Viessmann Data Protection Statement

General information

We, Viessmann Holding International GmbH (hereinafter "Viessmann" or "we") as part of the Carrier Global Corporation, take the protection of your personal data very seriously and strictly comply with the rules of the applicable data protection laws. These include, above all, the General Data Protection Regulation (hereinafter: "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council).

Personal data is collected on our websites and when using our apps and services only to the extent necessary and is processed only for the specified purposes. Personal data is data by which you can be personally identified, or other data linked to you.

Controller within the meaning of the GDPR:

Viessmann Holding International GmbH
Viessmannstraße 1
D-35108 Allendorf (Eder)
Germany

Phone: +49 6452 70-0
Fax: +49 6452 70-2780
E-Mail: info@viessmann-climatesolutions.com

Processing within Viessmann

The following companies work on behalf of us, Viessmann Holding International GmbH:

• Viessmann Deutschland GmbH for sales and marketing purposes
• Viessmann Climate Solutions Berlin GmbH for the operation of the websites and apps as well as marketing
• Viessmann IT Service GmbH for the operation of backend systems
• Companies of Carrier Global Corporation for the provision of central applications and services

The data collected may be processed by, or transferred to, other group companies of Viessmann Holding International if:

• you have expressly given your informed consent to this elsewhere (e.g. notice in the enquiry form),
• this is necessary in compliance with purpose limitation and the division of labour within Viessmann Holding International; appropriate contractual agreements have been concluded within Viessmann Holding International for this purpose,
• the data is made available by the controller in pseudonymised form and the controller ensures that the commissioned group company cannot re-identify (de-pseudonymise) this data, or
• the data is stored by the controller in anonymised form and the data so stored is no longer subject to data protection law.

Transfer to third countries

The companies of Viessmann Holding International process/transfer the data you provide at/to locations in Germany, the European Union and third countries (including the USA) that offer an adequate level of data protection pursuant to Article 45 GDPR or provide appropriate safeguards pursuant to Article 46 GDPR.

For data transfers within Carrier Global Corporation and the use or provision of central services, our Binding Corporate Rules (“BCR”), approved by the competent supervisory authority pursuant to Art. 46(2)(b) GDPR, apply.

Our approved BCR can be found at https://www.carrier.com/us/en/bcr

The BCR ensure an adequate level of protection for personal data within the Carrier group of companies. Further information on the approval of the Carrier BCR can be found on the relevant pages of the European Data Protection Board.

Scope of this privacy policy

The following policy gives you an overview of how we ensure data protection and which types of data are collected and processed, for which purposes and on which legal basis. It applies in principle to all websites and apps for which Viessmann is responsible and whenever you contact us via other communication channels. Where Viessmann websites and apps deviate from these data processing principles or supplement them with their own, this will be indicated appropriately on the respective websites or in the apps.

This privacy policy consists of five parts:

• The first part (Provisions for private users) applies to private users of Viessmann services.
• The second part (Provisions for business users) applies to business users of Viessmann services.
• The third part (Provisions for applicants) applies to private users of Viessmann services with regard to job applications.
• The fourth part (General information and provisions for the Viessmann websites and apps) applies to all users of Viessmann services, websites and apps.
• The fifth part (Information on data subject rights) applies to all users whose data is subject to data protection law, but not legal entities.

Furthermore, our websites may contain links to websites of other providers to which this privacy policy does not extend.

I. Provisions for private users

This part of the privacy policy applies to private users of Viessmann services. The legal basis for processing your data is the consent you have given by agreeing to this privacy policy, or the need to provide you with the information or products you have requested pursuant to Art. 6(1)(b) GDPR.

Use and verification of personal data

The personal data you provide includes, among other things, the following:

• your name
• your address (postcode, town, street and house number, additional address details if applicable)
• your e-mail address
• your date of birth
• your gender
• your telephone number and/or mobile phone number
• your country
• your payment information
• your heating specialist used so far
• product name of your Viessmann product
• manufacturer number of your Viessmann product

Where you provide us with personal data, we use it to answer your enquiries, to process and carry out your consultation request, for technical administration, for login activities and for the services provided within the respective websites or apps. The legal basis for this is Art. 6(1) sentence 1(b) GDPR or your consent. You may withdraw your consent to the use of the data you have provided at any time. To do so, please contact the following address, stating the service(s) used where possible: datenschutz@viessmann-climatesolutions.com.

Use of the Viessmann “System Finder”

If, within the Viessmann “System Finder”, you consent to the processing of your surname, first name, postcode and e-mail address, we use this data to display a non-binding indicative price to you on this basis and, in addition, to provide you by e-mail with supplementary or further information, e.g. on the option of a personal expert consultation or on other products and services.

Providing your data is voluntary, but is necessary in order to provide you with the price proposal and, where applicable, to enable further consultation. Your data will be processed exclusively for this purpose.

The data transmitted is stored for a maximum period of three months. If no expert consultation takes place within this period, your data will be deleted automatically. If an expert consultation takes place, your details may be used within this process and deleted once it has been completed.

Contact by telephone from Viessmann

If you have agreed to our privacy policy and provided us with your telephone number in a consultation request, we will contact you by telephone before forwarding your consultation request to our partner contractor in order to verify the accuracy of your details, discuss your project and refer you to the appropriate specialist contractor. Afterwards, if you have provided your mobile number, we will ask you for feedback on the current status, e.g. by text message (SMS). This is free of charge for you.

Written contact from Viessmann

If you have agreed to our privacy policy and consented to our e-mail tracking and provided us with your e-mail address and/or mobile number in a consultation request, we record your opens and clicks in e-mails, push notifications and text messages (SMS). This is necessary in order to initiate the individual process steps of your expert consultation. This data is deleted after the expert consultation.

Information on the disclosure of your data and rating

If you have agreed to our privacy policy and provided us with your e-mail address in a consultation request, we will inform you by e-mail about the current status of your consultation request via our service. Among other things, we will send you a message with the contact details of the referred specialist partner and, following your consultation, an opportunity to rate this specialist contractor. If you do not provide your e-mail address with your consultation request, we are unfortunately unable to offer you the expert consultation service.

Disclosure of personal data

In order to provide the service of the consultation request or specialist contractor referral for advice on and/or the purchase, maintenance or repair of a heating system or another product from the Viessmann range, we forward, with your consent, the personal data you have entered to external specialist contractors who work with our company as partners and operate in your region.

This specialist partner is asked to contact you within a defined time frame in order to provide the expert consultation and/or quotation you have requested. For this purpose, the specialist contractor will contact you by e-mail and/or telephone.

Payment via Stripe

In connection with the conclusion of contracts, delivery and performance, and certain application programming interfaces (APIs) for creating your own applications, we offer payment via Stripe (e.g. for concluding service contracts, orders or within the Viessmann Developer Portal). Data is only transferred to Stripe if you have previously consented to this by ticking a checkbox. The provider of this payment service is Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (hereinafter “Stripe”). Stripe collects your contact details and payment information such as payment method, credit card number, account numbers and the amounts payable. Stripe also sets cookies in order to carry out the payment process and to ensure the security of the payment transaction.

We have concluded a data processing agreement with Stripe pursuant to Art. 28 GDPR. As Stripe is headquartered in the USA and payments may be processed outside the European Union (depending on the bank or credit institution involved), we have also concluded an agreement with Stripe based on the Standard Contractual Clauses of the EU Commission in order to protect your data in the event of a transfer to a third country. Further information on data protection at Stripe can be found at www.stripe.com/privacy.

The legal basis for the transfer of data from us to Stripe is your declaration of consent (Art. 6(1) sentence 1(a) GDPR). You may withdraw your consent at any time. An e-maill to revoke+stripe_de@viessmann-climatesolutions.com is sufficient for this purpose. The withdrawal only takes effect for the future. As a rule, a payment transaction that has already been instructed can no longer be affected by the withdrawal.

We only store the data to the extent necessary for invoicing and for compliance with the statutory retention obligations for invoices.

Further processing and deletion of your data

Beyond this, your data will not be disclosed or sold to third parties, i.e. persons or companies not belonging to Viessmann Holding International GmbH. Stored personal data will be deleted if you withdraw your consent to storage, if the data is no longer required to fulfil the purpose for which it was stored, or if its storage is inadmissible for other legal reasons. For up to 3 months after completion of your expert consultation, we will continue to offer you further information and services by e-mail.

Advertising and consent to advertising

We, i.e. Viessmann Holding International GmbH, as part of Carrier Global Corporation, Viessmann Deutschland GmbH and Viessmann Climate Solutions Berlin GmbH, inform you by e-mail, post or telephone only about Viessmann products and services and, where applicable, survey you about them, provided that you have expressly given us your consent to use your personal data for advertising purposes (opt-in).

This is done by actively ticking a box below our forms next to the statement: “Yes, Viessmann Holding International GmbH, Viessmann Deutschland GmbH, Viessmann Climate Solutions Berlin GmbH and Energy Market Solutions GmbH may use my e-mail address and/or telephone number to inform me about the latest products and services. I hereby also take the opportunity to provide both criticism and praise via market and opinion research. I can withdraw this consent at any time with effect for the future.”

Please note: The text displayed to you on the respective website/app may list different companies if they are affected by your enquiry.

If you have given us your consent to such use but no longer wish to receive advertising or surveys from Viessmann in future, you may withdraw your consent at any time with effect for the future. Your data will then be deleted or, if it is still required for billing and accounting purposes, stored restricted to these purposes. To do so, please send an e-mail to widerruf@viessmann-climatesolutions.com.

Participation in competitions

Viessmann regularly organises competitions in which you can participate on the basis of consent in accordance with Art. 6 Para. 1 Sentence 1 a GDPR by providing your name and contact details (e.g. address, email address or telephone number) and possibly other personal data. The data will only be processed for the purpose of carrying out these competitions in accordance with the respective competition conditions. Viessmann may use third parties (e.g. KickTipp) for this purpose. As a rule, the data is either deleted or made anonymous one month after the end of the competition. The winners' data will be stored in accordance with the usual statutory retention periods. Please also refer to the data protection declarations of the respective competitions or third parties commissioned to carry them out. You can revoke your consent to the processing of your data by us at any time. To do so, please contact us, always stating the name of the competition: revoke+competition_EN@viessmann-climatesolutions.com.

Newsletter

Use of personal data when subscribing to the e-mail newsletter

If you subscribe to one of our newsletters on the Viessmann websites or in the Viessmann apps, your e-mail address will be used for information and advertising purposes until you unsubscribe from this newsletter. When you subscribe to the newsletter using the double opt-in procedure, we store your e-mail address, your IP address and the date of subscription. This storage serves solely as evidence in the event that a third party misuses an e-mail address and subscribes to the newsletter without the knowledge of the authorised person.

You may withdraw your consent to receiving the newsletter at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe from our mailing list at any time via the unsubscribe link in the newsletter or send an e-mail to revoke+newsletter_de@viessmann-climatesolutions.com.

Optimisation of e-mail and newsletter content

We, i.e. Viessmann Holding International GmbH and the respective national sales company (e.g. Viessmann Deutschland GmbH), inform you by e-mail about Viessmann products and services if you have submitted a corresponding enquiry about services and offerings to Viessmann, have expressly given us your consent to use your personal data for advertising purposes (opt-in) or have subscribed to one of our newsletters. In order to offer you content specifically optimised to your needs, we also use e-mail tracking technologies of salesforce.com Germany GmbH within the scope of the consent you have given to receive the newsletter.

E-mail and newsletter tracking enables statistical (aggregated, anonymised) analyses of usage data. For technical reasons, the underlying usage data is not stored in anonymised form. For this purpose, we record both the opening of the e-mail and the internal clicks. This information is used to make the content of e-mails and newsletters more interesting and relevant and to measure the success of marketing campaigns.

Furthermore, consent to the newsletter also covers the (read-only) use of other data about you already stored by Viessmann from contacts with us (e.g. enquiries about a specific product), active business relationships (e.g. system registration, use of ViCare) and still active or successfully completed consultation requests, as long as these are still available within the statutory retention periods. This data is used for advertising only for the purpose of creating target groups for newsletters in order to provide you with content that is relevant to you. No processing pursuant to Art. 21 GDPR (“profiling”) takes place, as receiving our newsletter has no legal effect on you and does not similarly significantly affect you.

If you have given us your consent to such use but no longer wish to receive advertising or surveys from Viessmann in future, you may withdraw your consent at any time with effect for the future. To do so, please send an e-mail to widerruf@viessmann-climatesolutions.com.

Use of personal data when using the contact form

If you send us enquiries via one of our contact forms, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions on the same topic. This data will not be passed on to third parties.

When a contact form is submitted, we record special ad parameters that advertising networks append to the URL when you reach our site via an advertisement.

We transfer these parameters to our internal CRM system. If you submit an enquiry on our website, we can use the parameter to attribute this information to the respective advertising network. This conversion feedback enables us to measure the effectiveness of our advertisements, optimise their delivery and present you with more relevant content in future.

You may withdraw your consent to the use of the data provided via the contact form at any time. To do so, please contact: widerruf@viessmann-climatesolutions.com.

Use of personal data when using the Viessmann Community

If you register with the Viessmann Community by agreeing to this privacy policy and opening a Climate Solutions Account, the data you provide will be used to provide the Viessmann Community and to process the questions and comments you submit. This also includes consent to be contacted by Viessmann by e-mail and/or telephone strictly for the purpose of the content of your enquiry.

You may withdraw your consent at any time with effect for the future by deleting your Climate Solutions Account. Your data will then be deleted or, if it is still required for other legally justified purposes, stored restricted to these purposes. After deletion of your Climate Solutions Account, the content of your Community posts will be anonymised within the Viessmann Community and remain there. However, it will no longer be possible to attribute these posts to you.

Use of personal data when registering for events or information visits

On some pages of our website you have the option of entering personal data in order to register for information visits, training courses or events organised by Viessmann. We will use this data only to process your request. If you enter your e-mail address and telephone number as a participant in one of our events, you will receive a confirmation e-mail and, depending on the event, a text message (SMS) 30 minutes before your time slot / before the start of your event. After the event, the data is stored, for example, to evaluate the event. This data is deleted after 6 months at the latest, unless statutory retention periods apply, for example for proof of qualification, hospitality, costs, etc.

You may withdraw your consent to the use of the data provided during registration until the start of the event. To do so, please contact: widerruf@viessmann-climatesolutions.com.

Data processing when using a voicebot and for the recording and transcription of telephone calls

We, i.e. Viessmann Holding International GmbH and the respective national sales or service company (e.g. Viessmann Deutschland GmbH), use technical functions (AI) to record and simultaneously transcribe telephone calls. For this purpose, a voicebot or AI-supported virtual assistant may also be used, which receives and pre-qualifies concerns, requests information and, if necessary, transfers the call to a human agent. If you interact with such an AI system, you will be informed clearly and comprehensibly at the beginning of the call that you are talking to an AI system. This is done to comply with the transparency obligations under Art. 50 EU AI Act. Voice recording and transcription take place only with the consent you give at the beginning of a call. The transcription function we use creates a summary of the call and, after review and any corrections by your contact person, stores it in our CRM system in relation to you or your company. Where suitable, the content and/or summary is also anonymised and prepared for use within a knowledge database and stored there. The recording itself is deleted immediately, but no later than after 24 hours (standard) or 72 hours (where a subsequent quality check is necessary and/or inclusion in the knowledge database is planned), unless there are compelling reasons (e.g. disputes, insults) that would justify longer retention or other use. The preparation and storage of the summary as a business transaction or attachment is carried out in the context of pre-contractual or contractual measures pursuant to Art. 6(1)(b) GDPR and is therefore not covered by the above consent. The anonymised further processing of the content obtained from transcripts – exclusively the content, not personal data – is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in creating and maintaining a knowledge database in order to improve the quality of our services, increase the efficiency of internal processes and promote knowledge transfer within the company and with our specialist partners. No personal data is processed, as all content is anonymised before further processing. The interests, fundamental rights and freedoms of the data subjects are safeguarded by anonymisation, so that no disadvantages arise for the data subjects. The voicebot does not make any decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Use of AI-based communication and analysis systems

We use technologies based on artificial intelligence (AI) to communicate with our customers, in particular by telephone, and to collect, process and use customer data for advisory or service purposes. For this purpose, we use external service providers (e.g. providers of AI-supported call centre solutions). Service providers are selected carefully, taking into account the applicable data protection requirements and the EU AI Act. Where personal data is processed in this context, we have concluded corresponding data processing agreements pursuant to Art. 28 GDPR.

The processing includes in particular:

• conducting and documenting customer contacts (e.g. consultations, service requests),
• supporting individual customer advice and care,
• analysing and structuring call content in order to provide our services in a customer-oriented and efficient manner.

The legal basis for this processing is Art. 6(1)(f) GDPR (our legitimate interest), insofar as we have an overriding interest in efficient, secure and high-quality customer communication. Where processing is based on consent, we obtain such consent separately pursuant to Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR.

Data is only transferred to third parties within the framework of the statutory requirements. Where processing takes place in a third country (outside the EU/EEA), we ensure that appropriate safeguards pursuant to Art. 44 et seq. GDPR are in place (e.g. by concluding the EU Standard Contractual Clauses).

Data subjects may at any time exercise the rights described in this privacy policy, in particular the right of access, rectification, erasure, restriction of processing, objection and data portability.

Use of AI-based e-learning systems

AI-based e-learning systems may be used to deliver education, training and further training measures. These systems serve in particular to provide learning content interactively, to support training progress and to improve the quality of training measures.

When using such systems, personal data may be processed to the extent necessary to provide the respective functionalities (e.g. user ID, training interactions or voluntarily provided content such as video or audio recordings). Processing is carried out exclusively for education and training purposes and to improve the learning offerings.

For certain training and coaching measures, the tool Retorio is used, an AI-supported platform for conducting simulation-based training and supporting individual learning processes. In particular, Retorio enables the analysis of training interactions to generate feedback and to further develop learning content.

Any further analysis of training data is carried out exclusively in anonymised and aggregated form, so that no conclusions can be drawn about individual persons. Identification of users in the context of these analyses is excluded. [retorio.com]

Where personal data is processed, this is done on the basis of Art. 6(1)(b) GDPR (performance of training measures) or Art. 6(1)(f) GDPR (legitimate interest in improving learning and training offerings). If special functions (e.g. video analyses) are used, consent pursuant to Art. 6(1)(a) GDPR may additionally be required.

Further information on data processing by the respective provider can be found in the privacy notice of the service provider used.

II. Provisions for business users

This part of the privacy provisions applies only to business users such as trade businesses, industrial companies, municipalities, commercial enterprises, planners, architects, etc., and only insofar as they provide personal data of contact persons on our websites and in our apps for the conclusion and performance of contracts pursuant to Art. 6(1)(b) GDPR.

Personal data is collected and processed by Viessmann for the following purposes:

• Referral of customer enquiries
• Referral to enquiring customers
• Listing in Viessmann directories of specialist contractors (e.g. local specialist partner search on www.viessmann.de, installer search on heizung.de)

Where you have provided us with personal data, we use it only to answer your enquiries, to process contracts concluded with you, for technical administration, for login activities and for the services provided within the respective websites or apps.

Stored personal data will be deleted if you withdraw your consent to storage, if knowledge of the data is no longer required to fulfil the purpose for which it was stored, or if its storage is inadmissible for other legal reasons. To do so, please contact widerruf@viessmann-climatesolutions.com. Your data will then be deleted or, if it is still required for evidence, billing and/or accounting purposes, stored restricted to these purposes.

For further personal data processed in connection with the delivery and performance of products and services pursuant to Art. 6(1)(b) GDPR, the data protection provisions in the respective general terms and conditions of sale apply.

Disclosure of personal and company data

In order to provide services by third parties or offerings from partners (these are listed in the respective consent text), we forward, with your consent, the personal and company data you have entered to them, in particular for the purpose of contacting you.

Corresponding application of provisions from Part “I. Provisions for private users”

The following chapters of Part “I. Provisions for private users” apply accordingly to business users. This applies both to the employees (contact persons) of business users as data subjects within the meaning of the GDPR and – insofar as the processing concerns company data relating to individuals – to the business user company itself:

• Use of personal data when registering for events or information visits – for the registration of contact persons of business users for training courses, specialist events, trade fairs or information visits by Viessmann.
• Data processing when using a voicebot and for the recording and transcription of telephone calls – for telephone communication between contact persons of business users and Viessmann, including automated voice dialogue systems and the recording and transcription of calls.
• Use of AI-based communication and analysis systems – for the processing of personal data of contact persons of business users within AI-supported communication, evaluation and analysis tools.
• Use of AI-based e-learning systems – for the use of training and further training offerings by employees of business users via AI-supported e-learning platforms.

The purposes, legal bases, storage and deletion periods and data subject rights set out in these chapters apply equally to the processing described therein. Where processing concerns exclusively employees of the business user, the business user remains jointly responsible, under its own responsibility towards its employees, for providing data protection information and safeguarding data subject rights, insofar as this results from the respective allocation of roles (controller/processor).

III. Provisions for applicants

This part of the privacy policy applies to applicants for job advertisements of Viessmann companies or of Carrier Global Corporation, as well as of third-party companies to which Viessmann provides a platform or partner programme for job advertisements/placement.

The processing of personal data in the context of application and recruiting processes is governed primarily by the separate Privacy Notice for Applicants. This notice provides comprehensive information on the controller, the categories of data processed, the purposes and legal bases of processing (including Art. 6(1)(b), (c) and (f) GDPR and relevant employment law provisions), intra-group processing on the basis of the Carrier Binding Corporate Rules (BCR), any transfers to third countries, the use of AI-supported systems in recruiting, storage and deletion periods and your data subject rights. Within Europe, Viessmann Holding International GmbH (VHI), Viessmannstraße 1, 35108 Allendorf (Eder), Germany, performs the coordinating function (“Lead Entity”) for the data protection governance of recruiting. The current version of the Privacy Notice for Applicants is provided to you during the application process or on the career pages and prevails where it deviates from or supplements the general information below.

Applications via the AZUBI portal

The following additionally applies to applications received via AZUBI (apprenticeship) portals operated by Viessmann:

If you submit personal data as part of an apprenticeship application via the AZUBI portal (e.g. contact details, CV, certificates and other application documents), we use this data exclusively to process your application and – where necessary – to contact you by e-mail, post and/or telephone. In the case of the AZUBI portal, processing your application also includes forwarding your application documents to affiliated third-party companies with which you are applying for an apprenticeship or to which your application is forwarded as part of apprenticeship placement.

If you have not yet reached the statutory minimum age for valid consent under data protection law, we will additionally obtain the consent of a parent or legal guardian.

Application documents submitted on paper are scanned and stored in our systems; the paper documents are then destroyed in compliance with data protection requirements by certified service providers. Stored applicant data is deleted automatically at the earliest after 4 months and at the latest after 6 months from the date on which you were informed that the position will not be filled with you, unless statutory requirements preclude this; this period is based on the requirements of the German General Equal Treatment Act (AGG). For further details – in particular on inclusion in a talent pool programme and on the Carrier Job Alert – please refer to the separate Privacy Notice for Applicants.

IV. General information and provisions for Viessmann websites and apps

These provisions apply to the Viessmann websites and apps in addition to the provisions for private users and the provisions for business users. Some of our apps have their own additional privacy policies. The privacy policy for the Viessmann apps ViCare and Vitotrol Plus can be found at the following link:
https://legal-policies.viessmann-climatesolutions.com/b2c/vicare/de/de/privacy-policy.ext.html

For certain digital business customer applications, in particular ViGuide and ViParts, product-specific privacy information and the contractual terms agreed upon registration and use apply additionally. These are provided to users when setting up a customer account, when using the services for the first time or in connection with registration as a Viessmann specialist partner. The information contained therein specifies the processing of personal data within the respective application and supplements the general information in this privacy policy.

Data processing when accessing our websites and using our apps

Viessmann automatically collects and stores in its server log files information that your browser or the app transmits to us. In addition, Viessmann uses technologies on form pages designed to prevent misuse, on the basis of its legitimate interest pursuant to Art. 6(1)(f) GDPR (e.g. reCAPTCHA, Google Inc.). Viessmann cannot attribute this data to specific individuals. This data is not combined with other data sources. This data comprises:

• Browser type/ version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (IP addresses v4 and v6)
• Time of the server request

The IP address is the globally valid identifier of your computer, unique at the time of assignment by your internet provider, and in its currently most common form (IPv4) consists of four blocks of digits separated by dots, or is extended by additional digits (IPv6). As a private user, you will usually not use a permanent IP address, as your provider only assigns it to you temporarily (a so-called “dynamic IP address”). In the case of a permanently assigned IP address (a so-called “static IP address”), it is technically easy to clearly attribute user data via this characteristic.

We process the above data for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring convenient use of the website
• Evaluating system security and system stability
• For other administrative and statistical purposes

The personal data in the server log files is processed on the basis of Art. 6(1)(f) GDPR. This legal basis permits the processing of personal data within the scope of the “legitimate interest” of the controller, unless your fundamental rights, fundamental freedoms or interests override it. Our legitimate interest lies in easier administration and the ability to detect and track hacking. You may object to this data processing at any time on grounds relating to your particular situation. An e-mail to the Data Protection Officer is sufficient for this purpose. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

The server log files containing the above data are automatically deleted after 30 days or anonymised if used for statistics. We reserve the right to store the server log files for longer if there are facts suggesting unauthorised access (such as an attempted hack or a so-called DDoS attack).

Data processing for access to our websites and apps - "Climate Solutions Account"

For granting, changing and deleting access and authorisation rights for non-public or not freely usable websites and apps, Viessmann uses a central identity and access management system (“IAM”) in addition to conventional login functions (e.g. user ID and password). The privacy policy for the account can be found here: https://legal-policies.viessmann-climatesolutions.com/multibrand/de/de/privacy-policy.html

Links to external websites

This privacy policy applies exclusively to the Viessmann websites and apps. These may contain links to third-party websites. This privacy policy does not extend to them. If you leave the Viessmann websites and apps to visit a third-party offering, we recommend that you also read that provider’s privacy policy carefully.

Information on cookies, tracking and analytics tools

On our websites and in our applications, we use cookies and similar technologies to provide functions, analyse the use of our offerings, measure reach, analyse errors and, where applicable, personalise content and advertising.

Insofar as these technologies are not technically necessary for the operation of our offerings, they are used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Before such technologies are activated, you will be informed via our Consent Management Platform (CMP) and can make your selection.

The CMP informs you in particular about: the cookies, tracking, analytics, marketing and other third-party services used in each case; the providers and recipients of the data; the respective processing purposes; the categories of data processed; the storage period; possible data transfers to third countries; the relevant legal bases; and your options for withdrawal and settings.

Your consents are documented and can be adjusted or withdrawn at any time with effect for the future via the CMP. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

For individual services, personal data may be processed by service providers outside the European Economic Area. Where personal data is transferred to countries outside the European Union or the European Economic Area, this is done exclusively in compliance with the legal requirements of Art. 44 et seq. GDPR. Where necessary, appropriate safeguards are used, in particular the Standard Contractual Clauses adopted by the European Commission or other recognised transfer mechanisms. Information on this is available for each service within the CMP.

The analytics, measurement, diagnostics, tracking and marketing services listed in the CMP may include, in particular, technologies from Google, Firebase and other third-party providers. Detailed information on the services used in each case, their specific function, the data processed and the respective providers can be found in the privacy information of the CMP.

You can access, review and change your current consent settings at any time via the “Cookie settings” or “Cookie & Tracking” link. This gives you the opportunity at any time to withdraw consents given, in whole or in part, with effect for the future.

Information on Google Firebase technologies in apps

Firebase Cloud Messaging (FCM) of the Google Firebase platform is used in individual Viessmann applications and digital services, in particular ViCare, ViGuide and ViParts.

FCM is used to provide technical push notifications, status messages and service-related information. The processing of personal data required for this is based on Art. 6(1)(f) GDPR (legitimate interest) in order to ensure the secure and efficient use of the respective application.

Other Firebase services, in particular analytics, performance, diagnostics and reach measurement functions, are used exclusively on the basis of consent pursuant to Art. 6(1)(a) GDPR. Consent is obtained, documented and managed via a Consent Management Platform (CMP). Detailed information on the services used, processing purposes, data categories, recipients, storage periods and withdrawal options is available within the CMP.

Where personal data is processed in the context of using Firebase services, it is anonymised or aggregated as far as possible before permanent storage for analysis purposes. Processing or transfer of data to the United States of America cannot be ruled out. To protect the data, EU Standard Contractual Clauses pursuant to Art. 46 GDPR have been agreed with Google LLC. A copy of the Standard Contractual Clauses is available at the following link: EU Standard Contractual Clauses for Firebase.

Acxiom

Use of personal data for customer analysis and other advertising purposes

In order to select specific target groups based on predefined criteria and to build and address new ideal-type target groups (potential new customers) for advertising activities, Viessmann has a service provider analyse pseudonymised or anonymised data – and thus data no longer attributable to a specific person – of relevant prospects and existing customers.

On the basis of this analysis, advertising accounts on digital platforms can be used for the selected target groups for the purpose of precise target-group advertising, by matching the strongly encrypted master data of potential new customers with comparable strongly encrypted master data of Facebook or Google users pseudonymised there, in order to advertise Viessmann campaigns to them. To carry out such processing, Viessmann commissions specialised companies on a strictly purpose-bound basis as processors, such as, for Facebook activities, Acxiom Deutschland GmbH, Martin-Behaim-Str. 12, 63263 Neu-Isenburg, Germany. Acxiom pseudonymises all data of data subjects and, where applicable, acts as a so-called “Trusted Third Party” when placing advertising, e.g. on Facebook. On Facebook, this processing appears, for example, in the ad preferences under the item “Businesses that uploaded and used a list with your information”.

Personal data for the purpose of customer analysis is processed on the basis of Art. 6(1)(f) GDPR. This legal basis permits the processing of personal data within the scope of the “legitimate interest” of the controller, unless your fundamental rights, fundamental freedoms or interests override it. Our legitimate interest lies in the analysis to identify potential new customers and in the purposes stated above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. You may object to this data processing at any time on grounds relating to your particular situation. An e-mail to the Data Protection Officer named below is sufficient for this purpose.