Privacy notice

1. Controller and contact details

Raik Behrendt, a sole trader operating as Camp+Cruise Bordtechnik, is responsible for processing your personal data on heatfix.eu and in the associated ServiceApp. Please use the contact details below for privacy questions or to exercise your rights.

Raik Behrendt
Camp+Cruise Bordtechnik
Strelitzer Str. 42a
17235 Neustrelitz
Germany
info@heatfix.eu
Telephone: +49 151 26988460

2. Website access and hosting

The website and ServiceApp are hosted through webhosting-franken.de. Access involves processing necessary connection data, including your IP address, access time, requested URL, HTTP status, data volume and browser and operating system information. This enables delivery of the website, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. Technical logs are needed only for as long as errors or security incidents must be investigated and proper operation ensured. Legal obligations or necessary preservation of evidence may justify longer retention.

3. Service enquiries, contact and ServiceApp

We process the details you provide: name, email address, telephone number and postal address with country where supplied, heater details, requested service, fault description, message and any heater photos you choose to upload. We also process the selected language and receipt time. Please upload only photos relevant to your enquiry and avoid unnecessary personal information in them.

The forms send your details to our internal ServiceApp at serviceapp.camp-cruise.de. We store the enquiry there so our team can review it manually, reply and agree the next steps. ServiceApp is part of our own processing, not an external repair intermediary. Submission is solely a non-binding enquiry, not a paid order. An automatic acknowledgement does not create an order either.

A service enquiry you request is processed under Article 6(1)(b) GDPR, covering pre-contractual steps at your request. Where necessary, general messages and business contact details are processed under Article 6(1)(f) GDPR; our legitimate interest is handling incoming enquiries and communicating with business partners. Acknowledging the privacy notice in the form is not consent to advertising or acceptance of terms and conditions. You are not legally required to use the form. However, we cannot process an enquiry through it without the details marked as required.

4. Customer portal and email communication

During subsequent service handling, you may receive a personal portal link. Its access key is used to display the associated heater, progress, document and, where applicable, quotation or payment information from ServiceApp. Messages and declarations you submit in the portal are linked to the case. Keep the link confidential. Portal access generally ends 90 days after the associated order is completed; this is not a deletion deadline for all case data. We also send emails necessary to handle your enquiry or service. The legal basis is Article 6(1)(b) GDPR or, for general or business messages where applicable, Article 6(1)(f) GDPR. Your enquiry does not subscribe you to advertising.

5. Recipients and data transfers

Access is limited to authorised personnel and providers needed for hosting, email and technical operation. If an order is subsequently agreed, necessary details may also be sent to delivery or payment providers, tax advisers or competent authorities where required to handle it or meet a legal obligation. Depending on the purpose, the legal basis is Article 6(1)(b), (c) or (f) GDPR. Providers processing data on our behalf must be engaged in accordance with Article 28 GDPR. We do not sell your data. The website functions described do not involve targeted transfers to countries outside the European Economic Area.

6. Retention and deletion

Retention depends on the purpose: enquiries, messages and photos are kept to handle them and any necessary follow-up questions. Once no longer needed, data must be deleted unless legal retention duties or the necessary establishment, exercise or defence of legal claims require otherwise. If an order results, business correspondence, invoices and other records subject to retention follow the applicable commercial and tax law periods, under Article 6(1)(c) GDPR. These periods do not apply indiscriminately to every non-binding enquiry or photo. An expired portal link does not automatically delete the underlying data. Contact us at any time with questions about your stored data.

7. Necessary cookies and language settings

A necessary session cookie may be used to protect forms against excessive requests. The associated request counter uses a one-hour window; the cookie contains no form entries. Session cookies are generally tied to the browser session. A language selection may store the language code locally in your browser under heatfix_lang; it remains until removed in the browser. You can delete browser data yourself. Where storage is necessary for the requested function, it is based on section 25(2)(2) of the German TDDDG; related personal data processing relies on Article 6(1)(f) GDPR (a functioning website protected against misuse). Advertising cookies and external advertising trackers are not embedded.

8. Our access statistics without analytics cookies

The website uses its own access statistics, stored on our hosting via log.php. They record the time, page path and domain of any referring page. An IP address, browser identifier, date and server-side key are used to calculate a pseudonymous visitor marker that changes daily. The statistics file stores this marker, not the full IP address or browser identifier. No analytics cookies are set, no cross-device advertising profiles are created and no statistics are sent to Google Analytics or other external analytics providers. The logger respects the browser’s Do Not Track signal. The purpose is to assess use of our website; the legal basis is Article 6(1)(f) GDPR (our legitimate interest in improving the website). The markers are pseudonymous, not fully anonymous. The purpose-based deletion criteria above apply; changing the marker daily does not automatically delete stored statistics files. See your right to object in section 10.

In the current layout, fonts, images and website scripts are loaded from our own website. No externally loaded Google Fonts, maps, videos or social media plugins are embedded. Following an external link takes you away from our website; the destination’s privacy information then applies.

9. Your data protection rights

Subject to the legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you may withdraw it at any time for the future without affecting the lawfulness of previous processing. To exercise your rights, contact info@heatfix.eu. We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

10. Objection to processing based on legitimate interests

Where we process personal data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves legal claims. Send your objection to info@heatfix.eu. You can also enable Do Not Track in your browser for our access statistics; this does not retrospectively delete previously stored records.

11. Complaint to a supervisory authority

Under Article 77 GDPR, you may complain to a data protection authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement. The authority responsible for our location in Mecklenburg-Vorpommern is:

Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
Schloss Schwerin
Lennéstraße 1
19053 Schwerin
www.datenschutz-mv.de
info@datenschutz-mv.de

12. Transmission and updates

The website and form transmission use HTTPS. We cannot guarantee absolute security for every communication channel. This notice describes the current functions and will be updated if processing changes. All language versions describe the same process and do not limit your statutory rights.