Data Protection policy

Welcome to CORE Energy Recovery Solutions GmbH,
Thank you for your interest in our website and our company.
We attach great importance to protecting your data and safeguarding your privacy. To ensure that you are fully informed about the collection, processing, and use of personal data on our websites, please read the following information.

1. Responsible for the processing of personal data
Your data is processed on behalf of and on the instructions of
CORE Energy Recovery Solutions GmbH
August-Horch-Straße 7
08141 Reinsdorf
Germany
Responsible persons and managing directors: Andreas Hans Berger.
You can contact our data protection officer at the above postal address or by email at datenschutz@core.life.

Important note: This privacy policy may be amended from time to time. These amendments may be made, for example, if changes arise as a result of technical progress, legal requirements, or other influences. We therefore ask you to visit this page regularly to find out about any changes we may post here.

2. Data collection for internal system and statistical purposes
This website of CORE Energy Recovery Solutions GmbH collects a range of system-related data each time it is accessed. This includes the date and time of access, the URL of the referring website, the file accessed, the browser type and version, and your IP address. This data is stored separately from other data that you enter when using our website. This data is not assigned to a specific person. The data is logged to ensure system security and deleted after 14 days.

The collection of this data is necessary in order to display our website to you and to ensure its stability and security. We log every access to our website and every retrieval of a file stored on the website. In the event of concrete indications of suspected misuse, we reserve the right to subsequently check the log data and, if necessary, evaluate it in relation to the specific suspicion. The legal basis for processing is Art. 6 (1) lit. f GDPR.

3. Collection and processing of personal data
Personal data is collected and processed beyond the scope described in point 2 if you provide it to us voluntarily on our website.

3.1. Entries on our website
This is possible, among other things, via the contact request forms on our website.
The personal data transmitted to us in this way is determined by the respective input mask used to establish contact.

The personal data you enter is collected and stored for the internal use listed below and for our own purposes:
• To assign and process your request
• To carry out the necessary personal communication by telephone, fax, letter, or email
• When registering for our newsletters
• To register for one of our events

The legal basis for processing is Art. 6 (1) lit. b GDPR.
 
3.2. CORE Calculator for counterflow / crossflow heat exchangers
When using our CORE calculator, you still need to register on our website. The data collected by can be found on the registration form. Mandatory fields are marked with an “*”.

After registering, you will receive a confirmation email with a link that you can click to complete the registration process. Once we have verified your details, your account will be activated and you can use it to log in to the calculator after receiving confirmation from us.

Here you can perform calculations on our products and also contact our customer service.

When you select or calculate one of our products, information about this is transmitted to us for the following purposes:
• Creation of statistical evaluations for internal use
• If necessary, to enable our sales representatives to contact you
 
The legal basis for processing is Art. 6 (1) (b) and (f) GDPR.
 
3.3 Information on newsletter distribution
When registering for our newsletter, you must provide us with your last name, company, country, and email address. We use this information to send you the newsletter. The newsletters primarily contain information about CORE events and products.

Your data will remain stored with us until you unsubscribe from our newsletters. You can unsubscribe at any time via the unsubscribe link contained in the newsletters . By unsubscribing, you object to the further use of your data collected for the purpose of receiving the newsletter. This data will then be deleted immediately. Registration for our newsletter is logged by us.

Subscription and consent are carried out using the double opt-in procedure. This means that after you register for the newsletter, you will receive a confirmation email, which you can confirm by replying to it. Please note that only confirmed registrations will receive our newsletter. Unconfirmed requests will be deleted from the system after two weeks.
 
We use the service provider rapidmail from Positive Group Deutschland GmbH to send our newsletters. In addition to our information, please note the privacy policy of rapidmail.

The legal basis for processing is Art. 6 (1) (a) GDPR.
 
3.4 Current job vacancies
When you select “To the job vacancies,” a portal for our job advertisements, which is operated on our behalf by rexx systems GmbH, will be opened.

Further processing, which is attributable to us as the data controller, takes place on the rexx portal. Therefore, separate information on data protection with a separate consent solution for cookies and other services requiring consent applies here, which you can find on our rexx portal page.
 
3.5 Processing by contract processors
We may arrange for the transfer of data to one or more processors, such as service providers, subsidiaries, or distributors, who will also use the transferred personal data exclusively for their own purposes.

4. Legal basis for the processing of your data
The lawfulness (legal basis) for processing your data arises from your consent (pursuant to Art. 6 (1) (a) GDPR) or for the performance of a contract or pre-contractual measures (pursuant to Art. 6 (1) (b) GDPR). If the processing of personal data is necessary to fulfill a legal obligation to which CORE Energy Recovery Solutions GmbH is subject, we process this data in accordance with Art. 6 (1) (c) GDPR.
In the case of safeguarding the legitimate interests of CORE Energy Recovery Solutions GmbH, processing is carried out in accordance with Art. 6 (1) (f) GDPR.

5. Duration of data storage
We store your data for the duration of the validity of your consent or until its purpose has been fulfilled. Subsequently, this data will be deleted if there are no other legal obligations to retain the data.
In the case of an ongoing business relationship, your contact details will be stored for the duration of the relationship and deleted after its termination, your revocation, or your request for deletion of the data.

6. Transmission of data
Your personal data will be transmitted via the Internet using SSL encryption.
 
If necessary, your data will only be passed on to third parties for the purpose of processing your request to companies affiliated with us or service providers commissioned by us (such as web hosts), who also use the personal data exclusively for internal use attributable to us.
 
Any further disclosure of your personal data to third parties will only take place with your consent, unless there is a legal obligation to do so or to protect the rights, property, and security of CORE Energy Recovery Solutions GmbH.
 
Insofar as external service providers come into contact with personal data, we insist on legal, technical, and organizational measures to ensure compliance with data protection regulations.

7. Processing for automated decision-making processes and/or profiling
Your data will not be used by us for automated decision-making or profiling.

8. Cookies and other functions on our website
Cookies are used to provide functions on our website and to statistically evaluate visits to our website. For this purpose, our website is supported by cookies that collect information about your IP address, the time and duration of your visit, the number of your visits, your use of forms, your search settings, your display view, and your settings for favorites on our website. The storage period of cookies varies. The legal basis for setting functional cookies is Art. 6 (1) lit. f GDPR and, for all cookies that analyze user behavior or require your consent, Art. 6 (1) lit. a GDPR.

8.1. Use of Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”).
This service is only activated by our site and the corresponding cookies are only set if you explicitly consent to this. If you do not do so, this service will not be used.
 
We would like to point out that this website uses Google Analytics with the IP anonymization extension and therefore IP addresses are only processed in truncated form in order to exclude direct personal references.
 
Google Analytics also uses “cookies.” The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.

Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
 
8.1.1 Consent and revocation of consent to the use of Google Analytics
By giving your consent, you agree to the processing of data about you by Google in the manner and for the purposes set out above. The collection and storage of data can be revoked at any time with effect for the future by withdrawing your consent. This can be done using the link above in this privacy policy on each of our websites to change or revoke your consent.
 
Alternatively, you can use the Google Analytics opt-out add-on (http://tools.google.com/dlpage/gaoptout?hl=de), provided it is available for your browser. You can find an overview of how Google uses data on the website www.google.de/policies/privacy/partners/.
 
8.2 Google reCAPTCHA and Google Tag Manager
We have integrated components from Google reCAPTCHA (invisible version) into our website with the help of Google Tag Manager, which are used when filling out our forms and sending information. Google reCAPTCHA and Tag Manager are services provided by Google Ireland Limited.
Google reCAPTCHA enables us to distinguish whether a contact request comes from a natural person or is automated by a program (e.g., in the case of a spam attack). Its use therefore serves to ensure security on our website.

When you use the forms on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland , whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user’s dwell time and mouse movements in order to distinguish automated requests from human ones. This data is processed by Google reCAPTCHA exclusively for the above-mentioned purposes and to maintain the security and functionality of our website.
Google Tag Manager is the tool we use to integrate reCAPTCHA services into our website.
 
The use of Google reCAPTCHA and Google Tag Manager is based on our legitimate interest in the secure operation of our website in accordance with Art. 6 (1) lit. f GDPR.
 
In doing so, we transfer personal data to third countries outside the European Economic Area, in particular the USA. Data is transferred to the USA in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
 
We have no influence on the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
 
8.3 Leadinfo
Once you have consented to this service, we use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. This service recognizes visits by companies to our website based on IP addresses and shows us publicly available information such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g., “leadinfo.com”) to correlate IP addresses with companies and improve its services. For more information, visit www.leadinfo.com. You can opt out on this page: www.leadinfo.com/en/opt-out. If you opt out, Leadinfo will no longer collect your data.
 

9. Links to other websites
Our website contains links to other websites. We have no influence over whether the operators of other websites comply with data protection regulations. This applies, among other things, to links
• Integrity Line – a reporting system for whistleblowing in accordance with the German Whistleblower Protection Act (HinSchG), operated by Zehnder Group International
• CORE Calculator Crossflow – a service provided by dPoint Technologies (see above for further information)

As a provider of our own content, we are responsible for it under general law. This content must be distinguished from links to content provided by other providers. We accept no responsibility for third-party content made available for use via links and do not adopt such content as our own.
The provider of the page to which reference is made is solely liable for illegal, incorrect, or incomplete content and in particular for damage resulting from the use or non-use of such information. If we become aware of any infringements, we will remove the links concerned immediately.

10. Your rights to your personal data
10.1 Right to information, correction, restriction, deletion, disclosure
Under the General Data Protection Regulation, you have the right to obtain information about your stored personal data free of charge at any time and, if necessary, the right to correct, restrict, or delete this data. If we are required to comply with statutory retention obligations, we will restrict your data for further processing so that it can no longer be used for the above-mentioned purposes.
You also have the right to receive your personal data stored by us in electronic form.
 
10.2 Right to object in individual cases
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) lit. f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR.
If the processing is based on consent pursuant to Art. 6 (1) (a) GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
 
10.3 Right of revocation
You may revoke your consent to the storage and processing of your stored data at any time. In this case, we will no longer process the data stored by you for the purposes for which you gave your consent, delete it immediately or block data that cannot be deleted due to legal requirements.
 
 
Please contact us using the contact details below with any questions you may have regarding your rights.
 
10.4 Right to lodge a complaint
If you believe that your data is not being processed by CORE Energy Recovery Solutions GmbH in accordance with the applicable data protection laws, you have the right to lodge a complaint with a data protection supervisory authority of your choice.

11. Data security
We secure our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorized persons through technical and organizational measures. The security measures are continuously improved in line with technological developments.

12. Further information and contacts
If you have any further questions about data protection, please contact us. If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, blocking, or deletion of data, or revoke your consent, please contact:

CORE Energy Recovery Solutions GmbH
August-Horch-Straße 7
08141 Reinsdorf
Germany

Telephone: +49 375-303 505 88
reinsdorf@core.life


Data protection officer:
datenschutz@core.life