privacy policy – JK Group EN

DATA PROTECTION

We take data protection issues very seriously and wish to ensure that your privacy is protected at all times during your use of our range of services. Therefore, we wish to explain to you in the following privacy policy how your data are treated. Further details may be also found in our information on data processing.

Download of the information obligations in accordance with Articles 13 and 14 of the GDPR for existing customers, potential customers, suppliers and contractual partners.

PRIVACY POLICY FOR OUR WEBSITE

§ 1. Information about the collection of personal data

(1) In the following, we will inform you about the collection of personal data when using our website. Personal data are all data which relate to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) The data controller as per Article 4(7) of the EU General Data Protection Regulation (GDPR) is

JK-INTERNATIONAL GmbH
Köhlershohner Strasse 60
D-53578 Windhagen
Germany
Telephone: +49(0)2224-818-0
E-mail:info@jk-group.net

You can contact our Data Protection Officer at datenschutz@jk-group.net or via our postal address, adding “The Data Protection Officer”.

(3) When you contact us via e-mail or via a contact form, we will store the data that you provide (your e-mail address, your IP address, your name and telephone number, if applicable, your address and your enquiry) in order to respond to your questions. We will delete the data collected in this context when is no longer needed to be stored, or restrict the processing if statutory retention obligations exist which do not allow deletion until a later date. Data processing takes place on our own JK servers.

(4) If we use service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes and obtain the necessary consent. We will also state the defined criteria for the storage duration.

§ 2. Your rights

(1) You are able to impose on us the following rights in relation to personal data:

Right of access, Article 15 of the GDPR,
Right to rectification, Article 16 of the GDPR, or erasure, Article 17 of the GDPR
Right to restriction of processing, Article 18 of the GDPR
Right to object against the processing, Article 21 of the GDPR
Right to data portability, Article 20 of the GDPR

(2) Further explanations of this are contained in our General Information on Data Processing.

(3) For the assertion of these rights please contact datenschutz@de.jk-group.net. The provision of your personal data is necessary for this.

(4) You are additionally entitled in accordance with Article 77 of the GDPR to complain about the processing of your personal data by us at a data protection supervisory authority or to take legal proceedings.

§ 3. Collection of personal data when visiting our website

(1) When using the website for purely informational purposes, namely if you choose not to register or provide us with any other information, we only collect the personal data that your browser transfers to our server. If you wish to view our website, we collect the following data which are required by us for technical reasons in order to display our website to you and to guarantee its stability and security (the legal basis is point (f) Article 6(1) of the GDPR and. §25 para. 2 of the German Telecommunications-Telemedia Data Protection Act [TTDSG]):

IP address
Host name of the accessing computer
Date and time of the enquiry
Content of the request (pages visited in our domain)
Access status/HTTP status code
The appropriate quantity of data transferred
The website from which the request was made
Browser type, language and version
Operating system and its user interface

(2) In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are assigned to and stored on your hard disk by the browser that you are using and through which the organisation that sets the cookie (in this case us) obtains certain information. Cookies cannot be used to execute programs or deliver viruses to your computer. They are used to make the internet presence as a whole more user-friendly and more effective.

(3) Use of cookies:

We utilise cookies for the use of our online services. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our site. They do not cause any damage to your terminal device and do not contain any viruses, Trojans or other malware. The cookie stores information that is generated specifically in connection with terminal device used. However, this does not mean that we gain direct knowledge of your identity. On one hand, utilising cookies serves to make the use of our services more convenient for you.

Furthermore, we also use temporary cookies to optimise user-friendliness. These are stored on your terminal device for a specific and defined period of time. If you visit our site again to use our services, the system automatically detects that you have visited the website before and which inputs and settings you have made so that you do not have to enter them again. We also use cookies to statistically document the use of our website and to analyse it for the purpose of optimising our services. These cookies enable us to automatically detect that you have visited us before when you return to our website again. These cookies are automatically deleted after a defined period of time.

Most browsers accept cookies automatically. However, you can configure your browser in such a way that cookies are not stored on your computer or a message is always displayed before a new cookie is created. Complete deactivation of cookies may mean that you are unable to use all of the functions of our website. Technically necessary cookies are set due to a legitimate interest in accordance with point (f) Article 6(1) of the GDPR. Before the use of technically unnecessary cookies we obtain your consent in accordance with point (a) Article 6(1) of the GDPR.

We use “Complianz” as a cookie consent tool: Complianz B.V., Kalmarweg 14-5 9723 JG, Netherlands. With this cookie consent tool we provide you with the opportunity to consent to the storage of cookies in a law-compliant manner and to guarantee a revocation of your consent. In addition, the consent is documented as legal evidence and the setting of the cookies is technically controlled. For this, cookies are used which store your cookie settings on our website. Your cookie settings are thus able to be retained during a further visit to our platform as long as you do not delete the cookies beforehand. You can adjust your settings at any time. The legal basis for the processing of your personal data is point (c) Article 6(1) of the GDPR. Information on the data protection of “Complianz” may be found here: https://complianz.io/docs/privacy/

This consent is voluntary, it does not impose any conditions for the use of this website and can be revoked at any time by adjusting the settings in the cookie consent tool or by contacting us as follows:

JK-INTERNATIONAL GmbH
Köhlershohner Strasse 60
D-53578 Windhagen
Germany
Telephone: 02224-818-0
E-mail:info@jk-group.net

§ 4. Additional features and services of our website

(1) In addition to the purely informative use of our website, we provide a variety of services that may interest you. For these, you must generally provide additional personal data which we use for the provision of each service and for which the data processing principles given above apply. By providing your data you declare in accordance with point (a) Article 6(1) of the GDPR and. §25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG) your consent to the processing of your data to that extent which is required for the use of the desired service.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and authorised, and are bound by our instructions and reviewed on a regular basis.

(3) We can also forward your personal data to third parties if campaigns, competitions, contracts or similar services are offered together with partners. Further information is provided when you enter your personal data or below in the description of the services.

(4) To the extent that our service providers or third parties are located in a country outside the European Economic Area (EEA), we will inform you about the consequences thereof in the description of the services. Where the forwarding of data is performed for the creation of an offer (e.g. for enquiries from Spain to dealers in South America), we inform you before your data are forwarded about the appropriate service provider/partner and the data protection which applies there.

§ 5. Objection to or withdrawal of consent for the processing of your data

(1) If you have issued consent for the processing of your data as defined by point (a) Article 6(1) of the GDPR and § 25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG), you may revoke this at any time. Such a revocation affects the reliability of the processing of your personal data in the future. The lawfulness of the data processing which has taken place up to the time of the revocation remains unaffected by the revocation.

(2) Where we base the processing of your personal data on the balancing of interests as outlined in point (f) Article 6(1) of the GDPR, you can object to the processing. This is the case if the processing is not required in particular for the performance of a contract with you which is shown by us in the following description of the functions. When making such an objection, we would request you to show the reasons why we should not process your personal data in the way that is performed by us. Where an objection is justified, we examine the situation and will either cease or adjust the data processing or identify to you our compelling legitimate reasons to continue processing.

(3) You can, of course, object at any time to the processing of your personal data for advertising and data analysis purposes. You can inform us about your advertising objection using the following contact details:

JK-INTERNATIONAL GmbH
Köhlershohner Strasse 60
D-53578 Windhagen
Germany
Telephone: +49(0)2224-818-0
E-mail:info@jk-group.net

§ 6. Newsletter

(1) With your consent you may subscribe to our newsletter in which we provide you with information about our latest attractive offers. The promoted goods and services are named in the declaration of consent.

(2) We use the ‘double-opt-in’ procedure for registration for our newsletter. This means that, after your registration, we send you an e-mail to the e-mail address which you give us in which we ask you to confirm that you wish to have the newsletter sent to you. If you do not confirm your registration within 24 hours, your information will be blocked and automatically erased after one month. In addition, we store the IP addresses used by you and the time of the registration and confirmation. The purpose of this process is to show proof of your registration and to be able, where necessary, to explain a possible misuse of your personal data.

(3) Mandatory information for the sending of the newsletter is solely your e-mail address. The provision of further, separately marked data is voluntary and is used in order to be able to address you personally. After receiving your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is point (a) Article 6(1) of the GDPR and. §25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

(4) You can at any time withdraw your consent for the sending of the newsletter and unsubscribe from the newsletter. You can declare your revocation either by clicking on the link provided in every newsletter e-mail or by a message using the contact data provided in the masthead.

(5) We use services provided by Mailchimp c/o The Rocket Science Group, LLC; 675 Ponce de Leon Ave NE, Suite 5000, GA 30308, USA for our newsletter (www.mailchimp.com) (“MailChimp”).

Both the e-mail addresses of the recipients of our newsletter and their further data described within this information are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and analyse the newsletter on our behalf. In addition, MailChimp is able, according to their own information, to use these data to optimise or improve their own services, for example, for the technical optimisation of distribution and design of the newsletter or for commercial purposes in order to determine from which countries the recipients originate. MailChimp does not use the data of our newsletter recipients to write to them its own behalf or to pass them on to third parties. You can view MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy

We have concluded a “data processing agreement” with MailChimp. This is a contract in which MailChimp is obliged to protect the data of our users, to perform processing on our behalf in accordance with our privacy policy and, in particular, not to pass these on to third parties.

§ 7. Use of our online shop

(1) If you wish to order in our online shop, it is necessary for the conclusion of a contract that you provide your personal data which we require for the processing of your order. Mandatory information which is necessary for the processing of the contracts is separately marked; any further information is voluntary. We process the data provided by you for the processing of your order. For this, we are able to forward your payment data to our house bank. The legal basis for this is point (b) Article 6(1) of the GDPR. The processing is necessary for the execution of a contract or for the performance of pre-contractual measures.

You can voluntarily set up a customer account via which we can store your data for further later purchases. The data provided by you are revocably stored when setting up an account. All further data, including your user account, may always be deleted by you in the customer section.

We can additionally process the data provided by you in order to inform you about further attractive products from our portfolio or to send you e-mails with technical information.

(2) We are obliged under commercial and tax law to store your address, payment and order data for a period of ten years.

(3) In order to prevent unauthorised access by third parties to your personal data, in particular financial data, the order process is encoded using SSL/TLS technology.

§ 8. Use of JK-Point and Admin Point

(1) General

Our General Information on Data Processing and §§ 1-5, 12-14 of this Privacy Policy apply for the use of JK-Point, Admin Point and remote access.

(2) JK-Point

If you are a supplier, dealer or a service technician authorised by us, you have the option of applying for your personal access data to our JK-Point. With this, you have the option of gathering orders and making corrections and purchases. In JK-Point itself only the user data (name, address, telephone number, e-mail address, password) are retained. With the exception of the password all data are replicated copies from the former SAP system. When you use JK-Point, each of your sessions is registered by us for processing purposes. Only specially authorised administration users have access to the personal data.

The data are stored for as long as is necessary for the processing of your business and are then deleted unless we are committed to store them for a longer period of time in accordance with point (c) Article 6(1) of the GDPR due to fiscal and commercial law storage and documentation obligations, this is necessary for the safeguarding of legitimate interests by us or by third parties in accordance with point (f) Article 6(1) of the GDPR, or you have granted your consent to further storage in accordance with point (a) Article 6(1) of the GDPR or §25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

(3) Admin Point

JK-Point users can additionally use Admin Point as an offline application. No modifications arise in the handling of your data as a result.

§ 9. Web analytics

Use of Simple Analytics

Our website uses Simple Analytics (service provider: Simple Analytics B.V., Jacob van Lennepstraat 78 H, 1053 HM, Amsterdam, The Netherlands; Website: https://marketingplatform.google.com/intl/de/about/analytics/ https://simpleanalytics.com)

Simple Analytics allows us to evaluate how the website is used, but no unencrypted data is transmitted and no personal data is collected. The data is stored on EU servers. You can find more information about the data protection of Simple Analytics here: https://www.simpleanalytics.com/de#why

§ 10. Social media

(1) We currently use the following social media plug-ins: Facebook, Instagram and TikTok. We use a ‘two-click solution’ for these. This means that when you visit our website, strictly no personal data are initially forwarded to the providers of the plug-ins. You are able to identify the provider of a plug-in via the marking on the box above its initials or the logo. We provide you with the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and activate it as a result does the plug-in provider receive the information that you have called up the corresponding website of our online services. Furthermore, in the area near the buttons on the website a link is included in which a short note must be incorporated with a link to the detailed information in the privacy policy. The data listed under § 3 of this declaration are additionally transmitted. By activating the plug-in personal data from you are thus transmitted to the appropriate plug-in provider and are stored there (at US-American providers such as Facebook and Instagram in the USA). As the plug-in provider undertakes the data collection in particular using cookies, we recommend that you delete all cookies via the security settings in your browser before clicking on the greyed-out box.

(2) We neither have any influence on the data collected and data processing procedures nor do we have any knowledge of the full extent of the data collection, the purposes of the processing and the storage periods. We also have no information on deletion of the data collected by the plug-in provider.

(3) The plug-in provider stores the data collected on you as user profiles and uses them for advertising and market research purposes and/or the user-oriented design of its website. Such an analysis takes place in particular (also for users that are not logged in) for the design of user-oriented advertising and in order to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact the relevant plug-in provider in order to exercise this right. Via the plug-ins we offer you the option to interact with social networks and other users so that we are able to improve our services and design them in a more attractive form for you as a user. Only if you activate the relevant plug-in by clicking on the associated button is a direct connection created to the server of the provider (consent). Where you have activated the plug-in, the relevant provider receives the information that you have visited our website with your IP address. If you are logged in to your relevant social media account at the same time, the relevant provider can match the visit to our website to your user account. The activation of the plug-in represents consent according to point (a) Article 6(1) of the GDPR and. § 25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You can revoke this consent for future effect at any time by adjusting your preferences in our cookie settings.

(4) The forwarding of data is performed irrespective of whether you possess an account with the plug-in provider and are logged in there. When you are logged in at the plug-in provider, the data collected by us are directly matched to the account existing with the plug-in provider. When you press the activated button and provide a link to the page, for example, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, in particular before activating the button, as you can thus avoid matching to your profile at the plug-in provider.

(5) Further information on the purpose and extent of the data collection and their processing by the plug-in provider may be found in the privacy policies of these providers which are provided below. You will also find further information there on your respective rights and setting options for the protection of your privacy.

(6) Addresses of each of the plug-in providers and URLs with their privacy policies:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

The legal basis for the processing of your data is your consent according to point (a) Article 6(1) of the GDPR and. § 25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You have the option of revoking this consent at any time by adjusting your preferences in our cookie settings. For the event that personal data are transmitted to the USA, standard contractual clauses have been concluded in accordance with point (c) Article 46(2) of the GDPR.

b) Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, help.instagram.com/478745558852511, further information on data collection: help.instagram.com/519522125107875.

c) TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Information on the data protection may be found here: https://www.tiktok.com/legal/page/eea/new-privacy-policy/de-DE. The legal basis for the processing of your data is your consent according to point (a) Article 6(1) of the GDPR and. § 25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You have the option of revoking this consent at any time by adjusting your preferences in our cookie settings. For the event that personal data are transmitted to the USA, standard contractual clauses have been concluded in accordance with point (c) Article 46(2) of the GDPR.

d) YouTube LLC is a subsidiary company of Google LLC. Further information on the purpose and extent of the data collection and their processing by YouTube may be found in the YouTube privacy policy. You will also find there further information on your rights and setting options for the protection of your privacy: www.google.de/intl/de/policies/privacy. The provider address is: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.

§ 11. Integration of videos

Our website uses third-party plug-ins for the integration and presentation of video content.

(1) Vimeo

When a website with an integrated Vimeo plug-in is called up, a connection is created to the Vimeo servers. Vimeo learns as a result which of our pages you have called up. Vimeo learns your IP address, even if you are not logged into the video portal and possess no account there. A transmission of the information collected by Vimeo takes place to servers of the video portal in the USA. Vimeo is able to directly match your surfing behaviour to your personal profile. You have the possibility to prevent this by previously logging out. Details on the handling of user data may be found in the Vimeo privacy policy at: https://vimeo.com/privacy.

The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. The legal basis for the processing of your data is your consent according to point (a) Article 6(1) of the GDPR and. § 25 para. 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You have the option of revoking this consent at any time by adjusting your preferences in our cookie settings. For the event that personal data are transmitted to the USA, standard contractual clauses have been concluded in accordance with point (c) Article 46(2) of the GDPR.

(2) YouTube

We have integrated YouTube videos into our online services which are stored at www.YouTube.com and which may be played directly from our website. They are all integrated in the “extended data protection mode”, which means that no data about you as a user are transmitted to YouTube if you do not play the videos. Only if you play the videos are the data indicated in the paragraph below transmitted. We have no influence over this data transmission.

By visiting our website YouTube receives the information that you have called up the corresponding page on our website. The data listed under § 3 of this declaration are additionally transmitted. This takes place irrespective of whether YouTube has provided a user account via which you are logged in or whether no user account exists. When you are logged at Google, your data are directly matched to your account. If you do not wish that matching takes place to your profile at YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising and market research purposes and/or the user-oriented design of its website. Such an analysis takes place in particular (even for users that are not logged in) for the provision of user-oriented advertising and in order to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube in order to exercise this right.

YouTube LLC is a subsidiary company of Google LLC. Further information on the purpose and extent of the data collection and their processing by YouTube may be found in the YouTube privacy policy. You will also find there further information on your rights and setting options for the protection of your privacy: www.google.de/intl/de/policies/privacy. The provider address is: Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.

§ 12. Links

We have integrated various links to other internet presences. When you click on these links, your data are transmitted to the operator of the other internet presence. This privacy policy does not regulate the collection, transfer or treatment of personal data by third parties. Please examine the privacy policy of the relevant responsible party.

§ 13. Data security

We secure our websites and other systems against loss, destruction, access, modification or distribution of your data by unauthorised persons by means of technical and organisational measures (TOM). Despite regular checks, complete protection against all risks is not possible.

§ 14. Modification of the data protection information

Changes in legislation or modifications to our internal processes may necessitate an adjustment to this privacy policy. In the event of such a modification, we will inform you of this at the latest six weeks before it coming into effect. You have a general right of revocation of the consent that you have issued. Please note that (where you do not exercise your right of revocation) the current version of the privacy policy is the one that is valid.

The current status is as at March 2023