DE
1. Data Protection at a Glance
The protection of your personal data is important to us. Below, we inform you about which personal data is processed when you visit our website and when you use our digital contact, enquiry and configuration functions, and for what purposes this processing takes place.
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only to the extent necessary for the operation of our website, the provision of our services, the handling of enquiries, the performance of pre-contractual and contractual measures, or where another legal basis applies.
2. Controller
The controller responsible for data processing on this website is:
Fingerhuth Hitzeschutz- und Textiltechnik GmbH & Co. KG
Vulkanhof 1
56651 Niederzissen
Germany
Phone: +49 (0) 2636 970 227
Email: info@heatprotection.de
3. Legal Bases for Data Processing
We process personal data in particular on the basis of the following legal grounds:
Art. 6(1)(a) GDPR – Consent
Where you have given us your consent to process personal data.
Art. 6(1)(b) GDPR – Contract and Pre-Contractual Measures
Where processing is necessary for the performance of a contract or in order to take pre-contractual measures at your request.
Art. 6(1)(c) GDPR – Legal Obligation
Where we are required to process personal data due to statutory provisions.
Art. 6(1)(f) GDPR – Legitimate Interests
Where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by the interests, fundamental rights or freedoms of the data subject.
Where technologies store information on your terminal device or access information already stored there, the provisions of Section 25 TDDDG also apply.
4. Hosting and Server Log Files
When you access our website, technically necessary information is processed by the web server and/or our hosting provider.
This may include in particular:
– IP address of the accessing device
– date and time of access
– page or file accessed
– referrer URL
– browser type and browser version
– operating system
– HTTP status code
– host name and/or technical connection information
The processing is carried out in order to provide the website technically, ensure its stability and security, identify technical errors and prevent abusive or harmful access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free operation of our website and IT systems.
Server log files are stored only for as long as necessary for the purposes stated above, unless longer retention is required due to a specific security incident or legal obligations.
5. Our Own Website Analytics
For the statistical analysis as well as the technical and content-related optimisation of our website, we operate our own first-party analytics system.
The processing takes place within the technical infrastructure used by us. For this basic website analysis, we do not use an external analytics provider to whom the analytics data collected in this context is transferred for its own analysis purposes.
As part of the analysis, the following information in particular may be processed:
– pages and content accessed
– time and duration of page views
– sessions and/or related website visits
– referrer information
– browser used and/or browser category
– operating system and/or device category
– language settings
– technical information about the page view
– interactions with certain website functions
– use of contact and enquiry functions
– clicks on selected buttons and calls to action
– technical events for functional and error analysis
The analysis is used in particular to understand the use of our website, improve content and navigation, identify technical problems and optimise the user-friendliness of our website and digital functions.
IP addresses and complete user-agent strings are not permanently stored in our analytics database.
Where processing is based on Art. 6(1)(f) GDPR, our legitimate interest lies in statistical analysis, technical optimisation, needs-based further development and improvement of our online services.
Where consent is required for individual analytics functions, processing will only take place after the relevant consent has been granted on the basis of Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
6. Detection of Automated Access, Bots and Crawlers
To protect our website and improve the reliability of our usage statistics, access by automated systems, bots, search engine crawlers and comparable automated services may be technically detected and processed separately.
For this purpose, technical characteristics of the page view and the transmitted user-agent string may in particular be evaluated.
Access identified as automated is processed separately from regular visitor statistics.
The processing serves IT security, the detection of abusive or automated access and the provision of meaningful website statistics.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our technical infrastructure and in the appropriate analysis of the use of our website.
7. Cookies and Comparable Technologies
Our website may use cookies and comparable technologies. Cookies are small pieces of information that are stored on your terminal device or can be accessed via your browser.
We distinguish between technically necessary technologies and optional technologies.
Technically necessary technologies:
Technically necessary technologies are used where they are required to provide a function of our website expressly requested by you or to ensure technically proper operation.
Where information is stored on or read from your terminal device for this purpose, this is done on the basis of Section 25(2) TDDDG.
The associated processing of personal data is carried out, depending on the purpose, in particular on the basis of Art. 6(1)(b) or (f) GDPR.
Optional technologies:
Technologies for analytics, advertising or comparable purposes that require consent are generally only used after you have given your consent.
In this case, the legal basis for storing or accessing information on your terminal device is Section 25(1) TDDDG. The subsequent processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR.
You may withdraw any consent you have given at any time with effect for the future.
8. Consent Management
Where technologies requiring consent are used on our website, you may determine which processing activities you wish to consent to when you first visit the website.
Your selection may be stored so that the website can take your decision into account during subsequent page visits.
Any consent given is voluntary and may be changed or withdrawn at any time with effect for the future via the privacy settings provided on our website.
The lawfulness of processing carried out on the basis of consent prior to its withdrawal remains unaffected.
9. Contacting Us
If you contact us by email, telephone, contact form or via other contact options provided on our website, we process the data you provide in order to handle your enquiry.
This may include in particular:
– name
– company
– address
– email address
– telephone number
– content and subject of your enquiry
– product and project data
– documents and files submitted by you
If your enquiry is aimed at concluding a contract or relates to pre-contractual measures, the processing is carried out on the basis of Art. 6(1)(b) GDPR.
For other business enquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to business and other enquiries.
10. Enquiry Forms
On various pages of our website, we provide enquiry forms and product-related enquiry functions.
When these are used, in addition to your contact and company details, information about the requested product, desired dimensions, quantities, versions, technical requirements and other information provided by you may in particular be processed.
The data is used to assign your enquiry to the relevant product or project, to review it from a technical and commercial perspective and to provide you with an appropriate quotation or response.
The legal basis is Art. 6(1)(b) GDPR, insofar as the processing serves the implementation of pre-contractual measures.
11. Product Configurators and Digital Tools
Our website provides digital functions for product selection, product configuration, enquiry preparation and preliminary technical clarification.
As part of these functions, the following data in particular may be processed:
– selected products and materials
– dimensions and quantities
– technical properties and versions
– fastening and fabrication features
– operating conditions
– project-specific requirements
– free-text information
– company data
– contact details
The processing is carried out for the creation and technical assignment of your configuration as well as for the preparation, processing and response to any resulting enquiry.
The legal basis is Art. 6(1)(b) GDPR.
12. Automated Creation of Documents
As part of our digital enquiry and configuration functions, documents may be generated automatically on the basis of the information you enter.
These may include, for example:
– configuration overviews
– technical summaries
– PDF documents
– enquiry documents
– internal processing documents
The information contained therein is based on the entries you have made and the respective product configuration.
The automated creation of documents serves exclusively the technical and commercial processing, documentation and communication associated with your enquiry.
No solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place in this context.
13. Google Ads and Conversion Tracking
We use Google Ads, an advertising service provided by
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland.
Google Ads enables us to advertise our products and services within Google's search and advertising networks and to measure the effectiveness of our advertising activities.
Where you have given your consent, information about your visit to our website may be processed in connection with Google Ads and conversion tracking.
This may include in particular:
– pages accessed
– time of the website visit
– interactions and conversions
– information about the advertisement previously accessed
– technical browser and device information
– cookie or comparable identifiers
This enables us, for example, to determine whether a user performed a specific action on our website after clicking on an advertisement.
Google may, where applicable, combine the information processed in this context with other information from Google services, provided the relevant requirements are met.
Google Ads technologies requiring consent are used exclusively after you have given your consent.
The legal basis for accessing or storing information on your terminal device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future via the privacy settings on our website.
When using Google services, personal data may be processed by companies of the Google group outside the European Union or the European Economic Area, in particular in the United States.
Where personal data is transferred to appropriately certified US companies, the transfer may be based on the European Commission's adequacy decision concerning the EU-U.S. Data Privacy Framework. Where necessary, other legally recognised transfer mechanisms, in particular Standard Contractual Clauses pursuant to Art. 46 GDPR, may additionally or alternatively be used.
14. Recipients and Processors
We disclose personal data only where there is a legal basis for doing so.
Recipients or categories of recipients may include in particular:
– hosting and IT service providers
– email and communication service providers
– providers of technically necessary website services
– advertising and analytics service providers, where you have consented to their use
– shipping and logistics service providers, where required for contract fulfilment
– payment, tax and financial service providers
– authorities and public bodies, where there is a legal obligation to disclose data
Where service providers process personal data on our behalf, they are engaged – where legally required – on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Personal data is disclosed for other purposes only where there is a legal basis for doing so or where you have expressly consented.
15. Transfer of Personal Data to Third Countries
Where personal data is transferred to recipients outside the European Union or the European Economic Area, this is carried out exclusively in compliance with the requirements of Art. 44 et seq. GDPR.
Data may in particular be transferred on the basis of an adequacy decision by the European Commission pursuant to Art. 45 GDPR.
If there is no adequacy decision for the relevant third country or recipient, data will only be transferred where appropriate safeguards within the meaning of Art. 46 GDPR are in place or another statutory exception applies.
16. Storage Period
We store personal data only for as long as necessary for the respective processing purpose.
If the purpose of processing no longer applies, the relevant data will be deleted unless statutory retention obligations or other legal grounds prevent deletion.
Data from contact and product enquiries is generally stored for the duration of the processing of the enquiry and any subsequent business relationship.
Documents relevant under commercial and tax law are stored in accordance with the applicable statutory retention periods.
Data required for the establishment, exercise or defence of legal claims may also be stored until the expiry of the applicable statutory limitation periods.
Purpose-specific retention periods apply to technical log, security and analytics data. The data is deleted or anonymised as soon as it is no longer required for the respective technical or statistical processing purpose.
17. Data Security and Encrypted Transmission
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, destruction and unauthorised access.
Our website uses an encrypted TLS/SSL connection. This means that data you transmit to us cannot generally be readily read by third parties.
However, absolute protection during data transmission over the Internet cannot be technically guaranteed.
18. Rights of Data Subjects
Within the scope of the statutory requirements, you have the following rights in particular:
Right of access – Art. 15 GDPR
You may request information as to whether and which personal data concerning you we process.
Right to rectification – Art. 16 GDPR
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure – Art. 17 GDPR
Subject to the statutory requirements, you may request the deletion of your personal data.
Right to restriction of processing – Art. 18 GDPR
Subject to the statutory requirements, you may request restriction of processing.
Right to data portability – Art. 20 GDPR
Where the statutory requirements are met, you may request to receive the personal data you have provided in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.
Right to object – Art. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, subject to the statutory requirements, to object to such processing.
You may contact us at any time to exercise your rights.
19. Withdrawal of Consent
Where the processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR, you may withdraw this consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You may in particular change or withdraw consent to optional website technologies via the privacy settings provided on our website.
20. Right to Object to Processing Based on Legitimate Interests
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
21. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
In particular, you may lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
22. Obligation to Provide Data
When using our website solely for informational purposes, you are generally not required to provide personal data, except where such data is technically required to provide the website.
For contact, enquiry and configuration functions, certain information is required so that we can process your enquiry and respond to you.
Without the information marked as required, the respective enquiry or function may not be processed or may not be processed in full.
23. Automated Decision-Making and Profiling
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place as part of the processing activities described on this website.
24. Current Status and Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, our website, the technologies used or our data processing activities change.
The current version published on this website shall apply.
Last updated: September 2026