Imprint, data protection
and terms and conditions
1. General Information
When using this website, various personal data is collected. Protecting this data is of high importance to us. Your data will therefore be treated discreetly and in accordance with legal data protection regulations and the data protection declaration formulated here. Based on the following explanations, you will get an overview of the processing (i.e., collection and use) of personal data during a visit to our website, a contact request, an application, and the design options available to you. In addition, you will be informed about our online presence on social networks.
For this data protection declaration, the following definitions apply with reference to the General Data Protection Regulation or Regulation (EU) 2016/679 (hereinafter referred to as the "GDPR"):
a) Personal data
"Personal data" means any information relating to an identified or identifiable natural person.
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
"The controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
d) Data subject
"Data subject" means any identified or identifiable natural person whose personal data is processed by the controller.
e) Third party
"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
"Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
h) Third country
"Third country" means a country outside the European Union.
3. Controller responsible for data processing
The controller responsible for data processing in connection with this website within the meaning of Art. 4 No. 7 GDPR:
Joh. Nep. Jerger GmbH & Co. KG
Represented by: Günter Jerger, Heiko Jerger, Ralph Jerger
Phone: 07728 9271-0
For additional information regarding the controller, please refer to the legal notice. If you have any concerns regarding data protection, please contact the following email address: email@example.com
4. Legal basis for processing
We process personal data exclusively in accordance with European and German data protection regulations. This means that processing only takes place if:
a) the data subject has given consent in accordance with Art. 7 GDPR (Art. 6 para. 1 lit. a GDPR);
b) it is necessary for the performance of a contract or for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR);
c) it is necessary for us or a third party to pursue legitimate interests, provided that the interests, fundamental rights or freedoms of the data subject do not outweigh those interests (Art. 6 para. 1 lit. f GDPR);
d) there is a legal obligation for processing (Art. 6 para. 1 lit. c GDPR);
e) processing is necessary for the performance of a task carried out in the public interest (Art. 6 para. 1 lit. e GDPR).
5. Rights of the Data Subject
Furthermore, the European legislator grants every data subject the following rights:
a) Right to information
According to Article 15 of the GDPR, you have the right to obtain information from the data controller at any time about the personal data concerning you that is being processed. If there is a processing of your personal data, the scope of the right to information includes:
- Purpose of processing,
- Storage period
of the personal data.
b) Right to rectification or erasure of data
According to Article 16 of the GDPR, you can request the correction of incorrect data or the completion of incomplete data. The controller shall rectify or complete the data without undue delay.
c) Right to erasure ("right to be forgotten")
According to Article 17 of the GDPR, you have the right to have your data erased if you can demonstrate that one of the deletion grounds listed in Article 17(1) of the GDPR applies. However, it should be noted that the right to erasure may be subject to limitations. For example, this may be relevant if the personal data is subject to legal retention periods or is still required by us to assert, exercise or defend legal claims. In addition, data that is no longer required for its intended purpose or that has reached the statutory retention period will be deleted by us.
d) Right to restriction of processing
According to Article 18(1) of the GDPR, a data subject may request the restriction of the processing of personal data concerning him or her. At least one of the following conditions must be met for this purpose:
- The accuracy of the personal data concerning you is disputed by you for a period of time that enables the person responsible to verify the accuracy of the personal data.
- The processing is unlawful and the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
- The person responsible no longer needs the personal data for the processing purposes, but for the establishment, exercise or defense of legal claims.
- The data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller outweigh those of the data subject.
If the processing has been restricted by you in accordance with Art. 18 Para. 1 GDPR, this data, apart from its storage, may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of a another natural or legal person or for reasons of important public interest of the Union or a Member State. Pursuant to Art. 18 Para. 3 GDPR, the person concerned must be informed by the person responsible before the restriction is lifted if they have obtained a restriction based on Art. 18 Para. 1 GDPR.
e) Subsequent obligation to rectify, erase or restrict processing
If the data subject has asserted their right to rectification, erasure or restriction of processing vis-à-vis the person responsible, the obligation under Art. 19 GDPR to notify all recipients to whom the personal data has been disclosed of the rectification, erasure or restriction of processing of the data. This obligation does not apply if the fulfillment of this obligation proves impossible or can only be realized with disproportionate effort. The data subject has a right to information about the recipients from the person responsible.
f) Right to object
In accordance with Art. 21 (1) GDPR, a data subject is entitled to data processing for reasons arising from their particular situation, which on our part is based on a legitimate interest in accordance with Art. 6 (1) lit. f GDPR becomes to object. In the event of an objection, the personal data may only continue to be processed by the person responsible if the person responsible can prove compelling legitimate reasons for the processing which outweigh the interests, rights and freedoms of the person concerned or the processing is necessary for the establishment, exercise or defense of legal claims serves. Insofar as personal data is processed for direct advertising, the person concerned has the right to object to this processing at any time. This also applies to profiling insofar as it is associated with such direct advertising.
g) Right to data portability
According to Art. 20 GDPR, data subjects have the right to receive your personal data processed by us in a structured, common and machine-readable format and, if this is technically possible, to transmit them to another person responsible. This only applies to data that we process automatically on the basis of your consent or in fulfillment of a contract.
h) Right to revoke the declaration of consent
Your consent can be revoked at any time and with future effect (Art. 7 Para. 3 GDPR). This does not affect the lawfulness of the processing that took place up to the point of revocation.
i) Right to complain
If you believe that the processing of your personal data by us violates data protection regulations, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
6. Data collection on our website
a) Informational retrieval
If you only access this website for informational purposes without contacting us, the following access data will result:
aa) Log file data
• IP address (in anonymous form)
• Browser type and browser version
• Time of access
• type of device used by the user
• requested website or file
• Website from which the data subject accessed this website
• Operating system used by the user.
This recorded data is stored on the server of our website on a temporary basis in a so-called log file. These will be deleted after 8 weeks. This data processing does not allow us to draw any conclusions about the identity of the persons concerned and no personally assignable evaluation takes place. The processing of the data listed above is necessary for the secure operation of the website and is therefore based on the legal basis of a legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR.
bb) 1&1 WebAnalytics
We have integrated the web analysis tool "1&1 WebAnalytics" into our website. The operator is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur.
aaa) Information on data processing
WebAnalytics is a tool with which the surfing behavior of website visitors is recorded and then statistically analyzed. As a result, personal data is transmitted to 1&1 and stored by their servers. The data is stored for a period of 8 weeks and is anonymous, which is why no direct personal reference can be made. Additional information on this (e.g. a list of the transmitted data) can be found in the following links:
bbb) Processing purpose and legal basis
1&1 creates anonymous reports for us that reflect statistical surfing behavior on our website. Based on these reports, we can optimize our website and adapt it to the needs of visitors. We have a legitimate interest in this, which means that Article 6 (1) (f) GDPR serves as the legal basis for processing.
cc) Order processing
In connection with the smooth operation of our website, it is necessary to use external service providers such as the web host as a processor. They are bound by our instructions and contractually obliged in accordance with Art. 28 GDPR. We have concluded a corresponding contract for order processing (AVV) with 1&1. 1&1 thus confirms that we process personal data securely and in compliance with data protection regulations.
In addition, data is processed by you communicating it to us.
aa) Contacting us via email
If you contact us via the e-mail address(es) published on the website, the data communicated to us through this contact process will be stored by us. Here, too, the purpose of data storage is to process the message appropriately and to clarify any follow-up questions that may be required. The legal basis for processing the data that is transmitted to us in the course of sending an e-mail is a legitimate interest on our part in accordance with Article 6 (1) (f) GDPR. If the e-mail traffic is aimed at concluding a contract, Art. 6 (1) (b) GDPR applies as an additional legal basis. After the data collection purpose has been achieved, i.e. after the facts have been finally clarified, the data will be deleted unless they are subject to a statutory retention period.
bb) postal contact
If you contact us by post, the data transmitted in this way, such as surname, first name and address, will be processed along with the content of the letter. The above applies to the processing purpose and deletion practice. The processing of the personal data transmitted in this way takes place on the basis of Article 6 Paragraph 1 lit. f GDPR or Article 6 Paragraph 1 lit. b GDPR.
aa) session cookies
So-called session cookies are used to store a session ID. This allows your access device to be recognized when you return to our website. This type of cookie is automatically deleted as soon as the internet browser is closed.
bb) Persistent cookies
Persistent cookies are permanent cookies and are either deleted automatically by the person concerned in the browser settings or after a specified period of time, which can vary individually depending on the cookie.
cc) Processing purpose and legal basis
dd) Management of cookies
Safari on Mac:
Safari on iPhone, iPad, iPod touch:
< br> d) Application by email
We offer you the option of applying to our company by email.
aa) Categories of data
For this we need various personal data from you, such as your contact details, information regarding your education or your professional qualifications. The amount of data transmitted is also determined by you yourself.
bb) Duration of storage
If we cannot offer you an employment relationship, we will store the applicant data for a period of up to six months. Storage beyond this period will not take place without your consent.
cc) Purpose of processing
The applicant data you send us in this way will be processed confidentially and exclusively for the purpose of selecting applicants. Your data transmitted to us in the course of the application will not be passed on. Unless you have given your consent for this or there is a legal obligation to transfer data.
dd) Legal basis
The legal basis for the processing of personal data in connection with an application by e-mail is § 26 Para. 1 BDSG (Federal Data Protection Act). At the same time, this is the legal basis for further processing of the data beyond the status of the applicant selection, provided that we enter into an employment relationship with you. If the processing of personal data is necessary due to the assertion of legal claims in connection with the application process, we use a legitimate interest in accordance with Article 6 (1) (f) GDPR as the legal basis.
ee) Rights of data subjects
The data subject rights described in this data protection declaration also apply in connection with applications. If you wish to exercise these rights, please contact us.
e) Google Web Fonts
Within our website we have integrated so-called "Google Web Fonts". This integration allows us to display fonts consistently. When the page is called up, the web fonts required for this are loaded into the cache of your browser in order to use them for the display. However, since the web fonts are stored on our local server, no connection to the Google servers is required. A data transfer to Google in the USA therefore does not take place.
f) Google Maps
The map service "Google Maps" is integrated on our website. The operator is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. aa) Information on data processing
It is worth mentioning in this context that Google has obtained a Privacy Shield certification. This certification is intended to guarantee compliance with European data protection standards. For more information: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI .
bb) Processing purpose and legal basis
The integration of Google Maps enables us to visually display geographic information on our website. This results in an attractive presentation of our website and at the same time makes it easier for the visitor to find the places indicated on the website. We have a legitimate interest in this, which means that the integration of Google Maps is based on the legal basis of Article 6 (1) (f) GDPR.
cc) Possibility to object
g) Cookie Consent "cookiebot"
We use the "cookiebot" tool on our website. This is offered by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark.
aa) Information on data processing
bb) Processing purpose and legal basis
"Cookiebot" helps us to make our website error-free and appealing. We have a legitimate interest in this. The relevant legal basis for data processing is Article 6 Paragraph 1 Letter f GDPR.
cc) Possibility to object
h) Google Analytics
We use the Google Analytics tool on our website. This is a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield") https: //www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that the data protection regulations of the EU are also observed when processing data in the USA.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google already shortens the IP address within the EU or the EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it does not associate your IP address with other data. In addition, Google maintains at https://www.google.com/intl/de/policies /privacy/partners further information on data protection law is available for you, e.g. also on the possibilities of preventing the use of data.
7. Social media presence
a) Platform operator
Aside from our website, we operate online presences on the following social media platforms:
• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA)
• Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)
The respective presence is accessible via the corresponding click button on our website.
b) Data processing in connection with the platform
In this context, we would like to point out that by visiting such an online presence, personal data may be transmitted to the platform operator and may be processed by him in third countries. We have neither influence nor comprehensive knowledge regarding the scope of collection, processing purpose (e.g. advertising and market research purposes), storage period and deletion practice of personal data by the respective network operator. Differences in the processing of your personal data by the respective platform operator may result from the fact that you have a personal account there and may be logged into it while you access our presence there. More information about the data processing operations of the operator of the social networks can be found in their data protection declaration. These can be viewed under the following links:
Xing data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung.
The Privacy Shield certification is worth mentioning in this context. This certification is intended to guarantee compliance with European data protection standards. The following network operators can show such a certification: Facebook Privacy Shield certification: https://www.privacyshield.gov/participant?id =a2zt0000000GnywAAC&status=Active.
c) Processing purpose and legal basis
The respective presence serves to present our company to the platform users and to provide interested parties or customers with information and to get in touch with them. Data in connection with such an online presence is therefore processed by us to safeguard legitimate interests in accordance with Article 6 lit. f GDPR or, in the case of contract-related communication, on the basis of Article 6 lit. b GDPR. This takes place, for example, in connection with replying to comments or messages addressed to us.
8. Links to external websites
We have included links to external websites on our website. In this context we would like to point out that we have neither knowledge nor influence regarding the processing of personal data on these external websites.
9. Transfer of personal data to third parties
Personal data will only be passed on to third parties on the basis of legal permission and under the following conditions:
a) The person concerned has given their consent to the transfer in accordance with Article 6 (1) (a) GDPR.
b) Disclosure is required to fulfill the contract in accordance with Art. 6 (1) (b) GDPR.
c) We have a legal obligation to pass on the data.
d) The transfer is necessary on our part to protect legitimate interests in accordance with Article 6 (1) (f) GDPR.
10. Data transfer to third countries
Data will only be transferred to third countries if:
a) this is necessary to fulfill a contract or pre-contractual obligations,
b) you have given us your consent for this,
c) this is necessary to fulfill a legal obligation,
d) this is necessary on our part to protect legitimate interests.
In addition, the transmission only takes place in accordance with the requirements of Art. 44-49 DSGVO. This means that a level of data protection appropriate to EU requirements is guaranteed for the third country or the processor located in a third country. These include, for example, data processors in the USA certified under the "Privacy Shield".
11. Data Security
In accordance with Art. 32 GDPR, the person responsible uses technical and organizational measures to protect personal data as best as possible against loss, unlawful access by third parties and unjustified changes. This also means that our employees involved in the processing of personal data are obliged to handle this data carefully and responsibly. We use SSL encryption on our website to protect the data transmitted to us. This encryption can be recognized by the lock symbol in the browser bar and the "https://" address.
This data protection declaration is currently valid. However, the person responsible for this website reserves the right to change the data protection declaration. This may be necessary in the course of useful adjustments/further developments of the website, legislative changes or relevant case law regarding data protection regulations or changes in official practice.