Privacy Policy

1. PRIVACY AT A GLANCE

1.1 General Information

The following information provides a brief overview of what happens to your personal information when you visit this website. Personal information is any information that can be used to identify you personally. For more detailed information on privacy, please see our Privacy Policy, which is located below this text.

1.2 Information collected on our website

1.2.1 Who is responsible for collecting information on this website?

The data processing on this website is carried out by the website operator. You can find the contact details of the Website Operator in the “Information about the data controller” section of this Privacy Policy.

1.2.2 How do we collect your information?

First, we collect your information when you provide it to us. For example, this may be information that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of page view). This information is collected automatically when you enter this website.

1.2.3 What do we use your information for?

Some of the information is collected to ensure that the Site operates properly. Other information may be used to analyze your usage patterns.

1.2.4 What rights do you have regarding your data?

You have the right to obtain information at any time, free of charge, about the source, recipient and purpose of the personal data stored about you. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right to request the restriction of the processing of your personal data in certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

 

2. HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

2.1 External Hosting

This Website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will process your data only to the extent necessary to fulfill its obligations and will follow our instructions with respect to such data.

We use the following hoster:

 

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen

Gunzenhausen, Germany

2.2 Conclusion of an order processing contract

In order to ensure that your order is processed in accordance with data protection regulations, we have concluded an order processing agreement with our host.

 

3. GENERAL NOTES AND MANDATORY INFORMATION

3.1 Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal information is information that can be used to identify you personally. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose we do this.

Please be aware that there are inherent security risks in transmitting data, such as e-mails, over the Internet. A complete protection of data against access by third parties is not possible.

3.2 Information about the responsible body

The party responsible for data processing on this website is

KOS KLIMA Anlagenbau Projektierung und Service GmbH

Managing Director: Manuel Müller

Olbrichtstr. 23

69469 Weinheim, Germany

Phone: 06201 479996-0

Fax: 06201 479996-6

E-mail: info@kosklima.de

 

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

3.3 Retention period

Unless a more specific retention period is specified in this Privacy Policy, your personal data will be retained by us until the purpose of the data processing no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted after these reasons no longer apply.

3.4 Note on data transfer to the USA

Among other things, our website integrates tools from companies based in the USA. If these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country under EU data protection law. U.S. companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action. Therefore, it cannot be excluded that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

3.5 Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

3.6 Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data for reasons relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which the processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such direct marketing, including the creation of profiles in connection with such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

3.7 Right to complain to the competent supervisory authority

In the event of a breach of the GDPR, Data Subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

3.8 Right to data portability

You have the right to have the data that we process automatically on the basis of your consent or in fulfillment of a contract transferred to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another controller, we will only do so if this is technically feasible.

3.9 SSL or TLS Encryption

This site uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or requests, that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

 

3.10. Information, Blocking, Deletion

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge about the personal data stored about you, its origin and recipients, as well as the purpose of the data processing, and you have the right to correct or delete this data at any time. You can contact us at any time with regard to this and other questions concerning personal data.

3.11. Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal information held by us, we will generally need time to review it. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you object to the processing of your personal data pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may be processed – except for its storage – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3.12. Objection to advertising e-mails

The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

 

4. INFORMATION COLLECTED ON OUR WEBSITE

4.1 Cookies

Our website does not use cookies.

4.2 Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and version
• Your operating system
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources.

This data is collected on the basis of Art. 6 par. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – the server log files must be recorded for this purpose.

4.3 Contact form

If you send us inquiries via the contact form, we will store your data from the inquiry form, including the contact data you provide there, for the purpose of processing the inquiry and in the event of follow-up questions. We will not share this information without your consent.

These data are processed on the basis of Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.

We will store the data provided by you on the contact form until you request its deletion, revoke your consent to its storage, or the purpose for which it was stored no longer applies (e.g. after your request has been fulfilled). Mandatory legal provisions – in particular retention periods – remain unaffected.

4.4 Login/Registration to this Website – Customer Login/Employee Login

You may register/login on this Site to use additional features of the Site. We will use the information provided for this purpose only for the purpose of using the particular offer or service for which you have registered/logged in. The mandatory information requested during registration/login must be provided in full. Otherwise, we will reject your registration/login.

We will use the e-mail address provided during registration to inform you of important changes, such as changes in the scope of the offer or technically necessary changes.

The data entered during registration/login is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Legal retention periods remain unaffected.

4.5 Inquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your inquiry. We will not share this information without your consent.

These data are processed on the basis of Art. 6 par. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.

The data that you send us in the context of contact requests will remain with us until you ask us to delete it, revoke your consent to storage, or until the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

5. ANALYSIS TOOLS AND ADVERTISING

5.1 Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA.

The storage of Google Analytics cookies is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

IP Anonymization
We have activated the IP anonymization function on this website. This means your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent the storage of cookies by configuring your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to Data Collection
You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set that prevents future data collection when visiting this website: Disable Google Analytics.

More information on the handling of user data by Google Analytics can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en.

Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

5.1 Google AdSense

This website uses Google AdSense, a service for integrating advertisements provided by Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses so-called “cookies,” which are text files stored on your computer and allow analysis of your website usage. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons enable the evaluation of visitor traffic on these pages.

The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of ad formats is transmitted to a Google server in the USA and stored there. This information may be shared by Google with Google’s contractual partners. However, Google will not associate your IP address with other data stored by you.

The storage of AdSense cookies is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

You can prevent the installation of cookies by adjusting your browser settings accordingly; however, we point out that in this case you may not be able to fully use all functions of this website. By using this website, you consent to the processing of the data collected about you by Google in the manner and for the purpose described above.

5.3 Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows the advertising audiences created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages, adapted to your previous usage and browsing behavior on one device (e.g., mobile phone), can also be displayed on another one of your devices (e.g., tablet or PC).

If you have given the corresponding consent, Google links your web and app browsing history with your Google account for this purpose. This enables the same personalized ads to be served on every device on which you log in with your Google account.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked with our Google Analytics data to define and create audiences for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by disabling personalized ads in your Google account; please follow this link:
https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google account is solely based on your consent, which you can grant or withdraw at Google (Art. 6 (1) (a) GDPR). For data collection processes not merged in your Google account (e.g., if you do not have a Google account or have objected to the merging), data collection is based on Article 6 (1) (f) GDPR. The legitimate interest arises from the website operator’s interest in anonymized analysis of website visitors for advertising purposes.

Further information and Google’s privacy policy can be found here:
https://www.google.com/policies/technologies/ads/.

5.4 Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked their ads and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can object by disabling the Google conversion tracking cookie in your internet browser’s user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and advertising.

More information about Google AdWords and Google Conversion Tracking can be found in Google’s privacy policies:
https://www.google.de/policies/privacy/.

You can configure your browser to be informed about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

6. PLUGINS AND TOOLS

6.1 Videos on our website

Automatically playing videos are integrated into our website. These videos are hosted by us.

When you visit a page that contains such a video, NO data is stored or processed by you.

6.2 Google Web Fonts

This site uses so-called Web Fonts provided by Google to ensure a consistent display of fonts. When you access a page, your browser loads the required Web Fonts into its browser cache to display texts and fonts correctly.

For this purpose, the browser you use must establish a connection to Google’s servers. This allows Google to learn that our website was accessed via your IP address. The use of Google Web Fonts is done in the interest of a uniform and attractive presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

If your browser does not support Web Fonts, a standard font on your computer will be used.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

6.2 Google Maps

This site uses the Google Maps mapping service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transmission.

The use of Google Maps is carried out in the interest of an attractive presentation of our online offerings and to make it easy to find the locations we list on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

More information about how user data is handled can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

7. SOCIAL MEDIA PLUG-INS

7.1 Social Media Plug-ins

Based on Art. 6 (1) sentence 1 lit. f GDPR, we use a YouTube plugin on our website to promote our company via this platform. The underlying advertising purpose is considered a legitimate interest under the GDPR. The responsibility for data protection compliant operation lies with the respective providers. We integrate these plugins using the so-called two-click method to best protect visitors to our website.

a) YouTube

On our website, we use the provider YouTube to embed videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can recognize the YouTube plugins (buttons) by the YouTube logo on our site.

When you visit pages of our website that contain a YouTube plugin, a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our web pages you have visited. If you are logged into YouTube as a member at the same time, YouTube assigns this information to your personal user account. When using the plugin, e.g., clicking the play button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account as well as other user accounts of YouTube LLC and Google Inc. before using our website and by deleting the corresponding cookies of these companies.

Further information about data processing and data protection notices by YouTube (Google) can be found at www.google.de/intl/de/policies/privacy/.

8. ORDER PROCESSING & DATA TRANSFER TO THIRD COUNTRIES

For certain processing of personal data, we use external service providers. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with all service providers.

If these service providers transfer personal data to a third country outside the EU/EEA (e.g., to the USA), this is done exclusively in compliance with legal requirements. For transfers to third countries, especially to the USA, we have concluded EU standard contractual clauses with the respective providers, which have been provided by the EU Commission pursuant to Art. 46 (2) lit. c GDPR and offer appropriate guarantees for an adequate level of data protection.

9. SERVICES

9.1 Handling of Candidate Data

We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with the applicable data protection laws and all other legal provisions and that your data will be treated as strictly confidential.

9.1.1 Scope and purpose of data collection

If you send us a job application, we will process your personal data (e.g. contact and communication data, application documents, notes from interviews, video chats, etc.) to the extent necessary to decide whether to enter into an employment relationship. The legal basis for this is § 26 BDSG-new according to German law (establishment of an employment relationship), Art. 6 para. 1 lit. b GDPR (general initiation of a contract) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 of the new BDSG and Article 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

9.1.2. Data retention period

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted with us for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6 para. 1 lit. f GDPR). The data will then be deleted and the physical application documents destroyed. The storage serves in particular for proof purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Article 6 para. 1 lit. a GDPR) or if statutory retention periods prevent deletion.

9.1.3. Inclusion in the applicant pool

If we do not make you a job offer, there may be the possibility of including you in our applicant pool. If you are included, all documents and information from the application will be transferred to the applicant pool in order to contact you if suitable vacancies arise.

Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). The consent is voluntary and has no connection with the ongoing application process. The person concerned can revoke his consent at any time. In this case, the data from the applicant pool will be irrevocably deleted unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after the consent is given.