Contact

Privacy Policy

This is a translation. Only the German version is legally binding: German version

We are very pleased that you are interested in our company. Data protection is a top priority for the management of Juratherm GmbH. In general, it is possible to use the Juratherm GmbH website without providing any personal data. However, if a data subject wishes to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to Juratherm GmbH. Through this Privacy Policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.

Your data will generally not be disclosed to third parties unless this is necessary to process your inquiry or to fulfill the purpose of processing. Furthermore, data is transferred to technical service providers (processors), such as system hosting providers, who support us in operating the website and other business processes. Data processing agreements pursuant to Article 28 of the GDPR have been concluded with these service providers, which, among other things, obligate them not to use the data for their own purposes and to protect it using state-of-the-art technical and organizational measures.

As the data controller, Juratherm GmbH has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed via this website. Nevertheless, Internet-based data transmissions may generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, any data subject is free to provide personal data to us via alternative means, such as by telephone.

Juratherm GmbH is part of the Pletzer Group (www.pletzer-gruppe.at). Some business processes are carried out jointly with other companies in the Pletzer Group, particularly in the areas of IT security (MP Management GmbH, Bergliftplatz 1, 6361 Hopfgarten im Brixental, Austria) and marketing and sales (iDM Energiesysteme GmbH, Seblas 16-18, 9971 Matrei in Osttirol, Austria).

1. Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions of a data protection nature is:

Juratherm GmbH

Wilhelm-Busch-Str. 4-6

95447 Bayreuth

Germany

Phone: +49 921 / 15 13 44 - 0

Email: datenschutz@juratherm.com

Website: www.juratherm.com

Data Protection Officer

We have appointed an external data protection officer within our company. You can reach this person using the following contact information:

data.mill GmbH

Thiemo Sammern

– Data Protection Officer, Juratherm GmbH -

Georg-von-Trapp-Straße 12

5026 Salzburg

Austria

Email: datenschutz@juratherm.com

2. Cookies

Cookies are data stored in your browser that enable the recognition of a visitor on an anonymous basis. Cookies can generally be rejected or deleted through the appropriate browser settings. The statements made here regarding cookies also apply in a similar manner to other technical browser functions such as local storage and session storage.

Some of the cookies on this website are necessary for the website to function and are set based on our legitimate interest in the secure and efficient operation of the website. As a general rule, information is not disclosed to third parties for their own business purposes.

Cookies for the purposes of analysis and profiling are used only with your express consent.

3. Collection of General Data and Information

The Juratherm GmbH website collects a range of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the server’s log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the subpages accessed on our website via an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system, and (8) other similar data and information used to prevent threats in the event of attacks on our information technology systems.

When using this general data and information, Juratherm GmbH does not draw any conclusions about the data subject. Rather, this information is required to (1) correctly deliver the content of our website, (2) optimize the content of our website as well as the advertising on it, (3) ensure the continued functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack. Juratherm GmbH therefore evaluates this anonymously collected data and information both for statistical purposes and with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

The data is deleted after 30 days. The legal basis for the processing is our legitimate interest in ensuring the secure and efficient operation of our website and in optimizing our content.

4. Contact Information via the Website

In accordance with legal requirements, the Juratherm GmbH website contains information that enables quick electronic contact with our company as well as direct communication with us, which also includes a general electronic mail address (email address). If a data subject contacts the data controller via email or through a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data, transmitted voluntarily by a data subject to the data controller, is stored for the purposes of processing the request or contacting the data subject.

The data is deleted after three years. The legal basis for the processing is the response to your inquiry pursuant to Art. 6(1)(b) of the GDPR and, after the response has been provided, our legitimate interest in asserting, exercising, or defending legal claims (Art. 6(1)(f) of the GDPR).

To protect against automated form submissions by bots, we use the Google reCAPTCHA tool provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. In the process, information is read from your device and your usage behavior is analyzed. A data processing agreement has been concluded with Google in this regard. In exceptional cases, data may be transferred to the United States. Please note that the United States has a lower level of data protection than the EU, and U.S. companies are required to disclose data to courts, law enforcement agencies, regulatory authorities, or security agencies. Google has committed to complying with the principles of the EU-U.S. Data Privacy Framework (DPF) to achieve a level of data protection comparable to that of the EU. According to Article 45 of the GDPR, no additional legal basis is therefore required for the transfer of data to the United States. The legal basis for the processing is our legitimate interest in ensuring the secure and efficient operation of our website.

5. Routine Deletion and Blocking of Personal Data

The data controller processes and stores the data subject’s personal data only for the period necessary to achieve the purpose of storage or to the extent provided for by the European legislative and regulatory authorities or other legislative bodies in laws or regulations to which the data controller is subject.

If the purpose of storage no longer applies or if a retention period prescribed by European directives and regulations or by another competent legislative body expires, the personal data is routinely blocked or deleted in accordance with legal requirements.

6. Rights of the Data Subject

You have the right to access, rectify, and erase your data; the right to restrict processing; the right to object to processing (in particular, the right to object to the sending of direct marketing); and the right to file a complaint with a supervisory authority. If you have any questions regarding the exercise of your rights, please contact our Data Protection Officer.

a) Right to Confirmation

Every data subject has the right, as granted by European directives and regulations, to request confirmation from the data controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact an employee of the data controller at any time.

b) Right of Access

Every data subject affected by the processing of personal data has the right, granted by European legislation, to obtain from the controller, free of charge, information at any time regarding the personal data stored about them and a copy of this information. Furthermore, European legislation grants the data subject the right to receive the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations
  • if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
  • the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or a right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data is not collected from the data subject: all available information regarding the origin of the data
  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and—at least in these cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject

Furthermore, the data subject has the right to obtain information regarding whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

If a data subject wishes to exercise this right to access, they may contact an employee of the data controller at any time.

c) Right to Rectification

Every data subject affected by the processing of personal data has the right, as granted by European directives and regulations, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data—including by means of a supplementary statement.

If a data subject wishes to exercise this right to rectification, they may contact an employee of the data controller at any time.

d) Right to Erasure (Right to Be Forgotten)

Every data subject affected by the processing of personal data has the right, granted by European directives and regulations, to request that the controller immediately erase the personal data concerning them, provided that one of the following grounds applies and insofar as the processing is not necessary:

  • The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
  • The data subject revokes their consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Art. 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) of the GDPR.
  • The personal data was processed unlawfully.
  • The erasure of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data was collected in connection with information society services offered in accordance with Article 8(1) of the GDPR.

If any of the above-mentioned reasons apply and a data subject wishes to request the deletion of personal data stored by Juratherm GmbH, they may contact an employee of the data controller at any time. The Juratherm GmbH employee will ensure that the request for deletion is complied with without delay.

If personal data has been made public by Juratherm GmbH and our company, as the controller pursuant to Art. 17(1) of the GDPR, is obligated to erase the personal data, Juratherm GmbH shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform other controllers who process the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replicas of such personal data, provided that the processing is not necessary. The Juratherm GmbH employee will take the necessary steps on a case-by-case basis.

e) Right to Restriction of Processing

Every data subject affected by the processing of personal data has the right, granted by European directives and regulations, to request that the controller restrict processing if one of the following conditions is met:

  • The data subject disputes the accuracy of the personal data for a period that allows the controller to verify the accuracy of the personal data.
  • The processing is unlawful; the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data.
  • The controller no longer requires the personal data for the purposes of processing, but the data subject requires it to assert, exercise, or defend legal claims.
  • The data subject has objected to the processing pursuant to Art. 21(1) of the GDPR, and it has not yet been determined whether the legitimate interests of the controller outweigh those of the data subject.

If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored by Juratherm GmbH, they may contact an employee of the data controller at any time. The Juratherm GmbH employee will arrange for the restriction of processing.

f) Right to Data Portability

Every data subject affected by the processing of personal data has the right, as granted by European legislation, to receive the personal data concerning them—which the data subject has provided to a controller—in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising their right to data portability pursuant to Art. 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another controller, provided this is technically feasible and does not infringe upon the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact a Juratherm GmbH employee at any time.

g) Right to Object

Every data subject affected by the processing of personal data has the right, granted by European legislation and regulations, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

Juratherm GmbH will no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims.

If Juratherm GmbH processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Juratherm GmbH regarding processing for direct marketing purposes, Juratherm GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out by Juratherm GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise the right to object, the data subject may contact any employee of Juratherm GmbH or another employee directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by means of automated procedures that utilize technical specifications.

h) Automated decisions in individual cases, including profiling

Every data subject affected by the processing of personal data has the right, granted by European legislation, not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning the data subject or similarly significantly affects the data subject, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or (3) is based on the explicit consent of the data subject.

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is it made with the data subject’s explicit consent, Juratherm GmbH takes appropriate measures to safeguard the data subject’s rights, freedoms, and legitimate interests, including at a minimum the right to request human intervention by the controller, to present their own point of view, and to contest the decision.

If the data subject wishes to exercise rights regarding automated decision-making, they may contact an employee of the data controller at any time.

Every data subject affected by the processing of personal data has the right, granted by European legislation and regulations, to revoke consent to the processing of personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they may contact an employee of the data controller at any time.

7. Data Protection for Job Applications and During the Hiring Process

The data controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller electronically, for example via email or through a web form on the website. If the data controller enters into an employment contract with an applicant, the data provided will be stored for the purpose of administering the employment relationship in accordance with legal requirements. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this context include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG). Data will only be retained for a longer period for record-keeping purposes—such as in the event that another job opening might be suitable for the applicant in the near future—with the applicant’s consent.

We hereby inform you that the provision of personal data is in some cases required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information about the contracting party). In some cases, it may be necessary for a data subject to provide us with personal data in order to conclude a contract, which we must then process. For example, the data subject is obligated to provide us with personal data when our company enters into a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact one of our employees. Our employee will explain to the data subject, on a case-by-case basis, whether the provision of personal data is required by law or contract, or is necessary for the conclusion of the contract; whether there is an obligation to provide the personal data; and what the consequences of failing to provide the personal data would be.

9. Google Maps

This website uses Google Maps to display interactive maps and to generate directions. Google Maps is a mapping service provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, DUBLIN, D02 R296 (“Google”). By using Google Maps, information about your use of this website—including your IP address and the (starting) address entered as part of the route planner function—may be transmitted to Google in the United States. When you visit a page on our website that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted directly from Google to your browser and integrated into the webpage by your browser. Therefore, we have no control over the scope of the data collected by Google in this manner.

The transfer of data is necessary for the correct display of the map. It is carried out because you have expressly requested the service. A data processing agreement has been concluded with Google, ensuring that Google may not use the data for its own purposes. Google has committed to complying with the principles of the EU-U.S. Data Privacy Framework (DPF) to achieve a level of data protection comparable to that of the EU. According to Art. 45 of the GDPR, no additional legal basis is therefore required for the transfer of data to the United States.

Google Maps is used to ensure an appealing presentation of our online offerings and to make it easy to locate the places listed on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

For more information on the handling of user data, please see Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

10. AI Agent by Eleven Labs

Our website features an AI assistant that can answer your questions about Juratherm’s products and services in natural language. Before you can use the AI assistant, a script from Eleven Labs (ElevenLabs Inc., 169 Madison Ave #2484 New York, NY 10016, USA) must be loaded to initialize the service. To do this, the IP address of your device is transmitted to Eleven Labs. A data processing agreement has been concluded with Eleven Labs, ensuring that the data may not be used for their own purposes. The legal basis for this processing is our legitimate interest in providing modern support features for website visitors and ensuring the full functionality of the website. Please note that the United States has a lower level of data protection than the EU, and U.S. companies are required to disclose data to courts, law enforcement agencies, regulatory authorities, or security agencies. Eleven Labs has committed to complying with the principles of the EU-U.S. Data Privacy Framework (DPF) to achieve a level of data protection comparable to that of the EU. According to Article 45 of the GDPR, no additional legal basis is therefore required for the transfer of data to the United States.

The actual communication with the AI assistant also involves the recording of audio content and the transcription of the conversation. This processing takes place only with your explicit consent (Art. 6(1)(a) GDPR).

Additional privacy notices