Data privacy policy

Thank you for your interest in our online presence. The protection of your personal data is particularly important to us. Here we inform you about the handling of your personal data when using our websites. Personal data is all data with which you can be personally identified. Your data will be protected within the framework of the statutory provisions, in particular the EU General Data Protection Regulation (DSGVO). With regard to the terms used, such as " processor", "data subject" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (DSGVO).
See: dsgvo-gesetz.de

Responsible person
The person responsible for this website in the sense of the EU General Data Protection Regulation (DSGVO) is:
Proflamm Heiztechnik e.K.
Mr. Harald Boehmer
St.-Georgen-Str. 25
95463 Bindlach
info@proflamm.com
Phone: 09208/570990

Data encryption
To protect your personal data and other confidential content such as orders, we use the state-of-the-art encryption method TLS via HTTPS during transmission. This can be recognized by the lock symbol in your browser bar.

General server data
In order to view our online catalog, it is generally not necessary to provide personal data. On the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. DSGVO only data without personal reference in so-called server log files. The access data includes, for example, the name of your Internet service provider, the page from which you visit us, the names of the requested files with date and time of retrieval, amount of data transferred, browser type and version, your operating system used and the IP address masked (shortened). Our internet presence is stored at a hosting service provider, which provides us with computing capacity, storage space, infrastructure and platform services, database services and security services as well as technical maintenance services. We have concluded an order processing agreement with this provider. The data processing is carried out for the purpose of ensuring the operational readiness of our Internet presence, in which we have a legitimate interest, Art. 6 para. 1 lit. f DSGVO.

Collection of personal data
We process personal data only in the context of an ordering process in our online store system to enable you to order the selected products, as well as their payment and delivery, i.e. for the implementation and execution of the contract with you pursuant to Art. 6 para. 1 lit. b DSGVO. The processed data include, in addition to the e-mail address and company name, the name and address of the invoice recipient and, if applicable, the delivery address and data on the method of payment. Without your information we can not execute the order. Further information, such as phone/fax, is provided voluntarily. The legal basis for your voluntary information is Art. 6 para. 1 lit. a DSGVO. The personal data required for delivery will be passed on to the transport company commissioned with the delivery as part of the contract processing. We pass on the payment data required for payment processing to the commissioned payment service provider or banks. The transfer is solely for the purpose of processing the contract with you. The legal basis for the transfer of data is here Art. 6 para. 1 lit. b DSGVO.

Data processing
The data processed includes customer and communication data, contract data and payment data. Data subjects of the processing are our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. So-called session cookies are set for the storage of the shopping cart content.

The processing is based on Art. 6 para. 1 lit. b (execution of order transactions) and c (legally required archiving) DSGVO. In this context, the information marked as required is necessary for the justification and fulfillment of the contract. We disclose the data to third parties only in the context of delivery (transport company), payment (credit company) or in the context of legal permissions and obligations to legal advisors and authorities. The data is processed in third countries only if this is necessary for the fulfillment of the contract (e.g. at the request of the customer for delivery or payment).

Data erasure
Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted in accordance with Articles 17 and 18 DSGVO as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to all data that must be retained for reasons of commercial or tax law.

Rights of the affected persons

1. Confirmation of data processing:
You have the right to request confirmation from us as to whether your personal data is being processed, in accordance with Art. 15 DSGVO
2. Information:
You have the right to request information about your personal data processed by us, according to Art. 15 DSGVO
3. Correction:
You have the right to request the rectification of inaccurate personal data concerning you without undue delay, in accordance with Art. 16 DSGVO
4. Deletion:
You have the right to request the immediate deletion of personal data concerning you, in accordance with Art. 17 DSGVO
5. Restriction of processing:
You have the right to request the restriction of the processing of your personal data, in accordance with Art. 18 DSGVO
6. Data portability:
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to have this data transferred to another controller by us. The requirements for this can be found in Art. 20 DSGVO
7. Withdrawal of Consents:
You have the right to revoke your consent at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a DSGVO. The data processing remains lawful until the revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 (3) DSGVO
8. Complaint:
You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR, in accordance with Article 77 GDPR.

Right of objection
You may object at any time to the future processing of personal data relating to you that we process on the basis of our predominantly legitimate interest (Art. 6 (1) lit. E or F DSGVO) in accordance with Art. 21 DSGVO.

Change of the privacy policy
We reserve the right to adapt this data protection declaration due to changes in legal or official requirements so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration. The new data protection declaration will then apply to your next visit to this website.