We thank you for your interest in our company as well as our products and services. We would like to ensure that you feel secure when you visit our website, also in regard to the protection of your personal data. Because we take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Compliance with the provisions of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is a matter of course for us. We want you to know what data we collect at which point, and how we use it.

General information about data processing

1. Scope of processing personal data

We collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. As a rule, the collection and use of our users' personal data takes place regularly only with their consent. Exceptions are cases where prior consent cannot be obtained for practical reasons and data processing is permitted by law.

2. Legal basis for processing personal data

If we obtain consent for the processing of personal data from the data subject, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. When processing personal data necessary for the performance of a contract to which the data subject is party, the legal basis is Article 6(1)(b) of the GDPR. This also applies to processing operations that are necessary to take steps at the request of the data subject prior to entering into a contract.

To the extent that the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Article 6(1)(c) of the GDPR.

Where the protection of the vital interests of the data subject or another natural person requires the processing of personal data, the legal basis is Article 6(1)(d) GDPR. If the processing is necessary for the purposes of the legitimate interests pursued by JUMO or a third party, and if the interests, fundamental rights and freedoms of the data subject do not override those legitimate interests, the legal basis for the processing is Article 6(1)(f) GDPR.

3. Deletion of data and duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, data may be stored if this has been provided for by the European or national legislator in regulations, statutes, or other provisions to which JUMO is subject. The data will also be blocked or deleted after the expiry of the storage period specified in one of the above ways, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Automatically collected non-personal data

When you use our websites, the following data is stored for organisational and technical reasons:

• Information about the type and version of the browser used
• The user's operating system
• The user's internet service provider
• Your IP address
• Date and time of access
• Websites from which the user's system accesses our website
• Websites from which the user's system accesses our website

We analyse the technical data anonymously and exclusively for statistical purposes in order to continuously optimise our internet presence and make our website even more attractive. The temporary storage of the IP address by the system is necessary for the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. In addition, we use this data to detect, document and prevent cases of misuse.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in or by your web browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a unique string of characters that allows your browser to be uniquely identified when you return to the website.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser used can be identified even after changing pages.

The following data is stored and transmitted in cookies:

• Items in the shopping basket: the user data entered is stored in the user session until the order is completed.

We also use cookies on our website that enable us to analyse user behaviour. This allows the following data to be transmitted:

• Search terms entered
• Frequency of page views
• Use of website functions

The user data collected in this way is pseudonymised using technical security measures. As a result, it is not possible to assign the data to a specific user. This data will not be stored together with other personal data of users.

When you visit our website, an information banner informs you about the use of cookies for analytical purposes and refers you to this data protection statement. In this context, you will also find information on how you can prevent cookies from being stored in your browser settings. The purpose of using cookies that are technically necessary is to simplify the use of websites for users. Some functions of our website cannot be offered without cookies. These functions require the browser to be recognised when switching pages.

We need cookies for the following purposes:

• Shopping basket
• Remembering search terms

The user data collected by technically necessary cookies is not used to create user profiles. The use of cookies for analysis (browser, Java scripts, screen resolution, terminal used, bandwidth, location) is intended to improve the quality of our website and its content. By analysing cookies, we learn how the website is used and can thus continuously optimise our offering.

Cookies are stored on your computer and transmitted to our website. Therefore, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing your browser settings. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all the functions of the website to their full extent.

Security

We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and all third parties involved in the processing of personal data are bound by data protection regulations and treat the data confidentially. When collecting and processing personal data, the information is transmitted in encrypted form to prevent misuse of the data by third parties. Our security measures are subject to continuous review in line with technological developments. We also use a secure data connection (https) for data transmission in the shop area of our website.

Contact form

Our website offers several contact forms that can be used for electronic contact. If the user accepts this option, the data entered in the input mask will be sent to us and stored. This data includes:

• Subject
• Name
• Company
• Street
• Postcode
• Town
• Email
• Telephone
• Location
• Your message

When you send a message, the following data is also stored:

• Date and time of dispatch

Your consent to data processing is collected as part of the message sending process, and you are also referred to this privacy policy. Alternatively, you can contact us via email at info.at@jumo.net. In this case, your personal data sent by email will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the correspondence.

The legal basis for data processing is Article 6(1)(a) GDPR if you have given your consent. The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) GDPR. If the purpose of the e-mail contact is to conclude a contract, then the additional legal basis for data processing is Article 6(1)(b) of the GDPR.

The processing of personal data from the input mask serves only to enable us to contact you. In the case of electronic contact, this also constitutes a legitimate interest in processing. Other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

You may revoke your consent to the processing of your personal data at any time, without affecting the lawfulness of the processing prior to revocation. If you contact us by e-mail, you may object to the storage of your personal data at any time. In this case, the conversation cannot be continued. You may revoke your consent at any time by email, telephone, fax or letter. All personal data stored during your contact with us will be deleted in this case.

Confirmation of contact/customer information

If you contact us via the online contact form, by e-mail or in person (visit, telephone, trade fair visit) and provide us with your personal data, we will send you a confirmation of contact in the form of customer information. In this context, the data will not be passed on to third parties. This data is used exclusively for the purpose of establishing contact. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. You may revoke your consent to the processing of your personal data at any time, which does not affect the lawfulness of the processing prior to revocation. If you contact us by e-mail, you may object to the storage of your personal data at any time. In this case, the conversation cannot be continued. You may revoke your consent at any time by email, telephone, fax or letter. All personal data stored during your contact with us will be deleted in this case.

Webinars

Webinars are used for communication between us and a group of people who register online for a digital conference in order to gather information. When registering for a webinar, the following data is required to support this process:

• First and last name,
• Gender,
• E-mail address,
• Company,

In order to offer the "Webinar" service, JUMO relies on the GoToWebinar service offered by Citrix, Citrix Headquarters, 4988 Great America Parkway, Santa Clara, CA 95054, United States. Citrix is responsible for providing this service and processing data. Citrix's privacy policy can be found at: https://www.citrix.com/about/legal/privacy/.

In order to conduct the webinar related to orders, we send your email address, surname, and first name to Citrix. After the webinar has ended, summary statistics are forwarded to JUMO. If you asked a question during the webinar, we will also receive information about the question you asked, such as your first name, last name, and email address, for further processing of your enquiry after the webinar. We are responsible for the data stored by JUMO as part of this process.

After registering for the event, you will receive further information and reminders about the event by e-mail before and after the event.

Audio and video conferences

Data processing

We use online conferencing tools, among other things, to communicate with our customers. The tools we use are listed in detail below. When you communicate with us via video or audio conferencing over the internet, your personal data is collected and processed by us and by the provider of the respective conferencing tool.

For this purpose, the conferencing tools collect all data that you provide/enter in order to use these tools (e-mail address and/or your telephone number). In addition, the conferencing tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other "contextual information" related to the communication process (metadata).

In addition, the tool provider processes all technical data required to support online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera, microphone or speaker type, and connection type.

Any content exchanged, transmitted or otherwise shared within the tool is also stored on the tool providers' servers. Such content includes, in particular, cloud recordings, chat/messaging, voice messages, uploaded photos and videos, files, boards and other information that has been shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our capabilities are largely determined by the corporate policy of the respective provider. For further information on data processing by conferencing tools, please refer to the privacy statements of the respective tools, which we have listed below this text.

Purpose and legal basis

Conference tools are used to communicate with potential or existing contractual partners or to offer specific services to our customers (Article 6(1)(b) GDPR). In addition, the use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6(1)(f) GDPR). If consent has been obtained, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.

Storage duration

Data collected by us directly via video and conferencing tools will be deleted from our systems as soon as you request its deletion, revoke your consent to its storage, or the purpose for storing the data ceases to apply. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data that is stored by the operators of the conferencing tools for their own purposes. For detailed information, please contact the operators of the conferencing tools directly.

Information on data transfer to the USA

We use online conferencing tools from companies based in the United States. When using these tools, your personal data may be transferred to the US servers of the respective companies. Please note that the US is not a safe third country within the meaning of EU data protection law. US companies are required to transfer personal data to security authorities without you, as the data subject, being able to take legal action. It cannot therefore be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data stored on US servers for surveillance purposes. We have no influence on these data processing activities.

We currently use the following products for audio and video conferencing:

Data protection notices for online meetings, telephone conferences, and webinars via Microsoft Teams

Newsletter: Registration and dispatch

1. Description and scope of data processing

You can subscribe to free newsletters on our website. Depending on the newsletter, the following data from the input mask may be transmitted to us during registration.

Mandatory fields: email address, consent to contact checkbox, privacy policy/consent checkbox

Optional information: title, first name, surname, interests (product areas, industries, service areas)

The following data is also collected during registration

• IP address of the computer from which access is made
• Date and time of registration

As part of the registration process, the user's consent to data processing is obtained and reference is made to this privacy policy.

The purpose of our newsletter is to send you information that we believe may be of interest to you, to contact you to inform you about our products, services, vacancies and career opportunities, to inform you about current events and useful information, and to invite you to interesting events such as webinars or trade fairs. Depending on the newsletter you select, this may include information about products, industries, and services, the JUMO customer magazine, service packages, software, career opportunities, and press releases.

The data will be used exclusively for sending the newsletter.

Use of a provider

We use the services of INXMAIL to manage and send our newsletter. The provider is Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. We have concluded an order processing agreement with the provider.

Measurement of opening and click rates

Based on your consent, we also evaluate user behaviour within the information we send and assign this information to your email address in our newsletter system. Each newsletter sent to you contains pixel-sized files that enable us to evaluate confirmations of receipt and reading, as well as information about the links you have clicked on in our newsletter. We also store information about which areas of our website you have visited. The information collected is used to improve the technical aspects and content of our communications. By creating a personal user profile, we aim to tailor our advertising to your interests and optimise our offers on our website. The measurement of open and click rates, as well as the storage of the measurement results in user profiles and their further processing, is based on your consent.

Double opt-in procedure

Registration to receive our newsletter always takes place as part of a double opt-in procedure. After registering on our website, you will receive an e-mail asking you to confirm your registration to receive our newsletter. This confirmation serves as proof that you have registered to receive our newsletter using your e-mail address.

Storage of your revocation

We may also store the email addresses of persons who have unsubscribed based on our legitimate interest in being able to prove prior consent even after unsubscribing from our newsletter.

2. Legal basis for data processing

The legal basis for data processing when registering for our newsletter and evaluating our newsletter (newsletter tracking) is the user's consent (double opt-in) in accordance with Article 6(1)(a) of the GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1)(f) GDPR for the purpose of proving and verifying your consent. For storage for verification purposes and defence against liability claims (storage of revocation), Article 6(1)(f) GDPR applies.

The legal basis for processing all other personal data processed during the registration process, which is provided when registering for our newsletter, is Article 6(1)(1)(f) of the GDPR.

3. Purpose of the data processing

The purpose of collecting your email address is to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the service or the email address used. The collection of analytical data from the delivery of the newsletter serves to improve and optimise our services.

The double opt-in procedure serves to confirm and verify the user's consent. The storage of the revocation of consent is intended to enable the confirmation of previously given consents even after their revocation and thus to avoid claims for damages.

Other personal data processed during the sending process is used to prevent abuse of newsletter registration and to ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

4. Duration of storage, right of objection, revocation and removal

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Your e-mail address will therefore be stored for as long as your newsletter subscription is active.

You have the right to withdraw your consent at any time in accordance with data protection regulations. Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. Withdrawal of consent can be sent by post or email to the data controller.

We may also store the email addresses of individuals who have unsubscribed for up to three years based on our legitimate interest in being able to prove that consent was previously given, even after unsubscribing.

The newsletter subscription can be cancelled by the interested user at any time. For this purpose, there is a corresponding link in every newsletter. This also allows you to withdraw your consent to the storage of personal data collected during the registration process.

It is not possible to cancel the newsletter tracking separately; in this case, the entire subscription must be cancelled.

Provision of free information and associated targeted advertising and creation of an advertising profile

1. Description and scope of data processing

We provide free information on our website. To receive it, you must consent to the use of HubSpot on the website and provide your email address. We also obtain your consent to target you with advertisements (e.g. in the form of email campaigns) and to create an advertising profile based on your email address and the data collected by our website. Targeted advertisements contain information that we believe may be of interest to you, inform you about current events and contain useful information, and invite you to interesting events such as webinars or trade fairs. When obtaining your consent, we refer you to this data protection information.

• IP address of the computer from which access was gained
• Date and time of registration

Use of a provider

We use the services of the provider INXMAIL to manage and send free information, advertising content and to create advertising profiles. The provider is Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. We have concluded an order processing agreement with the provider.

Measurement of opening and click rates

Based on your consent, we also evaluate user behaviour within the information we send and assign this information to your email address in our system. The free information sent to you contains pixel-sized files that enable us to evaluate confirmations of receipt and reading, as well as information about the links you have clicked on in our information. We also store information about which areas of our website you have visited. The information collected is used to improve the technical aspects and content of our information. By creating a personal user profile, we aim to tailor our advertisements to your interests and optimise our offers on our website. The measurement of open and click rates, as well as the storage of measurement results in user profiles and their further processing, is based on the user's consent.

Double opt-in procedure

The provision of free information and the associated consent to the delivery of targeted advertising and the creation of an advertising profile always takes place within the framework of the double opt-in procedure. After entering your e-mail address on our website, you will receive an e-mail asking you to confirm. This confirmation serves as proof of your consent and willingness to receive free information at the e-mail address you have provided.

2. Legal basis for data processing

The legal basis for data processing for the purpose of providing free information, delivering targeted advertising and creating advertising profiles is the user's consent (double opt-in) in accordance with Article 6(1)(a) of the GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1)(f) GDPR for the purpose of proving and verifying the user's consent. For storage for verification purposes and defence against liability claims (storage of revocation), Article 6(1)(f) GDPR applies.

The legal basis for the processing of all other personal data processed during this process, which is necessary for the provision of free content, the sending of targeted advertising and the creation of advertising profiles, is Article 6(1)(f) of the GDPR.

3. Purpose of the data processing

The purpose of collecting your email address is to send you targeted advertising free of charge and to create an advertising profile. The collection of analytical data from the provision of free information and targeted advertising serves to improve and optimise our offers.

The double opt-in procedure serves to confirm and verify the user's consent. The storage of the revocation is intended to enable the confirmation of previously given consents even after their revocation and thus to avoid claims for damages.

Other personal data processed during the sending process is used to prevent abuse and ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

4. Duration of storage, right of objection, revocation and removal

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

You have the right to withdraw your consent to data processing at any time in accordance with data protection regulations. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn. Withdrawal of consent can be sent by post or email to the data controller.

We may also store the email addresses of individuals who have unsubscribed for up to three years based on our legitimate interest in being able to prove that consent was previously given, even after unsubscribing.

The receipt of targeted advertising and the creation of advertising profiles can be terminated at any time by the user concerned. For this purpose, each message contains a corresponding link. This also allows you to withdraw your consent to the storage of personal data collected during this process.

It is not possible to withdraw consent for newsletter tracking separately; in this case, the entire subscription must be cancelled.

Use of HubSpot

1. Description and scope of data processing

This website uses HubSpot to acquire, analyse and manage potential customers, analyse and track visitor behaviour, and personalise content. The provider is HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA, https://www.hubspot.de/

Further information on the functions of and data processing can be found at https://legal.hubspot.com/dpa.

Use of a provider based in a third country

The information collected by HubSpot about the use of this website is usually transferred to a server in the USA and stored there. The provider is certified under the EU-US Data Privacy Framework (DPF). For more information about the DPF, please refer to this data protection information under "I. General information on data processing – 4. Transfer of data to a third country or international organisation".

2.  Legal basis for data processing

The use of HubSpot is based on your consent in accordance with Article 6(1)(a) of the GDPR, in the case of data transfers to a third country, Art. 49(1)(a) GDPR, as well as § 25(1) sentence 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device fingerprint) within the meaning of the TDDDG.

3. Purpose of data processing

Data processing serves the following purposes: acquisition of potential customers and customer service for the purpose of improving internal marketing and sales.

4. Duration of storage, right of objection, revocation and removal

The data you provide to us for HubSpot will be stored by us for up to 13 months and then deleted.

You have the right to withdraw your consent at any time in accordance with data protection regulations or to object to the processing of your data. Withdrawal of consent does not affect the lawfulness of processing that took place on the basis of consent before its withdrawal.

5. Conclusion of a contract for order processing

In connection with the data processing described above, the data is transferred to and processed by the service provider. We have entered into an order processing agreement with HubSpot. This is an agreement provided for by data protection regulations, which guarantees that HubSpot processes the personal data of visitors to our website exclusively in accordance with our instructions and data protection regulations (GDPR, BDSG, etc.).

JUMO Cloud

When using the JUMO Cloud, your personal data is processed in accordance with the following order processing agreement "in accordance with Article 28 of the European Data Protection Regulation".

JUMO Cloud - Contract for Processing According to Art. 28 GDPR

Virtual online events

We offer you the opportunity to participate in virtual online events. For this purpose, we use the services and platform of 6Connex. For the purpose of registration and participation in such events, the following personal data is collected, processed, and stored:

Title, first name, surname, company, position, industry, country, postcode, email address.

In addition, you can optionally provide the following data: How you found out about the event and profile picture

Your personal data is stored exclusively in data centres located in Germany, respectively in Europe. The storage period is one year. Your consent will be obtained during registration for the processing and use of your personal data for marketing and commercial purposes, as well as for the use of your email address in the chat, with reference to this data protection declaration. This consent can be revoked at any time.

Participants in such events can use the chat function. This function is also available to participants among themselves. In addition, participants have the option of using Wonder's video chat/video meeting function. The tool is not integrated into the 6Connex platform and no data is exchanged between the systems. No registration is required to use the tool; you only need to choose a name or nickname and grant access to your camera and microphone.

For analytical and statistical purposes, usage data is collected and processed during virtual online events. We use these functions on the basis of our legitimate interest in targeted advertising. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. a and, if the conditions are met, Art. 6 lit. b GDPR. 6 lit. b GDPR.

Use of Facebook plugins

Our website uses social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Plugins can be recognised by one of the Facebook logos (white "f" on a blue tile, "Like" button or "Thumbs up" sign) or are marked with the addition "Facebook Social Plugin". A list and appearance of Facebook plugins can be found at: http://developers.facebook.com/docs/plugins. When you visit a website that contains such a plugin, your browser usually establishes a direct connection to Facebook's servers and transmits data to Facebook, which is stored on the servers without your consent and without you pressing a button. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. For this reason, we have no influence on the scope of data that Facebook collects with this plug-in and therefore inform you according to our level of knowledge: http://www.facebook.com/help/?faq=17512

By activating and integrating the plugins, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged into Facebook, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example by clicking the "Like" button or commenting, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a Facebook user, it is still possible for your IP address to be obtained and stored. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and settings options for protecting your privacy, can be found on the Facebook website: http://www.facebook.com/policy.php.

If you are a Facebook user and do not want Facebook to collect data via our website and link it to your Facebook account data, you must log out of Facebook before visiting our website.

Use of Twitter

This website uses Twitter buttons. These buttons are available from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be recognised by terms such as "Twitter" or "Follow", in combination with a stylised image of a blue bird. You can use the buttons to share an article or one of our pages on Twitter or to follow the service provider on Twitter. When you visit a website that contains such a button, your browser establishes a direct connection to Twitter's servers. The content of the Twitter button is transmitted directly from Twitter to your browser. The provider therefore has no influence on the amount of data that Twitter collects with this plugin and informs users according to their level of knowledge. Accordingly, only the user's IP address and the URL of the respective website are transmitted when using the buttons, but not for any other purpose than to display the buttons. For more information, please refer to Twitter's privacy policy at http://twitter.com/privacy. You can change your privacy settings on Twitter in your account settings: https://twitter.com/account/settings.

Use of Instagram

Our websites include features of the Instagram service. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our websites to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our websites with your user account. We would like to point out that, as the provider of these websites, we have no knowledge of the content of the data transmitted or how it is used by Instagram. For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

Use of LinkedIn

Our website uses LinkedIn features. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit one of our pages that contains LinkedIn features, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your account, LinkedIn can associate your visit to our website with you and your user account. Please note that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn. For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

Use of Xing

Our website uses XING network functions. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time you visit one of our pages that contains XING features, a connection to the XING servers is established. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored and no user behaviour is analysed. For more information on data protection and the XING Share button, please refer to the XING data protection statement at: https://www.xing.com/app/share?op=data_protection.

Use of YouTube

Our website uses plugins from Google's YouTube website. This plugin is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. For more information on how YouTube handles user data, please refer to YouTube's privacy policy at: https://www.google.com/intl/en/policies/privacy.

Use of JIVO Chat

Our website uses an omnichannel business messenger. With this service the user can connect with the customer.

Processor: Jivosite, Inc. 1811 Silverside Road, Wilmington, Delaware 19810, United States of America

Data Protection Officer of the company in charge of data processing

Below you can find the e-mail address of the data controller of the company in charge of the processing.

privacy@jivochat.com

Data purpose

This list represents the purposes of data collection and processing.

• Analysis
• Providing service

Technologies used

This list represents all the technologies used by this service to collect data. The technologies used are cookies and pixels placed in your browser.

• Cookies

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

• Anonymous data

Legal basis

The legal bases required for data processing are listed below.

• Art. 6 parr. 1 s. 1 let. of the RGPD

Place of treatment

This is the primary location where the collected data is processed. If data is also processed in other countries, you will be informed separately.

• United States of America

Storage period

The storage period is the period of time the collected data is kept for the purposes of processing. Data must be deleted as soon as they are no longer required for the stated processing purposes.

• The data will be kept for up to two months.

Transfer to third party countries

This service may send the collected data to a different country. Please note that this service may transfer the data outside the EU/EEA and to a country without the required data protection standards. If the data is transferred to the USA, there is a risk that the US authorities may process your data for control and surveillance measures, possibly without legal recourse. Below is a list of countries to which data is transferred. This may be for different reasons, such as storage or processing.

• United States of America

Data recipients

The recipients of the data collected are listed below.

• Jivosite, Inc.

Click here to read the privacy policy of the data processor
https://www.jivochat.com/files/privacy_policy.pdf

Web Tracking - Google Analytics

This website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

• Marketing
• Advertisement
• Web Analytics

Technologies used

• Cookies
• Pixel Tags

Data attributes

• IP address (anonymised)
• Browser information (browser type, referring/exit pages, the files viewed on our site, operating system, date/time stamp, and/or clickstream data)
• Usage Data (views, clicks)

Data collected

This list represents all (personal) data that is collected by or through the use of this service:

• IP address
• Date and time of visit
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash version
• Location information
• Purchase activity
• Widget interactions

Browser plugin

You may opt out of cookies by selecting the appropriate settings in your browser, but please note that if you do so, you may not be able to use all the features of this website. Users can also prevent Google from collecting data generated by cookies and related to their use of this website (including their IP address) and from processing this data by downloading and installing a browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking on the link below. The opt-out cookie is set to prevent the collection of user data during future visits to this website: disable Google Analytics. For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Entrusting data processing

The entity processing personal data as part of website hosting, i.e. JUMO GmbH & Co. KG in Germany, has entered into a data processing agreement with Google and has fully implemented the strict requirements of the German data protection authority regarding the use of Google Analytics.

Web Tracking - Google Analytics 4

This website uses the functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses cookies. Cookies are text files that are stored on your computer to enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

• Marketing
• Web Analytics

Technologies used

• Cookies
• Pixel Tags
• Tracking code

Data attributes

• IP address (anonymised)
• Browser information (browser type, referring/exit pages, the files viewed on our site, operating system, date/time stamp, and/or clickstream data)
• Usage Data (views, clicks)

Data collected

This list represents all (personal) data that is collected by or through the use of this service:

• Account data
• Anonymised IP adress
• Bounce rates
• Browser information
• Click path
• Date and time of visit
• Device information
• Downloads
• Duration of visit
• Location information
• Internet service provider
• Mouse movements
• Screen resolution
• Behavioural data
• Referrer URL
• App updates

Legal basis

The legal bases required for data processing are listed below.

• Art. 6(1)(a) GDPR

Location of processing

European Union

Retention period

The data retention period is the time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

• The customer can choose how long Google Analytics stores the data. The maximum data retention period is 26 months.

Transfer to third countries

This service may transfer the collected data to another country. Please note that this service may transfer data outside the EU/EEA and to a country where the required data protection standards do not exist. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, possibly without legal recourse. Below is a list of countries to which data is transferred. This may be for various reasons, such as storage or processing.

• United States of America
• Singapore
• Taiwan
• Chile

Data recipients

• Google Ireland Limited
• Google LLC
• Alphabet Inc.

Data protection officer of processing company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en

Click here to opt out from this processor across all domains https://tools.google.com/dlpage/gaoptout?hl=de

Browser plugin

You can opt out of cookies by configuring the appropriate settings in your browser; however, please note that in this case, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking on the link below. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: disable Google Analytics. For more information on how Google Analytics handles user data, please refer to Google's privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en

Order data processing

We have entered into an agreement with Google for the processing of order data and fully comply with the strict requirements of the German data protection authority regarding the use of Google Analytics.

Google Tag Manager

This is a tag management system used to manage JavaScript and HTML tags used to implement tracking and analytics tools.

Processing company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data purposes

• Managing website tags

Data collected

This list represents all (personal) data that is collected by or through the use of this service.

No personal data is processed. Tag Manager is a cookie-free domain, and does not register any personal data. Google Tag Manager may however trigger other tags which may record data.

• No data collected

Data protection officer of processing company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Further information and opt-out

Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/

Click here to read the privacy policy of the data processor https://www.google.com/intl/de/tagmanager/faq.html

Google Remarketing (Advertisements)

1. Description and scope of data processing

This website uses Google (Ads) Remarketing features to manage target groups for advertising activities. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC. based in the USA.

Google Remarketing analyses user behaviour on our website (e.g. clicks on specific products) in order to assign them to specific advertising target groups and then display relevant advertising messages when they visit other online offers (remarketing or retargeting). In addition, advertising target groups created with Google Remarketing can be linked to Google functions across different devices. In this way, personalised interest-based advertising messages that have been tailored to the user based on their previous usage and browsing behaviour on one device (e.g. mobile phone) can also be displayed on another device of the user (e.g. tablet or computer).

Creating target groups using customer matching

To create target groups, we use, among other things, the customer matching feature within Google Ads remarketing. For this purpose, we provide Google with specific customer data (e.g. email addresses) from our customer lists. If these customers are Google users and are logged into their Google account, they will see relevant advertising messages on the Google network (e.g. on YouTube, Gmail or in the search engine).

The following data is collected during data processing:

• Duration of visit
• IP address
• Pages visited
• Content that the user is interested in
• Use of the website
• Referrer URL
• Advertising ID
• Date and time of visit
• Device information
• Browser information

Use of services from a provider based in a third country

The provider is certified under the EU-US Data Privacy Framework (DPF). For more information on the DPF and data transfers to other third countries, please refer to this data protection notice under "I. General information on data processing – 4. Data transfers to a third country or international organisation".

2. Legal basis for data processing

The legal basis for data processing is the user's consent in accordance with Article 6(1)(a) GDPR – and Section 25(1)(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device fingerprint) within the meaning of the TDDDG.

3. Purpose of data processing

The purpose of data processing is to enable remarketing, advertising and tracking of user activities in order to implement and improve advertising measures aimed at specific target groups.

4. Storage period, right to object, revocation and deletion

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

You have the right to withdraw your consent at any time in accordance with data protection regulations. Withdrawing your consent does not affect the lawfulness of data processing based on consent before its withdrawal. You can withdraw your consent via the consent management function.

Cookies are stored for one year and two months.

If you have a Google account, you can opt out of personalised advertising by clicking on the following link: https://www.google.com/settings/ads/onweb/.

For more information and data protection regulations, please refer to Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Microsoft tools for optimising advertising effectiveness

1. Description and scope of data processing

This website uses various Microsoft tools to record and evaluate user behaviour and then target them with targeted messages.

These are online advertising programmes from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising

Microsoft Advertising enables us to display advertisements on the Bing search engine or on third-party websites if the user enters specific keywords in Bing (keyword targeting). In addition, targeted advertisements may be displayed based on user data available to Microsoft (e.g. location and interest data) (audience targeting). As a website operator, we can evaluate this data quantitatively, for example by analysing which search terms led to our advertisements being displayed and how many advertisements led to relevant clicks. On this website, we use Universal Event Tracking (UET) from Microsoft Advertising. Pseudonymised data is collected to track the actions you take on our websites after clicking on a Microsoft Advertising advert.

UET collects the following data:

• Your IP address (anonymised)
• Device identifiers
• Device and browser settings information
• Microsoft Click ID (stored in a cookie)
• Time spent on the website
• Area of the website you accessed
• Which advertisement led you to the website?
• Keywords clicked

Microsoft (advertisement) Remarketing

Microsoft Advertising Remarketing allows us to reach visitors to our website again with targeted advertising after their visit. This advertising approach is based on the user's previous behaviour on our website and is linked to the functionality of other Microsoft tools.

Processed data:

• Cookie ID or other web identifiers
• Pages visited / product interests
• Duration of visit and interactions
• IP address (truncated if necessary)
• Browser and device type
• Location data

Microsoft conversion tracking

The Microsoft conversion tracking feature enables us to measure the effectiveness of our advertisements. The associated data processing allows us to track the actions taken by visitors to the website after clicking on one of our advertisements during their next visit to that website.

Data processed:

• Cookie ID / device ID
• IP address (truncated if necessary)
• Time of ad click
• Information about the action taken (e.g. purchase, visit to the website)
• Browser and device properties
• Referrer URL

Microsoft – enhanced conversions

Microsoft's enhanced conversions offer the ability to improve conversion tracking with additional information and more accurate conversion recording and evaluation. This allows us to evaluate the effectiveness of our remarketing campaign.

Processed data:

• Conversion tracking data
• Email address (encrypted)
• Telephone number (encrypted)
• First and last name (encrypted)
• Address, if applicable (encrypted)

Microsoft remarketing conversion

Microsoft remarketing conversion allows us to measure whether and how often users acquired through remarketing convert (e.g., purchase, registration, form completion, download).

• Remarketing data
• Information about successful conversions:
• Time
• Type of action (e.g., order, registration)
• Conversion value (e.g. purchase value)

Use of services from a provider based in a third country

Personal data is transferred to a third country (the USA). The provider is certified in accordance with the EU-US Data Privacy Framework (DPF). For more information on the DPF, please refer to this data protection information in section "I. General information on data processing – 4. Transfer of data to a third country or international organisation".

2. Legal basis for data processing

The use of Microsoft tools to optimise advertising effectiveness is based on your consent in accordance with Article 6(1)(a) of the GDPR, and in the case of data transfers to a third country, Article 49(1)(a) of the GDPR – and Section 25(1) sentence 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device fingerprint) within the meaning of the TDDDG.

3. Purpose of data processing

Microsoft tools for optimising advertising effectiveness enable us to display and place targeted advertisements. In addition, data processing is used to evaluate and track user behaviour and our online campaigns. Users' personal data is therefore processed for advertising purposes in order to optimise our online offering and evaluate our advertising campaigns.

4. Storage period, right to object, revocation and deletion

Data provided to us via Microsoft Advertising will be stored by us for a maximum of 14 months and then deleted.

You have the right to withdraw your consent at any time in accordance with data protection regulations. Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. You can withdraw your consent via the consent management function.

5. Conclusion of an order processing agreement

In connection with the data processing described above, data is transferred to and processed by the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. We have concluded a data processing agreement with Microsoft Corporation. This is an agreement required by data protection regulations, which guarantees that Microsoft Corporation processes the personal data of visitors to our website exclusively in accordance with our instructions and data protection regulations (GDPR, BDSG, etc.).

Conversion tracking in Google Ads

1. Description and scope of data processing

This website uses Google Ads Conversion Tracking to measure the effectiveness of Google ads. The associated data processing enables us to track the actions taken by website visitors after clicking on one of our ads during their next visit to this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC. based in the USA.

The following data is collected during data processing:

• Browser language
• Browser type
• Advertisements clicked
• Cookie ID
• Date and time of visit
• IP address (abbreviated)
• Referrer URL
• Network request
• User behaviour

Use of a service provider based in a third country

The provider is certified under the EU-US Data Privacy Framework (DPF). For more information on the DPF and data transfers to other third countries, please refer to this data protection notice under "I. General information on data processing – 4. Data transfers to a third country or international organisation".

Use of Google consent mode

In order to control and manage consents in Google services, we are required to use Google's "consent mode" and send "pings" to Google. The pings sent depend on the consents granted by the user in consent management. Pings are only sent after consent has been given to use a particular Google service.

When using consent mode and sending ping signals, the following information may be transmitted to Google: consents and consent status; functionality-related information (browser header, timestamp, user agent, referrer URL); indication of whether the current or previous page in the user's navigation history on the website contains information about clicking on an advert in the URL (e.g. GCLID/DCLID); a random number generated each time a page is loaded; information about the consent management platform used by the website owner (e.g. developer ID); Google identifiers; IP address.

2. Legal basis for data processing

The legal basis for data processing is the user's consent in accordance with Article 6(1)(a) GDPR – and Section 25(1)(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device fingerprint) within the meaning of the TDDDG.

3. Purpose of data processing

The purpose of data processing is to track conversions, analyse user behaviour, measure and evaluate the effectiveness of advertisements, and, if necessary, adjust advertising campaigns.

4. Storage period, right to object, revocation and deletion

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

Cookies are stored for one year.

You have the right to withdraw your consent at any time in accordance with data protection regulations. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn. You can withdraw your consent via the consent management function.

For more information about Google conversion tracking, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de, and cookie guidelines: https://policies.google.com/technologies/cookies?hl=en. In domains and privacy settings: https://safety.google/privacy/privacy-controls/.

Use of enhanced conversions in Google Ads

We use the enhanced conversion feature offered by Google Ads on our website. This feature allows us to precisely measure the effectiveness of our advertising campaigns by processing data such as your email address, name, telephone number or other information you have provided when using our services.

How does it work?

• This data is collected and hashed (anonymised) before being sent to Google to ensure its security and privacy.
• The data is used solely for the purpose of analysing the effectiveness of our marketing activities and is not shared with other entities.

Your privacy

Google processes data in accordance with applicable legal regulations, including the General Data Protection Regulation (GDPR). For more information on how Google protects your data, please refer to Google's Privacy Policy.

Your rights

You have the right to be informed about the processing of your personal data and to correct, delete or restrict the processing of your personal data. To do so, please contact us at: info.at@jumo.net.

Microsoft Advertising

1. Description and scope of data processing

This website uses Microsoft Advertising to display advertisements. Microsoft Advertising is an online advertising programme from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising enables us to display advertisements on the Bing search engine or on third-party websites if you enter specific keywords in the Bing search engine (keyword targeting). In addition, based on user data available to Microsoft (e.g. location and interest data), targeted advertisements can be displayed (target group targeting). As the website operator, we can analyse this data quantitatively, e.g. by analysing which keywords led to our advertisements being displayed and how many advertisements led to corresponding clicks. On this website, we use Universal Event Tracking (UET) from Microsoft Advertising. For this purpose, pseudonymised data is collected to track user activity on our websites after clicking on an advert in Microsoft Advertising. For this purpose, UET collects the following data:

• your IP address (anonymised)
• device identifiers
• information about device and browser settings
• Microsoft Click ID (stored in a cookie)
• Time spent on the website
• Area of the website that was accessed
• Advertisement through which the user arrived at the website
• Keywords clicked.

Use of services from a provider based in a third country

Personal data is transferred to a third country (the USA). The provider is certified under the EU-US Data Privacy Framework (DPF). For more information on the DPF, please refer to this data protection information in section "I. General information on data processing – 4. Transfer of data to a third country or international organisation".

2. Legal basis for data processing

The use of Microsoft Advertising is based on the user's consent in accordance with Article 6(1)(a) GDPR, and, in the event of a possible transfer to a third country, in accordance with Article 49(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, provided that the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device identification) within the meaning of the TDDDG.

3. Purpose of data processing

Microsoft Advertising enables us to display and publish targeted advertisements. In addition, data processing is used to evaluate and track user behaviour. Personal data is therefore processed for advertising purposes and to optimise our online offering.

4. Storage period, possibility of objection, withdrawal of consent and deletion of data

The data you provide to us via Microsoft Advertising is stored by us for a maximum of 14 months and then deleted.

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent via the consent management tool.

5. Conclusion of a data processing agreement

In connection with the data processing described above, data is transferred to and processed by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. We have concluded a data processing agreement with Microsoft Corporation. This is an agreement required by data protection regulations, which guarantees that Microsoft Corporation processes the personal data of visitors to our website in accordance with our instructions and in compliance with data protection regulations (GDPR, BDSG, etc.).

Google reCAPTCHA

This service protects websites from bots. The service collects and analyses user interactions on the website and generates a score indicating suspicious user behaviour.

Processing company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data purposes

The following list outlines the purposes for which data is collected and processed:

• Protection against bots
• Analytics
• Spam prevention
• Fraud detection

Technologies used

• JavaScript

Data collected

This list contains all (personal) data collected by or through this service.

• Screen resolution
• Date and time of visit
• IP address
• Browser language
• Visitor behaviour
• CSS information
• Answers to questions on the website
• Mouse movements
• Browser plug-ins
• Click path
• User behaviour
• Time spent on the website
• User entries
• Device information
• Geographical location
• Device operating system

Legal basis

The legal bases required for data processing are listed below.

• Article 6(1)(a) of the GDPR

Location of processing

European Union

Retention period

The storage period is the time for which the collected data is stored for processing purposes. The data must be deleted as soon as it is no longer required for the specified processing purposes.

The data will be deleted as soon as it is no longer needed for the purposes of processing.

Data recipients

• Google Ireland Limited
• Google LLC
• Alphabet Inc.

Data protection officer of processing company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en

Using LiveChat / ChatBot

1. Introduction

This Privacy Policy applies to and governs all services and other products, software, and any other online features related to the website and its content ("Services") provided by us.

If you have any questions or comments regarding this Privacy Policy, please contact us at info.at@jumo.net.

We are committed to protecting and respecting your privacy. This Privacy Policy explains the basis on which any personal data we collect from you, or that you provide to us, will be processed by us or on our behalf. Where we determine the purposes and means of processing the personal data you provide through these Services, we are the "controller". Where you determine the purpose or means of processing personal data you provide through these Services, you are the "data controller". We will comply with applicable data protection laws, including the General Data Protection Regulation 2016/679.

We encourage you to read this Privacy Policy carefully, as it contains important information regarding the following:

• What information we may collect about you;
• How we will use the information we collect about you;
• Whether we will disclose your information to anyone else; and
• Your choices and rights regarding the personal information you provide to us.

The Services may contain links to services owned and operated by third parties. We may also use third-party software or products to properly provide the Services. If we do so and transfer any personal data to third parties, you can be assured that the transfer is lawful and secure. These third-party services may have their own privacy policies, and we encourage you to review them. They will govern the use of personal data that you submit or that is collected by cookies and other tracking technologies when you use those services. We are not responsible for the privacy practices of such third-party services, and you use them at your own risk.

We may make changes to this Privacy Policy in the future. You should check this page from time to time to ensure that you are aware of any changes. Where appropriate, we may notify you of such changes.

2. Information we may collect about you

We collect and process the following information, which may include your personal data.

Your first name, last name, email address, telephone number, contact details, device ID, user preferences, as well as all data (including personal data) that you provide to us and information provided by you when using the Service or website.

3. Collection, processing and use of personal data

We store and process your personal data only when you voluntarily provide it to us, e.g. by filling out a contact form or registering for the Service. Your personal data will only be disclosed or otherwise transferred when necessary to perform a contract, provide our Services, or when you have given your prior consent.

As we use the services of Text, Inc., you may be interested in reviewing their privacy policy, available at the following links:

LiveChat® Privacy Policy: https://www.livechat.com/legal/privacy-policy/

ChatBot Privacy Policy: https://www.chatbot.com/privacy-policy/

4. Why we collect information about you - purpose of processing

We will use your information to provide you with our Services in accordance with the terms of use agreed between us. Processing your information in this way is necessary for us to properly provide the Service and ensure that the features work correctly, so that we can provide you with the best possible Service.

5. Cookies and web beacons

We use cookies to make it easier for you to use our website. These cookies are used to store information, including visitor preferences and the pages on the website that the visitor has accessed or visited. This information is used to optimise the user experience by customising the content of our website based on the visitor's browser type and/or other information. Cookies may be rejected by the user, and failure to accept cookies may result in limited functionality.

6. Log files

Each time our website is accessed, user data is transmitted by the respective web browser and stored in log files, so-called server log files. The data sets stored here may include data such as the date and time of access, the name of the website, the IP address, the referrer URL (the original URL from which the user accessed the website), the amount of data transferred, and information about the product and version of the browser used.

7. Geolocation data

If the user consents to geolocation, we may have access to their geolocation data, as we collect and process the IP addresses of all devices using our services. The collection and processing of geolocation data applies to both mobile devices and computers.

8. Children's personal data

We do not collect personal data from persons under the age of 18. If you notice that we are collecting and processing personal data from persons under this age, please contact us. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personal data through websites or Services.

9. Sharing of Data

We will only share your information (including personal data) with third parties as described in this Privacy Policy.

Staff, suppliers or subcontractors: We keep your information confidential, but we may disclose it to our staff, suppliers or subcontractors to the extent that it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on condition that they do not use the information independently and have agreed to protect it.

Required by law: In addition, we may disclose your information to the extent required by law (which may include government and law enforcement authorities); in connection with any legal proceedings or potential legal proceedings; and to establish, exercise or defend our rights.

10. Data Transfer

Your data is securely transmitted using encryption. We secure our website and other systems with technical and organisational measures against loss, destruction, access, alteration or dissemination of your data by unauthorised persons.

11. Your rights

You have the following rights regarding how your personal data is processed.

To submit a request, please inform us by sending an email to info.pl@jumo.net.

a) You have the right to request a copy of your personal data that we process and to correct any inaccuracies.

b) You may request the provision, correction or deletion of your personal data.

c) You may ask us to restrict, stop processing or delete your personal data.

d) You may withdraw your consent to the processing of your data.

e) obtain a copy of your personal data that can be used by another service provider

f) Lodge a complaint with a supervisory authority.

12. Changes to this privacy policy

This Privacy Policy may be updated from time to time. We encourage you to review this website for the latest information on our privacy practices. In the event of any material changes to this Privacy Policy, you will be notified by a notice on the website prior to the change taking effect. If you do not agree to the changes to this Privacy Policy, please discontinue your use of the website and the Services. This Privacy Policy was created with the help of the Privacy Policy Generator.

CallPage

On our website, we use the CallPage service provided by CallPage Sp. z o.o. (Al. Jerozolimskie 81, 02-001 Warsaw, Poland). CallPage enables instant phone calls with visitors to our website, allowing for quick and effective communication and lead generation.

Scope of data

The following personal data may be processed when using CallPage:

• Telephone number
• IP address
• Browser data
• Connection time

Legal basis

Data processing is based on the user's consent, in accordance with Article 6(1)(a) of the GDPR.

Purpose of processing

The data is processed for the following purposes:

• Handling telephone calls with website users
• Generating leads

Data retention period

Personal data is stored for the time necessary to achieve the purpose of processing. Once the purpose has been achieved, the data will be deleted, unless a longer storage period is required by law.

Data recipient

The recipient of personal data is CallPage Sp. z o.o.

Location of processing

The data is processed in Poland. If the data is processed in other countries, the user will be informed separately.

Usercentrics consent management platform

This is a consent management service.

Processing company

Usercentrics GmbH

Rosental 4, 80331 Munich, Germany

Data purposes

• Compliance with legal obligations
• Storage of consent

Technologies used

• Accept Cookies
• Local storage

Data attributes

• Consent "Yes" or "No"
• Log file data (IP (anonymised)

Data collected

This list represents all (personal) data that is collected by or through the use of this service.

• Date and time of visit
• Device information
• Browser information
• Anonymised IP address
• Opt-in and opt-out data

Legal casis

The legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed below.

• Art. 6 para. 1 sentence 1 lit. c GDPR

Location of processing

European Union

Retention period

The certificate of revocation of previously given consent will be stored for a period of three years. On the one hand, storage is based on our responsibility in accordance with Article 5(2) GDPR. 5(2) GDPR. This obliges us to comply with the processing of personal data in accordance with the General Data Protection Regulation. On the other hand, storage is based on the regular limitation period of three years in accordance with Section 195 of the German Civil Code (BGB). This limitation period begins at the end of the year in which the claim arose (Section 199 BGB). Accordingly, the three-year limitation period begins at the end of 31 December and ends three years later on 31 December at midnight.

Data recipients

• Usercentrics GmbH

Data protection officer of processing company

Below you can find the email address of the data protection officer of the processing company.

datenschutz@usercentrics.com

Further information and opt-out

Click here to read the privacy policy of the data processor https://usercentrics.com/privacy-policy/

Use of SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

General note about external links

For informational purposes, our website contains external links to third-party websites, such as YouTube videos, map material from Google Maps, RSS feeds, or images from other websites. We have no control over the content or presentation of external websites operated by third parties. The content of this privacy policy may not apply there. Therefore, please refer to the privacy policy of the respective operator. JUMO GmbH & Co. KG is not responsible for the actions taken by these sites or their content.

General information about external information sources (links)

For informational purposes, our websites may contain links to third-party websites, such as YouTube videos, Google Maps, RSS feeds, or graphics from other websites. We have no influence on the content or design of external websites operated by third parties. The content of this data protection declaration may not apply there. Therefore, please refer to the data protection declarations provided by the respective provider. JUMO is not responsible for the actions resulting from these websites or for their content.

Rights of the data subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis us:

1. Right to information

You can ask the responsible person to confirm whether your personal data is processed by us.

If such processing has taken place, you can request the following information from the responsible person:

(1) The purposes for which the personal data is processed.
(2) The categories of personal data processed.
(3) The recipients or categories of recipients to whom the personal data about you has been or will be disclosed.
(4) The planned duration of the storage of your personal data or, if specific information about this cannot be provided, criteria for determining the storage period.
(5) The existence of a right of rectification or deletion of your personal data, of a right to the restriction of processing by the data controller, or of a right to objection to such processing.
(6) The existence of a right of appeal to a supervisory authority.
(7) All available information about the origin of the data if the personal data is not collected from the data subject.
(8) The existence of automated decision-making, including profiling in accordance with Art. 22 Para. 1 and 4 of GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate guarantees in accordance with Art. 46 of GDPR in connection with the transmission.

2. Right to rectification

You have the right to have your personal data corrected and/or completed by the data controller if the personal data processed concerning you is incorrect or incomplete. JUMO will rectify the data without delay.

3. Right to limitation of processing

You may request that the processing of personal data concerning you be restricted under the following circumstances:

(1) If you dispute the accuracy of your personal data for a period of time that enables the data controller to verify the accuracy of the personal data.
(2) The processing is unlawful and you refuse the deletion of the personal data and instead request that the use of the personal data be restricted.
(3) The data controller no longer needs the personal data for the purposes of processing, but you do need it to assert, exercise, or defend legal claims.
(4) If you have filed an objection to the processing in accordance with Art. 21 Para. 1 of GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.

If the processing of your personal data has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising, or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a member state. If the processing restriction has been restricted according to the above conditions, you will be informed by the data controller before the restriction is lifted.

4. Right to deletion

Deletion Obligation

You may request the data controller to delete your personal data without delay and he/she is obliged to delete this data without delay if one of the following reasons applies:

(1) Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, on which the processing was based in accordance with Art. 6 Para. 1 (a) or Art. 9 Para. 2 (a) of GDPR, and there is no other legal basis for the processing.
(3) You file an objection against the processing in accordance with Art. 21 Para. 1 of GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing in accordance with Art. 21 Para. 2 of GDPR.
(4) Your personal data has been processed unlawfully.
(5) The deletion of your personal data is required to fulfill a legal obligation under European Union law or the law of the member states to which the data controller is subject.
(6) Your personal data has been collected in relation to information society services offered in accordance with Art. 8 Para. 1 of GDPR.

Information to third parties

If we have made your personal data public and are obliged to erase it in accordance with Article 17(1) of the GDPR, we will take reasonable steps, including technical measures, taking into account available technology and implementation costs, to inform controllers processing such personal data that you, as the data subject, have requested that they remove any links to, copies or replications of such personal data.

Exceptions

The right to deletion does not exist insofar as the processing is necessary, for example:

(1) To exercise freedom of expression and information.
(2) To fulfill a legal obligation required for processing under the law of the European Union or of member states to which the data controller is subject or to carry out a task in the public interest or in the exercise of official authority conferred on the data controller.
(3) For reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 (h) and (i) and Art. 9 Para. 3 of GDPR.
(4) For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 Para. 1 of GDPR, insofar as the law referred to under section a) is likely to render impossible or seriously impair the attainment of the objectives of such processing.
(5) To assert, exercise, or defend legal claims.

5. Right to be informed

If you have exercised your right to have the data controller correct, delete, or restrict data processing, he/she is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by the data controller about such recipients.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to JUMO in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from JUMO, provided that

(1) processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and

(2) processing is carried out by automated means.

When exercising your right to data portability, you also have the right to request that we transfer your personal data directly to another controller, if technically feasible. This must not affect the freedoms and rights of others. The right to portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. We will not be allowed to process this personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling,

to the extent that the processing is related to such direct marketing. If you object to the processing of your data for direct marketing purposes, your personal data will no longer be processed for these purposes. Without prejudice to Directive 2002/58/EC, you have the option of exercising your right to object in relation to the use of information society services by means of automated means using technical specifications.

8. Right to withdraw your consent to data protection

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the controller,

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, such decisions shall not be based on special categories of personal data pursuant to

Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures to safeguard your rights and freedoms and your legitimate interests have been implemented.

In the cases referred to in points (1) and (3) above, JUMO implements appropriate measures to safeguard your rights, freedoms and legitimate interests, and at least the right to obtain human intervention on the part of JUMO, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. In Poland, this authority is the President of the Personal Data Protection Office.

Changes to this Privacy Policy

We reserve the right to change our security and data protection regulations if necessary due to technical progress. In such cases, we will also adjust our data protection statements accordingly. Please refer to the current version of our privacy policy each time.

Data controller

The controller of personal data within the meaning of the General Data Protection Regulation and other national data protection regulations of the Member States and other data protection regulations is:

JUMO Meß- und Regelgeräte GmbH
Pfarrgasse 48
1230 Vienna, Austria

Tel: +43 1 61061-0
Fax: +43 1 61061-40
E-Mail: info.at@jumo.net

https://www.jumo.group/at/en/

Data recipients

The recipients of the data, i.e. natural or legal persons, public authorities, entities or other bodies to whom personal data is disclosed, are or may be shipping companies, law firms, tax advisors, credit agencies, debt collection agencies, insurance companies and transport companies.

The recipient of personal data is also JUMO GmbH & Co. KG, based in Fulda, Germany, Moritz-Juchheim-Strasse 1, 36039 Fulda.

Data protection supervisor

If you have any further questions about our data protection information and the processing of personal data, you can contact our representative directly:

DI Dr. Klaus Hense
Pfarrgasse 48
1230 Vienna, Austria

Tel: +43 1 61061-0
E-Mail: info.at@jumo.net
https://www.jumo.group/at/en/