This privacy statement provides information about how we handle your personal data, what personal data we process, for which purposes, with whom we share your personal data, how long we keep your data, which rights you have regarding your data and where you can go for complaints or questions.
BDR Thermea Group B.V. (“BDRTG”), registered at Kanaal Zuid 106, 7332 BD in Apeldoorn is the data controller.
Except in those cases where we organise educational events specifically designed for children, we do not intentionally collect personal data of individuals under 16 years old.
If you are under 16 years old (or a different age to reflect local legal requirements as communicated on the website in your location) please do not send us your personal data for example, your name, address or email address. If you wish to contact BDR Thermea Group in a way which requires you to submit your personal data (such as for education or innovation events) please get your parent or guardian to do so on your behalf.
When you contact us, use our products and/or services, visit our website or use our apps, contact us, or connect your device to our cloud we collect your personal data.
Customers and service companies
End-users of the devices
Information about the installation of your product: if a service company installs your device, we receive the serial number of your device, the data of your installer, your name, address, email address and other necessary contact details.
Warranty information: the serial number of your device, your name, address, email address and other necessary contact details, your service company, date of inspection, date and other necessary information about the services and your device.
Websites and apps
Direct communication
Contact: such as content, date and time of email, chats, telephone contact and helpline / infoline, or social media messages (including complaints and service requests).
Whistleblowing: all personal data you provide to use when making a complaint or the personal data we process from you due to a complaint made by another person.
Job applicants: such as the personal data on your resume and contact.
Specific cloud connected services
Our devices can be used unconnected. However, if you choose to use the below services, it is required that your device connects to our cloud.
1. Remote maintenance
Remote maintenance services include the following services:
In general, this service requires the monitoring of the condition of your device to optimise the performance and maintenance of your connected device. When you use these services, we collect:
Contact details: the contact details you provided to uswhen you registered your device on our website.
Setup information and usage data: such as information about the intended use (preferences, programming schedules, use of location services, manual control, or frost protection), data about the frequency of use (e.g., button presses on the device, app connect times and screen clicks), temperature set points, current temperatures, error codes and the energy consumption of your device. These data points are stored every hour and transmitted to our servers.
Status and sensor (technical) data: such as model and serial number of your communication module and connected device, hardware and IP address, software version and other technical information from your device such as burning and pump running hours, water pressure, temperatures, fan and pump speed, valve status, energy consumption, wear and tear warnings and error codes. These data points are stored several times per minute and transmitted to our servers.
2. Energy management
If you choose to make use of our energy management services, we collect energy usage data and profile your behaviour and energy use habits during a certain period in order to provide you with advice on how to best manage your energy consumption. Furthermore, we can adapt system settings to optimise your system to be as energy efficient or cost efficient as possible. It is also possible to automatically adapt your settings based on algorithms.
We will only collect and use your name and address details, if this data is necessary for the provision of our services to you. Your information will be available in our online dashboard, to which we and – if applicable – your (third-party) service company have access. Your service company can add information to this dashboard, necessary for the required services.
To operate our website
If you visit our website we use your personal data for the following purposes, to (1) provide pre-sales support, (2) handle your complaints and questions. For the processing we rely on the need to represent our legitimate interest.
Furthermore, we use your personal data to (3) be able to show you the website, (4) to be able to analyse which web pages are visited most often and (5) how you came to our site (via which other websites or via our newsletter). For more information on the cookies we use, please read our Cookie Notice.
Installers only: If you create a user account, we use your personal data to (6) connect you with potential customers (if requested by these potential customers), (7) assist you with your administration, (8) offer benefits through the loyalty program and (9) allow you to participate in promotions and contests. All based on the need to execute our contract with you.
To operate our business
If you use our products or services we use your personal data for the following purposes, to (1) provide our services (e.g., general service and maintenance or specific remote maintenance services, energy management services, comfort control, security updates, training etc.) and products, (2) process and deliver orders (including customer service and account management). We process your personal data for the need to execute our contract with you.
We also process your personal data to: (3) manage our relationship with you, (4) communicate with you (e.g., sending service messages or updates on new functions), (5) be able to support you or your service company with handling any potential warranty claims, so that you receive better service. (6) perform our day-to-day activities, and, (7) handle complaints, questions, and disputes (telephone conversations can be recorded for quality purposes – where needed based on prior explicit consent at the beginning of the call). In these cases, we rely on the need to represent our legitimate interest.
Furthermore, we process your personal data to: (8) maintain our records, (9) inform you of product recalls, and (10) comply with our legal and tax obligations, for the need to comply with a legal obligation.
Direct marketing
We also process your personal data (email address) to inform you about (1) new products and services, and personalised offers, (2) tips about the use and maintenance of our products, (3) (customer) satisfaction surveys or quality questions, (4) newsletters, (5) retention marketing, (6) creating and using individual profiles of direct customers in view of customer management etc. For most direct marketing activities, we rely on the legal ground legitimate interest. You are provided with the opportunity to opt-out of receiving such services at any time. However, if required under your local law, we will ask your explicit consent when processing personal data for direct marketing purposes.
Research and improvement of products and services
We process your personal data to improve our products and services. We do this by conducting research into general trends in the use of our products and services to better understand the behaviour and preferences of our customers and to better tailor our offers. In general, we only use aggregated setup and usage, and technical data that will not directly identify you. If we have a need to use identifiable data, we will inform you about this separately. Your personal data will be processed on the basis of the need to represent our legitimate interest.
Security and screening
Finally, personal data is processed to protect our interests, to (1) detect and prevent fraud, (2) secure our websites, networks, systems, employees/contractors and premises, (3) screen owners, stakeholders and directors of our corporate customers, suppliers and business partners to comply with trade regulations, anti-money laundering and/or bribery and corruption laws, and other legal requirements. We rely on the legal ground legitimate interest or on the need to comply with a legal obligation.
We may also process your personal data for secondary purposes that are closely related to the original purpose, such as:
In those cases where processing is based on consent, and subject to applicable local law which provides otherwise, you have the right to withdraw your consent at any time.
This will not affect the validity of the processing prior to the withdrawal of consent. Withdrawal of consent may however impact your ability to remain employed or otherwise engaged or from participating in a programme or receiving a benefit.
In those cases where processing is based on consent, and subject to applicable local law which provides otherwise, you have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal of consent.
Failure to provide us with the information required will negatively affect our ability to communicate with you, or our ability to enter into a contract with a counter-party or continue to contract with a counter-party.
We only share personal data within the BDR Thermea Group if we have a legal basis for the data sharing. We may share your personal data with third parties based on your consent or based on our legitimate interest in the following circumstances:
Other entities of the BDR Thermea Group
To provide our services to you
To provide combined services (BDRTG + a partner) to you
Please note, that the above-mentioned third parties are considered data controller and that the terms of service and privacy statements of these third parties apply to the processing of your personal data by these parties.
Other third parties
Interacting with DE DIETRICH through social media
If you choose to interact with us through social media on a BDRTG administered social media page such as Facebook, Instagram, Twitter or LinkedIn (‘BDRTG Social Media Page’), your personal data (such as your name, your profile picture and the fact that you are interested in BDRTG) will be visible to all visitors of your personal webpage depending on your privacy settings on the relevant social media platform, and will also be visible to us. You can delete any information that you share on these sites at any time through your relevant social media platform’s account. We do not track your activity across the different social media sites that you use.
Additionally and to the extent BDRTG is jointly responsible with a social media platform of a BDRTG social media page, will have access through the social media platform to aggregated data providing statistics and insights that help to understand the types of actions you take on BDRTG social media pages. For more information on how your personal data are processed on those social media platforms, including any targeted advertising that you may receive, please refer to your privacy settings accessible through your relevant social media platform’s account.
If personal data is shared with companies within the BDR Thermea Group and/or to authorised third parties located outside of your country we take technical, organisational, contractual and/or legal measures to ensure that your personal data are only processed for the above purposes and that adequate levels of protection have been implemented in order to safeguard your personal data. These measures include local approved transfer mechanisms for transfers to third parties as well as additional local requirements.
We take the necessary technical and organisational measures to ensure that your personal data is properly secured and therefore protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or unlawful destruction and loss. More specifically, we use encryption for some of our services, apply authentication and verification processes to access our services, and regularly review and evaluate the effectiveness of our security measures.
We store your personal data in our systems for as long as this is necessary for the purposes described in this privacy statement. If we no longer need your personal data, we will take measures to delete it or keep it in a form that no longer makes it possible to identify someone.
If you ask us to delete your account, or if you have not used our services for more than three years, we will delete or anonymise the data for which we no longer have a need to keep it.
Some personal data is directly processed and stored in your connected device or app. You can delete this personal data yourself by resetting the device in the default settings or by deleting the app.
In all cases, personal data may be kept for a) a longer period where there is a legal or regulatory reason to do so (in which case it will be deleted if it is no longer required for the legal or regulatory purpose) or b) a shorter period if the processing of personal data is objected to and there is no longer a legitimate interest or legal obligation in keeping it.
We want to protect your rights and strive to keep your personal data as safe as possible. In this regard, you have the right to:
To exercise your rights, you can send us an email: privacy@bdrthermea.com.
If you have any queries, concerns, or complaints regarding the processing of your personal data, please contact us at privacy@bdrthermea.com.
You can also communicate with us by post at the address below:
Attn. Privacy Contact Person
Kanaal Zuid 106
7332 BD Apeldoorn
The Netherlands
Finally, you also have the right to submit a complaint to the Autoriteit Persoonsgegevens, located at Hoge Nieuwstraat 8 (2514 EL) Den Haag; Postbus 93374 (2509 AJ) Den Haag.
This privacy statement may be changed from time to time. To let you know when we make changes to this statement, we will amend the revision date. The new modified or amended privacy statement will apply from that revision date. Latest update is from April 2023.
