Privacy

This privacy notice explains the type, scope, and purpose of personal data processing when you use our website.

Personal data means any information relating to an identified or identifiable natural person.

ovvvo GmbH (sub-brand: thermobee), Palisadenstraße 41, 10243 Berlin, Germany, Email: info@thermobee.de, Phone: 030 83791315.

When you visit our website, we process technically required connection and log data (for example IP address, timestamp, requested URL, referrer, browser and device metadata).

If you contact us, we process the contact and message data you provide (for example name, email address, and message content).

Through our contact and quote forms on /kontakt and /angebot, we process the information you submit and proof of your consent (confirmation, full consent text, timestamp). The quote form may include heating type, living area, building type, heating location, planned project timeline, postal code, name, email address, and optional phone number. The contact form processes name, email address, optional phone number, and message content.

Consent data is processed through our consent management system to record and enforce your cookie and tracking choices.

On the homepage, our server evaluates the `Accept-Language` HTTP header sent by your browser to route you to the German or English entry page when no stored language preference exists. This information is processed for that request and is not stored by us in a profile database.

We process data to provide a functional and secure website (Art. 6(1)(f) GDPR, legitimate interests).

We process contact requests to handle and respond to inquiries (Art. 6(1)(b) GDPR for pre-contractual communication or Art. 6(1)(f) GDPR).

We process form submissions with explicit consent based on your consent (Art. 6(1)(a) GDPR) and, where applicable, to take pre-contractual steps (Art. 6(1)(b) GDPR).

Non-essential cookies and similar technologies are only used based on your consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG).

We use a consent management platform from consent.io (c15t) to collect, store, and manage consent choices.

Strictly necessary cookies are required for website operation. Other categories (for example measurement or marketing) are currently not active and would only be enabled after your explicit choice if we introduce such services.

You can withdraw or change your consent at any time with effect for the future via the privacy settings link.

If your browser does not indicate a German language preference and no language cookie is set yet, we may redirect you from the German homepage (`/`) to the English entry page (`/en`). When you explicitly select a language in the footer language switcher, we store your choice in a first-party cookie `TB_LOCALE` (values `de` or `en`, one-year lifetime, `Path=/`, `SameSite=Lax`) so that future visits to the homepage match your preference. You can delete this cookie at any time in your browser settings.

The following overview describes the currently used vendors and the technically visible cookie/consent storage purposes on this website.

We use a documented technology stack to build, run, and maintain this website.

We work with technical service providers that process data on our behalf (currently including Vercel for hosting/deployment, consent.io for consent management, Neon for storing form submissions, Mailjet for email notifications on form submissions, and Microsoft for other email communication). Contact and quote forms are provided on our website and initially processed on our servers.

Data processing agreements under Art. 28 GDPR are executed and documented with all required processors.

If data is transferred outside the EU/EEA for specific services, this is done only under the conditions of Art. 44 et seq. GDPR (for example adequacy decisions or Standard Contractual Clauses).

We retain personal data only as long as necessary for the stated purposes or to satisfy legal retention obligations.

Form submissions (contact and quote requests) are stored for handling your inquiry and for up to 24 months thereafter, unless statutory retention obligations require longer storage. Consent proof is stored for the same period.

Server and security logs are rotated regularly and deleted or anonymized when no longer needed.

At this time, we do not carry out solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with this website.

Under GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities.

You can withdraw consent at any time with effect for the future.

To exercise your rights, contact us at info@thermobee.de. We usually respond within 7 working days; for complex requests, processing may be extended to up to 14 working days.

You have the right to lodge a complaint with a supervisory data protection authority if you believe your personal data is processed unlawfully.