We thank you for your interest in our company as well as our products and services. We would like to ensure that you feel secure when you visit our website, also in regard to the protection of your personal data. Because we take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Compliance with the provisions of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is a matter of course for us. We want you to know what data we collect at which point, and how we use it.

1. Data controller

1.1. Controller details

The controller of personal data within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:

JUMO Meß- und Regelgeräte GmbH
Pfarrgasse 48
1230 Vienna, Austria

Registration number: FN 124393 g

VAT identification number: ATU1506990

1.2. Contact details

Tel: +43 1 61061-0
Fax: +43 1 61061-40
E-Mail: info.at@jumo.net

https://www.jumo.group/at/en/

1.3. Representative of the controller

Contact details of the controller’s representative

If you have any further questions regarding our data protection information and the processing of personal data, you may contact our representative directly:

JUMO Mess- und Regelgeräte GmbH
Pfarrgasse 48
1230 Vienna
Austria

Tel.: +43 1 61061-0
Mail: info.at@jumo.net

2. General information about data processing

2.1. Scope of processing personal data

We collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. As a rule, the collection and use of our users' personal data takes place regularly only with their consent. Exceptions are cases where prior consent cannot be obtained for practical reasons and data processing is permitted by law.

2.2. Legal basis for processing personal data

Where we obtain the data subject’s consent to the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis for processing. Where personal data is processed as necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required in order to take steps at the request of the data subject prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

Where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis. Where processing is necessary for the purposes of the legitimate interests pursued by JUMO or by a third party, and where the interests or fundamental rights and freedoms of the data subject do not override those legitimate interests, Article 6(1)(f) GDPR serves as the legal basis for processing.

2.3. Deletion of data and duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, data may be stored if this has been provided for by the European or national legislator in regulations, statutes, or other provisions to which JUMO is subject. The data will also be blocked or deleted after the expiry of the storage period specified in one of the above ways, unless there is a need for further storage of the data for the conclusion or performance of a contract.

2.4. Data security

We have implemented technical and organisational security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and all third parties involved in the processing of personal data are bound by data protection regulations and are required to treat the data confidentially. Where personal data is collected and processed, information is transmitted in encrypted form in order to prevent misuse by third parties. Our security measures are continuously reviewed in line with technological developments. We also use a secure data connection (HTTPS) to transmit data in the shop area of our website.

2.5. Recipients of data

Recipients of data, i.e. natural or legal persons, public authorities, agencies or other bodies to which personal data is disclosed, are or may include forwarding companies, law firms, tax advisers, credit agencies, debt collection companies, insurance companies and carriers.

JUMO GmbH & Co. KG, with its registered office in Fulda, Germany, Moritz-Juchheim-Strasse 1, 36039 Fulda, is also a recipient of personal data.

3. Data collected automatically when using the website

3.1. Non-personal data collected automatically

When you use our websites, the following data is stored for organisational and technical reasons:

• Information about the type and version of the browser used
• The user's operating system
• The user's internet service provider
• Your IP address
• Date and time of access
• Websites from which the user's system accesses our website
• Websites from which the user's system accesses our website

3.2. User’s IP address

We analyse the technical data anonymously and exclusively for statistical purposes in order to continuously optimise our internet presence and make our website even more attractive. The temporary storage of the IP address by the system is necessary for the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. In addition, we use this data to detect, document and prevent cases of misuse.

4. Cookies and consent management

4.1. What are cookies?

Our website uses cookies. Cookies are text files that are stored in or by your web browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a unique string of characters that allows your browser to be uniquely identified when you return to the website.

4.2. Purposes of using cookies

We use cookies to make our website more user-friendly. Certain elements of our website require the browser used to access the site to be identifiable even after the user changes pages.

We also use cookies on our website that enable us to analyse Internet users’ browsing behaviour. User data collected in this way is pseudonymised by means of technical security measures. As a result, it is no longer possible to assign the data to a specific user. This data will not be stored together with users’ other personal data.

When you visit our website, an information banner informs you that cookies are used for analytical purposes and refers you to this data protection statement. In this context, information is also provided on how the storage of cookies can be prevented in the browser settings. The purpose of technically necessary cookies is to simplify the use of websites for users. Certain functions of our website cannot be provided without cookies. These functions require the browser to be recognised after the user changes pages.

User data collected by technically necessary cookies is not used to create user profiles. Analytical cookies (browser, Java scripts, screen resolution, terminal used, bandwidth, location) are used to improve the quality of our website and its content. By analysing cookies, we learn how the website is used and can therefore continuously optimise our offering.

4.3. Types of cookies used

The following data is stored and transmitted in cookies:

• Items in the shopping basket: the user data entered is stored in the user session until the order is completed.
• Search terms entered
• Frequency of page views
• Use of website functions

We require cookies for the following applications:

• Shopping basket
• Remembering search terms

4.4. Managing cookie settings

Cookies are stored on the user’s computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing your Internet browser settings. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all functions of the website to their full extent.

4.5. Usercentrics Consent Management Platform

This is a consent management service.

Data processing company

Usercentrics GmbH
Rosental 4, 80331 Munich, Germany

Data purposes

• Compliance with legal obligations
• Storage of consent

Technologies used

• Accept cookies
• Local storage

Data attributes

• Consent “Yes” or “No”
• Log file data (IP (anonymised))

Data collected

This list sets out all (personal) data that is collected by or through the use of this service.

• Date and time of visit
• Device information
• Browser information
• Anonymised IP address
• Opt-in and opt-out data

Legal basis

The legal basis for the processing of personal data required under Article 6(1) GDPR is listed below.

• Article 6(1)(c) GDPR

Place of data processing

European Union

Data retention period

Evidence of withdrawal of previously given consent will be retained for a period of three years. On the one hand, retention is based on our accountability obligation pursuant to Article 5(2) GDPR. This requires us to demonstrate compliance with the processing of personal data under the General Data Protection Regulation. On the other hand, retention is based on the regular three-year limitation period pursuant to Section 195 BGB. This limitation period begins at the end of the year in which the claim arose (Section 199 BGB). Accordingly, the three-year limitation period begins at the end of 31 December and ends three years later on 31 December at 24:00.

Data recipients

• Usercentrics GmbH

Data Protection Officer of the data processing company

The email address of the Data Protection Officer of the data processing company can be found below.
datenschutz@usercentrics.com

Further information and opt-out

Click here to read the data processor’s privacy policy: https://usercentrics.com/privacy-policy/

5. Contacting JUMO

5.1. Contact forms

Several contact forms are available on our website and can be used to contact us electronically. If a user chooses this option, the data entered in the input form will be transmitted to us and stored. This data includes:

• Subject
• Name
• Company
• Street
• Postcode
• Town
• Email
• Telephone
• Location
• Your message

At the time the message is sent, the following data is also stored:

• Date and time of dispatch

Your consent to the processing of data is obtained as part of the message submission process, and you are also referred to this data protection statement. Alternatively, you may contact us by email at info.at@jumo.net. In this case, the user’s personal data transmitted by email will be stored. In this context, the data will not be disclosed to third parties. The data is used exclusively to process the correspondence.

The legal basis for data processing is Article 6(1)(a) GDPR if you have given your consent. The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) GDPR. If the purpose of the e-mail contact is to conclude a contract, then the additional legal basis for data processing is Article 6(1)(b) of the GDPR.

The processing of personal data from the input mask serves only to enable us to contact you. In the case of electronic contact, this also constitutes a legitimate interest in processing. Other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

The user may withdraw consent to the processing of personal data at any time; this does not affect the lawfulness of processing carried out prior to withdrawal. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The user may withdraw consent at any time by email, telephone, fax or post. In this case, all personal data stored in the course of contacting us will be deleted.

5.2. Confirmation of contact details and customer information

If you contact us via an online contact form, by email or in person (visit, telephone call, trade fair visit) and provide us with personal data, we will send you a confirmation of the contact in the form of customer information. In this context, the data will not be disclosed to third parties. The data is used exclusively to establish contact. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user may withdraw consent to the processing of personal data at any time; this does not affect the lawfulness of processing carried out prior to withdrawal. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The user may withdraw consent at any time by email, telephone, fax or post. In this case, all personal data stored in the course of contacting us will be deleted.

6. Webinars, conferences and online events

6.1. Webinars

Webinars are used for communication between us and a group of people who register online for a digital conference in order to gather information. When registering for a webinar, the following data is required to support this process:

• First and last name
• Gender
• E-mail address
• Company

In order to offer the "Webinar" service, JUMO relies on the GoToWebinar service offered by Citrix, Citrix Headquarters, 4988 Great America Parkway, Santa Clara, CA 95054, United States. Citrix is responsible for providing this service and processing data. Citrix's privacy policy can be found at: https://www.citrix.com/about/legal/privacy/.

For the purpose of conducting an order-related webinar, we send your email address, last name and first name to Citrix. After the webinar, aggregated statistical data is transmitted to JUMO. If you asked a question during the webinar, we will also receive information relating to your question, such as your first name, last name and email address, so that we can continue processing your enquiry after the webinar. Within this process, we ourselves are responsible for the data stored by JUMO.

Once you have registered to participate in the event, you will receive further information and reminders about the event by email before and after it takes place.

6.2. Audio and video conferences

Data processing

Among other methods, we use online conferencing tools to communicate with our customers. The tools we use are listed in detail below. When you communicate with us via video or audio conferencing over the Internet, your personal data is collected and processed by us as well as by the provider of the respective conferencing tool.

For this purpose, the conferencing tools collect any data that you provide/enter in order to use these tools (email address and/or your telephone number). In addition, the conferencing tools process the duration of the conference, the start and end time of participation in the conference, the number of participants and other “context information” relating to the communication process (metadata).

Furthermore, the tool provider processes all technical data required to handle online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.

Any content exchanged, uploaded or otherwise made available within the tool is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voice messages, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. Further information on data processing by the conferencing tools can be found in the privacy statements of the respective tools listed below this text.

Purpose and legal basis

The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Article 6(1)(b) GDPR). Furthermore, use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6(1)(f) GDPR). Where consent has been obtained, the tools in question are used on the basis of that consent; consent may be withdrawn at any time with effect for the future.

Storage duration

Data acquired directly by us via video and conferencing tools will be deleted from our systems as soon as you request its deletion, withdraw your consent to its storage or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the retention period of your data stored by the operators of conferencing tools for their own purposes. For details, please contact the operators of the conferencing tools directly.

Information on data transfer to the USA

We use online conferencing tools provided by companies based in the USA. When these tools are used, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as the affected person, being able to take legal action. It therefore cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

We currently use the following products for audio and video conferencing:

Data protection notices for online meetings, telephone conferences, and webinars via Microsoft Teams

6.3. Virtual online events

We offer you the opportunity to participate in virtual online events. For this purpose, we use the services and platform of 6Connex. To register for and participate in such events, the following personal data is collected, processed and stored:

Title, first name, last name, company, position, industry, country, postal code, email address.
In addition, the following information may be provided optionally: how you heard about the event and a profile picture.

Your personal data is stored exclusively in data centres located in Germany and, accordingly, in Europe. The retention period is one year. During registration, your consent will be obtained for the processing and use of personal data for marketing and sales purposes as well as for the use of your email address in the chat, with reference to this data protection statement. You may withdraw this consent at any time.

Participants in such events may use a chat function. This function is also available for communication between participants. In addition, participants have the option of using Wonder’s video chat/video meeting function. The tool is not integrated into the 6Connex platform and no data is exchanged between the systems. Registration is not required to use the tool; you only need to choose a name or nickname and grant access to the camera and microphone.

For analytical and statistical purposes, usage data is collected and processed during virtual online events. We use these functions on the basis of our legitimate interest in targeted advertising. The legal basis for processing your personal data is Article 6(1)(a) and, where the conditions are met, Article 6(1)(b) GDPR.

7. Newsletter and marketing communications

7.1. Newsletter

Legal basis for data processing

The legal basis for data processing when registering for our newsletter and evaluating our newsletter (newsletter tracking) is the user's consent (double opt-in) in accordance with Article 6(1)(a) of the GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1)(f) GDPR for the purpose of proving and verifying your consent. For storage for verification purposes and defence against liability claims (storage of revocation), Article 6(1)(f) GDPR applies.

The legal basis for processing all other personal data processed during the registration process, which is provided when registering for our newsletter, is Article 6(1)(1)(f) of the GDPR.

Purpose of data processing

The purpose of collecting the user’s email address is to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address used. The collection of analytical data from newsletter delivery serves to improve and optimise our services.

The double opt-in procedure serves to confirm and verify the user’s consent. Storing the withdrawal of consent is intended to enable us to verify consent previously granted even after it has been withdrawn and thereby avoid liability claims.

Other personal data processed during the sending process is used to prevent misuse of newsletter registration and to ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

Retention period, right to object, withdrawal and erasure

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal may be sent to the data controller by post or email.

We may also store the email addresses of persons who have unsubscribed for up to three years on the basis of our legitimate interest, in order to be able to demonstrate that consent had previously been given even after the subscription has been cancelled.

The newsletter subscription may be cancelled by the respective user at any time. A corresponding link is included in every newsletter. This also enables withdrawal of consent to the storage of personal data collected during the registration process.

It is not possible to separately opt out of newsletter tracking; in this case, the entire subscription must be cancelled.

Newsletter registration

You can subscribe to free newsletters on our website. Depending on the newsletter, the following data from the input form may be transmitted to us during registration.

Mandatory fields: email address, consent-to-contact checkbox, privacy policy/consent checkbox

Voluntary information: title, first name, last name, interests (product areas, industries, service areas)

The following data is also collected during registration:

• IP address of the computer used to access the website
• Date and time of registration

As part of the registration process, the user’s consent to data processing is obtained and reference is made to this Privacy Policy.

The purpose of our newsletter is to send you information that we believe may be of interest to you, to contact you to inform you about our products, services, vacancies and career opportunities, to provide information about current events and useful information, and to invite you to interesting events such as webinars or trade fairs. Depending on the newsletter selected, this may include information about products, industries and services, the JUMO customer magazine, service packages, software, career opportunities and press releases.

The data will be used exclusively for sending the newsletter.

Measurement of open and click rates

On the basis of your consent, we also evaluate user behaviour in connection with the information we send and assign this information to your email address in our newsletter system. Each newsletter sent to you contains pixel-sized files that enable us to evaluate delivery and read confirmations as well as information about the links you clicked in our newsletter. We also store information about which areas of our website you visited. The information collected is used to improve the technical aspects and content of our communications. By creating a personal user profile, we aim to tailor our advertising to your interests and optimise the offers on our website. The measurement of open and click rates, the storage of measurement results in user profiles and their further processing are carried out on the basis of your consent.

Double opt-in procedure

Registration to receive our newsletter always takes place using the double opt-in procedure. After registering on our website, you will receive an email asking you to confirm your registration to receive our newsletter. This confirmation serves as proof that you registered to receive our newsletter using your email address.

7.2. Provision of free materials

Description and scope of data processing

We provide free information on our website. To receive it, you must consent to the use of HubSpot on the website and provide your email address. We also obtain your consent to send you advertising (e.g. in the form of email campaigns) and to create an advertising profile based on your email address and data collected through our website. Targeted advertising contains information that we believe may be of interest to you, informs you about current events and useful information, and invites you to interesting events such as webinars or trade fairs. When obtaining your consent, we refer you to this data protection information.

• IP address of the computer used to access the website
• Date and time of registration

Double opt-in procedure

The provision of free information and the related consent to receive targeted advertising and to create an advertising profile always take place using the double opt-in procedure. After entering your email address on our website, you will receive an email asking you to confirm. This confirmation serves as proof of your consent and your wish to receive the free information at the email address provided.

7.3. Targeted advertising and marketing profiling

Measurement of open and click rates

On the basis of your consent, we also evaluate user behaviour in connection with the information we send and assign this information to your email address in our system. The free information sent to you contains pixel-sized files that enable us to evaluate delivery and read confirmations as well as information about the links you clicked in our communications. We also store information about which areas of our website you visited. The information collected is used to improve the technical aspects and content of our communications. By creating a personal user profile, we aim to tailor our advertising to your interests and optimise the offers on our website. The measurement of open and click rates, the storage of measurement results in user profiles and their further processing are carried out on the basis of your consent.

Legal basis for data processing

The legal basis for processing data for the provision of free information, the transmission of targeted advertising and the creation of advertising profiles is the user’s consent (double opt-in) pursuant to Article 6(1)(1)(a) GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1)(1)(f) GDPR for the purpose of proving and verifying the user’s consent. Where data is stored for verification purposes and to defend against liability claims (storage of withdrawal), Article 6(1)(1)(f) GDPR applies.

The legal basis for processing all other personal data processed in the course of this process and required for providing free content, sending targeted advertising and creating advertising profiles is Article 6(1)(1)(f) GDPR.

Purpose of data processing

The purpose of collecting the email address is to send targeted advertising free of charge and to create an advertising profile. The collection of analytical data from the provision of free information and targeted advertising serves to improve and optimise our offers.

The double opt-in procedure serves to confirm and verify the user’s consent. Storing the withdrawal is intended to enable us to verify consent previously granted even after it has been withdrawn and thereby avoid liability claims.

Other personal data processed during the sending process is used to prevent misuse and to ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

Retention period, right to object, withdrawal and erasure

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

You have the right to withdraw your consent to data processing at any time in accordance with data protection law. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawal may be sent to the data controller by post or email.

We may also store the email addresses of persons who have unsubscribed for up to three years on the basis of our legitimate interest, in order to be able to demonstrate that consent had previously been given even after the subscription has been cancelled.

Receipt of targeted advertising and the creation of advertising profiles may be discontinued by the respective user at any time. A corresponding link is included in every message. This also enables withdrawal of consent to the storage of personal data collected during this process.

It is not possible to separately withdraw consent to newsletter tracking; in this case, the entire subscription must be cancelled.

7.4. Inxmail

Use of the provider’s services

We use the services of INXMAIL to manage and send the newsletter. The provider is Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. We have concluded a data processing agreement with the provider.

8. CRM and marketing automation tools

8.1. HubSpot

Description and scope of data processing

This website uses HubSpot to acquire, analyse and manage potential customers, analyse and track visitor behaviour, and personalise content. The provider is HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA, https://www.hubspot.de/

Further information on the functions of and data processing can be found at https://legal.hubspot.com/dpa.

Legal basis for data processing

The use of HubSpot is based on your consent in accordance with Article 6(1)(a) of the GDPR, in the case of data transfers to a third country, Art. 49(1)(a) GDPR, as well as § 25(1) sentence 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's terminal equipment (e.g. device fingerprint) within the meaning of the TDDDG.

Purpose of data processing

Data processing serves the following purposes: lead generation and customer management in order to improve internal marketing and sales activities.

Retention period, right to object, withdrawal and erasure

The data you provide to us for HubSpot will be stored by us for up to 13 months and then deleted.

You have the right at any time to withdraw your consent in accordance with data protection law or to object to the processing of your data. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Use of a provider based in a third country

Information collected by HubSpot about the use of this website is usually transferred to a server in the USA and stored there. The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

Conclusion of a contract for order processing

In connection with the data processing described above, data is transferred to and processed by the service provider. We have concluded a data processing agreement with HubSpot. This is an agreement required under data protection law which ensures that HubSpot processes the personal data of visitors to our website solely in accordance with our instructions and the applicable data protection regulations (GDPR, BDSG, etc.).

9. Analytics tools and traffic monitoring

9.1. Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called “cookies”. These are text files stored on your computer which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

• Marketing
• Advertising
• Web analytics

Technologies used

• Cookies
• Pixel tags

Data attributes

• IP address (anonymised)
• Browser information (browser type, referring/exit pages, files viewed on our website, operating system, date/time stamp and/or clickstream data)
• Usage data (views, clicks)

Data collected

This list sets out all (personal) data collected by or through the use of this service.

• IP address
• Date and time of visit
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash version
• Location information
• Purchase activity
• Widget interactions

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that in this case you may not be able to use all functions of the website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the collection of user data during future visits to this website: disable Google Analytics. More information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Data processing agreement

The processor of personal data in connection with website hosting, JUMO GmbH & Co. KG in Germany, has concluded a data processing agreement with Google and fully implements the stringent requirements of the German data protection authority regarding the use of Google Analytics.

9.2. Google Analytics 4

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses cookies. Cookies are text files stored on the user’s computer to enable analysis of the user’s use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

• Marketing
• Web analytics

Technologies used

• Cookies
• Pixel tags
• Tracking code

Data attributes

• IP address (anonymised)
• Browser information (browser type, referring/exit pages, files viewed on our website, operating system, date/time stamp and/or clickstream data)
• Usage data (views, clicks)

Data collected

This list sets out all (personal) data collected by or through the use of this service.

• Account data
• Anonymised IP address
• Bounce rate
• Browser information
• Click path
• Date and time of visit
• Device information
• Downloads
• Duration of visit
• Location information
• Internet service provider
• Mouse movements
• Screen resolution
• Behavioural data
• Referrer URL
• App updates

Legal basis

The required legal basis for data processing is listed below.

• Article 6(1), first sentence, point (a) GDPR

Location of processing

European Union

Retention period

The retention period is the period for which the collected data is stored for processing purposes. The data must be deleted as soon as it is no longer required for the stated processing purposes.

• The client can choose how long Google Analytics retains data. The maximum retention period is 26 months.

Transfer of data to third countries

This service may transfer the collected data to another country. Please note that this service may transfer data outside the EU/EEA and to a country that does not provide the required data protection standards. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, potentially without legal remedies. The countries to which data may be transferred are listed below. This may occur for various reasons, such as storage or processing.

• United States of America
• Singapore
• Taiwan
• Chile

Data recipients

• Google Ireland Limited
• Google LLC
• Alphabet Inc.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company. https://support.google.com/policies/contact/general_privacy_form
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains https://tools.google.com/dlpage/gaoptout?hl=en

Browser plugin

You may refuse the use of cookies by configuring the appropriate settings in your browser; however, please note that in this case you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: disable Google Analytics. More information about how Google Analytics handles user data can be found in Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en

Order data processing

We have concluded an agreement with Google for order data processing and fully implement the stringent requirements of the German data protection authority regarding the use of Google Analytics.

9.3. Google Tag Manager

This is a tag management system used to manage JavaScript and HTML tags for implementing tracking and analytics tools.

Processing company

Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data purposes

• Managing website tags

Data collected

This list sets out all (personal) data collected by or through the use of this service.
No personal data is processed. Tag Manager is a cookie-free domain and does not register any personal data. Google Tag Manager may, however, trigger other tags that may record data.

• No data is collected.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

Further information and opt-out

Click here to opt out from this data processor across all domains

https://safety.google/privacy/privacy-controls/

Click here to read the privacy policy of the data processor

https://www.google.com/intl/de/tagmanager/faq.html

9.4. Google reCAPTCHA

This service protects websites against bots. The service collects and analyses user interactions on the website and generates a score indicating suspicious user behaviour.

Processing company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Purposes of data processing

The following list sets out the purposes for which data is collected and processed.

• Protection against bots
• Analytics
• Spam prevention
• Fraud detection

Technologies used

• JavaScript

Data collected

This list contains all (personal) data collected by or through this service.

• Screen resolution
• Date and time of visit
• IP address
• Browser language
• Website visitor behaviour
• CSS information
• Answers to question fields on the website
• Mouse movements
• Browser plugins
• Click path
• User behaviour
• Time spent on the website
• User input
• Device information
• Geographical location
• Device operating system

Legal basis

The legal bases required for data processing are listed below.

• Article 6(1), first sentence, point (a) GDPR

Location of processing

European Union

Retention period

The retention period is the period for which the collected data is stored for processing purposes. The data must be deleted as soon as it is no longer required for the specified processing purposes.

The data will be deleted as soon as it is no longer required for the processing purposes.

Data recipients

• Google Ireland Limited
• Google LLC
• Alphabet Inc.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Click here to read the privacy policy of the data processor

https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

10. Online advertising and remarketing

10.1. Google Ads

10.1.1. Google Ads Remarketing

Description and scope of data processing

This website uses Google (Ads) Remarketing functions to manage target groups for advertising activities. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC, based in the USA.

Google Remarketing analyses user behaviour on our website (e.g. clicks on specific products) in order to assign users to specific advertising target groups and subsequently display suitable advertising messages when users visit other online offerings (remarketing or retargeting). In addition, advertising target groups created using Google Remarketing may be linked to Google’s cross-device functions. In this way, personalised, interest-based advertising messages tailored to the user based on their previous use and browsing behaviour on one device (e.g. a mobile phone) may also be displayed on another of the user’s devices (e.g. a tablet or computer).

Creating target groups using Customer Match

Among other methods, we use the Customer Match function within Google Ads Remarketing to create target groups. For this purpose, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If these customers are Google users and are logged in to their Google account, appropriate advertising messages are displayed to them within the Google network (e.g. on YouTube, Gmail or Google Search).

The following data is collected during processing:

• Duration of visit
• IP address
• Pages visited
• Content the user is interested in
• Website use
• Referrer URL
• Advertising identifier
• Date and time of visit
• Device information
• Browser information

Use of a provider based in a third country

The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF and data transfers to other third countries can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

Legal basis for data processing

The legal basis for data processing is the user’s consent pursuant to Article 6(1), first sentence, point (a) GDPR and Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Purpose of data processing

The purpose of data processing is to enable remarketing, advertising and tracking of user activities in order to implement and improve advertising measures aimed at specific target groups.

Retention period, right to object, withdrawal and erasure

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw the consent you have given via the consent management function.

Cookies are stored for one year and two months.

If you have a Google account, you can object to personalised advertising by clicking the following link: https://www.google.com/settings/ads/onweb/.

Further information and data protection provisions can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=en.

10.1.2. Google Ads Conversion Tracking

Description and scope of data processing

This website uses Google Ads Conversion Tracking to measure the effectiveness of Google advertisements. The associated data processing enables us to track actions taken by website visitors after clicking an advertisement placed by us when they subsequently visit this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC, based in the USA.

The following data is collected during processing:

• Browser language
• Browser type
• Advertisements clicked
• Cookie ID
• Date and time of visit
• IP address (shortened)
• Referrer URL
• Web request
• User behaviour
• Use of a provider based in a third country

The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF and data transfers to other third countries can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

Use of Google Consent Mode

In order to control and manage consent in Google services, we are required to use Google’s so-called “Consent Mode” and transmit so-called “pings” to Google. The pings transmitted depend on the consent choices made by the user in the consent management system. Pings are transmitted only after consent has been given to use the respective Google service.

When Consent Mode is used and ping signals are transmitted, the following information may be sent to Google: consent choices and consent status; function-related information (browser header, timestamp, user agent, referrer URL); an indication of whether the current or previous page in the user’s navigation history on the website contains ad-click information in the URL (e.g. GCLID/DCLID); a random number generated each time the page is loaded; information about the consent management platform used by the website operator (e.g. developer ID); Google identifiers; IP address.

Legal basis for data processing

The legal basis for data processing is the user’s consent pursuant to Article 6(1), first sentence, point (a) GDPR and Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Purpose of data processing

The purpose of data processing is conversion tracking, analysis of user activities, and measurement and evaluation of advertising effectiveness, as well as adjustment of advertising campaigns where necessary.

Retention period, right to object, withdrawal and erasure

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

The cookie retention period is one year.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. You may withdraw the consent you have given via the consent management function.

Further information about Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en, in the cookie guidelines https://policies.google.com/technologies/cookies?hl=en, and in the privacy settings https://safety.google/privacy/privacy-controls/.

10.1.3. Google Ads Enhanced Conversions

On our website, we use the Enhanced Conversions feature offered by Google Ads. This feature enables precise measurement of the effectiveness of our advertising campaigns by processing data such as your email address, first and last name, telephone number or other information that you provided while using our services.

How does it work?

• This data is collected and hashed (anonymised) before being sent to Google in order to ensure its security and protect your privacy.
• The data is used exclusively to analyse the effectiveness of our marketing activities and is not shared with other entities.

Your privacy

Google processes data in accordance with applicable legal regulations, including the General Data Protection Regulation (GDPR). Further information about how Google protects your data can be found in Google’s Privacy Policy.

Your rights

You have the right to information about the processing of your personal data and to have it rectified, erased or its processing restricted. To exercise these rights, please contact us at: info.at@jumo.net.

10.2. Microsoft tools for optimising advertising effectiveness

Description and scope of data processing

This website uses various Microsoft tools to record and evaluate user behaviour and subsequently deliver targeted communications to users.

These are online advertising programmes provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Legal basis for data processing

The use of Microsoft tools to optimise advertising effectiveness is based on your consent pursuant to Article 6(1), first sentence, point (a) GDPR; in the case of a transfer to a third country, Article 49(1)(a) GDPR also applies, as does Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Purpose of data processing

Microsoft tools for optimising advertising effectiveness enable us to display and place targeted advertisements. In addition, the data processing is used to evaluate and track user behaviour and our online campaigns. Users’ personal data is therefore processed for advertising purposes in order to optimise our online offering and evaluate our advertising campaigns.

Retention period, right to object, withdrawal and erasure

Data provided to us via Microsoft Advertising will be stored by us for a maximum of 14 months and then deleted.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw the consent you have given via the consent management function.

Conclusion of a data processing agreement

In connection with the data processing described above, data is transferred to and processed by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. We have concluded a data processing agreement with Microsoft Corporation. This is an agreement required by data protection law which ensures that Microsoft Corporation processes the personal data of visitors to our website solely in accordance with our instructions and the applicable data protection regulations (GDPR, BDSG, etc.).

10.2.1. Microsoft Advertising

To promote our products and services, we use the Microsoft Advertising platform provided by Microsoft Corporation. As part of these activities, we may use Universal Event Tracking (UET), which enables us to monitor the effectiveness of advertising campaigns, analyse user behaviour on our website and conduct remarketing activities.

Microsoft Advertising may process information relating to the use of our website, including IP address, cookie identifiers, device information, web browser information and actions performed by users on the website. This data may be used to evaluate the effectiveness of advertising campaigns, create audience groups and display advertisements matching users’ interests.

The recipient of the data is Microsoft Corporation and, where necessary, other Microsoft group companies and service providers involved in delivering advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

Transfer of data outside the EEA

In connection with the use of Microsoft Advertising services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses, European Commission adequacy decisions or other legally permitted data transfer mechanisms.

Further information:

Microsoft Privacy Statement – Microsoft privacy

10.2.2. Universal Event Tracking (UET)

UET collects the following data:

• Your IP address (anonymised)
• Device identifiers
• Information about device and browser settings
• Microsoft Click ID (stored in a cookie)
• Time spent on the website
• Area of the website accessed
• Which advertisement led you to the website
• Keywords clicked

10.2.3. Microsoft Remarketing

Microsoft Advertising Remarketing enables us to reach visitors to our website again with targeted advertising after their visit. This advertising approach is based on the user’s previous behaviour on our website and is linked to the functionality of other Microsoft tools.

Data processed:

• Cookie ID or other online identifiers
• Pages visited / product interests
• Duration of visit and interactions
• IP address (shortened where appropriate)
• Browser and device type
• Location data

10.2.4. Microsoft Conversion Tracking

Microsoft Conversion Tracking enables us to measure the effectiveness of advertisements. The associated data processing enables us to track actions taken by website visitors after clicking an advertisement placed by us when they subsequently visit this website.

Data processed:

• Cookie ID / device identifier
• IP address (shortened where appropriate)
• Time of ad click
• Information about the action performed (e.g. purchase, page visit)
• Browser and device characteristics
• Referrer URL

10.2.5. Microsoft Enhanced Conversions

Microsoft Enhanced Conversions make it possible to improve conversion tracking using additional information and to record and evaluate conversions more precisely. This allows us to assess the effectiveness of our remarketing campaign.

Data processed:

• Conversion tracking data
• Email address (encrypted)
• Telephone number (encrypted)
• First and last name (encrypted)
• Address, where applicable (encrypted)

10.2.6. Microsoft Remarketing Conversion

Microsoft Remarketing Conversion enables us to measure whether and how often users acquired through remarketing complete a conversion (e.g. purchase, registration, form submission, download).

Remarketing data

Information about a successful conversion:

• Time
• Type of action (e.g. order, registration)
• Conversion value (e.g. purchase value)

Use of a provider based in a third country

Personal data is transferred to a third country (USA). The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

10.3. Meta Ads (Facebook and Instagram)

10.3.1. Meta Pixel

To promote our products and services, we use advertising tools offered by Meta Platforms Ireland Limited, the operator of Facebook and Instagram. As part of these activities, we may use technologies such as Meta Pixel and the Conversions API, which enable us to analyse user activity on our website, measure the effectiveness of advertising campaigns and display advertisements tailored to users’ interests.

10.3.2. Remarketing and audiences

Using these tools, Meta may receive information about actions taken by users on our website, including information about pages visited, time spent on the website, actions performed, IP address, cookie identifiers, and technical data relating to the device and web browser. This information may be used to create audience groups, conduct remarketing activities and optimise advertising campaigns.

The recipient of the data is Meta Platforms Ireland Limited and, to the extent necessary to provide the services, other entities belonging to the Meta group.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.3.3. Joint controllership

With regard to the collection of personal data using Meta Pixel and its transfer to Meta Platforms Ireland Limited, JUMO and Meta Platforms Ireland Limited may be regarded as joint controllers for certain processing operations. Detailed information on data processing by Meta can be found in Meta’s Privacy Policy.

10.3.4. Transfer of data outside the EEA

In connection with the use of Meta services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses or other legally permitted data transfer mechanisms.

Further information:

https://www.facebook.com/privacy/policy/

10.4. LinkedIn Ads

10.4.1. LinkedIn Insight Tag

For marketing and promotional purposes, we use advertising services provided by LinkedIn Ireland Unlimited Company. As part of these activities, we may use the LinkedIn Insight Tag, which enables us to analyse website traffic, measure the effectiveness of advertising campaigns and create audience groups for marketing and remarketing activities.

10.4.2. Analysis of advertising campaigns

The LinkedIn Insight Tag may collect information about a user’s visit to our website, including the IP address, cookie identifiers, information about the device and browser, pages visited and actions performed on the website. This data is used to analyse the effectiveness of advertising campaigns and to better tailor marketing communications to users’ interests.

The recipient of the data is LinkedIn Ireland Unlimited Company and, where necessary, other LinkedIn and Microsoft group entities involved in providing advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.4.3. Transfer of data outside the EEA

In connection with the use of LinkedIn services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards provided for by the GDPR, including Standard Contractual Clauses or other legally permitted data transfer mechanisms.

Further information:

https://www.linkedin.com/legal/privacy-policy

10.5. TikTok Ads

10.5.1. TikTok Pixel

For marketing purposes, we use advertising services provided by TikTok Technology Limited. As part of these activities, we may use TikTok Pixel and other analytics and advertising tools made available by TikTok, which enable us to analyse website traffic, measure conversions and conduct remarketing activities.

10.5.2. Remarketing

TikTok may receive information about users’ interactions with our website, including information about pages visited, actions performed, IP address, cookie identifiers, terminal device and web browser. This information may be used to evaluate the effectiveness of advertising campaigns and to display advertisements tailored to users’ interests.

The recipient of the data is TikTok Technology Limited and affiliated entities involved in providing TikTok advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.5.3. Transfer of data outside the EEA

In connection with the use of TikTok services, personal data may be transferred to countries outside the European Economic Area (EEA). Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses or other legal mechanisms provided for by data protection law.

Further information:

https://www.tiktok.com/legal/privacy-policy

11. Social media and social plugins

11.1. Facebook

Use of Facebook plugins

Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be identified by one of the Facebook logos (white “f” on a blue tile, “Like” button or a “thumbs up” symbol) or are labelled “Facebook Social Plugin”. A list and the appearance of Facebook plugins are available at: http://developers.facebook.com/docs/plugins. When you visit a website containing such a plugin, your browser normally establishes a direct connection to Facebook’s servers and transmits data to Facebook, where it is stored on servers without your consent and without you clicking a button. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. We therefore have no influence on the scope of the data that Facebook collects using this plugin and inform you according to our current level of knowledge: http://www.facebook.com/help/?faq=17512

By activating and integrating the plugins, Facebook receives information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can associate your visit with your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Even if you are not a Facebook user, it is still possible for Facebook to obtain and store your IP address. The purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, can be found on Facebook’s website:

http://www.facebook.com/policy.php

If you are a Facebook user and do not want Facebook to collect data about you via our website and link it to your account data stored by Facebook, you must log out of Facebook before visiting our website.

11.2. Instagram

Our pages include functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. Further information can be found in Instagram’s Privacy Policy: https://instagram.com/about/legal/privacy/

11.3. LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit one of our pages that contains LinkedIn functions, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited our website from your IP address. If you click the LinkedIn “Recommend” button and are logged in to your account, LinkedIn can associate your visit to our website with you and your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how LinkedIn uses it. Further information can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

11.4. X (Twitter)

This website uses buttons of the Twitter service. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be identified by terms such as “Twitter” or “Follow” together with a stylised blue bird. The buttons can be used to share an article or one of our pages on Twitter or to follow the service provider on Twitter. When a user accesses a webpage containing such a button, their browser establishes a direct connection to Twitter’s servers. The content of the Twitter button is transmitted directly from Twitter to the user’s browser. The provider therefore has no influence on the amount of data Twitter collects using this plugin and informs users according to its current level of knowledge. Accordingly, only the user’s IP address and the URL of the respective website are transmitted when the button is used, and only for the purpose of displaying the button. Further information can be found in Twitter’s Privacy Policy at http://twitter.com/privacy. You can change your Twitter privacy settings in your account settings at: https://twitter.com/account/settings.

11.5. Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time you access one of our pages containing XING functions, a connection to XING’s servers is established. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored and user behaviour is not evaluated. Further information on data protection and the XING Share button can be found in XING’s privacy statement at: https://www.xing.com/app/share?op=data_protection.

11.6. YouTube

Our website uses plugins from Google’s YouTube website. This website is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you visited. If you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. Further information about the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=at&gl=en.

12. JUMO Cloud

When using the JUMO Cloud, users’ personal data is processed in accordance with the following data processing agreement “pursuant to Article 28 of the European General Data Protection Regulation”.

JUMO Cloud - Contract for Processing According to Art. 28 GDPR

13. Use of JIVO Chat

Our website uses an omnichannel business messenger. With this service the user can connect with the customer.

Processor: Jivosite, Inc. 1811 Silverside Road, Wilmington, Delaware 19810, United States of America

Data Protection Officer of the company in charge of data processing

Below you can find the e-mail address of the data controller of the company in charge of the processing.

privacy@jivochat.com

Data purpose

This list represents the purposes of data collection and processing.

• Analysis
• Providing service

Technologies used

This list represents all the technologies used by this service to collect data. The technologies used are cookies and pixels placed in your browser.

• Cookies

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

• Anonymous data

Legal basis

The legal bases required for data processing are listed below.

• Art. 6 parr. 1 s. 1 let. of the RGPD

Place of treatment

This is the primary location where the collected data is processed. If data is also processed in other countries, you will be informed separately.

• United States of America

Storage period

The storage period is the period of time the collected data is kept for the purposes of processing. Data must be deleted as soon as they are no longer required for the stated processing purposes.

• The data will be kept for up to two months.

Transfer to third party countries

This service may send the collected data to a different country. Please note that this service may transfer the data outside the EU/EEA and to a country without the required data protection standards. If the data is transferred to the USA, there is a risk that the US authorities may process your data for control and surveillance measures, possibly without legal recourse. Below is a list of countries to which data is transferred. This may be for different reasons, such as storage or processing.

• United States of America

Data recipients

The recipients of the data collected are listed below.

• Jivosite, Inc.

Click here to read the privacy policy of the data processor
https://www.jivochat.com/files/privacy_policy.pdf

14. Use of SalesViewer® Technology

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

15. Links to external websites

For informational purposes, our websites may contain links to third-party websites, such as YouTube videos, Google Maps, RSS feeds or graphics from other websites. We have no influence over the content or appearance of external websites operated by third parties. The content of this data protection statement may not apply there. We therefore ask you to familiarise yourself with the data protection statements provided by the respective provider. JUMO accepts no responsibility for actions resulting from these websites or for their content.

16. Rights of data subjects

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us:

16.1. Right of access

You may ask us to confirm whether your personal data is being processed by us.

Where such processing takes place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom personal data concerning you has been or will be disclosed;

(4) the envisaged period for which the personal data will be stored or, if specific information is not possible, the criteria used to determine the retention period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the data controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) any available information as to the source of the data where the personal data was not collected from you;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request information about the appropriate safeguards referred to in Article 46 GDPR in connection with the transfer.

16.2. Right to rectification

You have the right to rectification and/or completion by the data controller if the personal data concerning you that is being processed is inaccurate or incomplete. JUMO will make the correction without undue delay.

16.3. Right to restriction of processing

You may request restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

(3) the data controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or

(4) if you have objected to processing pursuant to Article 21(1) GDPR, pending verification whether the controller’s legitimate grounds override your grounds.

Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If processing has been restricted in accordance with the above requirements, you will be informed by the controller before the restriction is lifted.

16.4. Right to erasure

Obligation to erase

You may request that we erase your personal data without undue delay, and we are obliged to erase such data without undue delay where one of the following grounds applies:

(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

(2) You withdraw the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing;

(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;

(4) The personal data concerning you has been unlawfully processed;

(5) The personal data must be erased for compliance with a legal obligation;

(6) The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Information to third parties

Where we have made personal data concerning you public and are obliged pursuant to Article 17(1) GDPR to erase it, we will take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copies or replication of, that personal data.

Exceptions

The right to erasure does not apply to the extent that processing is necessary:

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

(3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defence of legal claims.

16.5. Right to information about data recipients

If you have exercised your right to require the controller to rectify or erase personal data or restrict processing, the controller is obliged to notify all recipients to whom the personal data has been disclosed of such rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about those recipients.

16.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to JUMO in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from JUMO, provided that:

(1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and

(2) the processing is carried out by automated means.

In exercising your right to data portability, you also have the right to have personal data transmitted directly by us to another controller, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

16.7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will no longer process such personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes. Without prejudice to Directive 2002/58/EC, you may exercise your right to object in connection with the use of information society services by automated means using technical specifications.

16.8. Right to withdraw consent

You have the right to withdraw your declaration of consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

16.9. Right not to be subject to profiling and automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, such decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2)(a) or (g) GDPR applies and suitable measures have been taken to safeguard your rights and freedoms and your legitimate interests.

In the cases referred to in points (1) and (3) above, JUMO implements suitable measures to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of JUMO, to express your point of view and to contest the decision.

16.10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

17. Changes to this privacy policy

We reserve the right to amend our security and data protection provisions where this becomes necessary due to technological developments. In such cases, we will also adjust our data protection statements accordingly. Please always refer to the current version of our data protection statement.