Privacy Policy
The protection of your personal data is very important to us.
With the following privacy notice, we inform you in accordance with Article 13 of the GDPR about the nature, scope, and purpose of the processing of personal data in connection with the use of our website, as well as your rights as a data subject.
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
SMS Elotherm GmbH
In der Fleute 2
42897 Remscheid
Phone: +49 (0) 2191 891-0
Email: info@sms-elotherm.com
For more information about our company and the authorized representatives, please visit: www.sms-elotherm.com/impressum .
2. Externally Appointed Data Protection Officer
Our externally appointed data protection officer is also available to answer any questions you may have regarding data protection:
d.works GmbH
Markus Weber
Essener Straße 1
57234 Wilnsdorf
Phone: +49 (0) 271 77237-60
Email: datenschutz@d.works
3. General Information on Data Processing
We process personal data exclusively in accordance with applicable data protection regulations, in particular the GDPR and the TDDDG. Personal data refers to any information relating to an identified or identifiable natural person.
Processing takes place only to the extent that:
you have given your consent (Art. 6(1)(a) GDPR),
processing is necessary for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR),
there is a legal obligation (Art. 6(1)(c) GDPR),
or there is a legitimate interest (Art. 6(1)(f) GDPR).
4. Data Processing When Visiting the Website
When you visit our website, the browser you are using automatically transmits information to our server, which is temporarily stored in so-called server log files. This includes, in particular, the following data:
Your IP address
Date and time of access
Name and URL of the file accessed
Website from which the access originated (so-called referrer URL)
Browser used and, if applicable, the operating system of your device
This data is processed for the purpose of ensuring a smooth connection to the website, guaranteeing system security and stability, and for the technical administration of the network infrastructure.
The legal basis for this data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes mentioned above.
This data is not combined with other data sources.
5. Cookies and Consent Management
Our website uses cookies. These are small text files that are stored on your device and contain certain information.
To manage the cookies and similar technologies used, as well as to obtain and document your consent, we use a so-called consent management tool. In this context, the following data in particular is processed:
Your consent decision or revocation
Your (truncated) IP address
Date and time of your decision
Information about the browser and device used
The consent management tool is used to fulfill our legal obligations pursuant to Art. 6(1)(c) GDPR in conjunction with § 25 TDDDG.
You may revoke or modify your consent at any time with future effect.
6. Content Management System (Typo3)
Our website is operated using the “Typo3” content management system. This involves the use of technically necessary cookies that are required for the operation and functionality of the website, for example, for session management.
Processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the technically error-free presentation and optimization of our website.
7. Contact Forms and Error Reports
If you contact us via a form provided on our website (e.g., contact form or error report), the data you enter will be processed. This includes, in particular:
Your name
Your contact details (e.g., email address, phone number)
the content of your inquiry
any additional voluntary information
Technical metadata (e.g., IP address, time of the inquiry)
This data is processed exclusively for the purpose of handling your inquiry and communicating with you.
The legal basis is Article 6(1)(b) of the GDPR, provided your inquiry is aimed at the conclusion or performance of a contract. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
8. Use of hCaptcha
To protect our forms from misuse and automated access, we use the “hCaptcha” service provided by Intuition Machines, Inc., USA.
The use of hCaptcha may result in the processing of personal data, in particular:
Your IP address
Information about your user behavior
Technical information about your browser and device
This processing is carried out to ensure the integrity and security of our website and to defend against automated attacks.
The legal basis is Article 6(1)(f) of the GDPR.
When using hCaptcha, personal data may be transferred to the United States. This is done on the basis of the EU-US Data Privacy Framework or appropriate safeguards in accordance with Art. 44 et seq. of the GDPR.
For more information on data protection at hCaptcha, please visit: https://www.hcaptcha.com/privacy.
9. Web Analytics (Google Analytics)
Provided you have given your consent, we use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Google Analytics uses cookies that enable an analysis of website usage. In particular, the following data is processed:
Your IP address (truncated)
Usage data (e.g., page views, time spent on the site)
Interactions on the website
This data is processed for the purpose of analyzing user behavior and continuously improving our website.
The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.
A transfer of data to the United States cannot be ruled out. This is carried out on the basis of the EU-US Data Privacy Framework.
For more information, please visit: https://policies.google.com/privacy.
10. Google Tag Manager
We use Google Tag Manager, a service provided by Google LLC.
Google Tag Manager is used to manage and deploy website tags. The service itself does not process personal data, but may integrate other services that collect data.
This is done based on your consent in accordance with Art. 6(1)(a) GDPR.
For more information, please visit: https://policies.google.com/privacy.
11. Career Portal
We use an external career portal at career.sms-group.com to handle application processes. When using this service, the processing of personal data is carried out under the sole responsibility of the respective provider. The privacy policy of the respective operator applies, which you can view there.
12. Disclosure of Data
12.1 General Principles
Your personal data will only be disclosed to the extent necessary to fulfill our contractual or legal obligations or where we have a legitimate interest in doing so.
Recipients of your personal data may include, in particular:
Processors pursuant to Art. 28 GDPR (e.g., IT service providers)
Public authorities where there is a legal obligation
other third parties, to the extent necessary to assert, exercise, or defend legal claims
In all cases, the disclosure is carried out in compliance with the statutory data protection regulations.
12.2 Data Transfer to Group Companies
In the context of establishing or conducting business relationships, it may be necessary for us to transfer your personal data to other companies within the SMS Group.
This occurs in particular if:
Your inquiry or request requires international processing, or
a responsible Group company is in charge of processing, or
offers, products, or services are provided by other companies within the SMS Group.
The disclosure takes place exclusively to the extent necessary to process your inquiry or to carry out contractual measures.
Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR
In this context, personal data may also be transferred to countries outside the European Economic Area (EEA).
If these countries do not have an adequate level of data protection, we ensure that your data is adequately protected through appropriate safeguards within the meaning of Art. 46 GDPR (in particular EU Standard Contractual Clauses).
A copy of these safeguards can be requested via the contact options listed above.
12.3 Disclosure to Logistics Companies
If necessary for the performance of a contract, we will transfer your personal data to contracted logistics or transport companies.
This applies in particular to:
Name
Delivery address
Contact information
The transfer is made exclusively for the purpose of delivering ordered goods or materials.
Legal basis:
Art. 6(1)(b) GDPR
13. Retention period
We process and store your personal data only for as long as is necessary to achieve the respective processing purposes or as required by statutory retention periods.
Once the respective purpose no longer applies or the statutory periods have expired, the data will be deleted accordingly.
14. Data Subject Rights
You have the following rights under applicable law:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
You may contact us at any time to exercise your rights.
15. Right to File a Complaint
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is not lawful.
As a rule, you may contact the supervisory authority in your usual place of residence, your place of work, or our company headquarters.
16. Validity and Changes to This Privacy Policy
This Privacy Policy is currently valid and is effective as of April 2026.
We reserve the right to amend this Privacy Policy as necessary to adapt it to changes in legal requirements or to changes in our services. The Privacy Policy in effect at the time of your next visit will then apply.