Privacy Policy

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data.

1. Name and address of the controller

The controller in charge for data processing on this website within the meaning of the GDPR is:
ZLT Lüftungs- und Brandschutztechnik GmbH
Wilhermsdorfer Straße 28
D-09387 Jahnsdorf/Erzgebirge
phone: +49 372 96 936 20
fax: +49 372 96 936 250
mail: info[@]zlt.de

2. Name and address of the data protection officer

For the ZLT Lüftungs- und Brandschutztechnik GmbH an external data protection officer has been ordered. You can reach our data protection officer by:
Secuda GmbH
Darian Thannhäuser
Wallotstraße 18
01309 Dresden
phone: +49 351 854 700 50
mail: datenschutz[@]zltgmbh.de

3. Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
We work together with advertising partners and web analysis services who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Please note that the functionality of our website may be limited if cookies are not accepted.
This also applies to the usage of web fonts.

4. Server Logfiles

When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)
This data is not merged with other data sources.
The basis for data processing is Art. 6 I lit. f GDPR, which allows the processing of data based on the legitimate interest of the website operator for the technically error-free and optimized provision of its services.

5. Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

6. Use of Content-Delivery-Network (CDN)

A CDN is an external memory that can provide its content at different locations on several web servers. This significantly shortens the loading time of Java scripts, fonts and frequently required graphics because the necessary files are transferred to you from web servers that are significantly closer to the location and also specially optimized for this. Among other things, your IP address is naturally transmitted to the CDN server by your browser. The CDN provider commissioned by us operates several servers in the EU and the likelihood of ending up on an EU server is very high due to the anycast technology used. However, it cannot be ruled out that your browser will also access web servers outside the EU. In order to also speed up the page views for foreign visitors, mirror servers are distributed all over the world. The actual pages of our website and our service and the communication e.g. Via contact forms, ordering systems, etc. are not processed via the CDN. To enable the execution of Java scripts, etc. To suppress this, you can install a blocker in your browser. The fastest possible delivery of our website is in our legitimate interest in a quick and appealing presentation of our website and our online offers. The legal basis for the data processing mentioned is Art. 6 I lit. f GDPR. According to the company’s own statements, the collected raw data will be deleted within 4 hours, at the latest after 3 days.
We use the following CDN:
Cloudflare (further information: https://www.cloudflare.com/de-de/gdpr/introduction/)
StackPath (further information: https://www.stackpath.com/privacy-statement/)
Unpkg (further information: https://unpkg.com)
BootstrapCDN (further information: https://www.maxcdn.com/legal/#pp)

7. Use of Google Fonts

We use a web font from the Google Internet service (“Google Fonts”) on our website. Google Fonts is a service provided by Google Ireland Limited (“Google”). These web fonts are integrated by calling up a server, usually a Google server in Ireland. This transmits to the server which of our websites you have visited. The IP address of the browser of the terminal device of the visitor to this website is also saved by Google. You can find more information in Google’s data protection information, which you can access here:
www.google.com/policies/privacy/
https://fonts.google.com/about

8. Legal basis for the processing

Art. 6 I lit. a GDPR serves us as the legal basis for processing operations in which we obtain consent for the processing of your personal data.
If the processing of personal data is necessary to fulfil a contract, for example a purchase contract and the payment via credit cards, the processing is based on Art. 6 I lit. b GDPR.
We are subject to legal obligations which require the processing of personal data, such as the fulfilment of tax obligations. In this case the processing is based on Art. 6 I lit. c GDPR.
We also use social media channels and web analysis services. This data processing is carried out in accordance with Art. 6 I lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website, your user experience, and your experience with our products.

9. Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

10. Disclosure of data to third parties

Disclosure of your personal data to third parties that are not mentioned in the
following purposes does not take place. As far as it is necessary for the
implementation of the contractual relationship with you, your personal data will be
disclosed to third parties. Recipients of the data are public bodies, who receive data
because of statutory regulations (e.g. tax authorities etc.), internal bodies who are
involved in the execution of the respective business processes (accounting,
banks/payment service providers, customer service, marketing, third party services, distribution), the
forwarding agent/shipping company commissioned by us for dispatch products,
contractual partners, business partners insofar as the statutory provisions require or
permit it.

11. Rights of the Data Subject

The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller regarding the processing of your personal data, about which we inform you below:
• Right of access by the data subject pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to be informed pursuant to Art. 19 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to withdraw a given consent pursuant to Art. 7 III GDPR
• Right to lodge a complaint pursuant to Art. 77 GDPR
To exercise one of the above rights, simply contact us by email at datenschutz@zlt.de.

Our supervisory authority is
Sächsischer Datenschutzbeauftragter
Postfach 11 01 32
01330 Dresden
phone: +49 351/85471 101
mail: saechsdsb@slt.sachsen.de
web: https://www.saechsdsb.de/

12. Legal or contractual reasons for the provision of personal data

We explain to you that the provision of personal data is in part required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). To conclude a contract, it may sometimes be necessary for a data subject to provide us with personal data that we subsequently have to process. For example, the person concerned is obliged to provide us with personal data when our company concludes a contract with them. Failure to provide personal data would mean that the contract could not be concluded with the person concerned. Before the person concerned provides personal data, the person concerned must contact our data protection officer. Our data protection officer informs the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.

13. Automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.