Data privacy statement

Name and contact details of the data processing controller and the company data protection officer

This data privacy information applies to data processing carried out by:
Controller:
Theben AG
Email: info@theben.de.
Telefon: +49 (0)7474 692-0
Fax: +49 (0)7474 692-150

You can contact our company data protection officer directly at datenschutz@theben.de

Collection and storage of personal data, and nature and purpose of its use

When you visit our myTheben Portal, the browser running on your terminal automatically sends information to our servers. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is erased automatically:

IP address of the requesting computer,
Date and time of acces,
Name and URL of retrieved file ,
Website from which access is initiated (referrer URL),
Browser used and, where applicable, your computer's operating system and the name of your access provider.

The aforementioned data is processed by us for the following purposes:

To ensure the smooth establishment of a connection to our cloud ,
To ensure convenient use of our cloud,
To analyse system security and stability,
For other administrative purposes.

The legal basis for data processing is Article 6 (1) Sentence 1 (f) of the GDPR. Our legitimate interest stems from the data collection purposes listed above. Under no circumstances will we use the collected data for the purpose of making inferences about you personally.

Registration Luxorliving:

To enable registration, you will be asked to provide your surname, first name and e-mail address. This data is required to provide you with a login for the myTheben Portal. You can optionally provide your address (road, house number, postcode and town/city). These details will not be used for advertising purposes.

Registration Smart Metering Portal :

To enable registration, you will be asked to provide your surname, first name and e-mail address, telephon number, password, telephon password, Company affiliation and Company address data, as well as the selected Smart Metering Portal area stored.

Transfer of data

Your personal data will not be transferred to third parties other than for the purposes listed below. We will only transfer your personal data to third parties if:

you have expressly consented to this in accordance with Article 6 (1) Sentence 1 (a) of the GDPR,
the transfer is necessary for the establishment, exercise or defence of legal claims in accordance with Article 6 (1) Sentence 1 (f) of the GDPR, and there is no reason to assume that you have an overriding interest in not having your data transferred that has to be protected,
if there is a legal obligation to transfer the data in accordance with Article 6 (1) Sentence 1 (c) of the GDPR, and
if this is legally permitted and, as stipulated by Article 6 (1) Sentence 1 (b) of the GDPR, is necessary for the fulfilment of contractual relations with you.

Cookies

We use the cookies listed here and Google's reCAPTCHA system. https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

Analysis tools:

reCAPTCHA:

We use "Google reCAPTCHA" (hereafter referred to as "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is intended to check whether the data being entered on this website (e.g. in a contact form) is being entered by a human or by an automated program. To this end, reCAPTCHA analyses the website visitor's behaviour based on various characteristics. This analysis commences automatically as soon as the visitor enters the website. To perform the analysis, reCAPTCHA evaluates various items of information (such as the IP address, how long the visitor spends on the website or the mouse movements performed by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not made aware that an analysis is taking place. Data is processed on the basis of Article 6 (1) (f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings against improper automated spying and SPAM. Further information about Google reCAPTCHA is available in the Google data privacy policies and Google terms of use via the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en

Google Analytics:

On the legal basis of our legitimate interest in improving our web offering, our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Translated with www.DeepL.com/Translator (free version)

Rights of data subjects

You have the right to:

request access (according to Article 15 GDPR) to the personal data concerning you that is being processed by us. In particular, you can request information about the processing purposes; category of personal data; categories of recipients to whom your data has been or will be disclosed; the planned storage period; the existence of a right to rectification, erasure, restriction of processing or to object; the existence of a right to lodge a complaint; the origin of your data if it was not collected by us; and the existence of automated decision-making, including profiling, and – where applicable – meaningful information about the related details.
request the rectification (according to Article 16 GDPR) or completion of any inaccurate/incomplete personal data concerning you that is being stored by us.
request the erasure (according to Article 17 GDPR) of the personal data concerning you that is being stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
request restriction (according to Article 18 GDPR) of the processing of your personal data, if the accuracy of the data is contested by you, if the processing is unlawful but you oppose its erasure, and if we no longer need the data but it is required by you for the establishment, exercise or defence of legal claims, or if you have objected to the processing in accordance with Article 21 of the GDPR.
request the transmission (according to Article 20 GDPR) of the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format; or to request its transmission to another controller.
withdraw (according to Article 7 (3) GDPR) the consent that you have given. The consequence of this is that we will no longer be able to continue the data processing that was based on this consent in the future.
lodge a complaint (according to Article 77 GDPR) ) with a supervisory authority. In general, you can do this by contacting the supervisory authority with responsibility for your usual place of residence or workplace or our registered office.

Right to object

In cases where your personal data is being processed on the basis of legitimate interests in accordance with Article 6 (1) Sentence 1 (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR provided that you have grounds for doing so that relate to your particular situation or if the objection concerns direct marketing. In the case of the latter, you have a general right to object that we will implement without the need for details of a particular situation. To exercise your right to withdraw consent or object to processing, it is sufficient to send an e-mail to: datenschutz@theben.de

Data security

Within the cloud area, we use the widespread SSL method (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser in each case. In general, this takes the form of 256-bit encryption. If your browser does not support 256-bit encryption, we will rely on 128-bit v3 technology instead. You can tell whether a specific page of our website uses encrypted transmission by looking for the closed key or padlock icon in the bottom status bar of your browser. The myTheben Portal runs on a platform belonging to our system partner.

Personal data that is collected on this website is stored on the system partner's servers. This primarily consists of IP addresses, contact requests, meta and communication data, and other data generated via a website. Use is made of the system partner for the purposes of performing the contract with our potential and existing customers (Article 6 (1) (b) GDPR) and in the interest of having our online offering provided securely, quickly and efficiently by a professional provider (Article 6 (1) (f) GDPR). Our system partner will process your data only to the extent necessary to meet its performance obligations and will follow our instructions in relation to this data. To ensure that processing complies with data protection regulations, we have concluded a processing contract with our system partner. The server is located at a German data centre. Neither the application nor the server are shared with other companies. Moreover, we employ suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are constantly being improved in line with technological development. Incorrect logins are logged. Data entry, modification and erasure are logged.

Applicability and modification of this data privacy statement

This data privacy statement is currently applicable and is the version of May 2021. It may prove necessary to modify this data privacy statement as a result of the further development of our website and the offerings provided via the website, or in light of changes to legal or official requirements.