Viessmann Data Protection Statement
General information
We, the Viessmann Generations Group GmbH & Co. KG (hereinafter referred to as "Viessmann" or "we"), take the protection of your personal data very seriously and adhere strictly to the rules of the currently applicable data protection laws. This includes, in particular, the General Data Protection Regulation (hereinafter: "GDPR", Regulation (EU) 2016/679 of the European Parliament and of the Council. The Viessmann Generations Group are the companies affiliated with Viessmann Generations Group GmbH & Co. KG affiliated companies. These are companies over which we can exert a determining influence.
Personal data is only collected on our websites and when using our apps and services to the extent necessary and processed for a specific purpose. Personal data is data that personally identifies you or other data linked to you.
Responsible body within the meaning of the Federal Data Protection Act/DS-GVO:
Viessmann Generations Group GmbH & Co. KG
Im Birkenried 1
D-35088 Battenberg (Eder)
Telephone: +49 6452 9296 000
E-mail: info@viessmann.com
Processing within the Viessmann Generations Group
On behalf of us, the Viessmann Generations Group GmbH & Co. KG, work:
Viessmann Climate Solutions Berlin GmbH for the operation of the websites and apps as well as marketing
Viessmann Generations Services GmbH & Co. KG for the maintenance of the websites and apps as well as marketing
Viessmann Climate Solutions SE for the operation of the recruiting portal
Viessmann IT Service GmbH for the operation of the backend systems
The data collected may be processed by or passed on to other Viessmann Generations Group companies, if:
You have given your express and informed consent to this elsewhere (e.g. note in the inquiry form)
It is necessary under purpose limitation and the division of labor within the Viessmann Generations Group; corresponding contractual agreements have been concluded within the Viessmann Generations Group for this purpose
The data is provided by the controller in pseudonymized form and the controller guarantees that the commissioned group company cannot de-pseudonymize this data, or
The data is stored anonymously by the controller and the data stored in this way is no longer subject to the provisions of data protection law.
Transfer to third countries
The companies of the Viessmann Generations Group process/transmit the data provided by you in/at locations in Germany, the European Union and third countries (including the USA) which have an appropriate level of data protection in accordance with Article 45 GDPR or offer suitable guarantees in accordance with Article 46 GDPR.
Scope of the data protection statement
The following statement gives you an overview of how we guarantee data protection, what kind of data is collected and processed for what purpose and on what legal basis. It applies in principle to all websites and apps for which Viessmann is responsible. If Viessmann websites and apps deviate from these principles of data processing or supplement them with their own, this will be indicated in a suitable manner on the corresponding websites or in the apps.
This privacy policy consists of five parts:
The first part (regulations for private users) applies to the private users of Viessmann services.
The second part (provisions for business users) applies to business users of Viessmann services.
The third part (regulations for applicants) applies to the private users of Viessmann services with regard to applications.
The fourth part (general information and regulations for Viessmann websites and apps) applies to all users using Viessmann services or websites and apps.
The fifth part (information on rights of data subjects) applies to all users whose data is subject to data protection law, but not legal entities.
Furthermore, our websites may contain links to websites of other providers to which this data protection declaration does not apply.
I. Regulations for private users
This part of the data protection statement applies to private users of Viessmann Services. The legal basis for processing your data is based on your consent to this data protection statement as consent or in order to be able to provide you with information, services or products requested in accordance with GDPR Article 6 Para.1 lit.b).
Use and verification of personal data
The following, are some of the personal data types you provide:
your name
your address (zip code, town, street and house number, address supplements if applicable)
your e-mail address
your date of birth
your gender
your telephone number and/or mobile phone number
your country
If you provide us with personal data, we use it to answer your questions, to process and carry out your consultation request, for technical administration, for login activities and the services provided within the respective websites or apps. The legal basis for this is Art. 6 para. 1 sentence 1 b GDPR or your consent. You can revoke your consent to the use of your provided data at any time. To do so, please contact: privacy@viessmann.com, stating the service(s) used if possible.
Further processing and deletion of your data
Furthermore, your data will not be passed on or sold to third parties, i.e. persons or companies not belonging to the Viessmann Generations Group. Stored personal data will be deleted if you revoke your consent to its storage, if the data is no longer required for the purpose intended by the storage or if its storage is inadmissible for other legal reasons.
II. Regulations for applicants
This part of the privacy policy applies to applicants for job advertisements of companies of the Viessmann Generations Group or third parties to which Viessmann provides a platform or affiliate program for job advertisements/placement. This applies only to the extent that these applicants process personal data in the context of the application process, e.g. application in paper form, e-mail, contact forms with appendix or portals operated by Viessmann or the use of electronic job portals of third parties in accordance with the required content, also in accordance with further state legal requirements, to Viessmann. Application documents submitted on paper are scanned and stored in our systems, and the paper is then disposed of in compliance with data protection regulations by certified service providers.
We use your personal data only for the process of your application and/or in the context of Talent Relationship Management and on the basis of your consent to this Privacy Policy. To process your application, insofar as required, the use of your data to contact us by e-mail and/or mail and/or phone. The recruiting and hiring managers of Viessmann Generations Group GmbH & Co. KG and the respective group company as well as supervisors or other recruiting officers in whose area the vacancy is advertised, have access to your documents. Another form of processing is done anonymously for the purpose of measuring the success of the appointments and the technical application channels used, as well as, anonymously, the submitted skills of applicants.
The data is processed using systems from Greenhouse Software, Inc., a US-based company. In accordance with Article 46 of the GDPR, Viessmann Climate Solutions Berlin GmbH has concluded a contract with Greenhouse based on the EU standard data protection clauses.
The deletion of the stored personal data of the applicant is automatically at the earliest after 4, but at the latest after 6 months, from the date on which the applicant was informed that the position is not occupied by him and no other legal requirements oppose. The deadline results from the requirements of the General Equal Treatment Act.
When you join the Talent Relationship Management Program, your data will be stored in our system for up to 365 days to be considered in advance for future job postings. Here we use your provided data to contact you by e-mail and/or mail and/or phone.
Your data will only remain stored in our system beyond this period in order to be considered for other job advertisements in the future if you have given your express consent at our request.
When sending application documents in paper form without reference to job advertisements in our electronic formats, e.g. as a speculative application, you will receive a summary of this data protection declaration together with a confirmation of receipt of your letter or, at the latest, when we reject your application.
III. General information and regulations for Viessmann websites and apps
These provisions apply in addition to the provisions for private users and the provisions for business users for Viessmann websites and apps. Some of our apps have their own additional privacy policies.
Data processing by accessing our Internet pages and using our apps
Viessmann automatically collects and stores information in its server log files that your browser or app transmits to us. Viessmann cannot assign this data to individual persons. This data is not merged with other data sources. These are:
Browser type/ version
Referrer URL (the previously visited page)
Host name of the accessing computer (IP addresses v4 and v6)
Time of the server request
The IP address is the globally valid, unique identification of your computer at the time of allocation by your Internet provider and, in its most common form (IPv4), consists of four blocks of digits separated by dots, or extended by additional digits (IPv6). As a private user, you will not usually use a constant IP address, as this is only temporarily assigned to you by your provider (so-called "dynamic IP address"). In the case of a permanently assigned IP address (so-called "static IP address"), it is technically easy to clearly assign user data via this feature.
The mentioned data will be processed by us for the following purposes:
Ensuring a smooth connection to the website
Ensuring comfortable use of the aforementioned website
Evaluation of system security and system stability
For further administrative and statistical purposes
The personal data of the server log files are processed on the basis of Art. 6 para. 1 lit. f GDPR. This authorization allows the processing of personal data in the context of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons relating to your particular situation that speak against data processing. All you need to do is send an email to the data protection officer. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
The server log files with the above-mentioned data are automatically deleted after 30 days or anonymized if used for statistics. We reserve the right to store the server log files for longer if there are facts that suggest unauthorized access (such as an attempt at hacking or a so-called DDOS attack).
Data processing for access to our websites and apps - "Viessmann Account"
Viessmann uses a central identity and access management system ("IAM") in addition to conventional login functions (e.g. user ID and password) to grant, change and delete access authorizations for non-public or not freely usable websites and apps. The following personal data is processed for this purpose:
E-mail address
Password
Website / app used with last time stamp
User role(s)
Timestamp of last successful login
First name, last name and other data (depending on the website / app used)
Mobile/telephone number (for 2-factor authentication)
The above data is processed by us for the following purposes:
Creation of the "Viessmann Account"
Creation and management of access rights to apps and websites
Creation and administration of role-based access rights within apps and websites
Checking and display of authorisations by/for the respective responsible functions for the individual websites and apps at Viessmann
Communication of information on the website and app used (e.g. changes, error messages, innovations, etc.)
Creation and usage of aggregated (“anonymized”) key figures on the use of websites and apps
Depending on the website or app used, permission to process your personal data is granted for the following reasons
The fulfillment of a contract with you in accordance with GDPR Art. 6 Para. 1 lit b, the subject of which also includes the use of Viessmann websites or apps,
your consent in accordance with GDPR Art. 6 Para. 1 lit a if you are explicitly asked for this or
in our legitimate interest according to GDPR Art. 6 Para. 1 lit. f.
This last permission allows the processing of personal data within the scope of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in the efficient administration of access and access rights and the protection of the websites and apps as well as the data processed there from unauthorized use (e.g. disclosure, modification, deletion). You can object to this data processing at any time if there are reasons relating to your particular situation that speak against data processing. All you need to do is send an e-mail to the data protection officer. Before objecting, please check whether you can delete the user account yourself. Some user roles, especially those based on consent, also allow you to delete your personal data yourself as part of a self-service.
In no case do we use the data collected for the purpose of drawing further conclusions about your person or creating profiles.
If your user account is inactive for more than 360 days (last timestamp of successful login or use of website or app), the above-mentioned data will be automatically deleted or, if used for statistics, anonymized. You will receive corresponding information from us before this period expires. We reserve the right to store personal data for longer if this is required by law or contract or if there are facts that suggest unauthorized access.
Linking to external websites
This data protection statement applies exclusively to the Viessmann websites and apps. These may contain links to third-party websites. This data protection statement does not extend to these. If you leave the Viessmann websites and apps in order to visit the services of a third-party provider, we recommend that you also carefully read this provider's data protection statement.
Information on cookies and the use of analysis tools
The processing of personal data by cookies and analysis tools (list all analysis tools) is based on Art. 6 para. 1 lit. f GDPR. This authorization allows the processing of personal data in the context of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in analyzing the use of our website.
Viessmann uses cookies in several places on its websites and in its apps. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Cookies do not cause any damage to your computer and do not contain viruses.
Viessmann also uses analysis tools for this purpose, such as Webtrends or Google Tag Manager (Firebase). The data provided and used is collected and stored completely anonymously. This data may also be stored outside Germany or the European Union.
When implementing and using analysis tools and tracking technologies, we anonymize personal data as quickly as possible either on the part of the provider, regulated by corresponding contracts, or as part of our initial use, so that the right to information on your part cannot be exercised for all of the technologies listed below.
You can prevent the transmission of such data by making the appropriate settings in your browser or apps or the operating system environment (iOS, Android), but this may lead to problems when accessing, operating or using the content or service offered.
IV. Information on the rights of data subjects
This part of the data protection statement provides additional information on how you can exercise your rights as a data subject vis-à-vis Viessmann.
Your identity
In order to comply with the rights of affected GDPRs, it may be necessary for Viessmann to request further information to prove your identity in cases of personal data collected on the basis of contractual relationships on a random sample basis or in cases of justified doubt. This is especially true if a request for information is available in electronic form, but the sender's details do not reveal the identity of a natural person concerned.
Your rights
to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
in accordance with Article 16 GDPR, to immediately request the rectification of inaccurate or completion of your personal data stored by us
to request the erasure of your personal data stored by us in accordance with Article 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
in accordance with Article 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Article 21 GDPR
in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
To exercise these rights, please contact
Data Protection Officer of the Viessmann Generations Group
2B Advice GmbH
Joseph-Schumpeter-Allee 25
D-53227 Bonn
Phone: +49 6452 9296-101
E-mail: privacy@viessmann.com
in accordance with Article 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing based on this consent in the future;
You can withdraw your consent via: privacy@viessmann.com
to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or our company headquarters.
Competent supervisory authority:
The Hessian Data Protection Officer
P.O. Box 3163
D-65021 Wiesbaden
Telephone: +49 611 1408-0
Fax: +49 611 1408-900
E-mail: poststelle@datenschutz.hessen.de
Further information - Contact details
Your trust is important to us. That is why we are always available to answer your questions regarding the processing of your personal data. If you have any questions that are not answered by this privacy policy or if you would like more detailed information on a specific point, please contact us:
Contact details of the data protection officer:
Data Protection Officer of the Viessmann Generations Group
2B Advice GmbH
Joseph-Schumpeter-Allee 25
D-53227 Bonn
Telephone: +49 6452 9296-101
E-mail: privacy@viessmann.com
In accordance with Article 13 (2) d) GDPR, we provide you with the necessary information for exercising your right to lodge a complaint here:
Competent supervisory authority
The Hessian Data Protection Officer
P.O. Box 3163
D-65021 Wiesbaden
Telephone: +49 611 1408-0
Fax: +49 611 1408-900
E-mail: poststelle@datenschutz.hessen.de
Safety information
We endeavor to store your personal data by using technical and organisational means in such away that they are not accessible to third parties. When communicating by e-mail, complete data security cannot be guaranteed, so we recommend that you send confidential information by post.
Changes to the data protection statement
This privacy policy is currently valid and was last updated on August 27, 2020.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current privacy policy at any time on the website at https://www.viessmann.family/en/data-protection.html.