1. Data controller

1.1. Controller details

The controller of personal data within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, is:

“JUMO” Sp. z o.o., with its registered office in Wrocław at ul. Bierutowska 57-59, 51-317 Wrocław, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS No. 0000113392, REGON: 932045640, NIP: 8992297851, share capital PLN 50,000.

1.2. Contact details

Tel.: +38 (044) 357 12 63
Email: info.ua@jumo.net
https://www.jumo.ua/

1.3. Representative of the controller

Contact details of the controller’s representative

If you have any further questions regarding our data protection information and the processing of personal data, you may contact our representative directly:

Monika Gabrynowicz

Tel.: +48 71 339 32 83;
Fax: +48 71 339 32 80;
Email: monika.gabrynowicz@jumo.net;
JUMO Sp. z o.o.
ul. Bierutowska 57-59, 51-317 Wrocław

2. General information on data processing

2.1. Scope of personal data processing

We collect and use our users’ personal data only to the extent necessary to provide a functional website as well as our content and services. As a rule, our users’ personal data is collected and used only with their consent. An exception applies where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2.2. Legal bases for data processing

Where we obtain the data subject’s consent to the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis for processing. Where personal data is processed as necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required in order to take steps at the request of the data subject prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

Where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis. Where processing is necessary for the purposes of the legitimate interests pursued by JUMO or by a third party, and where the interests or fundamental rights and freedoms of the data subject do not override those legitimate interests, Article 6(1)(f) GDPR serves as the legal basis for processing.

2.3. Data retention period

The data subject’s personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Data may also be stored where this is provided for by European or national legislators in regulations, laws or other provisions to which JUMO is subject. The data will likewise be blocked or deleted once a retention period prescribed in any of the aforementioned ways expires, unless continued storage is necessary for the conclusion or performance of a contract.

2.4. Data security

We have implemented technical and organisational security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and all third parties involved in the processing of personal data are bound by data protection regulations and are required to treat the data confidentially. Where personal data is collected and processed, information is transmitted in encrypted form in order to prevent misuse by third parties. Our security measures are continuously reviewed in line with technological developments. We also use a secure data connection (HTTPS) to transmit data in the shop area of our website.

2.5. Recipients of data

Recipients of data, i.e. natural or legal persons, public authorities, agencies or other bodies to which personal data is disclosed, are or may include forwarding companies, law firms, tax advisers, credit agencies, debt collection companies, insurance companies and carriers.

JUMO GmbH & Co. KG, with its registered office in Fulda, Germany, Moritz-Juchheim-Strasse 1, 36039 Fulda, is also a recipient of personal data.

3. Data collected automatically when using the website

3.1. Non-personal data collected automatically

When you use our websites, the following data is stored for organisational and technical reasons:

• Information about the type and version of browser used

• User’s operating system

• User’s Internet service provider

• Date and time of access

• Websites from which the user’s system accesses our website

• Websites accessed by the user’s system via our website.

3.2. User’s IP address

We analyse technical data anonymously and exclusively for statistical purposes in order to continuously optimise our online presence and make our online offering even more attractive. Temporary storage of the IP address by the system is necessary in order for the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. We also use this data to detect, document and prevent attempted misuse.

4. Cookies and consent management

4.1. What are cookies?

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored in the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

4.2. Purposes of using cookies

We use cookies to make our website more user-friendly. Certain elements of our website require the browser used to access the site to be identifiable even after the user changes pages.

We also use cookies on our website that enable us to analyse Internet users’ browsing behaviour. User data collected in this way is pseudonymised by means of technical security measures. As a result, it is no longer possible to assign the data to a specific user. This data will not be stored together with users’ other personal data.

When you visit our website, an information banner informs you that cookies are used for analytical purposes and refers you to this data protection statement. In this context, information is also provided on how the storage of cookies can be prevented in the browser settings. The purpose of technically necessary cookies is to simplify the use of websites for users. Certain functions of our website cannot be provided without cookies. These functions require the browser to be recognised after the user changes pages.

User data collected by technically necessary cookies is not used to create user profiles. Analytical cookies (browser, Java scripts, screen resolution, terminal used, bandwidth, location) are used to improve the quality of our website and its content. By analysing cookies, we learn how the website is used and can therefore continuously optimise our offering.

4.3. Types of cookies used

The following data is stored and transmitted in cookies:

• Items in the shopping cart: data entered by the user is stored in the user’s session until the order is completed.

• Search terms entered

• Frequency of page views

• Use of website functions

We require cookies for the following applications:

• Shopping cart

• Remembering search terms

4.4. Managing cookie settings

Cookies are stored on the user’s computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing your Internet browser settings. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all functions of the website to their full extent.

4.5. Usercentrics Consent Management Platform

This is a consent management service.

Data processing company

Usercentrics GmbH
Rosental 4, 80331 Munich, Germany

Data purposes

- Compliance with legal obligations
- Storage of consent

Technologies used

- Accept cookies
- Local storage

Data attributes

- Consent “Yes” or “No”
- Log file data (IP (anonymised))

Data collected

This list sets out all (personal) data that is collected by or through the use of this service.
- Date and time of visit
- Device information

- Browser information
- Anonymised IP address
- Opt-in and opt-out data

Legal basis

The legal basis for the processing of personal data required under Article 6(1) GDPR is listed below.
- Article 6(1)(c) GDPR

Place of data processing

European Union

Data retention period

Evidence of withdrawal of previously given consent will be retained for a period of three years. On the one hand, retention is based on our accountability obligation pursuant to Article 5(2) GDPR. This requires us to demonstrate compliance with the processing of personal data under the General Data Protection Regulation. On the other hand, retention is based on the regular three-year limitation period pursuant to Section 195 BGB. This limitation period begins at the end of the year in which the claim arose (Section 199 BGB). Accordingly, the three-year limitation period begins at the end of 31 December and ends three years later on 31 December at 24:00.

Data recipients

- Usercentrics GmbH

Data Protection Officer of the data processing company

The email address of the Data Protection Officer of the data processing company can be found below.
datenschutz@usercentrics.com

Further information and opt-out

Click here to read the data processor’s privacy policy: https://usercentrics.com/privacy-policy/

5. Contacting JUMO

5.1. Contact forms

Several contact forms are available on our website and can be used to contact us electronically. If a user chooses this option, the data entered in the input form will be transmitted to us and stored. This data includes:

• Subject

• Name

• Company

• Street

• Postal code

• City

• Email

• Telephone

• Location

• Your message

At the time the message is sent, the following data is also stored:

• Date and time of sending

Your consent to the processing of data is obtained as part of the message submission process, and you are also referred to this data protection statement. Alternatively, you may contact us by email at info.pl@jumo.net. In this case, the user’s personal data transmitted by email will be stored. In this context, the data will not be disclosed to third parties. The data is used exclusively to process the correspondence.

The legal basis for processing is Article 6(1)(a) GDPR where the user has given consent. The legal basis for processing data transmitted when sending an email is Article 6(1)(f) GDPR. If the purpose of the email contact is to conclude a contract, Article 6(1)(b) GDPR additionally serves as the legal basis for processing.

The processing of personal data from the input form serves solely to enable us to establish contact. In the case of contact by email, this also constitutes the legitimate interest in the processing. Other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The user may withdraw consent to the processing of personal data at any time; this does not affect the lawfulness of processing carried out prior to withdrawal. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The user may withdraw consent at any time by email, telephone, fax or post. In this case, all personal data stored in the course of contacting us will be deleted.

5.2. Confirmation of contact details and customer information

If you contact us via an online contact form, by email or in person (visit, telephone call, trade fair visit) and provide us with personal data, we will send you a confirmation of the contact in the form of customer information. In this context, the data will not be disclosed to third parties. The data is used exclusively to establish contact. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user may withdraw consent to the processing of personal data at any time; this does not affect the lawfulness of processing carried out prior to withdrawal. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The user may withdraw consent at any time by email, telephone, fax or post. In this case, all personal data stored in the course of contacting us will be deleted.

5.3. CallPage

On our website, we use the CallPage service provided by CallPage Sp. z o.o. (Al. Jerozolimskie 81, 02-001 Warsaw, Poland). CallPage enables instant telephone connections with visitors to our website, allowing for fast and efficient communication and lead generation.

Scope of data

The following personal data may be processed when using CallPage:

• Telephone number

• IP address

• Browser data

• Call duration

Legal basis

The data is processed on the basis of the user’s consent pursuant to Article 6(1)(a) GDPR.

Purpose of processing

The data is processed for the following purposes:

• Handling telephone calls with website users

• Lead generation

Data retention period

Personal data is stored for the period necessary to fulfil the purpose of processing. Once that purpose has been fulfilled, the data will be deleted unless a longer retention period is required by law.

Data recipient

The recipient of the personal data is CallPage Sp. z o.o.

Location of processing

The data is processed in Poland. If data is processed in other countries, the user will be informed separately.

6. Webinars, conferences and online events

6.1. Webinars

Webinars are used for communication between us and a group of people who register online for a digital conference in order to obtain information. When registering for a webinar, the following data is required to support this process:

• First and last name,

• Gender,

• Email address,

• Company,

In order to provide the “Webinar” service, JUMO uses the GoToWebinar service offered by Citrix, Citrix Headquarters, 4988 Great America Parkway, Santa Clara, CA 95054, United States. Citrix is responsible for providing this service and for processing the data. Citrix’s privacy policy is available at: http://www.citrixonline.com/collaboration/privacy_policy_popup_en.

For the purpose of conducting an order-related webinar, we send your email address, last name and first name to Citrix. After the webinar, aggregated statistical data is transmitted to JUMO. If you asked a question during the webinar, we will also receive information relating to your question, such as your first name, last name and email address, so that we can continue processing your enquiry after the webinar. Within this process, we ourselves are responsible for the data stored by JUMO.

Once you have registered to participate in the event, you will receive further information and reminders about the event by email before and after it takes place.

6.2. Audio and video conferences

Data processing

Among other methods, we use online conferencing tools to communicate with our customers. The tools we use are listed in detail below. When you communicate with us via video or audio conferencing over the Internet, your personal data is collected and processed by us as well as by the provider of the respective conferencing tool.

For this purpose, the conferencing tools collect any data that you provide/enter in order to use these tools (email address and/or your telephone number). In addition, the conferencing tools process the duration of the conference, the start and end time of participation in the conference, the number of participants and other “context information” relating to the communication process (metadata).

Furthermore, the tool provider processes all technical data required to handle online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.

Any content exchanged, uploaded or otherwise made available within the tool is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voice messages, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. Further information on data processing by the conferencing tools can be found in the privacy statements of the respective tools listed below this text.

Purpose and legal basis

The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Article 6(1)(b) GDPR). Furthermore, use of the tools serves to generally simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6(1)(f) GDPR). Where consent has been obtained, the tools in question are used on the basis of that consent; consent may be withdrawn at any time with effect for the future.

Storage duration

Data acquired directly by us via video and conferencing tools will be deleted from our systems as soon as you request its deletion, withdraw your consent to its storage or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the retention period of your data stored by the operators of conferencing tools for their own purposes. For details, please contact the operators of the conferencing tools directly.

Information on data transfers to the USA

We use online conferencing tools provided by companies based in the USA. When these tools are used, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you, as the affected person, being able to take legal action. It therefore cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

We currently use the following products for audio and video conferencing:

Data protection information for online meetings, telephone conferences and webinars via Microsoft Teams.

6.3. Virtual online events

We offer you the opportunity to participate in virtual online events. For this purpose, we use the services and platform of 6Connex. To register for and participate in such events, the following personal data is collected, processed and stored:

Title, first name, last name, company, position, industry, country, postal code, email address.
In addition, the following information may be provided optionally: how you heard about the event and a profile picture.

Your personal data is stored exclusively in data centres located in Germany and, accordingly, in Europe. The retention period is one year. During registration, your consent will be obtained for the processing and use of personal data for marketing and sales purposes as well as for the use of your email address in the chat, with reference to this data protection statement. You may withdraw this consent at any time.

Participants in such events may use a chat function. This function is also available for communication between participants. In addition, participants have the option of using Wonder’s video chat/video meeting function. The tool is not integrated into the 6Connex platform and no data is exchanged between the systems. Registration is not required to use the tool; you only need to choose a name or nickname and grant access to the camera and microphone.

For analytical and statistical purposes, usage data is collected and processed during virtual online events. We use these functions on the basis of our legitimate interest in targeted advertising. The legal basis for processing your personal data is Article 6(1)(a) and, where the conditions are met, Article 6(1)(b) GDPR.

7. Newsletter and marketing communications

7.1. Newsletter

Legal basis for data processing

The legal basis for processing data when registering for our newsletter and evaluating our newsletter (newsletter tracking) is the user’s consent (double opt-in) pursuant to Article 6(1), first sentence, point (a) GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1), first sentence, point (f) GDPR for the purpose of proving and verifying the user’s consent. Where data is stored for verification purposes and to defend against liability claims (storage of withdrawal), Article 6(1), first sentence, point (f) GDPR applies.

The legal basis for processing all other personal data processed during the registration process and transmitted when registering for our newsletter is Article 6(1), first sentence, point (f) GDPR.

Purpose of data processing

The purpose of collecting the user’s email address is to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address used. The collection of analytical data from newsletter delivery serves to improve and optimise our services.

The double opt-in procedure serves to confirm and verify the user’s consent. Storing the withdrawal of consent is intended to enable us to verify consent previously granted even after it has been withdrawn and thereby avoid liability claims.

Other personal data processed during the sending process is used to prevent misuse of newsletter registration and to ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

Retention period, right to object, withdrawal and erasure

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal may be sent to the data controller by post or email.

We may also store the email addresses of persons who have unsubscribed for up to three years on the basis of our legitimate interest, in order to be able to demonstrate that consent had previously been given even after the subscription has been cancelled.

The newsletter subscription may be cancelled by the respective user at any time. A corresponding link is included in every newsletter. This also enables withdrawal of consent to the storage of personal data collected during the registration process.

It is not possible to separately opt out of newsletter tracking; in this case, the entire subscription must be cancelled.

Newsletter registration

You can subscribe to free newsletters on our website. Depending on the newsletter, the following data from the input form may be transmitted to us during registration.

Mandatory fields: email address, consent-to-contact checkbox, privacy policy / consent checkbox

Voluntary information: title, first name, last name, interests (product areas, industries, service areas)

The following data is also collected during registration:

• IP address of the computer used to access the website

• Date and time of registration

As part of the registration process, the user’s consent to data processing is obtained and reference is made to this Privacy Policy.

The purpose of our newsletter is to send you information that we believe may be of interest to you, to contact you to inform you about our products, services, vacancies and career opportunities, to provide information about current events and useful information, and to invite you to interesting events such as webinars or trade fairs. Depending on the newsletter selected, this may include information about products, industries and services, the JUMO customer magazine, service packages, software, career opportunities and press releases.

The data will be used exclusively for sending the newsletter.

Measurement of open and click rates

On the basis of your consent, we also evaluate user behaviour in connection with the information we send and assign this information to your email address in our newsletter system. Each newsletter sent to you contains pixel-sized files that enable us to evaluate delivery and read confirmations as well as information about the links you clicked in our newsletter. We also store information about which areas of our website you visited. The information collected is used to improve the technical aspects and content of our communications. By creating a personal user profile, we aim to tailor our advertising to your interests and optimise the offers on our website. The measurement of open and click rates, the storage of measurement results in user profiles and their further processing are carried out on the basis of your consent.

Double opt-in procedure

Registration to receive our newsletter always takes place using the double opt-in procedure. After registering on our website, you will receive an email asking you to confirm your registration to receive our newsletter. This confirmation serves as proof that you registered to receive our newsletter using your email address.

7.2. Provision of free materials

Description and scope of data processing

We provide free information on our website. To receive it, you must consent to the use of HubSpot on the website and provide your email address. We also obtain your consent to send you advertising (e.g. in the form of email campaigns) and to create an advertising profile based on your email address and data collected through our website. Targeted advertising contains information that we believe may be of interest to you, informs you about current events and useful information, and invites you to interesting events such as webinars or trade fairs. When obtaining your consent, we refer you to this data protection information.

• IP address of the computer used to access the website

• Date and time of registration

Double opt-in procedure

The provision of free information and the related consent to receive targeted advertising and to create an advertising profile always take place using the double opt-in procedure. After entering your email address on our website, you will receive an email asking you to confirm. This confirmation serves as proof of your consent and your wish to receive the free information at the email address provided.

7.3. Targeted advertising and marketing profiling

Measurement of open and click rates

On the basis of your consent, we also evaluate user behaviour in connection with the information we send and assign this information to your email address in our system. The free information sent to you contains pixel-sized files that enable us to evaluate delivery and read confirmations as well as information about the links you clicked in our communications. We also store information about which areas of our website you visited. The information collected is used to improve the technical aspects and content of our communications. By creating a personal user profile, we aim to tailor our advertising to your interests and optimise the offers on our website. The measurement of open and click rates, the storage of measurement results in user profiles and their further processing are carried out on the basis of your consent.

Legal basis for data processing

The legal basis for processing data for the provision of free information, the transmission of targeted advertising and the creation of advertising profiles is the user’s consent (double opt-in) pursuant to Article 6(1), first sentence, point (a) GDPR. The legal basis for implementing the double opt-in procedure is Article 6(1), first sentence, point (f) GDPR for the purpose of proving and verifying the user’s consent. Where data is stored for verification purposes and to defend against liability claims (storage of withdrawal), Article 6(1), first sentence, point (f) GDPR applies.

The legal basis for processing all other personal data processed in the course of this process and required for providing free content, sending targeted advertising and creating advertising profiles is Article 6(1), first sentence, point (f) GDPR.

Purpose of data processing

The purpose of collecting the email address is to send targeted advertising free of charge and to create an advertising profile. The collection of analytical data from the provision of free information and targeted advertising serves to improve and optimise our offers.

The double opt-in procedure serves to confirm and verify the user’s consent. Storing the withdrawal is intended to enable us to verify consent previously granted even after it has been withdrawn and thereby avoid liability claims.

Other personal data processed during the sending process is used to prevent misuse and to ensure the security of our IT systems. Our legitimate interests also lie in these purposes.

Retention period, right to object, withdrawal and erasure

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

You have the right to withdraw your consent to data processing at any time in accordance with data protection law. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawal may be sent to the data controller by post or email.

We may also store the email addresses of persons who have unsubscribed for up to three years on the basis of our legitimate interest, in order to be able to demonstrate that consent had previously been given even after the subscription has been cancelled.

Receipt of targeted advertising and the creation of advertising profiles may be discontinued by the respective user at any time. A corresponding link is included in every message. This also enables withdrawal of consent to the storage of personal data collected during this process.

It is not possible to separately withdraw consent to newsletter tracking; in this case, the entire subscription must be cancelled.

7.4. Inxmail

Use of the provider’s services

We use the services of INXMAIL to manage and send the newsletter. The provider is Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. We have concluded a data processing agreement with the provider.

8. CRM and marketing automation tools

8.1. HubSpot

1. Description and scope of data processing

This website uses HubSpot to acquire, analyse and manage leads, to analyse and track visitor behaviour, and to personalise content. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA, https://www.hubspot.de/

Further information about the functions and data processing can be found at https://legal.hubspot.com/dpa.

2. Legal basis for data processing

The use of HubSpot is based on your consent pursuant to Article 6(1), first sentence, point (a) GDPR; in the case of a transfer to a third country, Article 49(1)(a) GDPR also applies, as does Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

3. Purpose of data processing

Data processing serves the following purposes: lead generation and customer management in order to improve internal marketing and sales activities.

4. Retention period, right to object, withdrawal and erasure

The data you provide to us for HubSpot will be stored by us for up to 13 months and then deleted.

You have the right at any time to withdraw your consent in accordance with data protection law or to object to the processing of your data. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Use of a provider based in a third country

Information collected by HubSpot about the use of this website is usually transferred to a server in the USA and stored there. The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

5. Conclusion of a data processing agreement

In connection with the data processing described above, data is transferred to and processed by the service provider. We have concluded a data processing agreement with HubSpot. This is an agreement required under data protection law which ensures that HubSpot processes the personal data of visitors to our website solely in accordance with our instructions and the applicable data protection regulations (GDPR, BDSG, etc.).

9. Analytics tools and traffic monitoring

9.1. Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called “cookies”. These are text files stored on your computer which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

- Marketing
- Advertising
- Web analytics

Technologies used

- Cookies
- Pixel tags

Data attributes

- IP address (anonymised)
- Browser information (browser type, referring/exit pages, files viewed on our website, operating system, date/time stamp and/or clickstream data)
- Usage data (views, clicks)

Data collected

This list sets out all (personal) data collected by or through the use of this service.
- IP address
- Date and time of visit
- Usage data
- Click path
- App updates
- Browser information
- Device information
- JavaScript support
- Pages visited
- Referrer URL
- Downloads
- Flash version
- Location information
- Purchase activity
- Widget interactions

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that in this case you may not be able to use all functions of the website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=pl

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the collection of user data during future visits to this website: disable Google Analytics. More information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=pl

Data processing agreement

The processor of personal data in connection with website hosting, JUMO GmbH & Co. KG in Germany, has concluded a data processing agreement with Google and fully implements the stringent requirements of the German data protection authority regarding the use of Google Analytics.

9.2. Google Analytics 4

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses cookies. Cookies are text files stored on the user’s computer to enable analysis of the user’s use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there.

Data purposes

- Marketing
- Web analytics

Technologies used

- Cookies
- Pixel tags
- Tracking code

Data attributes

- IP address (anonymised)
- Browser information (browser type, referring/exit pages, files viewed on our website, operating system, date/time stamp and/or clickstream data)
- Usage data (views, clicks)

Data collected

This list sets out all (personal) data collected by or through the use of this service.
- Account data
- Anonymised IP address
- Bounce rate
- Browser information
- Click path
- Date and time of visit
- Device information
- Downloads
- Duration of visit
- Location information
- Internet service provider
- Mouse movements
- Screen resolution
- Behavioural data
- Referrer URL
- App updates

Legal basis

The required legal basis for data processing is listed below.
- Article 6(1), first sentence, point (a) GDPR

Location of processing

European Union

Retention period

The retention period is the period for which the collected data is stored for processing purposes. The data must be deleted as soon as it is no longer required for the stated processing purposes.
- The client can choose how long Google Analytics retains data. The maximum retention period is 26 months.

Transfer of data to third countries

This service may transfer the collected data to another country. Please note that this service may transfer data outside the EU/EEA and to a country that does not provide the required data protection standards. If data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, potentially without legal remedies. The countries to which data may be transferred are listed below. This may occur for various reasons, such as storage or processing.
- United States of America
- Singapore
- Taiwan
- Chile

Data recipients

- Google Ireland Limited
- Google LLC
- Alphabet Inc.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company. https://support.google.com/policies/contact/general_privacy_form
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains https://tools.google.com/dlpage/gaoptout?hl=de

Browser plugin

You may refuse the use of cookies by configuring the appropriate settings in your browser; however, please note that in this case you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: disable Google Analytics. More information about how Google Analytics handles user data can be found in Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en

Order data processing

We have concluded an agreement with Google for order data processing and fully implement the stringent requirements of the German data protection authority regarding the use of Google Analytics.

9.3. Google Tag Manager

This is a tag management system used to manage JavaScript and HTML tags for implementing tracking and analytics tools.

Processing company

Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data purposes

- Managing website tags

Data collected

This list sets out all (personal) data collected by or through the use of this service.
No personal data is processed. Tag Manager is a cookie-free domain and does not register any personal data. Google Tag Manager may, however, trigger other tags that may record data.
- No data is collected.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

Further information and opt-out

Click here to opt out from this data processor across all domains https://safety.google/privacy/privacy-controls/
Click here to read the privacy policy of the data processor https://www.google.com/intl/de/tagmanager/faq.html

9.4. Google reCAPTCHA

This service protects websites against bots. The service collects and analyses user interactions on the website and generates a score indicating suspicious user behaviour.

Processing company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Purposes of data processing

The following list sets out the purposes for which data is collected and processed.

• Protection against bots

• Analytics

• Spam prevention

• Fraud detection

Technologies used

• JavaScript

Data collected

This list contains all (personal) data collected by or through this service.

• Screen resolution

• Date and time of visit

• IP address

• Browser language

• Website visitor behaviour

• CSS information

• Answers to question fields on the website

• Mouse movements

• Browser plugins

• Click path

• User behaviour

• Time spent on the website

• User input

• Device information

• Geographical location

• Device operating system

Legal basis

The legal bases required for data processing are listed below.

• Article 6(1), first sentence, point (a) GDPR

Location of processing

European Union

Retention period

The retention period is the period for which the collected data is stored for processing purposes. The data must be deleted as soon as it is no longer required for the specified processing purposes.

The data will be deleted as soon as it is no longer required for the processing purposes.

Data recipients

• Google Ireland Limited

• Google LLC

• Alphabet Inc.

Data Protection Officer of the processing company

Below you can find the contact address of the Data Protection Officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Click here to read the privacy policy of the data processor

https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

10. Online advertising and remarketing

10.1. Google Ads

10.1.1. Google Ads Remarketing

1. Description and scope of data processing

This website uses Google (Ads) Remarketing functions to manage target groups for advertising activities. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC, based in the USA.

Google Remarketing analyses user behaviour on our website (e.g. clicks on specific products) in order to assign users to specific advertising target groups and subsequently display suitable advertising messages when users visit other online offerings (remarketing or retargeting). In addition, advertising target groups created using Google Remarketing may be linked to Google’s cross-device functions. In this way, personalised, interest-based advertising messages tailored to the user based on their previous use and browsing behaviour on one device (e.g. a mobile phone) may also be displayed on another of the user’s devices (e.g. a tablet or computer).

Creating target groups using Customer Match

Among other methods, we use the Customer Match function within Google Ads Remarketing to create target groups. For this purpose, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If these customers are Google users and are logged in to their Google account, appropriate advertising messages are displayed to them within the Google network (e.g. on YouTube, Gmail or Google Search).

The following data is collected during processing:

• Duration of visit

• IP address

• Pages visited

• Content the user is interested in

• Website use

• Referrer URL

• Advertising identifier

• Date and time of visit

• Device information

• Browser information

Use of a provider based in a third country

The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF and data transfers to other third countries can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

2. Legal basis for data processing

The legal basis for data processing is the user’s consent pursuant to Article 6(1), first sentence, point (a) GDPR and Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

3. Purpose of data processing

The purpose of data processing is to enable remarketing, advertising and tracking of user activities in order to implement and improve advertising measures aimed at specific target groups.

4. Retention period, right to object, withdrawal and erasure

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw the consent you have given via the consent management function.

Cookies are stored for one year and two months.

If you have a Google account, you can object to personalised advertising by clicking the following link: https://www.google.com/settings/ads/onweb/.

Further information and data protection provisions can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

10.1.2. Google Ads Conversion Tracking

1. Description and scope of data processing

This website uses Google Ads Conversion Tracking to measure the effectiveness of Google advertisements. The associated data processing enables us to track actions taken by website visitors after clicking an advertisement placed by us when they subsequently visit this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google LLC, based in the USA.

The following data is collected during processing:

• Browser language

• Browser type

• Advertisements clicked

• Cookie ID

• Date and time of visit

• IP address (shortened)

• Referrer URL

• Web request

• User behaviour

• Use of a provider based in a third country

The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF and data transfers to other third countries can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

Use of Google Consent Mode

In order to control and manage consent in Google services, we are required to use Google’s so-called “Consent Mode” and transmit so-called “pings” to Google. The pings transmitted depend on the consent choices made by the user in the consent management system. Pings are transmitted only after consent has been given to use the respective Google service.

When Consent Mode is used and ping signals are transmitted, the following information may be sent to Google: consent choices and consent status; function-related information (browser header, timestamp, user agent, referrer URL); an indication of whether the current or previous page in the user’s navigation history on the website contains ad-click information in the URL (e.g. GCLID/DCLID); a random number generated each time the page is loaded; information about the consent management platform used by the website operator (e.g. developer ID); Google identifiers; IP address.

2. Legal basis for data processing

The legal basis for data processing is the user’s consent pursuant to Article 6(1), first sentence, point (a) GDPR and Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

3. Purpose of data processing

The purpose of data processing is conversion tracking, analysis of user activities, and measurement and evaluation of advertising effectiveness, as well as adjustment of advertising campaigns where necessary.

4. Retention period, right to object, withdrawal and erasure

Your personal data will be stored for as long as necessary to fulfil the purposes described above or as required by law.

The cookie retention period is one year.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. You may withdraw the consent you have given via the consent management function.

Further information about Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de, in the cookie guidelines https://policies.google.com/technologies/cookies?hl=en, and in the privacy settings https://safety.google/privacy/privacy-controls/.

10.1.3. Google Ads Enhanced Conversions

On our website, we use the Enhanced Conversions feature offered by Google Ads. This feature enables precise measurement of the effectiveness of our advertising campaigns by processing data such as your email address, first and last name, telephone number or other information that you provided while using our services.

How does it work?

• This data is collected and hashed (anonymised) before being sent to Google in order to ensure its security and protect your privacy.

• The data is used exclusively to analyse the effectiveness of our marketing activities and is not shared with other entities.

Your privacy

Google processes data in accordance with applicable legal regulations, including the General Data Protection Regulation (GDPR). Further information about how Google protects your data can be found in Google’s Privacy Policy.

Your rights

You have the right to information about the processing of your personal data and to have it rectified, erased or its processing restricted. To exercise these rights, please contact us at: info.pl@jumo.net.

10.2. Microsoft tools for optimising advertising effectiveness

1. Description and scope of data processing

This website uses various Microsoft tools to record and evaluate user behaviour and subsequently deliver targeted communications to users.

These are online advertising programmes provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

2. Legal basis for data processing

The use of Microsoft tools to optimise advertising effectiveness is based on your consent pursuant to Article 6(1), first sentence, point (a) GDPR; in the case of a transfer to a third country, Article 49(1)(a) GDPR also applies, as does Section 25(1), first sentence, TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

3. Purpose of data processing

Microsoft tools for optimising advertising effectiveness enable us to display and place targeted advertisements. In addition, the data processing is used to evaluate and track user behaviour and our online campaigns. Users’ personal data is therefore processed for advertising purposes in order to optimise our online offering and evaluate our advertising campaigns.

4. Retention period, right to object, withdrawal and erasure

Data provided to us via Microsoft Advertising will be stored by us for a maximum of 14 months and then deleted.

You have the right to withdraw your consent at any time in accordance with data protection law. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw the consent you have given via the consent management function.

5. Conclusion of a data processing agreement

In connection with the data processing described above, data is transferred to and processed by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. We have concluded a data processing agreement with Microsoft Corporation. This is an agreement required by data protection law which ensures that Microsoft Corporation processes the personal data of visitors to our website solely in accordance with our instructions and the applicable data protection regulations (GDPR, BDSG, etc.).

10.2.1. Microsoft Advertising

To promote our products and services, we use the Microsoft Advertising platform provided by Microsoft Corporation. As part of these activities, we may use Universal Event Tracking (UET), which enables us to monitor the effectiveness of advertising campaigns, analyse user behaviour on our website and conduct remarketing activities.

Microsoft Advertising may process information relating to the use of our website, including IP address, cookie identifiers, device information, web browser information and actions performed by users on the website. This data may be used to evaluate the effectiveness of advertising campaigns, create audience groups and display advertisements matching users’ interests.

The recipient of the data is Microsoft Corporation and, where necessary, other Microsoft group companies and service providers involved in delivering advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

Transfer of data outside the EEA

In connection with the use of Microsoft Advertising services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses, European Commission adequacy decisions or other legally permitted data transfer mechanisms.

Further information:

https://privacy.microsoft.com/pl-pl/privacystatement

10.2.2. Universal Event Tracking (UET)

UET collects the following data:

• Your IP address (anonymised)

• Device identifiers

• Information about device and browser settings

• Microsoft Click ID (stored in a cookie)

• Time spent on the website

• Area of the website accessed

• Which advertisement led you to the website

• Keywords clicked

10.2.3. Microsoft Remarketing

Microsoft Advertising Remarketing enables us to reach visitors to our website again with targeted advertising after their visit. This advertising approach is based on the user’s previous behaviour on our website and is linked to the functionality of other Microsoft tools.

Data processed:

• Cookie ID or other online identifiers

• Pages visited / product interests

• Duration of visit and interactions

• IP address (shortened where appropriate)

• Browser and device type

• Location data

10.2.4. Microsoft Conversion Tracking

Microsoft Conversion Tracking enables us to measure the effectiveness of advertisements. The associated data processing enables us to track actions taken by website visitors after clicking an advertisement placed by us when they subsequently visit this website.

Data processed:

• Cookie ID / device identifier

• IP address (shortened where appropriate)

• Time of ad click

• Information about the action performed (e.g. purchase, page visit)

• Browser and device characteristics

• Referrer URL

10.2.5. Microsoft Enhanced Conversions

Microsoft Enhanced Conversions make it possible to improve conversion tracking using additional information and to record and evaluate conversions more precisely. This allows us to assess the effectiveness of our remarketing campaign.

Data processed:

• Conversion tracking data

• Email address (encrypted)

• Telephone number (encrypted)

• First and last name (encrypted)

• Address, where applicable (encrypted)

10.2.6. Microsoft Remarketing Conversion

Microsoft Remarketing Conversion enables us to measure whether and how often users acquired through remarketing complete a conversion (e.g. purchase, registration, form submission, download).

Remarketing data

• Information about a successful conversion:

• Time

• Type of action (e.g. order, registration)

• Conversion value (e.g. purchase value)

Use of a provider based in a third country

Personal data is transferred to a third country (USA). The provider is certified under the “EU-US Data Privacy Framework” (DPF). Further information about the DPF can be found in this data protection information under “I. General information on data processing – 4. Transfer to a third country or international organisation”.

10.3. Meta Ads (Facebook and Instagram)

10.3.1. Meta Pixel

To promote our products and services, we use advertising tools offered by Meta Platforms Ireland Limited, the operator of Facebook and Instagram. As part of these activities, we may use technologies such as Meta Pixel and the Conversions API, which enable us to analyse user activity on our website, measure the effectiveness of advertising campaigns and display advertisements tailored to users’ interests.

10.3.2. Remarketing and audiences

Using these tools, Meta may receive information about actions taken by users on our website, including information about pages visited, time spent on the website, actions performed, IP address, cookie identifiers, and technical data relating to the device and web browser. This information may be used to create audience groups, conduct remarketing activities and optimise advertising campaigns.

The recipient of the data is Meta Platforms Ireland Limited and, to the extent necessary to provide the services, other entities belonging to the Meta group.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.3.3. Joint controllership

With regard to the collection of personal data using Meta Pixel and its transfer to Meta Platforms Ireland Limited, JUMO and Meta Platforms Ireland Limited may be regarded as joint controllers for certain processing operations. Detailed information on data processing by Meta can be found in Meta’s Privacy Policy.

10.3.4. Transfer of data outside the EEA

In connection with the use of Meta services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses or other legally permitted data transfer mechanisms.

Further information:

https://www.facebook.com/privacy/policy/

10.4. LinkedIn Ads

10.4.1. LinkedIn Insight Tag

For marketing and promotional purposes, we use advertising services provided by LinkedIn Ireland Unlimited Company. As part of these activities, we may use the LinkedIn Insight Tag, which enables us to analyse website traffic, measure the effectiveness of advertising campaigns and create audience groups for marketing and remarketing activities.

10.4.2. Analysis of advertising campaigns

The LinkedIn Insight Tag may collect information about a user’s visit to our website, including the IP address, cookie identifiers, information about the device and browser, pages visited and actions performed on the website. This data is used to analyse the effectiveness of advertising campaigns and to better tailor marketing communications to users’ interests.

The recipient of the data is LinkedIn Ireland Unlimited Company and, where necessary, other LinkedIn and Microsoft group entities involved in providing advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.4.3. Transfer of data outside the EEA

In connection with the use of LinkedIn services, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States. Data transfers are carried out using appropriate safeguards provided for by the GDPR, including Standard Contractual Clauses or other legally permitted data transfer mechanisms.

Further information:

https://www.linkedin.com/legal/privacy-policy

10.5. TikTok Ads

10.5.1. TikTok Pixel

For marketing purposes, we use advertising services provided by TikTok Technology Limited. As part of these activities, we may use TikTok Pixel and other analytics and advertising tools made available by TikTok, which enable us to analyse website traffic, measure conversions and conduct remarketing activities.

10.5.2. Remarketing

TikTok may receive information about users’ interactions with our website, including information about pages visited, actions performed, IP address, cookie identifiers, terminal device and web browser. This information may be used to evaluate the effectiveness of advertising campaigns and to display advertisements tailored to users’ interests.

The recipient of the data is TikTok Technology Limited and affiliated entities involved in providing TikTok advertising and analytics services.

The legal basis for data processing is the user’s consent given via the cookie consent management mechanism pursuant to Article 6(1)(a) GDPR.

10.5.3. Transfer of data outside the EEA

In connection with the use of TikTok services, personal data may be transferred to countries outside the European Economic Area (EEA). Data transfers are carried out using appropriate safeguards required by the GDPR, including Standard Contractual Clauses or other legal mechanisms provided for by data protection law.

Further information:

https://www.tiktok.com/legal/privacy-policy

11. Social media and social plugins

11.1. Facebook

Use of Facebook plugins

Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be identified by one of the Facebook logos (white “f” on a blue tile, “Like” button or a “thumbs up” symbol) or are labelled “Facebook Social Plugin”. A list and the appearance of Facebook plugins are available at: http://developers.facebook.com/docs/plugins. When you visit a website containing such a plugin, your browser normally establishes a direct connection to Facebook’s servers and transmits data to Facebook, where it is stored on servers without your consent and without you clicking a button. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. We therefore have no influence on the scope of the data that Facebook collects using this plugin and inform you according to our current level of knowledge:

http://www.facebook.com/help/?faq=17512

By activating and integrating the plugins, Facebook receives information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can associate your visit with your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Even if you are not a Facebook user, it is still possible for Facebook to obtain and store your IP address. The purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, can be found on Facebook’s website:

http://www.facebook.com/policy.php

If you are a Facebook user and do not want Facebook to collect data about you via our website and link it to your account data stored by Facebook, you must log out of Facebook before visiting our website.

11.2. Instagram

Our pages include functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. Further information can be found in Instagram’s Privacy Policy: https://instagram.com/about/legal/privacy/

11.3. LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit one of our pages that contains LinkedIn functions, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited our website from your IP address. If you click the LinkedIn “Recommend” button and are logged in to your account, LinkedIn can associate your visit to our website with you and your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how LinkedIn uses it. Further information can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

11.4. X (Twitter)

This website uses buttons of the Twitter service. These buttons are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be identified by terms such as “Twitter” or “Follow” together with a stylised blue bird. The buttons can be used to share an article or one of our pages on Twitter or to follow the service provider on Twitter. When a user accesses a webpage containing such a button, their browser establishes a direct connection to Twitter’s servers. The content of the Twitter button is transmitted directly from Twitter to the user’s browser. The provider therefore has no influence on the amount of data Twitter collects using this plugin and informs users according to its current level of knowledge. Accordingly, only the user’s IP address and the URL of the respective website are transmitted when the button is used, and only for the purpose of displaying the button. Further information can be found in Twitter’s Privacy Policy at http://twitter.com/privacy. You can change your Twitter privacy settings in your account settings at: https://twitter.com/account/settings.

11.5. Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time you access one of our pages containing XING functions, a connection to XING’s servers is established. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored and user behaviour is not evaluated. Further information on data protection and the XING Share button can be found in XING’s privacy statement at: https://www.xing.com/app/share?op=data_protection.

11.6. YouTube

Our website uses plugins from Google’s YouTube website. This website is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you visited. If you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. Further information about the handling of user data can be found in YouTube’s privacy policy at: https://www.google.pl/intl/pl/policies/privacy

12. Use of LiveChat / ChatBot

Introduction

This Privacy Policy (“Privacy Policy”) applies to the use of the website and products provided by JUMO Sp. z o.o. (also referred to as “we” or “us”). Our registered office is located at Bierutowska 57-59, 51-317 Wrocław, registered under number: 8992297851.

This Privacy Policy applies to and governs all services and other products and software made available by us, as well as any other online features related to the website and its content (the “Services”).

If you have any questions or comments regarding this Privacy Policy, please contact us at info.pl@jumo.net.

We are committed to protecting and respecting users’ privacy. This Privacy Policy explains the basis on which any personal data we collect from users will be processed by us or on our behalf. Where we determine the purposes or means of processing personal data provided by a user through these Services, we are the “controller”. Where the user determines the purposes or means of processing personal data they provide through these Services, the user is the “data controller”. We will comply with all relevant and applicable data protection laws, including the General Data Protection Regulation 2016/679.

We encourage you to read this Privacy Policy carefully, as it contains important information about the following matters:

• What information we may collect about you;

• How we will use the information collected about you;

• Whether we will disclose your data to anyone else; and

• Your choices and rights regarding the personal data you provide to us.

The Services may contain links to services owned and operated by third parties. We may also use third-party software or products in order to provide the Services properly. If we do so and transfer any personal data to third parties, you can be assured that the transfer is lawful and secure. These third-party services may have their own privacy policies, which we recommend that you review. They will govern the use of personal data that you submit or that is collected by cookies and other tracking technologies when you use those services. We accept no responsibility or liability for the privacy practices of such third-party services, and you use them at your own risk.

We may make changes to this Privacy Policy in the future. You should check this page from time to time to make sure that you are aware of any changes. Where appropriate, we may notify you of such changes.

Information we may collect about you

We collect and process the following information, which may include your personal data.
Your first name, last name, email address, telephone number, contact details, device identifier, user preferences, as well as any data (including personal data) that you provide to us and information provided by you when using the Service or website.

Collection, processing and use of personal data

We store and process your personal data only when you provide it to us voluntarily, for example by completing a contact form or registering for the Service. Your personal data will be disclosed or otherwise transferred only where necessary for the performance of a contract, the provision of our Services, or where you have given your prior consent.

Because we use the services of Text, Inc., you may wish to review its privacy policies available at the following links:

LiveChat® Privacy Policy: https://www.livechat.com/legal/privacy-policy/
ChatBot Privacy Policy: https://www.chatbot.com/privacy-policy/

Why we collect information about you – purpose of processing

We will use information about you to provide our Services to you in accordance with the terms of use agreed between us. Processing information in this way is necessary so that we can provide the Service properly and ensure that its functions operate correctly, thereby delivering the best possible Service.

Cookies and web beacons

We use cookies to make it easier for you to use our website. These cookies are used to store information including visitors’ preferences and the pages on the website that a visitor accessed or visited. This information is used to optimise the user experience by customising our website content based on visitors’ browser type and/or other information. Users may reject cookies; failure to accept cookies may result in limited functionality.

Log files

Each time our website is accessed, user data is transmitted by the respective web browser and stored in protocol files known as server log files. The data records stored here may include information such as the date and time of access, the name of the website, IP address, referrer URL (the original URL from which the user reached the website), the amount of data transferred, and product and version information for the browser used.

Geolocation data

If the user has consented to geolocation, we may have access to their geolocation data because we collect and process the IP addresses of all devices using our services. The collection and processing of geolocation data applies to both mobile devices and computers.

Children’s personal data

We do not collect personal data from persons under the age of 18. If you become aware that we are collecting and processing personal data relating to persons below this age, please contact us. We encourage parents and legal guardians to monitor their children’s use of the Internet and to help enforce this Policy by instructing children never to provide personal data through websites or Services.

Data sharing

We will share information about you (including personal data) with third parties only as described in this Privacy Policy.

Personnel, suppliers or subcontractors: We keep your information confidential, but we may disclose it to our personnel, suppliers or subcontractors to the extent reasonably necessary for the purposes set out in this Privacy Policy, provided that they do not use the information independently and have agreed to protect it.

Required by law: We may also disclose your information to the extent required by law (which may include government and law-enforcement authorities); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights.

Data transmission

Your data is transmitted securely using encryption. We protect our website and other systems by means of technical and organisational measures against loss, destruction, access, alteration or distribution of your data by unauthorised persons.

Your rights

You have the following rights regarding the way in which your personal data is processed.
To submit a request, please notify us by sending an email to info.pl@jumo.net.
a) You have the right to request a copy of your personal data that we process and to have any inaccuracies corrected.
b) You may ask us to provide, correct or erase your personal data.
c) You may ask us to restrict or stop processing your personal data or to erase it.
d) You may withdraw your consent to processing.
e) You may obtain a copy of your personal data that can be used with another service provider.
f) You may lodge a complaint with a supervisory authority.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. We encourage you to review this website for the latest information about our privacy practices. If any material changes are made to this Privacy Policy, you will be notified by a notice posted on the website before the change takes effect. If you do not accept the changes made to this Privacy Policy, please stop using the website and the Services. This Privacy Policy was created with the help of a Privacy Policy Generator.

13. JUMO Cloud

When using JUMO Cloud, users’ personal data is processed in accordance with the following data processing agreement “pursuant to Article 28 of the European General Data Protection Regulation”.

JUMO Cloud – Data Processing Agreement pursuant to Art. 28 GDPR

14. Links to external websites

For informational purposes, our websites may contain links to third-party websites, such as YouTube videos, Google Maps, RSS feeds or graphics from other websites. We have no influence over the content or appearance of external websites operated by third parties. The content of this data protection statement may not apply there. We therefore ask you to familiarise yourself with the data protection statements provided by the respective provider. JUMO accepts no responsibility for actions resulting from these websites or for their content.

15. Rights of data subjects

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us:

15.1. Right of access

You may ask us to confirm whether your personal data is being processed by us.

Where such processing takes place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom personal data concerning you has been or will be disclosed;

(4) the envisaged period for which the personal data will be stored or, if specific information is not possible, the criteria used to determine the retention period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the data controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) any available information as to the source of the data where the personal data was not collected from you;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request information about the appropriate safeguards referred to in Article 46 GDPR in connection with the transfer.

15.2. Right to rectification

You have the right to rectification and/or completion by the data controller if the personal data concerning you that is being processed is inaccurate or incomplete. JUMO will make the correction without undue delay.

15.3. Right to restriction of processing

You may request restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

(3) the data controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or

(4) if you have objected to processing pursuant to Article 21(1) GDPR, pending verification whether the controller’s legitimate grounds override your grounds.

Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If processing has been restricted in accordance with the above requirements, you will be informed by the controller before the restriction is lifted.

15.4. Right to erasure

Obligation to erase

You may request that we erase your personal data without undue delay, and we are obliged to erase such data without undue delay where one of the following grounds applies:

(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

(2) You withdraw the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing;

(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;

(4) The personal data concerning you has been unlawfully processed;

(5) The personal data must be erased for compliance with a legal obligation;

(6) The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Information to third parties

Where we have made personal data concerning you public and are obliged pursuant to Article 17(1) GDPR to erase it, we will take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copies or replication of, that personal data.

Exceptions

The right to erasure does not apply to the extent that processing is necessary:

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

(3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defence of legal claims.

15.5. Right to information about data recipients

If you have exercised your right to require the controller to rectify or erase personal data or restrict processing, the controller is obliged to notify all recipients to whom the personal data has been disclosed of such rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about those recipients.

15.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to JUMO in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from JUMO, provided that:

(1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and

(2) the processing is carried out by automated means.

In exercising your right to data portability, you also have the right to have personal data transmitted directly by us to another controller, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

15.7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will no longer process such personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes. Without prejudice to Directive 2002/58/EC, you may exercise your right to object in connection with the use of information society services by automated means using technical specifications.

15.8. Right to withdraw consent

You have the right to withdraw your declaration of consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

15.9. Right not to be subject to profiling and automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, such decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2)(a) or (g) GDPR applies and suitable measures have been taken to safeguard your rights and freedoms and your legitimate interests.
In the cases referred to in points (1) and (3) above, JUMO implements suitable measures to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of JUMO, to express your point of view and to contest the decision.

15.10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. In Poland, the supervisory authority is the President of the Personal Data Protection Office.

16. Changes to this privacy policy

We reserve the right to amend our security and data protection provisions where this becomes necessary due to technological developments. In such cases, we will also adjust our data protection statements accordingly. Please always refer to the current version of our data protection statement.