All about instantaneous water heaters! >
×

Smart Control Data privacy

In accordance with Article 13 of the EU General Data Protection Regulation (GDPR), we inform you below about the processing of your personal data when you start and use our "Smart Control" application.

1. Responsibilities
CLAGE GmbH, Pirolweg 4, 21337 Lüneburg, Germany.
Fon: +49 4131 - 89 01-0
E-mail: info@clage.de
For further information please visit https://www.clage.com/en/imprint

2. Data protection officer
You can reach our data protection officer in writing by mail with the delivery note "Data Protection Officer" at:
CLAGE GmbH, Pirolweg 4, 21337 Lueneburg, Germany
or
by e-mail at datenschutz@clage.de

3. Processing of personal data
3.1 Type and scope of data processing
With our "Smart Control" app, you can operate your hot water supply in the house or apartment digitally with your tablet or smartphone. The app offers an intuitive user interface for convenient setting of the desired water temperature of the instantaneous water heaters, for evaluation as well as the option of voice control. With the app, the operating data of your instantaneous water heaters is displayed on your smartphone.

When setting up and operating our app, user names or aliases are processed, which you can create, change and delete at any time. You control the desired temperature of the instantaneous water heaters per username. This information is stored and displayed locally only.
Depending on the function, releases are required for the Bluetooth functionality, the device search in the local network and the camera function for a QR code reading on the device. To connect the smartphone or tablet to the instantaneous water heater, the WLAN name (SSID) and password of the instantaneous water heater are transmitted in encrypted form. The data is not stored in the process.

To use the cloud function for voice control, you must log in with the manufacturer's app (e.g. Amazon Cloud). To do this, you can log in or register at the website https://clage-cloud.de/selfservice/app/authorization?portal=true. The login data is not processed in the "Smart Control" app.

The app can retrieve and display consumption statistics from the instantaneous water heaters. The data is stored for display in the app, but not forwarded.

3.2 Purposes and legal basis of the processing of personal data
We process your data insofar as this is necessary to control the instantaneous water heater with the app - "Smart Control". The legal basis for this is Art. 6 para. 1 p. 1 lit. b) GDPR.

3.3 Recipients or categories of recipients
Your data will only be stored locally and will not be passed on.

3.4 Transfer of personal data to third countries
No personal data will be transferred by us to third countries.

3.5 Duration of storage
You can delete your data in the app yourself at any time. Provided that you delete the app from your smartphone, the above-mentioned data will also be deleted.

3.6 Security
During installation, follow the safety instructions in the instructions for use and installation to ensure safe operation of the app.

3.7 Miscellaneous
For pairing your device with voice control services, such as Amazon Alexa, the privacy information of the respective providers applies.

4. Rights of the data subject
Insofar as your personal data is processed on the occasion of the operation of the "Smart Control" app and during the use of the services, you are entitled to the following rights, which you can assert with the above-mentioned bodies, if the legal requirements within the meaning of the GDPR are met:

Art. 15 GDPR: Right of access by the data subject
You have the right to obtain information about what personal data the controller is processing about you.

Art. 16 GDPR: Right to rectification
If your personal data is incorrect or incomplete, you may request that incorrect information be corrected or that incomplete information be completed.

Art. 17 GDPR: Right to erasure
Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data. Your right to erasure depends, among other things, on whether your personal data is still needed by the controller to fulfill its legal duties or whether the controller or third parties can prove an overriding legitimate interest, such as the defense or assertion of legal claims.

Art. 18 GDPR: Right to restriction of processing
You may request the restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by the controller, the controller usually needs time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data happened/is happening unlawfully, you can request the restriction of the data processing instead of the erasure.
- If the controller no longer needs your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your interests and the interests of the controller or third parties must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
- If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

- Art. 20 GDPR: Right to data portability
You have the right to have data that is processed automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

- Art. 21 GDPR: Right to object
If the data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e) (processing necessary in the public interest or in the exercise of official authority) or lit. f) (legitimate interest) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this information on data protection.
If you object, the controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims. If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is connected with such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising.

- Art. 7 para. 3 GDPR: Right to withdraw consent
You have the right to withdraw a given consent for the processing of your personal data with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

5. Right to complain to the supervisory authority
You have the right to lodge a complaint with the following supervisory authority if you believe that our processing of your personal data violates the applicable data protection laws: The State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.

6. Validity and updating
Due to the further development of our app or the implementation of new technologies, it may become necessary to change this information with effect for the future. We recommend that you check the latest version.