Our privacy policy

This is a translation provided for convenience. The German version is the legally binding text; where the two differ, the German original prevails.

This privacy policy exists to inform our customers and the visitors to our website about how their personal data is stored, processed and passed on.

Controller

The controller within the meaning of the applicable data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Data JT UG (haftungsbeschränkt)
Hauptstraße 67/1
79211 Denzlingen
Germany

Processing carried out by us

We process your personal data only for the purposes named in this privacy policy:

Server logs

Our website stores, as a matter of course, information in log files that your browser transmits to us automatically when you visit. That is usually the following data:

• the pages visited within our website
• the date and time of each page view
• the type and version of the browser used
• the operating system
• the referrer URL
• the host name
• the IP address

Exactly which data your browser transmits also depends on your browser settings and on any browser plugins you may have installed.

Collecting this information is necessary in order to

• deliver the contents of our website without error,
• optimise how our website is presented,
• keep our website permanently functional, and
• provide the prosecuting authorities with the information they need in the event of a criminal offence.

We evaluate the data and information collected in order to improve data protection and data security, and ultimately to ensure an optimal level of protection for the personal data we process. The processing is therefore carried out on the basis of a legitimate interest under Art. 6 (1) (f) GDPR.

The log files are stored separately from all other data and are never combined with other personal data.

Cookies on our website

Cookies are small files, a few kilobytes in size, that websites can place on your hard drive. Using cookies is a standard way of holding data on your computer across several browser sessions. It allows website operators to recognise you across sessions, or to store settings you have chosen for particular website functions. Cookies cannot be used to change or damage anything on your computer or smartphone permanently.

To prevent automatically generated spam through our contact form, we use a computer-generated captcha. This captcha uses a session cookie, which automatically loses its validity at the end of the current browser session. Without this session cookie the website cannot be operated. The cookies are therefore set on the basis of a legitimate interest under Art. 6 (1) (f) GDPR.

Contact forms

All data submitted through our contact forms is stored solely in order to deal with your enquiry. That includes the data you enter in the form yourself as well as your IP address. All data is transmitted in encrypted form from your computer to our server and then forwarded by email to our internal email systems. For security reasons, before the contact form is sent, the system being used is checked thoroughly by reCAPTCHA, a service provided by Google. Further information is available in Google's privacy policy.

We process the data you provide solely on the basis of the consent you give by using the form voluntarily, under Art. 6 (1) (a) GDPR. You may withdraw consent you have already given at any time. An informal message (by email, telephone or post) is enough to do so. The lawfulness of the processing carried out up to the point of withdrawal is unaffected.

Your IP address is processed in order to improve data protection and data security, and ultimately to ensure an optimal level of protection for the personal data we process. The processing is therefore carried out on the basis of a legitimate interest under Art. 6 (1) (f) GDPR.

The data submitted remains in our systems until you

• ask us to delete it,
• withdraw your consent to it being stored, or
• there is no longer any need to store it.

Mandatory statutory provisions, such as retention periods, are unaffected.

Email correspondence

If you contact us at one of our email addresses, the data you provide is stored automatically in our email systems.

The data you provide is processed solely on the basis of the consent you give by using the address voluntarily, under Art. 6 (1) (a) GDPR. You may withdraw consent you have already given at any time; an informal message by email is enough. The lawfulness of the processing carried out up to the point of withdrawal is unaffected.

The data submitted remains in our systems until you

• ask us to delete it,
• withdraw your consent to it being stored, or
• there is no longer any need to store it.

Mandatory statutory provisions, such as retention periods, are unaffected.

Google Maps

On our website we use Google Maps, a mapping service provided by "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This integration helps us present geographical information visually and improves the user experience. When Google Maps is used, Google collects, processes and uses data about how visitors to the website use the Maps functions. That may include in particular users' IP addresses and location data, though location data is not collected without their consent (usually given through the settings of their mobile device). The data may be processed in the USA.

We use Google Maps in the interest of presenting our online offering attractively and making the places we name on the website easy to find. That constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. A further legal basis for the processing is your consent under Art. 6 (1) sentence 1 (a) GDPR. Further information on data protection at "Google" is available at: policies.google.com/privacy

You may object to the processing. Your right to object applies where grounds arise from your particular situation. You can send us your objection using the contact details given under "Controller" above.

Disclosure to third parties

We pass the personal data we collect from you on to third parties only where

• you have given your express consent to the processing and the disclosure,
• the processing is necessary in order to perform a contract with you,
• the processing is necessary in order to comply with a legal obligation,
• the processing is necessary in order to meet a legal obligation towards third parties, or
• the processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your personal data not being disclosed.

Your personal data is not transferred to third parties for any other purpose.

Your rights as a data subject

As a visitor to our website you may exercise the following rights over your personal data at any time:

• access to the data stored,
• information about how the data stored is processed,
• rectification of the data stored,
• erasure of the data stored,
• objection to the processing of the data,
• restriction of the processing of your data, where we are not yet permitted to erase it because of legal obligations, and
• transfer of the data we hold to you (data portability).

If you have already given us consent to collect or process your personal data, you may withdraw that consent at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal is unaffected.

You may lodge a complaint with the supervisory authority responsible for you at any time. Which authority that is depends on the federal state of your residence, of your place of work, or of the alleged data protection breach. A list of the supervisory authorities (for the non-public sector) is available at: https://bfdi.bund.de

Erasure and blocking of your personal data

We adhere at all times, and of our own accord, to the principles of data avoidance and data minimisation. We therefore store your personal data only for as long as is necessary to achieve the purposes named here, or for as long as the various storage periods laid down by the legislator require. Once the relevant purpose ceases to apply or those statutory periods expire, the corresponding data is routinely blocked or erased in accordance with the legal provisions.

Changes to this privacy policy

We reserve the right to amend this privacy policy at any time, so that it always meets the current legal requirements, or to reflect changes to the functions of our website. The version published here at the time applies to your next visit.

Questions?

If you have further questions about data protection, you are welcome to use the contact form provided under Contact.