Data protection

Information on the processing of personal data (data protection information)

(Status: April 2022)

Welcome to JOKA's data protection area. Thank you for your interest in our company. We would like to use this data protection notice to inform you in detail about when we collect which data and how it is processed.

Controller

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

W. & L. Jordan GmbH
Horst-Dieter-Jordan-Straße 7-10

34134 Kassel

Phone: +49 / (0) 5 61 / 9 41 77-0
Fax: +49 / (0) 5 61 / 9 41 77-111
Email: info@joka.de

Data Protection Officer

You can reach our data protection officer at

Gesellschaft für Personaldienstleistungen mbH
Pestalozzistraße 27

34119 Kassel

Phone: +49 561 78968-93
Fax: +49 561 78968-61
E-mail: info@gfp24.de

General information on the collection of personal data

With the following information we inform you transparently about the type and scope of the processing of personal data

that is collected during your visit to our website,
the use of our online offers,
external online presences on social media platforms
in the context of application procedures
our branch business
and in business relationships with customers and service providers.

are collected.

The legal basis for our data protection is formed in particular by the provisions of the General Data Protection Regulation (GDPR) and the supplementary provisions of the Federal Data Protection Act (BDSG (new)).

Purpose / legal basis of the processing

In cases in which we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract concluded between you and us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

In the event that the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.

In the event that the processing of personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR is the legal basis for the processing.

Disclosure of personal data

If we transfer your personal data to other bodies or disclose it to them as part of our processing, this is done exclusively on the basis of one of the aforementioned legal bases. The recipients of this data may include, for example, payment service providers in the context of contract fulfilment. In cases where we are obliged to do so by law or by court order, we must transfer your data to bodies authorised to receive such information.

If external service providers support us in processing your data (e.g. data analysis, newsletter dispatch), this is done as part of order processing in accordance with Art. 28 GDPR. We only conclude corresponding contracts with service providers that offer sufficient guarantees that suitable technical and organisational measures ensure the protection of your data.

Data transfer to third countries

Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is in accordance with the legal requirements. Subject to express consent or transfer required by contract or law, we only process or have the data processed in third countries with a recognised level of data protection or in accordance with Art. 44 et seq. GDPR on the basis of special guarantees, e.g. contractual obligation through so-called standard protection clauses of the EU Commission (information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).

Storage of the data

We will delete or block your personal data as soon as the purpose for which it was stored no longer applies. Furthermore, your personal data will only be stored if specific statutory retention periods (in particular retention obligations under commercial and tax law) at national or European level prevent deletion.

Definitions of terms

Our data protection information is based on terms that are used and defined in the GDPR. To ensure that our data protection provisions are easy to read and understand, we would like to explain the most important terms in advance.

Personal data

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Pseudonymisation

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Processor

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third party

"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent

"Consent" means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Profiling

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Rights of data subjects

The processing of personal data gives rise to rights for you as the natural person concerned, which you can exercise against us at any time. These are

Right to revoke a declaration of consent under data protection law in accordance with Art. 7 para. 3 GDPR
Right to information about your personal data stored by us in accordance with Art. 15 GDPR
Right to rectification of incorrect or completion of incomplete data in accordance with Art. 16 GDPR
Right to erasure of your data stored by us in accordance with Art. 17 GDPR
Right to restriction of the processing of your data in accordance with Art. 18 GDPR
Right to data portability in accordance with Art. 20 GDPR
Right to object in accordance with Art. 21 GDPR
Automated decisions in individual cases including profiling in accordance with Art. 22 GDPR

Right to information

You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed and, where that is the case, which personal data is being processed, and to request copies of your personal data. Please note that your right to information may be restricted under certain circumstances in accordance with the statutory provisions.

Right to rectification

If the information concerning you is not (or is no longer) accurate, you have the right to request the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.

Right to erasure

In accordance with the legal requirements, you have the right to demand that data concerning you be deleted immediately, e.g. if the data is no longer required for the purposes pursued and the legal storage and archiving regulations do not prevent deletion.

Right to restriction of processing

Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted, e.g. if you have lodged an objection to the processing, for the duration of the examination as to whether the objection can be upheld.

Right to data portability

You have the right to have data that you have provided to us handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Right to revoke a declaration of consent under data protection law

If the processing of your personal data is based on consent given to us, you have the right to withdraw this consent at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can send your cancellation informally to W. & L. Jordan GmbH, Horst-Dieter-Jordan-Straße 7- 10, 34134 Kassel, Germany, e-mail: datenschutz@joka.de . We would like to point out that your cancellation can also be made in other procedures or must be made for technical reasons. Further information on this can be found in the respective services described.

Right to object to processing

Under the conditions of Art. 21 para. 1 GDPR, you can object to data processing on the basis of Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Please address your objection informally to W. & L. Jordan GmbH, Horst-Dieter-Jordan-Straße 7- 10, 34134 Kassel, e-mail: datenschutz@joka.de . We would like to point out that your objection can also be made in other procedures or must be made for technical reasons. Further information on this can be found in the respective services described.

Right to lodge a complaint with the data protection authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully. The address of the supervisory authority responsible for our company is

The Hessian Data Protection Officer
P.O. Box 3163
65021 Wiesbaden
Phone: +496111408-0
Fax: +49 611 1408-900
Email: Poststelle@datenschutz.hessen.de

Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Use of online services

In the following, we will inform you when and in what context data is processed when you use our online services.

Collection of personal data when visiting our website

If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the data listed below. This is technically necessary in order to display our website to you and to ensure the stability and security of the presentation (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP address
Date and time of the enquiry
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status / HTTP status code
Amount of data transferred in each case
Website from which the request originates
browser
Operating system and its interface

This data is temporarily stored in the log files of our system for a maximum period of 90 days. Storage beyond this period is possible, but in this case the IP addresses are partially deleted or anonymised so that it is no longer possible to identify the calling client.

Use of cookies

In addition to the aforementioned data, cookies are stored on your end device (e.g. PC, laptop, smartphone) when you use our website. Cookies are small text files that are stored on your end device assigned to the browser you are using and through which certain information flows to the body that sets the cookie (here by us). Cookies cannot execute programmes or transfer malware to your end device. They serve to make the online offer more user-friendly and effective overall.

This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies

Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

We use cookies on our website that are generated by us as the website operator and that are necessary for the full functionality and presentation of our website. We use these cookies out of legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to ensure our online offering.

In addition to the cookies set by us as the controller, we also use cookies that are offered by other providers. We process these cookies on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR or on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Further information on the use of and cooperation with external service providers can be found in the data protection information of the respective online services.

You can configure your browser settings according to your wishes and, for example, refuse to accept cookies from external providers or all cookies. However, we would like to point out that you may not be able to use all the functions of this website as a result. If you have consented to the acceptance of cookies and wish to object to this in the future, you can delete the stored cookies in the settings of the browser you are using.

Cookie settings in web browsers

Web browsers can be set to notify you when cookies are set or to generally or partially reject or deactivate cookies. By deactivating and deleting all cookies, you can also revoke any consent you have previously given. If you deactivate or restrict cookies using your browser, various functions on our website may not be available to you. You can use your web browser to delete stored cookies at any time, even automatically.

You can use the following links to find out about this option for the most commonly used browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer

Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=de HYPERLINK "https://support.google.com/chrome/bin/answer.py?hl=de&answer=95647"& HYPERLINK "https://support.google.com/chrome/bin/answer.py?hl=de&answer=95647 "answer=95647

Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge: https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies

Opera: https://help.opera.com/Linux/12.10/de/cookies.html .

If no restrictions have been placed on the cookie settings, cookies that enable and ensure the necessary technical functions remain on your end device until the browser is closed; other cookies may remain on your end device for longer. The exact cookie lifetimes are displayed in our cookie consent banner.

SSL and TLS encryption

Our website uses TLS encryption (formerly SSL) for security reasons and to protect the transmission of confidential content. Orders or contact enquiries that you send to us are therefore sent using transport encryption. Depending on your browser type, you can recognise this either by the lock symbol and/or the https protocol in the address bar.

Contacting us

Contact form

When you contact us via a contact form, the data you provide (your email address, your surname and first name and your telephone number, if applicable) will be stored by us in order to respond to your enquiry. The data entered in the contact form is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. If your contact enquiry is related to the fulfilment of a contract or the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. You can revoke this consent at any time. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Enquiry by e-mail, telephone, fax

When you contact us by e-mail, telephone or fax, the personal data you provide (your e-mail address, possibly your surname, first name and telephone number) will be stored by us in order to process your enquiry. We will not pass on this data without your consent.

Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, we process your data on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and/or on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in particular in the effective processing of your request.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Online appointment booking via Timify

On our website, we offer you the option of making an appointment online. We use the "Timify" service for this purpose. The provider is TerminApp GmbH, CEO: Andreas Knürr, Balanstraße 73, Building No. 24, 3rd floor, 81541 Munich. When you make an appointment, we record your name and contact details in addition to the appointment details. When you access the online appointment booking option, your end device (e.g. PC, laptop or smartphone) transmits data to Timify's servers for technical reasons. This includes your IP address, browser information (name, version), website, the user's operating system, the user's screen resolution, the language settings of the browser or the user's operating system and the content of the online appointment booking facility that you access and call up. When you use Timify, this data is generally transmitted to a Timify server and stored there. The provider of this site has no influence on this data transfer. Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, we process your data on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in particular in efficient appointment scheduling. You can find more information on how Timify handles user data in the privacy policy at https://www.timify.com/de-de/legal/ .

Customer account / registration

You can voluntarily create a customer account through which we can store your data. When you create an account, the data you provide will be stored on a revocable basis. At the same time, we store the IP address and the date and time of your registration. This data will not be passed on to third parties.

If you have given your consent, the legal basis for processing the data is Art. 6 para. 1 lit. a GDPR. If the registration serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address or customer number to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorised third parties.

Your data will only be used for as long as is necessary for the existing customer relationship. You can also view and change the data stored about you in your customer account at any time. You have the option of cancelling your user account at any time. In this case, your data will be deleted unless we are obliged to retain it due to commercial and tax law requirements.

Data processing for advertising purposes

Direct advertising

If your personal data is processed for direct marketing purposes, you have the right under Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will no longer be used for the purpose of direct advertising.

Postal advertising

If you have concluded a contract with us, we will list you as an existing customer. On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal contact details and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth, telephone number and your professional, industry or business name and to use them to send you interesting offers and information about our products by post. The processing of existing customer data for our own advertising purposes or for advertising purposes of third parties is carried out in accordance with Art. 6 para. 1 lit. f GDPR (legitimate interest).

You can object to data processing for the aforementioned purposes at any time free of charge and with effect for the future.

If you file an objection, your data will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after your objection has been received. This is due to the technical lead time required for the selection process and does not mean that we have not implemented your objection.

With your consent, you can subscribe to our newsletter, which we use to inform you about current interesting offers. We regularly report on product offers from our range, events/trade fairs, special sales promotions, tips on our product areas and offers from our cooperation partners.

We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email (unsubscribe) or, if applicable, via the customer account or datenschutz@joka.de declare your cancellation

Sendinblue GmbH (formerly Newsletter2Go), Köpenicker Straße 126, 10179 Berlin, Germany

Data protection information: https://www.brevo.com/de/legal/privacypolicy

Conclusion of a contract for commissioned data processing
We have concluded a contract with Sendinblue for commissioned data processing. In this contract, Sendinblue is obliged to protect our customers' data and not to pass it on to third parties.

We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to the actions you take on our website.

You can object to this tracking at any time by clicking on the separate link (unsubscribe) provided in every e-mail. The information will be stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.

Competitions (website, newsletter, stationary, post)

From time to time, you have the opportunity to take part in competitions on our website, from our newsletter, via promotions in bricks-and-mortar stores, by post or as part of events and functions.

The purpose of the data processing is to carry out the competition. Unless otherwise specified in the respective competition or unless you have given us further express consent, the personal data you provide to us as part of your participation in the competition will be used exclusively for the purpose of organising the competition (e.g. determining the winner, notifying the winner, sending the prize). Without providing this data, participation in our competition is not possible.

The legal basis for the data processing described is generally Art. 6 para. 1 lit. b GDPR. In the event that a declaration of consent is submitted as part of a competition, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing based on consent. If you have given your consent as part of a competition, you have the option of withdrawing this consent at any time with effect for the future.

We generally process the following data in a competition

Surname, first name
postal address
e-mail address
Telephone number
If applicable, user name of social media channels

Data will only be passed on to third parties if this is necessary for the processing of the competition (e.g. notification of the winner, dispatch of the prize via a logistics company).

If other external service providers support us (e.g. to determine the winner or organise the competition), this is done as part of order processing in accordance with Art. 28 GDPR.

After the end of the competition, the personal data of the participants will be deleted after the prize has been sent out, at the latest after 12 months, provided that there are no further legal retention periods to the contrary.

Competitions on social media channels

The processing of personal data is necessary for participation in a competition on our social media channels.

In a competition on our social media channels, we generally process the following data

Public profile information incl. user name
Comments submitted (text & image)

We request the following data from winners as part of the competitions

Surname, first name
postal address
e-mail address
Telephone number
If applicable, username of social media channels

We will not pass on your personal data to unauthorised third parties without your express consent. Your data will only be passed on or transmitted if this is necessary for the fulfilment of the contract, e.g. for the purpose of prize delivery by a shipping service provider)

If other external service providers support us (e.g. to determine the prize or organise the competition), this is done as part of order processing in accordance with Art. 28 GDPR.

Analysis tools

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to Google servers in the USA and stored there. However, if IP anonymisation (AnonymizeIP) is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google servers in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension "Anonymise IP". As a result, IP addresses are further processed in abbreviated form, meaning that personal references can be virtually ruled out. If the data collected about you is personally identifiable, it will be deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is based on the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR.

We also use Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: https://www.google.com/analytics/terms/de.html Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=de and the privacy policy: https://policies.google.com/privacy?hl=de HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de"& HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de "gl=en .

Hotjar

This website uses the web analysis service Hotjar, which is provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe.

Hotjar makes it possible to measure and evaluate user behaviour (clicks, mouse movements, scroll heights, etc.) on our website. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are viewed most frequently by website visitors. The tool can also be used to obtain feedback directly from website users. In this way, we obtain valuable information to make our websites even faster and more customer-friendly.

Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting).

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a GDPR (consent).

The information is neither used by Hotjar nor by us to identify individual users or merged with other data about individual users; your data will be deleted after 1 year at the latest.

If you wish to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out

Please note that Hotjar must be deactivated separately for each browser or end device.

Further information about Hotjar can be found in Hotjar's privacy policy at the following link https://www.hotjar.com/privacy

We have concluded an order processing contract with Hotjar in order to implement the strict European data protection regulations.

Tracking tools

Google reCAPTCHA

This website uses the reCAPTCHA service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, to determine whether certain entries are made by humans or computers (so-called bots). For this purpose, the actions of website users are analysed (e.g. mouse movements or queries). Google recognises the type of input based on the IP address of the end device used, the website visited with CAPTCHA function, the date and duration of the visit and the data of the browser and operating system used. The data processing takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and spam.

When using Google reCAPTCHA, personal data may also be transmitted to servers of Google LLC. in the USA.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html .

Marketing tools

Google Tag Manager

This website uses "Google Tag Manager", a service provided by Google Ireland Limited. Google Tag Manager offers the possibility to manage website tags via an interface. The Google Tag Manager tool, which implements the tags, is a cookie-less domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html

Google Tag Manager terms of use: https://www.google.com/intl/de/tagmanager/use-policy.html

Facebook Custom Audiences

This website uses "Facebook Custom Audiences", a remarketing tool from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook"). Facebook Custom Audiences enables the display of interest-based adverts, so-called "Facebook Ads", as part of a visit to this website, the Facebook social network or other websites that also use Facebook Custom Audiences. By using Facebook Custom Audiences, your web browser automatically establishes a direct connection with the Facebook server. If you have a Facebook user account and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, there is a possibility that Facebook will find out and store your IP address and any other identifying features. We have no influence on the scope and further use of the data processed by Facebook through the use of Facebook Custom Audiences.

We use Facebook Custom Audiences for marketing and optimisation purposes, in particular to display relevant and customised content for visitors and thus improve our offering and make it more interesting for you as a user. The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

The deactivation of Facebook Custom Audiences is also possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ possible. You can also make cookie settings in your browser.

You can also prevent participation in tracking by deactivating the providers' interest-based adverts by clicking on one of the links listed. An opt-out cookie is set for this purpose as part of the self-regulation campaigns. However, this setting will be deleted if you delete your cookies.

http://optout.networkadvertising.org/

http://optout.aboutads.info

http://www.youronlinechoices.com/uk/your-ad-choices/

Facebook Pixel

Our website uses "Facebook Pixel", a service provided by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook"). Facebook Pixel enables Facebook to display our adverts on Facebook, so-called "Facebook Ads", only to those Facebook users who have visited our website, in particular those who have shown an interest in our offer or in certain topics or products. Facebook pixels are also used to check whether a user has been redirected to our website after clicking on our Facebook ads. Among other things, Facebook Pixel uses cookies that are stored locally in the cache of the web browser on your end device. If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us and does not allow us to draw any conclusions about your identity. However, this data can be assigned by Facebook to your user account there. We have no influence on the scope and further use of data processed by Facebook through the use of Facebook pixels. Even if you are not registered with Facebook or are not logged in, there is a possibility that Facebook will find out and store your IP address and any other identifying features.

We use Facebook pixels for marketing and optimisation purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads. The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

You can revoke your consent to the processing of personal data by Facebook pixels and the use of your data to display Facebook ads at any time for the future. You can make settings regarding which types of adverts are displayed to you within Facebook directly on the Facebook website: https://www.facebook.com/settings?tab=ads . We would like to point out that this setting will be deleted if you delete your cookies in the browser.

http://optout.networkadvertising.org/

http://www.aboutads.info/choices

http://www.youronlinechoices.com/uk/your-ad-choices/

Information from the third-party provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Further information from the third-party provider on data protection can be found on the following Facebook website https://www.facebook.com/about/privacy . Information on Facebook Pixel can be found on the following Facebook website https://www.facebook.com/business/help/651294705016616 .

Google Dynamic Remarketing

We use "Google Dynamic Remarketing" on our website, a service provided by Google Ireland Limited (hereinafter referred to as "Google"). This is a procedure with which we would like to address you again. This application allows our adverts to be displayed to you when you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when you visit various websites. This enables Google to recognise your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used for remarketing.

We use Google Dynamic Remarketing for marketing and optimisation purposes, in particular to provide you with relevant and interesting offers. The service is also used to improve campaign management reports and to calculate advertising costs fairly. The legal basis is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR.

You can prevent the use of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the storage of cookies by setting your web browser to block cookies from the domain www.googleadservices.com are blocked. To do this, go to the website https://www.google.de/settings/ads . Please note that this setting will be deleted if you delete your cookies. You can also block interest-based adverts via the link http://optout.aboutads.info/?c=2 HYPERLINK "http://optout.aboutads.info/?c=2&lang=EN"& HYPERLINK "http://optout.aboutads.info/?c=2&lang=EN "lang=EN to deactivate them. This setting will also be cancelled if you delete your cookies.

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google website.

Privacy policy: https://policies.google.com/privacy?hl=de HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de"& HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de "gl=en

Google website statistics: https://services.google.com/sitestats/de.html

Google Ads

This website uses "Google Ads" (formerly Google AdWords), a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads offers the opportunity to draw attention to attractive offers on websites already visited with the help of advertising material on external websites. This is used to determine how successful individual advertising measures are. These adverts are delivered by Google via so-called "AdServers". For this purpose, so-called AdServer cookies are used, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google Ads will store a cookie on your end device. These cookies generally lose their validity after 30 days. Cookies are not used to identify you personally. This cookie is generally used to store the following information as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognise your web browser. If a user visits certain content or pages of a Google Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked via the website of Google Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive anonymised, statistical evaluations from Google. These analyses allow us to recognise the effectiveness of the advertising measures used. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google servers. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or are not logged in, it is possible that Google will find out your IP address, store it and process it for other purposes.

We use Google Ads for marketing and optimisation purposes, in particular to be able to show you relevant and interesting advertisements, to improve campaign performance evaluations and to achieve a fair calculation of advertising costs. The legal basis is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR.

You can prevent the function of cookies by deleting existing cookies and deactivating the storage of new cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the storage of cookies by closing your web browser via https://www.google.de/settings/ads so that cookies from the domain www.googleadservices.com are blocked. We would like to point out that this setting will be deleted if you delete your cookies. You can also block interest-based adverts via the link https://optout.aboutads.info link. Please note that this setting will also be deleted if you delete your cookies in the web browser.

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google websites:

Privacy Policy: https://policies.google.com/privacy?hl=de HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de"& HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de "gl=en

Google website statistics: https://services.google.com/sitestats/de.html

Pinterest retargeting

A pixel, the so-called Pinterest Tag, of Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter referred to as "Pinterest") is integrated on this website. This pixel collects information about the use of this website (e.g. information about viewed content) by Pinterest Europe Ltd. This information can be assigned to your person with the help of other information that Pinterest Europe Ltd. has stored about you, e.g. due to an account on the social network "Pinterest". The information collected via the pixel can be used to display interest-based adverts for our offers in your Pinterest account (retargeting). The information collected via the pixel can also be aggregated by Pinterest Europe Ltd. and the information thus obtained can be used by Pinterest Europe Ltd. for its own advertising purposes as well as for advertising purposes of third parties. Pinterest Europe Ltd. can, for example, infer certain interests from your surfing behaviour on this website and also use this information to advertise customised third-party offers. Pinterest Europe Ltd. may also combine the information collected via the pixel with other information that Pinterest Europe Limited has collected about you via other websites and/or in connection with the use of the Pinterest social network, so that Pinterest Europe Ltd. can store a profile about you. This profile can be used for advertising purposes.

The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR (consent). You can find more information on data protection at Pinterest Europe Ltd. at https://policy.pinterest.com/de/privacy-policy

Integrated third-party content

Google Maps

We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In the process, metadata is transmitted to the service provider, which may be personalised. Google also obtains your IP address. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, please log out before activating this function. The information collected by Google is also transmitted to Google servers (Google Inc.) in the USA. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you should preferably contact Google to exercise this right. The function is only started and data transmitted to the service provider when the service is activated. The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR (consent).

Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de .

YouTube

We have integrated YouTube videos into our online offering, which are available at https://www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. According to YouTube, data is only transmitted when you play the videos. We have no influence on this data transfer.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, metadata is transmitted to the service provider, which may be personal. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, log out before activating the function. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, preferably by contacting YouTube.

The function is only started and data transmitted to the service provider when the service is activated. The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR (consent). Your consent can be revoked at any time for the future.

Google Fonts

We use "Google Fonts" on our website, a service provided by Google Ireland Limited (hereinafter referred to as "Google"). The service enables us to use external fonts, so-called Google Fonts. The Google Fonts are installed locally on our server. There is no connection to Google servers. We use "Google Fonts" on our website, a service provided by Google Ireland Limited (hereinafter referred to as "Google"). The service enables us to use external fonts, so-called Google Fonts. For this purpose, the required Google font is loaded into the browser cache by your browser when you access our website. This is necessary so that your browser can display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These web fonts are integrated by a server call, usually to a Google server in the USA. This tells the server which of our web pages you have visited. The IP address of the browser on your device is also stored by Google. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Web Fonts.

We use Google Web Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. This also constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. F GDPR. Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de"& HYPERLINK "https://policies.google.com/privacy?hl=de&gl=de "gl=en . Further information on Google Web Fonts can be found at https://fonts.google.com/ , https://developers.google.com/fonts/faq?hl=de-DE&csw=1 and https://www.google.com/fonts#AboutPlace:about .

Online video conferencing tools

Zoom

We use the "Zoom" tool to conduct telephone and video conferences, online meetings, video counselling, digital coaching and/or webinars (hereinafter: "online meetings"). Zoom is a service of Zoom Video Communications, Inc. 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. If you visit the Zoom website ( https://zoom.us ), Zoom is responsible for data processing. Accessing this website is required to download the necessary software if you cannot or do not want to use it directly and without downloading it via an Internet browser. You can also use Zoom if you enter the relevant meeting ID and any other access data for the online meeting directly in the Zoom app. Basic functions can also be used without the app via a browser version.

Data categories

Various types of data are processed when using Zoom. The total volume of data processed also depends on the information provided by the user before, during and after an online meeting. If you take part in an online meeting as an external participant, you will receive an access link from the host by email. When registering for the online meeting, you must then enter your name and, if applicable, your e-mail address. The tool also collects user data that is required to provide the service. This includes, in particular, technical data about your devices, your network and your internet connection, such as IP address, device type, operating system type and version, client version, camera type, microphone or loudspeaker, type of connection. The following personal data may be processed:

User details: first name, surname, telephone (optional), email address, password (if "single sign-on" is not used), profile picture (optional), department (optional)

Meeting metadata: Topic, description (optional), date, time, duration, participant IP addresses, device/hardware information

For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

When dialling in by telephone: details of the incoming and outgoing telephone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.

Text, audio and video data: You may have the option of using the chat, question or survey functions in an "online meeting". The text entries you make are processed in order to display them in the "online meeting" and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from a microphone and any video camera on the end device are processed during the meeting. Data transmission from the camera and microphone can be switched off or muted independently at any time and by any user via the Zoom applications.

Data storage

Online meetings are not recorded. If we wish to record online meetings, we will inform you in advance and obtain your consent. The fact of the recording will also be displayed to you in the Zoom app. The recordings stored on Zoom's cloud servers are automatically deleted after 30 days at the latest. If online meetings are not recorded, the provider does not store the meeting content after the online meeting has ended, according to its own information. If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case. In the case of webinars, we may also process the questions asked by webinar participants for the purposes of recording and following up webinars. If you are logged in with a Zoom account, reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored on Zoom for up to one month. The "attention monitoring" available on Zoom is deactivated. The text within the chat function is saved in a separate file and is not part of the video if it is recorded.

Automated decision-making within the meaning of Art. 22 GDPR is not used.

Legal basis for data processing

Insofar as personal data is processed by employees of W. & L. Jordan GmbH, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of Zoom, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component of the use of Zoom, Art. 6 para. 1 lit. f GDPR is the legal basis for data processing. In these cases, our interest lies in the effective organisation of "online meetings". Otherwise, the legal basis for data processing when conducting "online meetings" is Art. 6 para. 1 lit. b GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

Recipients / forwarding of data

Personal data that is processed in connection with participation in "online meetings" is generally not passed on to third parties unless it is specifically intended to be passed on. Apart from this, data will only be passed on to third parties if we are legally obliged to do so (e.g. by court order) or if the data subjects have expressly consented to their data being passed on. Zoom Video Communications Inc. supports us in the processing of your data as an external service provider and processor within the meaning of Art. 28 GDPR. As a processor, Zoom Video Communications Inc. processes your data strictly in accordance with instructions and on the basis of a separately concluded data processing agreement. Data processing outside the European Union Data processing may also take place outside the EU or the EEA. The data collected directly during the online meetings (such as images, sound, call content) are generally processed at the nearest Zoom server location, and therefore regularly within the EU, otherwise exclusively on US servers. The remaining metadata is processed on US servers. The data is transferred on the basis of standard data protection clauses of the EU Commission as a suitable guarantee of an adequate level of data protection in accordance with Art. 46 para. 2 lit. c GDPR and technical and organisational measures. For example, the data is encrypted during transport via the Internet and is therefore generally protected against unauthorised access by third parties. Zoom also provides end-to-end encryption for online meetings and the use of the data routing function.

Further information on data protection at Zoom can be found at https://zoom.us/dede/privacy.html .

Messenger services

We use messenger services to stay in contact with customers and interested parties. We also use the services to draw attention to our services and products.

In doing so, user data may be processed outside the European Union. This may result in risks for you as a user and may make it more difficult to enforce your rights. When selecting the messenger services we use, we ensure that the operators undertake to comply with the data protection standards of the European Union.

If you use our messenger service, we W. & L. Jordan GmbH, Horst- Dieter-Jordan-Straße 7-10, 34134 Kassel, Germany, are jointly responsible with the provider of the respective messenger service in accordance with Art. 26 GDPR and other data protection regulations.

We have no influence on the processing of personal data by the respective service provider. For example, messenger services may use your data for market research and advertising purposes. Among other things, user behaviour can be analysed and a user profile can be created from the resulting interests of the user. Messenger services can read the contact data on the end devices you use and, if necessary, pass it on to third parties. Persons who are not registered as users with the respective messenger service may also be affected by data processing.

Messenger services provide statistical data of different categories. These statistics are generated and provided by the respective messenger service provider. As a user of the messenger service, we have no influence on the generation and presentation of this data. We use the data available in summarised form to make our posts and activities in our Messenger channel more attractive for customers and interested parties. Due to the constant further development of the service providers, the availability and processing of the data changes, so we refer to the current data protection declarations of the service providers for further details.

Legal basis

For the use of messenger services, including the processing of users' personal data, we ask for their consent to provide up-to-date and supportive information and interaction opportunities for and with our customers and interested parties in accordance with Art. 6 para. 1 lit. a GDPR. Consent can also be given by registration if necessary.

Storage period

The data collected directly by us via the messenger services will be deleted from our systems as soon as the purpose for their processing no longer applies, you request us to delete them or revoke your consent to their storage. Mandatory statutory provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data that is stored by providers of messenger services for their own purposes. You can find more information on this directly from the service provider (e.g. in their privacy policy, see below).

Rights of data subjects

In principle, you can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the service provider.

Despite joint responsibility, we would like to point out that we do not have complete access to your personal data. For this reason, you should contact the provider of the messenger service directly if you wish to request information or assert your rights as a data subject. This is because only the providers have access to the user data and can take direct action and provide information. Please contact us if you require assistance with this.

Our messenger services:

Facebook Messenger

Information about the service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

You can find further data protection information at https://www.facebook.com/policy.php .

Instagram Direct

Information about the service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Further data protection information can be found at https://instagram.com/about/legal/privacy .

Social media

Information on social media

We operate publicly accessible profiles in social networks to draw attention to our services and products. We would like to get in touch with you there as a visitor and user of these pages and our website.

In doing so, user data may be processed outside the European Union. This may result in risks for you as a user and may make it more difficult to enforce your rights. When selecting the social media platforms we use, we ensure that the operators undertake to comply with EU data protection standards.

If you visit one of our social media sites (e.g. Facebook), we, W. & L. Jordan GmbH, Horst-Dieter-Jordan-Straße 7-10, 34134 Kassel, Germany, are jointly responsible with the operator of the respective social media platform within the meaning of the GDPR and other data protection regulations.

Data processing on social media platforms

We have no influence on the processing of personal data by the respective platform operator. For example, social networks such as Facebook use your data for market research and advertising purposes. Among other things, user behaviour can be analysed and a user profile created from the resulting interests of the user. The social media operators use cookies to store and further process this information. These are text files that are stored on the user's various end devices. If you have a profile on the respective social media platform and are logged in to it, the information is stored and analysed across all devices. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. Data processing may also affect people who are not registered as users on the respective social media platform.

We can access statistical data of various categories via social media platforms. These statistics are generated and provided by the social media operator. As the operator of the fan page, we have no influence on the generation and presentation of this data. We use this data available in summarised form (total number of page views, "likes", page activities, post interactions, reach, video views, post reach, comments, shared content, responses, proportion of men and women, origin in relation to country and city, language, views and clicks in the shop, clicks on route planners, clicks on telephone numbers) to make our posts and activities on our fan page more attractive to users. Due to the constant development of social media platforms, the availability and processing of data is changing, so we refer you to the platforms' privacy policies for further details.

Legal basis

The operation of these fan pages, including the processing of users' personal data, is based on our legitimate interests in a contemporary and supportive information and interaction opportunity for and with our users and visitors in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. You may also have given a platform operator your consent to data processing, in which case Art. 6 para. 1 lit. a GDPR is the legal basis.

For a comprehensive description of the respective data processing and the possibilities of objection (opt-out), we refer to the data protection declarations and information of the respective platform operator.

Storage duration

The data collected directly by us via the social media sites is deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it or revoke your consent to its storage. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data that is stored by social network providers for their own purposes. You can find more information on this directly from the operator of the social network (e.g. in their privacy policy, see below).

Assertion of rights

You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective portal (e.g. Facebook).

Despite joint responsibility, we would like to point out that we do not have complete access to your personal data. For this reason, you should contact the providers of the social media platforms directly if you wish to request information or assert your rights as a data subject. This is because only the providers have access to the user data and can take direct action and provide information. If you need help with this, please contact us: W. & L. Jordan GmbH, Horst-Dieter-Jordan-Straße 7-10, 34134 Kassel, datenschutz@joka.de.

Our social networks

Facebook:

Provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum

Option to object (opt-out): https://www.facebook.com/settings?tab=ads

Instagram:

Provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy Policy: http://instagram.com/about/legal/privacy

Possibility of objection (opt-out): http://instagram.com/about/legal/privacy

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Possibility of objection (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Pinterest:

Provider: Provider: Pinterest Europe Ltd, WeWork, 2 Dublin Landings, N Wall Quay, Dublin 1, D01 V4A3

Possibility of objection (opt-out): https://help.pinterest.com/en/article/personalization-and-data

Xing:

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Option to object (opt-out): https://privacy.xing.com/de/datenschutzerklaerung

YouTube:

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Option to object (opt-out): https://adssettings.google.com/authenticated

Use of social plug-ins

We use the plug-ins of the following social networks on our website. We use the so-called two-click solution to integrate these plug-ins. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in via the button. The plug-in provider only receives the information that you have accessed the corresponding website of our online offering if you click on the marked field and thereby activate it. IP anonymisation may take place with individual providers in Germany. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the USA in the case of US providers). As the plug-in provider collects data via cookies in particular, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f GDPR.

Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

The following social plug-ins are integrated into our website: