Data protection

The privacy policy for contractual partners and the privacy policy for employees and applicants are available as PDF files for download:

• PDF document: Privacy policy for contractual partners
• PDF document: Privacy policy for employees and applicants

The following section applies to the website.

Thank you for visiting our website and for your interest in our company and our products. Protecting your privacy when using our website is important to us. Please read the information below.

1 The data we use, how long for, and for what purpose

1.1 Informative use of the website

Extent of data processing. For the purely informative use of our website, i.e. if you do not otherwise provide us with information but merely retrieve and read content, we collect only the personal data that are transmitted to our server by your browser. When visiting our website this includes the following data: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), contents of the web page (specific search), access status/HTTP status code, amount of data transmitted, website from which the request is received, browser, operating system and its interface, language, and version of browser software.

Purpose and legal basis. The purpose of this data processing is to make the retrieval of the website technically possible and to ensure reliability and security. The legal basis for data processing is the protection of our legitimate interests. For the purposes just mentioned, our legitimate interest also lies in data processing.

Duration of data storage. The data will be deleted as soon as they are no longer required for the purpose of the enquiry. If the data are used to access the website, they will be deleted when the respective session is ended. IP addresses are stored for seven days to track abuse.

1.2 Downloading material (manuals, sales brochures, etc.)

If you wish to download manuals, sales brochures or other content from our site, Section 1.1 shall apply accordingly.

1.3 Contacting us / ordering informational material

Extent of data processing. Our website offers forms which can be used to contact us electronically to order informational material or to request a free consultation. The data entered into an online form will be transmitted to us and processed. These data include: company, salutation, first name, surname, building number, street, town, postcode, email address, telephone area code and number, information about the heating technology in which you are interested, and any information entered in a comment box. If you request a consultation, the serial number of your Weishaupt equipment and a subject matter will be requested. The following information will have to be entered into the form: first name, surname, street, town, postcode, and email address. If the enquiry is sent via the contact form, any additional data will be used in accordance with Section 1.1. You can, of course, also communicate with us via the email address provided, in which case personal data provided in the email will be used. Only designated employees within the Weishaupt Group and its representatives (appointed dealers) have access to your data.

Purpose and legal basis. The data will be used solely to enable us to process your enquiry within the Weishaupt Group and through its representatives (appointed dealers). The data transmitted to us will be processed on the basis of our legitimate interest. In this case, our legitimate interest lies in data processing.

Duration of data storage. The data referred to in this subsection will be deleted as soon as they are no longer required for the purpose of the enquiry. This is the case when the respective process has been completed. The process is complete when your enquiry has been dealt with, for example, when your questions have been answered.

1.4 Cookies

 Extent of data processing. Our website uses only technically necessary cookies. Cookies are text files, which are stored on your computer by your browser. Cookies contain strings, which facilitate the unique identification of your browser when you revisit the site. Some elements of our website require that the browser requesting access can also be identified after a page change. For example, we must be able to determine whether you have agreed to our Terms of Use before downloading certain content from our databases. The following data is stored and transmitted in the cookies: Language setting, Acceptance of Terms of Use.

Purpose and legal basis. We use cookies to enable the use of certain functions of our websites. The setting of cookies - as they are technically necessary cookies - is based on our legitimate interest. The purpose described here includes our legitimate interest.

Duration of data storage. Cookies are stored on your computer. The duration of storage can be identified in the overview for cookie settings of your browser. You can prevent or restrict the transfer of cookies by changing the settings in your browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically, e. g. when you close your browser. If cookies on our website are disabled, it may not be possible to use all the functions of the website to the full.

1.4.1 MapBox

Provided you have consented to the use of cookies, we use the MapBox service to interactively display our locations. The provider of this service is the software company Mapbox Inc, 5th Floor, 740 15th St NW, Washington DC 20005, USA.
Data processing is carried out on the basis of your consent according to Article 6 (1) (a) GDPR.
Without your consent, this service will not be available to you, and no data will be collected or stored.
To establish a connection to the MapBox service, it is necessary to transmit your IP address and other information from your browser.
MapBox ensures an adequate level of data protection through participation in the Data Privacy Framework under the EU-US Data Privacy Agreement.
Further information on data processing by MapBox can be found in their privacy policy: https://www.mapbox.com/legal/privacy/.

1.5 Whistleblower System

The personal data of whistleblowers and data subjects are processed within the whistleblower system. This includes in particular the collection, storage, and evaluation of data for processing reports of potential violations of internal regulations or legal provisions.

What data are processed?
The following personal data can be processed within the whistleblower system: Contact details of the whistleblower (if provided), such as name, email address, or telephone number. Information about the reported violations, which may also include the personal data of data subjects, such as the name, position, and actions of the data subject. Details of communication with the whistleblower or the data subjects.

Purpose and legal basis of data processing
The processing of your personal data within the whistleblower system is carried out for the following purposes:
- To fulfil legal obligations in connection with compliance regulations and internal investigations.
- To investigate and prevent legal violations and to initiate possible measures to comply with legal obligations.
The legal basis for the processing is Art. 6 (1) (c) GDPR (fulfilment of legal obligations) in conjunction with Section 12 of the German Whistleblower Protection Act (HinSchG) and Art. 6 (1) (f) GDPR (legitimate interest). The legitimate interest is to investigate and prevent violations of legal and internal regulations.

Recipients of the data
The personal data collected as part of the whistleblower system are processed exclusively by internal departments that are entrusted with investigating violations. In exceptional cases, external service providers or legal advisors can be involved if this is necessary to process the case. All external recipients are contractually obliged to comply with the GDPR.

Data transfer to third countries
Personal data is only transferred to countries outside the European Union or the European Economic Area if this is necessary to process the report and appropriate data protection precautions have been taken.

Duration of storage
Personal data processed as part of the whistleblower system is only stored for as long as it is necessary to clarify and process the case. After completion of the procedure and compliance with statutory retention periods, the data will be deleted.

2 Rights of a data subject

Your rights as a data subject are comprehensively guaranteed by us. The following is a brief explanation of these rights:

2.1 Advertising objection

You may object to the future use of your data for promotional purposes at any time.

2.2 Withdrawal of consent

You may withdraw your consent to the future use of personal data at any time.

2.3 Other rights

If we process personal data about you, legal provisions regarding your personal data give you the right

• to access the data, to correct or erase the data, as well as
• to limit the use of the data, to oppose the use of the data, and to restrict data transfer.

You also have the right to make a complaint to a Data Protection Authority about the way in which we have used your personal data.

3 Security

We offer you the option to encrypt the personal information you send to us. This encryption protects the confidentiality of the data exchange between you and our webserver and helps to prevent the misuse of data, e. g.  through interception. We use TLS (Transport Layer Security), which is a recognised and widely used method.

4 Contact

The responsible party for the purposes of the General Data Protection Regulation (GDPR) is:

Weishaupt (UK) Ltd
Neachells Lane
Willenhall
WV13 3RG
United Kingdom

Telephone: +44 1902 609841
Email: info@weishaupt.co.uk
Internet: www.weishaupt.co.uk

If you have specific questions about data protection, please address them to our data protection officer by emailing datenschutzbeauftragter@weishaupt.de. We will process your enquiry immediately and inform you about the action we have taken.