: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
Vimeo
Provider: Vimeo, Inc., United States of America.
Website: https://vimeo.com/
Further information & privacy: https://vimeo.com/privacy
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
WhatsApp
Provider: If users reside in a country in the European Economic Area (including the European Union) or any other included country or territory (collectively referred to as the European Region), the service is provided by WhatsApp Ireland Limited, Ireland. If users reside in any country outside the European Region, the service is provided by WhatsApp LLC, United States of America.
Website: https://www.whatsapp.com/
Further information & privacy: https://www.whatsapp.com/privacy, https://www.whatsapp.com/legal/ , and https://www.whatsapp.com/legal/privacy-policy-eea
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.
YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information & privacy: https://policies.google.com/?hl=en
The transfer of personal data to third countries depends on the specific Google service and is subject to the various EU Standard Contractual Clauses offered by Google. For more information on this and the responsibility of Google, please refer to the following link: https://business.safety.google/gdpr/ . You can view a copy of the EU Standard Contractual Clauses there.
This privacy policy was created with the configurator from getLaw.de.