In this data protection policy, we will explain how we collect and use your personal data in compliance with the General Data Protection Regulation (GDPR).
Personal data is considered to be any information relating to an identified or identifiable natural person, directly or indirectly, particularly with reference to an identifier, such as a name, an identification number, location information, an online identifier, or to one or more factors specific to his physical, physiological, genetic, mental, economic, cultural or social identity. Directly identifiable data includes the surname, first name, a photo, an email featuring a name. Indirectly identifiable data include, for example, an account identifier, a telephone number, the registration number in the directory (NIR or social security number), a fingerprint or an IP address.
- When does this data protection policy apply?
Diese Datenschutzrichtlinie gilt für alle persönlichen Daten, die This data protection policy applies to all personal data we collect, use, share and store when you use our websites, services and web forms or when you contact us regarding these products and services.
This data protection policy does not apply to data collected via third-party websites. Please consult the data protection policy of those websites (if necessary) for more information.
Data protection policy dated 10/02/2020.
- Who is responsible for processing your data?
The controller responsible for this processing is the natural or legal person who, whether alone or in conjunction with others, determines the purposes and means of processing. Processing of personal data constitutes any operation or set of operations performed or not using automated processes and applied to personal data, or data sets, such as the collection, recording, organisation, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or otherwise making available, alignment or interconnection, limitation, deletion or destruction.
We are BDR THERMEA France, S.A.S with a capital of € 229 288 696 - RCS Strasbourg 833 457 211, a major manufacturer and distributor of innovative heating and water heater equipment. Our registered address is 57 Rue de la Gare, 67580 Mertzwiller, France.
BDR THERMEA France, S.A.S. is part of the BDR THERMEA group, whose registered address is Apeldoorn, Pays-Bas. BDR Thermea Group has various brands of heating and water heater equipment known worldwide, such as Baxi, DWe Dietrich, Remeha, Brötje, Chappée, Oertli and Baymak. For more information about BDR Thermea Group and its brands, consult BDR Thermea's website.
BDR THERMEA France S.A.S. is hereinafter referred to as "BDR THERMEA France" or "We". We are responsible for collecting and using your personal data under the conditions laid down in this data protection policy. If you have questions, comments or complaints regarding the processing of your personal data, please contact our Data Protection Officer using the methods given in paragraph 4.3.
- Which data do we collect and how?
When you use our website, we collect personal data concerning you: (3.1) When professionals register on the website, (3.2) When you request information, (3.3) The information we collect when you contact us, and (3.6) cookies.
3.1. When professionals register on the website
When professionals register on the website, you will be asked to furnish the following personal data: title, surname, first name, profession, email, professional address, postcode, town, country, professional telephone number, fax, subscription to the newsletter. The mandatory fields are specifically mentioned.
In order to process online spare part orders via the spare part website, you will also be asked to give your invoicing and delivery address, if different, in order to respond to your request effectively.
3.2. When you request information
When you contact us via the contact forms on the websites in order to obtain information about our products or services, either before or after sales are made, you will be asked for the following information: surname, first name, address, postcode, town, landline number, mobile number, email address. The mandatory fields are specifically mentioned.
3.3. The information we collect when you contact the support desk (telephone or email)
When you send us an email or contact us via our online contact form, we save this data. When you call us, our support desk may record your questions or complaints in our database. We may also record telephone calls for training purposes and to improve our service. Finally, we may record, depending on the elements provided: surname, first name, email address, postal address and telephone number.
3.4. Cookies
Cookies are text files stored on your connection terminal and used to save personal data and technical data related to website browsing. Cookies may be temporary or permanent.
The website uses cookies or other technology for the same purpose (hereinafter referred to as "cookies") which may collect or store your personal data.
The cookies are used to:
- Improve the user's experience, particularly by:
Recognising your connection terminal,
Recognising your username and password
- Analyse the traffic and data on the website in order to:
Measure the traffic on the website in order to improve user experience,
Understand the way in which you use said website in order to improve the functionalities and performance.
When using cookies provided by our third-party service providers, these may be used and stored under the same conditions above.
We assure you that, when sending the information generated by these cookies, the parameters of the cookies ensure that the IP/MAC address is rendered anonymous before geolocation and storage.
By browsing and/or using the website's services, the cookies are activated by default and the data may be read or stored locally on your connection terminal. A consent banner will inform you the first time that you access the website, through which you can decide to accept or refuse the cookies.
By continuing to use the website, you expressly agree that we and our partners may use such cookies.
You can configure your browser at any time in order to systematically control the cookies.
- How do we use your data?
We use your data for the following purposes: (4.1) to provide our services and to communicate with you, (4.2) for research purposes so that we can improve our products and services, (4.3) for direct marketing purposes and (4.4) for complying with our legal and regulatory obligations.
4.1. Supply of our services and communicating with you
We need most of the information described in paragraph 3 within the framework of using our website and services we offer.
We use the information in order to be able to give you access to the professional website which notably includes all technical documentation, xls sizing tools for a heating installation, product information and an ordering service for online spare parts, etc.
We use the information available on your customer's account and your contact details to send you communications, particularly relating to security updates or new functionalities or new online services.
We also use your data in order to respond to your requests in terms of extending product warranties or to benefit from promotional offers.
Finally, we use your contact details to answer your questions when you contact our support services. They are stored by us in order to process your request and in the case of additional questions on the same subject. This data is not sent to third-parties.
Personal data relating to communications with you is only processed if you have provided your consent.
Personal data relating to the supply of our services is only processed if you have provided your consent to website processing, based on our legitimate interest in you benefiting from optimal conditions relating to browsing and accessing our services, particularly on our websites.
4.2. Data analysis to improve our products and services
When a quote request for is made via the contact form on the website, with your approval, the data may be shared with partner companies (network of partner installers) in order to provide you with a specialist advisory service and/or the purchase, maintenance or repair of a heating system.
Personal data relating to the supply of our services is only processed if you have provided your consent to website processing, based on our legitimate interest in you benefiting from optimal conditions relating to browsing and accessing our services, particularly on our websites.
4.3. Data processing for direct marketing purposes
We use your information from customer databases and your contact details to inform you of our new products and services or news about our different brands likely to interest you.
Moreover, we would also like to improve customer knowledge and browsing on websites and applications by using statistical tools or cookies.
Finally, we may be required to contact you in order to conduct satisfaction surveys
Personal data relating to the supply of our services is only processed if you have provided your consent to website processing, based on our legitimate interest in you benefiting from optimal conditions relating to browsing and accessing our services, particularly on our websites.
4.4. Legal and regulatory obligations
We collect, store and use your data within the framework of our internal organisation, in particularly to comply with our legal and fiscal obligations.
We collect, use, share and store your personal data to comply with the legal and regulatory obligations to which we are subjected, for our legitimate interests or the interests of third-parties, or on the basis of your consent.
You can withdraw your consent at any moment by following the specific instructions relating to processing for which you have given your consent. If you withdraw your consent or if you refuse to provide the personal data we need to execute any contract or comply with a legal or regulatory obligation, we may not be able to provide all or part of the services that you have requested from us. If we process your personal data for our legitimate interest or the interest of a third-party, we will take reasonable measures to avoid any unreasonable prejudice. Our legitimate interests may, for example, include security and safety objectives or proposals for improved services and offers.
- Which third-parties can access your data?
We can share your personal data with an installer/After-Sales partner, wholesalers, subsidiaries, the companies in the group, service suppliers and our partners for the following purposes: (5.1) when a request is made via the contact form (5.2), when organising our business and (5.3) for research and direct marketing purposes.
5.1. When a request is made via the contact form
The data can be shared with partner companies (network of partner installers, partner After-Sales, wholesalers, subsidiaries) in order to provide you with a specialist advice service and/or the purchase, maintenance or repair of a heating system.
5.2. Within the framework of organising our business
We may share your personal data with trusted third-party service providers we use (for example hosting providers, social networks) or with sub-contractors who are involved in the supply of services on our behalf (for example, for support services). All these third-parties will be required to ensure adequate protection of your personal data pursuant to the General Data Protection Regulation and only process data in accordance with our instructions.
5.3. For analysis and direct marketing purposes
BDR THERMEA France is part of the BDR THERMEA group. Within our group of companies, we may exchange information for research and direct marketing purposes (see paragraph 4.3 above).
We may also share your personal data with administrative or fiscal authorities or within the framework of criminal investigations or administrative inquiries, if we are required to do so pursuant to applicable law.
We may share aggregated, non-personal data with third-parties. For example, we may share household energy consumer trends. We make sure that this non-personal information cannot be associated with specific users of our products and services.
The group's companies, our service providers and our partners may be located in a country outside the European Economic Area (composed of countries in the European Union as well as Liechtenstein, Norway and Iceland). In this case, personal data is transferred internationally. It is possible that the laws in the recipient countries do not ensure an adequate level of protection concerning your personal data, equivalent to the laws applicable in France. If necessary, we will ensure that adequate guarantees are implemented, in accordance with the requirements regarding the international transfer of personal data, for example by submitting these transfers to the application of standard contractual clauses of the European Commission.
- . How do we secure your data and how long do we store it?
We will ensure that your personal data is properly secured by using appropriate technical and organisational measures, so that it is protected against any unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or wrongful destruction or loss.
We store your data on our systems for as long as required for the purposes described in this data protection policy and for a maximum period of 15 years, or where necessary, to comply with our legal obligations and for managing disputes.
- Where do we store our data?
Personal data processed by ourselves is hosted on servers located within the European Union by BDR THERMEA or its partners.
For reasons related to data security and back-ups, it is likely to be transferred, accessed from and stored in a country located outside the EU, in compliance with the conditions for transferring data outside the EU.
Therefore, any transfer of personal data outside the European Union will only be performed in conformity with the decisions of the European Union on the standard contractual clauses or in a country benefiting from an adequacy decision.
How can you exercise your rights?
You can exercise your right to withdraw your consent to the processing of personal data when this is required (collection and processing of personal data outside the framework of the execution of a contract and/or needs related to its execution) collected via the aforementioned contact form, at any time, in the same way as you can exercise your rights of access, rectification, opposition, transfer by sending a written request to the following email address: Dpo@dedietrichthermique.com. In the absence of a response from BDR THERMEA France within a month of sending your request, you have the right to bring your case before the National Data Protection Commission for any claim.
We may ask you to provide additional information to confirm your identity. The rights described in this paragraph may be limited in certain situations - for example, when we can demonstrate that we are obliged to process your data in accordance with the law. Due to the way in which certain services are provided, there could be a delay before the back-up copies are deleted. We may also store certain data for a long time when we are required to do for regulatory reasons.
You can also contact us if you have questions, comments or complaints concerning this data protection policy. If your questions remain unresolved, you also have the right to bring your case before the National Data Protection Commission.