We, BWT Holding GmbH (please find the contact details below) and associated companies, are pleased that you are visiting our website! The protection of your data and your privacy are a special concern for our company.
The use of our website is possible without the indication of personal data. In case you would like to make use of specific applications of our company the processing of personal data may be necessary. For the circumstance, that processing of personal data is necessary and a legal base therefor does not exist, we seek your consent.
The processing of personal data takes place in order with the General Data Protection Regulation (GDPR) and the respective country-specific data protection regulations. By means of this data protection declaration our company would like to inform the public about the type, extent and purpose concerning the personal data collected, used and processed. Further we want to inform you about your rights.
We have taken technical and organizational measures to protect your data against loss, modification or unauthorized access. We continuously improve these security measures according to the technological development.
The provisions below serve to provide information as to the manner, extent and purpose for collecting, using and processing personal information by the BWT Holding GmbH and relating sub websites, with exception of web sites that are controlled or run by third parties. Please be aware that we are not responsible and cannot take influence on the content of websites or tasks of third parties.
1. General
The data protection declaration of our company is based on the terms of the GDPR.
“personal information” is data that, when submitted, is able to determine your identity or enables your identity to be determined. “Only indirectly personally identifiably information” is data by which clients, service providers or recipients of a communication cannot determine the identity of a specific individual using means that are permitted by law. “Non-personal information” is anonymized and cannot, under any circumstances, be attributed to specific individuals and is therefore information that is not subject to the Privacy Policy governing personal data.
“data subject” means an identifiable natural person whose personal data is processed by the controller.
“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
“third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
“consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Personal data is only processed by our company in accordance to the data protection regulations in force. In case you correspond with our company or fill in a form with your data, you accept that the data is processed for the mentioned purpose.
Name and address concerning the controller and contact partner
The body responsible for collecting, processing and using your personal data in terms of the GDPR such as Federal data protection laws is:
BWT Holding GmbH
Walter-Simmer-Str. 4
A-5310 Mondsee
The data protection officer voluntarily appointed by the responsible person can be reached under the following contact data:
Email: daten[email protected]
2. Web analysis tools
2.1. We use Google Ads for our website. Google Ads is an online advertising program by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements on the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available at Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by analyzing which search terms led to the display of our advertisements and how many ads led to corresponding clicks. The use of Google Ads is based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in marketing his services and products as effectively as possible. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/
2.2. Google Ads Consent Mode (consent mode): The Consent Mode as a beta feature allows the website operator to receive information from Google Ads even if cookies are declined. This tool still enables tracking of website visitor conversions in connection with advertisements. The program detects whether the website visitor has consented to cookies. Depending on this, the data is collected in an anonymous form (no consent) or in a non-anonymized form (consent) and forwarded for data analysis. The Consent Mode is DSGVO compliant, as no personal data is forwarded to Google. Only the information whether the website visitor has specifically consented to the use of cookies and thus, whether the data can be forwarded in non- anonymized form is passed on.
2.3. Google Ads Enhanced Conversions for Web: This website uses Google Ads Enhanced Conversions for the Web: Enhanced Conversions are a supplement to the conversion tag. In online marketing, conversion describes the process where the interested website user ultimately performs a desired action, such as making a purchase. Generally, this application is used to forward personally collected data in hashed (converted into a randomized random code) form to Google, to better capture purchases and bookings and to circumvent browser tracking restrictions. When a website visitor performs a conversion action on the website, the personally collected data are gathered. These data are then forwarded in hashed form by the website operator to Google, where they are assigned to the respective Google account. This allows tracking of which user performs which conversions on the company website, even when there are tracking restrictions by the browser. The Enhanced Conversions application is GDPR compliant, as the personal data are transmitted in hashed form and have been collected by the website operator themselves.
2.4. Google Enhanced Conversions for Leads: This website uses Google Enhanced Conversions for Leads: In the application of Enhanced Conversions for Leads, personally collected data are transmitted in hashed (converted into a randomized random code) form to Google. The website visitor arrives at the website (lead) via an advertisement, whereupon the undertaking of a conversion, his personal data are collected by the website operator. Once this conversion by a lead is performed, the data are transmitted in hashed form to Google. After matching by Google, the data are then included in the conversion tracking. The Enhanced Conversion for Leads application runs GDPR compliant, as the personal data are collected by the website operator and only transmitted in hashed form to Google.
3. Processing personal data
We process personal data for in this data protection declaration mentioned purpose. Your personal data is not transmitted to a third party, with exception for the cases mentioned in this data protection declaration or binding national law.
In case of particular offers on our web site – such as user account, newsletter, contact – it may be necessary to sign up before, which leads to a needed procession of your personal data. Your data is only used, if you transmitted our company your personal data and agreed beforehand. Therefore we kindly ask you to give us your consent. Further we provide information via a hyperlink.
3.1. Online shop and user-registration
You can order in our online shop without registration or user account. The user account can be deleted at any time. Data, which was announced to our company in accordance with your order in the online shop are necessary for the transaction of the contract such as for the reason of a future customer service. These data is processed and used by our company for that reason only.
By sending the order form without a registration or creating a user account your personal data (title, name, country of origin, e-mail address) are processed.
If you give your consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for this processing. If the opening of the user account is also intended to lead to the initiation of a contractual relationship with us or to fulfil an existing contract with us, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR. You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
MPAY24 services of the company mPAY24 GmbH, Grüngasse 16, 1050 Vienna, is used to process purchase transactions in the online shop. A data processing agreement has been entered into with mPAY24.The data disclosed in the order placement is provided to parties involved in the online shopping (online retailer, which has been purchased from, and payment system operators, where the payment was carried out) in the required extent. The payment settlement is carried out by payment system operators (banks and credit card organizations) who are authorized to carry out the respective payment procedure and have appropriately secured systems. Data transfer is necessary to carry out payments remotely and to enable the use of mPAY24.
MPAY24 does not pass on data to third parties unless mPAY24 is legally or by judicial assignments obliged to do so or a transfer of the data is necessary in order to take legal action against fraudulent access.
Logistic services of the company LKV Logistik GmbH, Salzachtalstraße 47, 5400 Hallein are used to process purchase transactions in the online shop. The data disclosed in the shipment process is provided by LKV Logistik GmbH to parties involved in the online shopping in the required extent. LKV Logistik GmbH does not pass on data to third parties unless LKV Logistik GmbH is legally or by judicial assignments obliged to do so.
3.2. User account
A user account is required for the use of the partner portal and for the registration of products. The user account can be deleted by you at any time. Data communicated in the user account are necessary for the purpose of customer service and customer care and are processed and used by us in this respect. Some of the services we provide require cooperation with partner companies. If a user makes use of one of these services, we exchange names or other contact information with these partner companies so that they can carry out their activities. However, our partner companies may not use the information provided for purposes other than those related to the service.
3.3. Newsletter
We offer you different types of newsletters via e-mail. You can sign up for a newsletter during registration with your explicit approval or by disclosure of your e-mail address for this reason. The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. The newsletter is only transmitted to your disclosed e-mail address. In addition we kindly ask you to confirm that you are owner of the e-mail address such as your agreement for receiving the newsletter.
During the registration for the newsletter, we process your personal data from the contact fields (title, name, country of origin, e-mail address). Purpose of the process is the shipping of information concerning products, services and events.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.
You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or to use the termination-link in each newsletter.
3.4. Lottery
Lotteries are organized on our web site at times. Participation does not require an user account. Your data is only used within the lottery, except something else was agreed in the conditions of participation.
When registering to take part in the lottery your personal data (title, name, country of origin, e-mail address) are processed. Purpose of the process is supply of information concerning products, services and events.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
3.5. Product registration
The registration of your product on our website for use of free maintenance and repair service reminder via e-mail is optional.
Upon registration of the BWT product, your personal data (title, name, country of origin, e-mail address) will be processed. The purpose of data processing is to supply information about products and services.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.
You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
You have the option to register your BWT product on our website at www.bwt-service.com and you can avail yourself of our free reminder service for maintenance and service steps. The reminder is sent by email. When you register the BWT product, your personal data from the contact fields will be processed (title, name, address, telephone number, email address). The purpose of the data processing is to send information on products and services.
The legal basis for the processing is Article 6 (1) (a) GDPR. You can withdraw your consent to the processing of the data at any time with effect for the future pursuant to Article 7 (3) GDPR. All you need to do is inform us of your withdrawal of consent.
While registering the product, you also have the option of linking yourself and your device with a service partner. This means that a BWT service partner (partner company) that has the code supplied with the product (e.g. executing installation company) can view the specified customer data, the product as well as the current status of the product on the BWT partner portal. The sharing of this information with the service partner is for service purposes. Our partner companies are only permitted to use the transferred information for service purposes for our customers.
The legal basis for the processing is Article 6 (1) (a) GDPR. You can withdraw your consent to the processing of the data at any time with effect for the future pursuant to Article 7 (3) GDPR. All you need to do is inform us of your withdrawal of consent.
3.6. E-mail Notifications (SendGrid)
The dispatch of account- and product-specific notifications (status messages, warning and error messages), as well as e-mail confirmations from contact forms is carried out via an external service of the company SendGrid.
Personal salutation
In order to better support you with problems regarding your requests, your customer account and your product notifications, the following events will be stored for a maximum of 30 days:
An data processing agreement pursuant to Art. 28 DSGVO has been concluded with this service provider.
3.7. Contact via our website
Our website contains a contact form that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts our company via a contact form, the personal data transmitted by the data subject are automatically stored.
In case of contact via the contact form your personal data provided in the contact fields (title, name, country of origin, e-mail address) are processed. Purpose of the process is the handling of your request.
The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.
3.8. Find an installer
You can contact a BWT drinking water professional or BWT partner installer via our website. The data provided by you in the contact fields is automatically processed and transmitted to the installer you chose. A copy of the message is sent to the BWT Holding GmbH.
In case of contacting us your personal data provided (title, name, country of origin, e-mail address) is processed. Purpose of the process is the handling of pre-contractual procedures.
The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.
3.9 Partnerweb
Our BWT drinking water professionals and BWT partner installers are registered in our Partnerweb (platform for installers). Upon registration, the personal data (title, name, country of origin, e-mail address) of the BWT drinking water professional/BWT partner installer will be processed. The personal data is transmitted to Connex Marketing GmbH, Dr-Schauer-Straße 26, 4600 Wels, to enable the BWT drinking water professionals and BWT partner installers access to our bonus program Pearls & More. A data processing agreement has been entered into with Connex Marketing GmbH.
There is no processing of customer data. Purpose of the process is the handling of pre-contractual and contractual procedures.
The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.
3.10. Job portal
3.10.1. Online Application
Personal data, which is provided by online application, will be kept confidential. These data will be used only for the execution of the application process. As soon you send an online application via the relevant mask you will receive a confirmation e-mail. Your personal data is stored as long as it is necessary for the application process.
For the application process the following information is relevant: salutation, title, first and last name, address, nationality, date of birth, country, telephone number, email address, possibly completed presence or civil service, information on the desired position.
By providing your application, you cove consent to the processing of your personal data for the purpose of the application process as set out in this privacy policy.
The legal basis for this is Art. 6 Para. 1 lit. b) GDPR and Art. 6 Para. 1 lit. f).If you apply for an advertised position in a third country, your data will be processed at your request to carry out pre-contractual measures according to Art. 49 Para. 1 lit. b) GDPR.
Further legal basis for the processing of special categories of data referred to under Art. 9 Para. 1 GDPR, which is provided during the application process on a voluntary basis, is Art. 9 Para. 2 lit. b) GDPR (e.g. health data e.g. severe disability or ethnic origin). Further legal basis for the processing of special categories of data referred to under Art. 9 Para. 1 GDPR, which is requested by us during the application process is Art. 9 Para. 2 lit. a) GDPR (e.g. health data necessary for professional practice)
By filling in this form you can apply for positions in our company. For the application process, the necessary information and personal details, such as name, address, e-mail address or details of nationality and birth dates recorded. You are able to upload individual application documents (such as CV, cover letter, letter of motivation, credentials and photo). The specified information and uploaded documents are added to our job portal and stored there.
If you apply for an advertised job via the job portal, your data can only be viewed and processed by the responsible personnel of the personnel department as well as by the responsible employees of the tendering department.
With an unsolicited application via our job portal, you provide us with your personal data for the purpose of finding a suitable job. Your data can then be viewed by the personnel departments of BWT and by the employees involved in the application process to check your profile for suitable job offers.
In addition, we check whether your application is suitable for other vacancies in Austria, at European locations or subsidiaries of BWT Holding GmbH. In the case of a suitable offer, the specific forwarding of your application data by the responsible personnel department takes place.
Applicant data provided in the online application process can be forwarded within BWT in Austria as well as to European locations of Group subsidiaries. Your answers and information provided during the application process will be generally stored with your name up to six months after the application process has been completed. Thereafter, the results are stored only in anonymous form for statistical analysis. This statistic record does not allow any conclusions about your person.
When registering for the Job Portal, you may give consent that the information you provide may be kept in evidence. The evidence is held for a period of two years. If there is a position to be filled in the company, you give consent that BWT and its subsidiaries may match your personal data with the corresponding job profile while kept in evidence.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The transmission of your data on the Internet is encrypted. Our security measures are regularly reviewed and revised in line with technological developments.
3.10.2. Form for try-out-days
For students, which want to participate in BWTs’ try-out-days the following information is relevant: salutation, first and last name, date of birth, address, telephone number, email address, name and telephone of the legal guardian. These data will be used only for the execution of the try-out-days and generally stored up to six months after the application. Thereafter, the results are stored only in anonymous form for statistical analysis. Students under the age of 14 need to provide a parental consent.
The legal basis for this is Art. 6 Para. 1 lit. b) GDPR.
3.11. Pearl Water Manager App
Our Pearl Water Manager App is available for iOS (Apple App Store) and Android (Google Play). Upon registration you confirm the processing of your data. The personal data, water quality data collected through the sensor and data about your swimming pool will be processed and transferred to Ondilo (Ondilo SAS 81842362600030 – 162 Avenue Robert Schuman ZA la Pile, 13760 Saint-Cannat, France) to enable the functionality of the App. A data process agreement regarding to Article 28 GDPR has been entered into with Ondilo.
The data will be stored for until you request to delete your data. Please contact daten[email protected] if you wish to delete your data.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.
In the context of the processing of personal data, Ondilo collects and processes the following data for the purposes detailed below. Your data will not be shared with other parties.
Purpose of the processing | Categories of Personal Data Processed | Legal basis of the processing operation |
Management and follow-up of customer requests, through email or webform on bwt.com | Last name, first name, email, phone number, country, place of purchase of the product, UUID of the product, private or professional status, request detail, type of request, OS used, request history. | The Processing is necessary for the performance of the contract that binds us or for carrying out measures prior to the conclusion of a contract with you. |
Management and monitoring of data collected while providing the service |
Pool/SPA data : Treatment of the pool/SPA, type of pool/SPA, average number of users of the pool/SPA, stock of disinfectant and/or other maintenance products, size of the pool/SPA, time of presence and absence, location of the pool, average water temperature and in real time, consumption of disinfectant and/or other cleaning products over the season, consumption status of the cleaning products, alkalinity level, ORP level, hardness level, conductivity level, Ph, chlorine or bromine, salt level and average use time of the pool/SPA over the year. The pool/spa equipment present such as cover, cover, shelters, pump model, type of stairs, chlorinator, pH control, ozonator, brominator, UV lamp, filter type and model. Rate of filter replacement or cleaning. Packaging of disinfectant and/or other cleaning products. Pool or spa coating (liner, tiles, shell, acrylic, abs, …). Data collected through the sensor: operating system of the smartphone, UUID number, place of purchase of the sensor, IP addresses, location data (depending on the permissions you have granted us) |
The Treatment is necessary for the provision of the service. Concerning the geolocation data, they are collected only with your consent. |
Management and follow-up of recommendations | Customer recommendation based on data collected through the sensor and the customer information provided | The Treatment is necessary for the provision of the service. |
Service Improvement | Analysis of the profile, interests and behaviour of users, as well as on the measures carried out by the connected sensor in order to improve the content and functionality of the services, and to better understand customer needs. | The processing of this data is carried out in our legitimate interest but on the basis of anonymised and non-identifying data. |
3.12. Microsoft Clarity
This is an analytics tool that provides statistics on website usage, session recording, and heatmaps.
Processing Company
Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18
D18 P521, Ireland
Purpose of Data
This list represents the purposes of data collection and processing.
This list contains all (personal) data collected by or through the use of this service.
The following is the required legal basis for data processing.
Art. 6 para. 1 sentence 1 lit. a GDPR
Location of Processing
United States of America
Retention Period
The retention period is the length of time collected data is stored for processing. The data must be deleted as soon as it is no longer needed for the specified processing purposes.
The data will be deleted as soon as it is no longer needed for processing.
Data Recipients
Microsoft Corporation
Data Protection Officer of the Processing Company
Below is the email address of the data protection officer of the processing company. Data protection officer
Click here to read the privacy policy of the processor. Privacy Policy
4. Period for which the personal data will be stored
We store your personal Data, where required, for the duration of the entire business relationship (initiation, transaction, fulfilment of a contract) and moreover pursuant to the storage and documentation obligations and for defence of legal claims. The storage period results from the storage obligations and periods of limitation. The period of limitation according to the Austrian Corporate Code and the Austrian Fiscal Code is 7 years, according to the Equal Treatment Act 6 months. In certain cases a longer storage obligation might be reasonable.
5. Rights of the data subject
With regard to the data processing to be described in more detail below, users and data subjects have the right
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
These rights can be enforced at any time, in writing, to BWT Holding GmbH. Please note that information can only be provided to you in case of a corresponding evidence of your identity.
In case you want to delete your customer account finally, the data stored in your customer account is going to be automatically deleted.
01/10/2020