Privacy Notice
Effective date: June 29, 2025
General Information
We, Viessmann Generations Group GmbH & Co. KG (hereinafter referred to as “Viessmann” or “we”), take the protection of your personal data very seriously and strictly comply with the rules of the currently applicable data protection laws. This includes in particular the General Data Protection Regulation (hereinafter: “GDPR”, Regulation (EU) 2016/679 of the European Parliament and of the Council). The Viessmann Generations Group comprises the companies affiliated with Viessmann Generations Group GmbH & Co. KG. These are such that we can exercise determining influence over.
Personal data is collected on our websites and when using our apps and services only to the necessary extent and processed for specific purposes. Personal data is data through which you can be personally identified or which is otherwise associated with you.
Controller in accordance with the Federal Data Protection Act / GDPR:
Viessmann Generations Group GmbH & Co. KG
Im Birkenried 1
D-35088 Battenberg (Eder)
Phone: +49 6452 9296 000
Email: communications@viessmann.com
Processing within the Viessmann Generations Group
On behalf of us, Viessmann Generations Group GmbH & Co. KG, the following entities work:
- Viessmann Generations Services GmbH & Co. KG for maintaining websites and apps as well as for marketing purposes.
Collected data may be processed by or passed on to other group companies of the Viessmann Generations Group if:
- You have expressly and knowingly consented elsewhere (e.g., note in the request form),
- It is necessary for specific purposes and within the division of labour within the Viessmann Generations Group; for this, corresponding contractual agreements have been concluded within the Viessmann Group,
- The data is made available by the controller in pseudonymised form and the controller ensures that the commissioned group company cannot de-pseudonymise this data, or
The data is stored by the controller in anonymised form and the data stored in this way no longer falls under data protection regulations.
Transfer to Third Countries
The companies of the Viessmann Generations Group process/transfer the data you provide at locations in Germany, the European Union, as well as third countries (including the USA), which either have an adequate level of data protection in accordance with Article 45 GDPR or offer appropriate safeguards in accordance with Article 46 GDPR.
Scope of the Privacy Policy
The following statement provides you with an overview of how we ensure data protection, which type of data is collected and processed for which purpose and on which legal basis. It applies in principle to all websites and apps managed by Viessmann, as well as when you contact us via other communication channels. Should Viessmann websites and apps deviate from or supplement these principles of data processing with their own, this will be indicated accordingly on the respective websites or in the apps.
This privacy policy consists of five parts:
- The first part (Regulations for private users) applies to private users of Viessmann’s services.
- The second part (Regulations for business users) applies to business users of Viessmann’s services.
- The third part (Regulations for applicants) applies to private users of Viessmann’s services in relation to applications.
- The fourth part (General information and Regulations for the Viessmann websites and apps) applies to all users who use Viessmann’s services, websites, and apps.
- The fifth part (Information on data subject rights) applies to all users whose data is subject to data protection law, but not to legal entities.
Our websites may also contain links to websites of other providers, to which this privacy policy does not apply.
I. Regulations for Private Users
This part of the privacy policy applies to private users of Viessmann services. The legal basis for the processing of your data is your given consent to this privacy policy as consent, or to be able to provide you with requested information or products, pursuant to Article 6(1)(b) GDPR.
Use and Verification of Personal Data
The personal data you provide includes, among others, the following:
- Your name
- Your address (postal code, city, street and house number, if applicable address additions)
- Your email address
- Your date of birth
- Your gender
- Your telephone and/or mobile phone number
- Your country
To the extent that you provide us with personal data, we use this data to respond to your inquiries, to process and handle your consultation request, for technical administration, for login activities, and for the services made available within the respective websites or apps. The legal basis for this is Article 6(1)(b) GDPR and/or your consent. You may revoke your consent to the use of the data you have provided at any time. To do so, please contact us, preferably stating the service(s) used, at: privacy@viessmann.com
Further Processing and Deletion of Your Data
Beyond that, your data will not be passed on or sold to third parties, i.e. persons or companies not belonging to the Viessmann Generations Group.
The deletion of the stored personal data takes place if you revoke your consent to storage, if the data is no longer required to fulfill the purpose pursued with the storage, or if its storage is inadmissible for other legal reasons.
We offer you further information and services by email for up to 3 months after the conclusion of your consultation.
II. Regulations for Applicants
This part of the privacy policy applies to applicants for job postings from companies within the Viessmann Generations Group or third-party companies to whom Viessmann provides a platform or partner program for job postings/placements. This applies only insofar as these applicants transmit personal data to Viessmann within the scope of the application process, e.g., applications in paper form, email, contact forms with attachments, via portals operated by Viessmann, or through the use of third-party electronic job boards, in accordance with the required content and any other applicable national legal regulations. Applications submitted on paper will be scanned and stored in our systems; the paper documents will then be disposed of in compliance with data protection regulations by certified service providers.
We use your personal data solely to process your application and/or within the scope of talent relationship management, and on the basis of consent to this privacy policy. Processing your application also includes, where necessary, the use of your data for contacting you by email and/or postal mail and/or telephone. The documents you submit will be accessible to the recruiting and HR managers of Viessmann Generations Group GmbH & Co. KG and the respective group companies, as well as to supervisors or other recruiting personnel in the departments where the position is advertised. Further processing is carried out in anonymized form for the purpose of measuring the success of job placements and the technical application channels used, as well as, also in anonymized form, the skills submitted by applicants.
The data is processed using systems provided by Ashby, Inc., a company based in the USA. Viessmann Generations Group GmbH & Co. KG has concluded a contract with Ashby, Inc. based on the EU Standard Contractual Clauses in accordance with Article 46 of the GDPR.
The stored personal data of applicants will be automatically deleted no earlier than 4 months and no later than 6 months after the applicant has been informed that the position will not be filled by them, provided there are no legal requirements preventing this. This period is based on the requirements of the General Equal Treatment Act (AGG).
If included in the Talent Relationship Management Program, your data will be stored in our system for up to 365 days to be considered in advance for future job postings. We will use the data you provide to contact you by email and/or postal mail and/or telephone. Only with your explicit consent upon our inquiry will your data remain stored in our system beyond this period, so you may be considered for future job postings.
If application documents are sent in paper form without reference to job advertisements in our electronic formats (e.g., unsolicited applications), you will receive a summary of this privacy policy together with an acknowledgment of receipt of your letter, or at the latest in the event of a rejection on our part.
III. General Information and Regulations for Viessmann Websites and Apps
These regulations apply in addition to the regulations for private users and the regulations for business users for the websites and apps of Viessmann. Some of our apps may have additional dedicated privacy policies.
Data processing through access to our websites and use of our apps
Viessmann automatically collects and stores information in its server log files that your browser or app transmits to us. This data cannot be assigned by Viessmann to specific individuals. This data is not merged with other data sources.
This includes:
- Browser type/version
- Referrer URL (the previously visited page)
- Hostname of the accessing computer (IP address v4 and v6)
- Time of the server request
The IP address is the globally valid identifier of your computer at the time it is assigned by your internet provider and currently, in its most common form (IPv4), consists of four numerical blocks separated by dots, or it may be extended with additional characters (IPv6). As a private user, you are usually not assigned a permanent IP address, since it is typically allocated temporarily by your provider (a so-called "dynamic IP address"). With a permanently assigned IP address (a so-called "static IP address"), it is technically easy to clearly identify user data using this feature.
The data mentioned above is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring a comfortable use of the aforementioned website
- Evaluation of system security and system stability
- For further administrative and statistical purposes
The personal data in the server log files is processed on the basis of Article 6 (1) lit. f GDPR. This legal basis permits the processing of personal data within the scope of the "legitimate interests" of the controller, unless your fundamental rights, freedoms, or interests override those interests. Our legitimate interest lies in the easier administration and the ability to detect and track hacking attempts. You may object to this data processing at any time if there are reasons arising from your particular situation that argue against the processing. An email to the data protection officer is sufficient. Our legitimate interest follows from the purposes of data collection listed above. In no case will we use the collected data to draw conclusions about your person.
The server log files with the aforementioned data are automatically deleted after 30 days or anonymized if used for statistical purposes. We reserve the right to store server log files for a longer period if there are facts indicating an unlawful access (such as a hacking attempt or a so-called DDOS attack).
Linking to External Websites
This privacy policy applies exclusively to the Viessmann websites and apps. These may contain links to third-party web offerings. This privacy policy does not extend to those. If you leave the Viessmann websites and apps to access a third-party offering, we recommend that you carefully read the privacy policy of that provider.
Information on Cookies and the Use of Analytical Tools
We base the processing of personal data by means of cookies and analytical tools (list all analytical tools used) on Article 6 (1) lit. f GDPR. This legal basis permits the processing of personal data within the scope of the “legitimate interest” of the controller, provided that your fundamental rights, freedoms, or interests do not override these. Our legitimate interest lies in analyzing the use of our website.
Viessmann uses so-called cookies at various points on its websites and in its apps. They serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit ends. Cookies do not cause any damage to your computer and do not contain viruses.
Viessmann also uses analytical tools for this purpose, such as Webtrends or Google Tag Manager (Firebase). The data provided and used is collected and stored in a fully anonymized form. In some cases, this data may also be stored outside Germany or the European Union.
When implementing and using analytical tools and tracking technologies, we anonymize personal data as quickly as possible—either on the provider’s side, regulated by appropriate contracts, or within our own initial usage—so that your right to information cannot be exercised for all technologies listed below.
By adjusting your browser settings or app settings, or via the settings of your operating system environment (iOS, Android), you can prevent the transmission of such data. However, this may lead to issues with accessing, operating, or the functionality of the provided content or service.
IV. Information on Data Subject Rights
This part of the privacy policy provides additional information about exercising your rights as a data subject in relation to Viessmann.
Your Identity
In order to fulfill data subject rights under the GDPR, it may be necessary for Viessmann to request further information to verify your identity in individual cases involving personal data collected through contractual relationships—especially in the case of electronic access requests where no clear link to a natural person can be established from the sender’s details.
You have the right
- under Article 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
- under Article 16 GDPR, to demand the immediate correction of incorrect or the completion of your personal data stored by us;
- under Article 17 GDPR, to demand the deletion of your personal data stored by us, unless processing is necessary to exercise the right of freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
- under Article 18 GDPR, to demand the restriction of the processing of your personal data, where the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure, and we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing under Article 21 GDPR;
- under Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller.
To exercise these rights, please contact:
Data Protection Officer of Viessmann Generations Group GmbH & Co. KG
2B Advice GmbH
Joseph-Schumpeter-Allee 25
D-53227 Bonn
Phone: +49 6452 9296-101
Email: privacy@viessmann.com
- under Article 7 (3) GDPR, to withdraw your consent at any time. As a result, we are no longer permitted to continue the data processing based on that consent for the future;
You can revoke your consent via: privacy@viessmann.com - under Article 77 GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or of our company headquarters.
Responsible Supervisory Authority:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
D-65021 Wiesbaden
Phone: +49 611 1408-0
Fax: +49 611 1408-900
Email: poststelle@datenschutz.hessen.de
Further Information - Contact Details
Your trust is important to us. Therefore, we are always available to answer any questions regarding the processing of your personal data. If you have any questions that this privacy policy has not answered or if you would like more detailed information on a particular point, please contact us:
Contact details of the Data Protection Officer:
Data Protection Officer of Viessmann Generations Group GmbH & Co. KG
2B Advice GmbH
Joseph-Schumpeter-Allee 25
D-53227 Bonn
Phone: +49 6452 9296-101
Email: privacy@viessmann.com
In accordance with Article 13 (2)(d) GDPR, we provide you here with the necessary information for exercising your right to lodge a complaint:
Responsible Supervisory Authority
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
D-65021 Wiesbaden
Phone: +49 611 1408-0
Fax: +49 611 1408-900
Email: poststelle@datenschutz.hessen.de
Security Notice
We strive to store your personal data by employing technical and organizational measures in such a way that it is not accessible to third parties. When communicating via email, complete data security cannot be guaranteed, so we recommend sending confidential information by postal mail.
Changes to the Privacy Policy
This privacy policy is currently valid and has the status of June 10, 2025.
Due to the further development of our website and its offerings or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time from the website at: