ELEKTRO-WÄRME-AACHEN
Privacy Policy
Information according to Art. 13 GDPR
The protection of your personal data is important to us. Here you can find out what data is processed when you visit this website and when you make an inquiry, and what rights you have.
1. Responsible party and contact
The person responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
ELEKTRO-WÄRME-AACHEN e. K.
Owner: Adam Gruszka
Rollefstraße 46
52078 Aachen
Germany
Phone: +49 241 562478
Telefax: +49 241 525487
Email: info@ewa-ag.de
We have not appointed a data protection officer, as there is no legal obligation to do so. For questions about data protection, please contact us using the contact details listed above.
2. General information about data processing
We generally process the personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing is regularly carried out only with consent or if a legal basis allows it.
Legal bases are in particular:
- Art. 6(1)(a) GDPR – Consent of the data subject,
- Art. 6(1)(b) GDPR – Fulfillment of a contract or implementation of pre-contractual measures, e.g. in the case of inquiries about our products,
- Art. 6(1)(c) GDPR – Fulfillment of a legal obligation,
- Art. 6(1)(f) GDPR – legitimate interests, e.g. in the secure and stable operation of the website,
- § 25 TDDDG – Storage and access to information on your end device.
Personal data is deleted as soon as the purpose of its storage no longer applies and no statutory retention obligations exist.
3. Hosting and server log files
3.1 Hosting
This website is hosted by an external service provider: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The provider processes the data collected during visits to the website on our behalf. A contract for the processing of orders has been concluded with them pursuant to Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable and secure provision of the website.
3.2 Server log files
With every visit to our website, the server automatically collects data that your browser transmits. This includes:
- IP address of the requesting device,
- Date and time of the request,
- called page or file and the amount of data transferred,
- Access status (e.g., successful or error),
- previous visited page (referrer URL),
- Browser type, browser version and operating system.
Processing is necessary to provide the website, ensure its stability, and detect attacks or abuse. The legal basis is Art. 6(1)(f) GDPR. The data is automatically deleted after a short period of time, unless it is needed to investigate a security incident for longer. A combination with other data sources does not take place.
4. Cookies and consent management
Our website uses cookies and similar technologies. We use technically necessary cookies, such as those for storing your language setting and cookie preferences, on the basis of § 25, para. 2, no. 2 of the TDDDG and Art. 6, para. 1, letter f of the GDPR. We only use all other cookies and similar technologies if you have previously given your consent (§ 25, para. 1 of the TDDDG, Art. 6, para. 1, letter a of the GDPR).
We obtain your consent using the consent management tool „Complianz“. There you can change or revoke your selection at any time. An overview of all cookies used with their purpose, provider and storage duration can be found in our Cookie policy (EU).
You can also block or delete cookies in your browser settings. This may limit the functionality of the website.
5. Contacting us by email, phone or fax
If you contact us by email, phone or fax, we process the data you provide (for example, your name, contact details and the content of your message) to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures; otherwise, Art. 6(1)(f) GDPR.
We delete the data as soon as your request has been finalized and no legal retention obligations (such as those under commercial and tax law) exist.
6. Project inquiry via the contact form
On the page Contact We offer a form for project inquiries. In doing so, we process the information you enter:
- Information about your person: company, first and last name, street, city, phone number and email address (mandatory information is marked with *),
- Information about your project, such as task, volume, end vacuum, temperature, heating system, desired functions, explosion protection, process medium, and other specifications,
- Your confirmation that you have read this privacy policy.
The data is submitted to us via email and is used exclusively to review and answer your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures regarding your request), alternatively Art. 6(1)(f) GDPR. Without the mandatory information, we cannot process your request. Please do not enter any sensitive data within the meaning of Art. 9 GDPR.
To protect against automated entries (spam), we use a simple calculation task, an invisible field for visitors, and a time check. These tests run on our website; no data is transmitted to third-party providers and no cookies are set.
We delete your data as soon as the request is finalized, unless there are legal retention obligations to the contrary. If a contract is concluded, we will continue to store the data within the legal deadlines.
7. Fonts
To present the texts uniformly, this website uses the font „Open Sans“. The font is stored locally on our server and is loaded from there. There is no connection to servers of Google or other third-party providers, and no data is transmitted to third parties, in particular no IP addresses.
The font is provided based on Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our online offering in a uniform and appealing manner.
8. Recipients and transfer to third countries
We only pass on your data insofar as this is necessary for processing or there is a legal basis for it. Recipients may be:
- our hosting provider (see section 3) as a processor of orders,
- Providers of services for website operation and email delivery, insofar as they are acting on our behalf,
- Authorities, insofar as we are legally obliged to do so.
Data transmission to countries outside the EU or the EEA will only take place if the requirements of Art. 44 ff. of the GDPR are met, for example based on a decision on adequacy by the European Commission. There is no sale of your data. Automated decision-making including profiling does not take place.
9. Your rights
You have the following rights regarding your personal data:
- Information about the processed data (Art. 15 GDPR),
- Correction of incorrect data (Art. 16 GDPR),
- Deletion of your data (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Transmission of your data in a standard format (Art. 20 GDPR),
- Revocation of a given consent with effect for the future (Art. 7(3) GDPR).
To exercise your rights, a simple notification to the contact details mentioned in section 1 is sufficient.
10. Right of objection
To the extent that we process data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the assertion, exercise or defense of legal claims.
11. Right of appeal to a supervisory authority
You have the right to complain to a data protection supervisory authority if you believe that the processing of your data violates data protection law. We are responsible for:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Internet: www.ldi.nrw.de
12. Data security
For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the „https://“ https” in the address bar of your browser and the lock symbol. In addition, we take appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access.
13. Update and modification of this privacy policy
This privacy policy is valid as of October 2026. We will update it if our website, our data processing or the legal situation changes. The version currently published applies.