Privacy Policy

We take the protection of your personal data very seriously. This privacy policy informs you about the processing of personal data. The privacy policy applies to our website and the services mentioned here. Specific or supplementary privacy policies may apply to certain services.

Controller

The controller for the processing of personal data is Vaillant GmbH, Berghauser Straße 40, 42859 Remscheid ("we", "us").

You can find more information and our contact details in our legal notice.

We are a company of the Vaillant Group. The Vaillant Group means Vaillant GmbH (Vaillant GmbH, Berghauser Str. 40, 42859 Remscheid, Germany) and the companies affiliated with Vaillant GmbH. The Vaillant Group includes the brands Vaillant, Saunier Duval, awb, Bulex, DemirDöküm, Glow worm, Hermann Saunier Duval and protherm. You can find more information about Vaillant Group here.

Legal basis

We generally process your personal data on the basis of your consent, for the initiation or performance of a contract or to the extent necessary for the purposes of the legitimate interests pursued by us or by a third party (Art. 6 (1) (a), (b) and (f) DSGVO). In particular, we process personal data in order to answer your enquiries, to offer you assistance in using our products and services, to prepare or conclude repair, maintenance and other service contracts, to provide you with requested information or services via our website or other means, to adapt our internet offers, products and services to your interests or to improve them and to support our marketing. Further details on this can be found in the following notes.

Use of the website

You can use our website without identifying yourself or registering. When you use our website, you transmit data to us via your browser that is technically necessary to establish the connection and use our website. This includes, in particular, the date and time of the connection, your IP address, requested web pages and downloaded files, data on the transmission and use of the website, information on the browser and browser settings, operating system and device and the internet address from which you accessed our site. The data is stored and processed for technical reasons. We use this information to ensure the security of our web pages, to measure the effectiveness of internet advertising, to compile statistics and to measure the activities on the website with the aim of improving our offer. We generally do not store this data for longer than thirty days.

Use of personalised services

For the use of personalised services, we require personal data, in particular so that you can use the respective service, register or so that we can contact you. The intended use of the data results from the respective purpose of the service offered. Not all of the following services are offered on all of our websites or at all times.

If you use personalised services or register, we store the personal data required for the service for the duration of the respective services or for the duration of your registration and thereafter for as long as required and permitted by law. If you are a customer, we have a contract with you, you have registered for certain services on our website or for the use of applications, we may also be able to associate and link your enquiries and orders with your existing customer data.

When we ask you to provide us with certain personal information, we indicate whether the information is necessary to provide you with the particular service. Required information is marked with an asterisk (*) or otherwise. All other information you provide to us is voluntary.

If you choose not to provide us with personal data when using services on our website, your decision will not have any material adverse consequences for you. However, you may then not be able to receive certain information via the website, you may not be able to use personalised services or register, or we may not be able to respond to enquiries fully or at all.

We may pass on your data to companies of the Vaillant Group if this is necessary for the provision of the respective service or the processing of your enquiries and requests.

Insofar as the processing of your personal data is based on your consent, you can withdraw your consent for the future at any time. You can use the contact details below for this purpose. We will promptly process any withdrawal notice.

Newsletter registration

We offer newsletters in general or on specific topics, to which you can subscribe. If you would like to subscribe to a newsletter, we need your email address.

After registering for a newsletter, you will receive an email so that you can confirm your registration. By confirming, you allow us to send you regular information about our products and services in the form of a newsletter.

When we send a newsletter, we collect data about the sending and use of the newsletter. For this purpose, newsletters contain links to image files stored on our web servers. When you open a newsletter, your email program uploads these image files from our web server. This allows us to track whether and when our newsletters were opened and what content was read. We use the information collected in this way to make your use of the newsletters more attractive, to control the sending of newsletters and for statistical purposes.

This also applies if you register for one of our newsletters via third-party offers, e.g. within the services of Google or Facebook. In these cases, the operators of these platforms may also process personal data from you. The privacy policies of the providers apply to such third-party offers. We have no influence on the third-party offers and their privacy policy.

You can unsubscribe from a newsletter you have subscribed to at any time by sending a message to us or via an unsubscribe link provided for this purpose in the newsletter, without incurring any costs other than the transmission costs according to the basic rates.

Transfer of personal data within the Vaillant Group and to third parties

Personal data is processed by us as the controller and, for the purpose of providing services, is passed on to processors within the Vaillant Group and external processors who process the data exclusively on our behalf and in accordance with our instructions. If we use third-party providers who also use the data for their own purposes, we have described this in particular in connection with the information on cookies.

With your consent, we also pass on personal data to specialist tradesmen or other third parties if this is necessary for the provision of certain services.

The transfer of personal data to domestic and foreign courts, authorities or other governmental institutions shall take place exclusively within the framework of the statutory provisions.

Data processing by third parties and processing outside the EU or EEA

Personal data is processed by us as the data controller and, for the purpose of providing services, is passed on to data processors within the Vaillant Group and external data processors who process the data exclusively on our behalf and in accordance with our instructions.

In some circumstances, data processing is carried out on our behalf by a processor outside the EU or EEA. In such a case, unless there is an adequacy decision by the Commission in relation to the recipient country, we will agree with an appropriate service provider on adequate safeguards for the protection of personal data, in particular by agreeing the applicable EU standard contractual clauses.

Particularly in connection with the use of analysis tools, tracking and targeting technologies from third-party providers or the integration of social media offers, it is possible that the third-party providers also process data outside the EU or the EEA. In particular, third-party providers may process personal data in the USA. The US currently does not provide adequate protection under the GDPR in particular because government authorities in the US have the right to access personal data held by companies in certain circumstances without adequate remedies available to data subjects.

Data security

We apply technical and organisational security measures to protect the personal data we manage against destruction, loss, alteration or unauthorised disclosure of, or access to, personal data. All personal data provided by you when using personalised services will be transmitted to us in encrypted form. We use a state-of-the-art encryption process for this purpose. Your data is password protected in the systems in which it is stored. The persons who have access to it are prohibited by strict security regulations from disclosing your data to third parties. Our security measures are continuously improved.

Your rights

You have the right to request access to and rectification or erasure of personal data concerning you or restriction of processing, or to object to processing as well as the right to data portability, in each case in accordance with the statutory provisions.

Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can also contact our data protection officer to assert your above rights.

You have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions if you are of the opinion that the processing of personal data concerning you infringes the statutory provisions. For this purpose, you may in particular contact the authority in the EU Member State of your habitual residence or of the place of the alleged infringement.

The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for us. You can find their current contact details at www.ldi.nrw.de.

Contact details of the data protection officer

If you have any questions or suggestions on the subject of data protection, please feel free to send them by email or letter to our data protection officer, who can be reached at the following contact details:

By email: datenschutz@vaillant-group.com

By post: Vaillant GmbH, Data Protection Officer, Berghauser Str. 40, D-42859 Remscheid, Germany.

Subject to change

We reserve the right to change these data protection provisions at any time within the framework of the applicable laws. Please also note the respective terms of use and the general terms and conditions when using our Internet pages.

Status: June 2025