1. Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by
Controller: Roth Werke GmbH, Am Seerain, 35232 Dautphetal-Buchenau, phone: +49 6466 - 9220, e-mail: service@roth-werke.de.
The data protection officer of Roth Werke GmbH is gds Gesellschaft für Datenschutz Mittelhessen mbH, Auf der Appelling 8, 35043 Marburg, Germany, which can be contacted at datenschutz@gdsm.de with the subject "Roth Werke GmbH".

2. Collection and storage of personal data and the nature and purpose of their use
a) When you visit the website
When you visit our website www.roth-werke.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• To ensure a comfortable use of our website,
• Evaluation of system security and stability and
• for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
 We also use cookies when you visit our website. You can find more detailed explanations on this in section 4 of this privacy policy.

b) When using our contact form If you have
questions of any kind, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide your name, postal address and a valid e-mail address so that we know who sent the enquiry and can answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.
 The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

c) When using the quick design tool
At www.roth-werke.de/de/roth-schnellauslegung-flaechenheizung-kuehlung.htm, we offer you the option of using software provided by us free of charge to carry out a virtual design of your customised surface heating/cooling system. To use the quick design tool, you need to register an account. You can register your account using a registration form. It is necessary to enter your e-mail address so that we can create a user account for you and know which user the account is assigned to. Further information can be provided voluntarily.
When using the quick design tool, your data will be transmitted to
the server of our external service provider, Linear Gesellschaft für konstruktives Design mbH, Im Süsterfeld 20, 52082 Aachen, Germany, and stored there until it is deleted.
 In addition, cookies may be set when using the quick design tool. Google Analytics is also used. You will find more detailed explanations in sections 4 and 5 of this privacy policy.
Data processing for the purpose of using the quick design tool is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, as a contractual relationship is established between you and us when you register your account and accept the terms of use.
 We also use the data you provide for marketing purposes, provided that you have expressly consented to such use of your data when registering your account. In doing so, we use your data to improve our offers, for customer care, to evaluate user behaviour and, if necessary, to contact you individually.
Data processing for the purpose of marketing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.
 The personal data collected by us for the use of the quick design tool will be automatically deleted at the latest after deletion of your account.

3. Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
 We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
 Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
 On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
 In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
 On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies is required
for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and § 25 para. 2 TTDSG.
 Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

5. Analysis and third-party tools
Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
 The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Use of Google Analytics
We use Google Analytics, a web analysis service of Google Inc. www.google.de/intl/de/about/ (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google")
for the purpose of designing and continuously optimising our website to meet your needs. In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

are transferred to a Google server in the USA and stored there. For cases in which personal data is transferred to the USA, Google has submitted to the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.  The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that they cannot be assigned (IP masking).
 You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on tools.google.com/dlpage/gaoptout.
 As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie
will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics help centre support.google.com/analytics/answer/6004245.

Use of Google Tag Manager
For our website, we use Google Tag Manager from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). This Tag Manager is one of many helpful marketing products from Google. Google Tag Manager allows us to centrally integrate and manage sections of code from various tracking tools that we use on our website.
 Google Tag Manager is an organisational tool that allows us to integrate and manage website tags centrally and via a user interface. Tags are small sections of code that record (track) your activities on our website, for example. For this purpose, JavaScript code sections are inserted into the source code of our website. The tags often originate from internal Google products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the Manager. Such tags perform different tasks. They can collect browser data, feed marketing tools with data, embed buttons, set cookies and also track users across multiple websites.

 Purpose
To make our website as good as possible for you as a website visitor, we need various tracking tools such as Google Analytics. The data collected by these tools shows us what you are most interested in, where we can improve our services and which people we should show our offers to. And for this tracking to work, we have to integrate the corresponding JavaScript codes into our website. In principle, we could integrate each code section of the individual tracking tools separately into our source code. However, this takes a relatively long time and makes it difficult to maintain an overview. To simplify this, we use the Google Tag Manager.

 Categories of processed data The Tag
Manager itself is a domain that does not set any cookies or store any data. It acts as a mere "administrator" of the implemented tags. The data is recorded by the individual tags of the various web analysis tools. The data is channelled through the
Google Tag Manager to the individual tracking tools and is not saved.
 However, the situation is completely different with the integrated tags of the various web analysis tools, such as Google Analytics. Depending on the analysis tool, various data about your web behaviour is usually collected, stored and processed with the help of cookies. Please read our data protection texts for the individual analysis and tracking tools that we use on our website.
 In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this only concerns the use and utilisation of our Tag Manager and not your data, which is stored via the code sections. We allow Google and others to receive selected data in anonymised form. We therefore consent to the anonymous sharing of our website data. Exactly which summarised and anonymous data is forwarded cannot currently be conclusively determined. According to Google, Google deletes all information that could identify our website. Google summarises the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking involves comparing our own results with those of our competitors. Processes can be optimised on the basis of the information collected.

 Data storage and storage location
When Google stores data, this data is stored on Google's own servers. The servers are located all over the world. Most of them are located in America. You can find out exactly where the Google servers are located at www.google.com/about/datacenters/inside/locations/.
 You can find out how long the individual tracking tools store your data in our individual data protection texts for the individual tools.

 Data deletion
The Google Tag Manager itself does not set cookies, but manages tags from various tracking websites. You can find detailed information on how to delete or manage your data in our data protection texts for the individual tracking tools.
 Google is an active participant in the EU-U.S. Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information on this at www.privacyshield.gov/participant. If you want to find out more about Google Tag Manager, we recommend the FAQs at www.google.com/intl/de/tagmanager/faq.html.

Integration of YouTube videos
a) We have integrated YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned under b) be transmitted. We have no influence on this data transfer.

b) To ensure data protection on this website, YouTube is deactivated when you enter this website for the first time. A direct connection to the YouTube servers is only established when you activate YouTube yourself (consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 S. 1 TTDSG. This prevents your data from being transmitted to YouTube when you first enter the site.

c) After activation, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section V of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

d) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. For cases in which personal data is transferred to the USA, Google has submitted to the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.

Use of OXOMI
We use the OXOMI service from scireum GmbH, Eisenbahnstraße 24, 73630 Remshalden, Germany
on our website. OXOMI offers a powerful solution for the communication of product and marketing information. The connection to OXOMI is made in order to integrate an interactive flip catalogue into our website as part of a virtual showroom, which contains current product information and product images.
The connection is established
for the functional integration of the interactive flip catalogue and for the provision of current product information in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and § 25 para. 2 TTDSG. Your IP address is transmitted to the third-party provider, which processes it solely for the functional provision of the catalogue and the information. Without a corresponding connection, most of our website would not be able to function.
 Further information on the provider and their data protection can be found under the following links: www.scireum.de, www.scireum.de/scireum/datenschutz.

 Cookies that are set in your browser

6 Data subject rights
You have the right to

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

7. Right to object
If your personal data are processed on the
basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of cancellation or objection, simply send an e-mail to (datenschutz@roth-industries.com).

8. Data security
We use the widespread TLS (Transport Layer Security) procedure within the website visit. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

9. Topicality and amendment of this data protection declaration
This data protection declaration is currently valid and is dated March 2024.
it may become necessary to amend this data protection declaration due to the further development of our website and offers or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at (www.roth-werke.de).