This privacy notice informs you about our handling of your personal data. We would like to present you with an overview of this processing to ensure that it is transparent and verifiable. . In order to ensure fair processing, this privacy notice contains general information about our processing of your personal data and information about your rights in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
We will also inform you in detail about:
I. General information
II. Data processing on our website
III. Data processing on our facebook fanpage
IV. Further data processing
Janz Tec AG, Im Dörener Feld 8, 33100 Paderborn, Germany (hereinafter referred to as “we” or “us”) is responsible for the data processing.
I. General information
If you have any questions or suggestions regarding this information, or if you want to contact us to assert your rights, please address your query to
2. Legal basis
We process personal data taking the relevant data protection provisions into account, in particular those of the GDPR and BDSG (Federal Data Protection Act). Data processing conducted by us is only done on the basis of a legal permit. We only process personal data with your consent (Art. 6 para. 1 sentence 1 a) GDPR) to fulfil a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (Art. 6 para. 1 sentence 1 b) GDPR), to comply with a legal obligation (Art. 6 para.1 sentence 1 c) GDPR) or when processing is necessary to maintain the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms which require protection of personal data (Art. 6 para. 1 sentence 1 f) GDPR).
3. Duration of storage
Unless the following information specifies otherwise, we shall only store your personal data as long as is necessary for achieving the processing purpose or for the performance of our contractual or legal obligations. Legal storage obligations may in particular arise from commercial or tax-related regulations.
4. Recipient of the data
We make use of commissioned service providers for individual processing operations. This includes, for example, hosting, maintenance and support of IT systems, marketing measures or destruction of files and data carriers. These service providers will only process the personal data following explicit instructions and are contractually obligated to guarantee the implementation of sufficient technical and organisational data protection measures. In addition, we may transfer personal data of our customers to parties such as postal and delivery services, payment and information services, banks, tax consultants/auditors or the tax authorities.
5. Processing in the exercise of your rights pursuant to Art. 15 to 22 GDPR
If you exercise your rights pursuant to Art. 12 to 22 GDPR, we will process the personal data transmitted for the purpose of implementing these rights by us and to be able to provide proof of this. For the purpose of providing information and preparing such information, we will process stored data only for this purpose and for purposes of data protection control and otherwise restrict processing in accordance with Art. 18 GDPR.
These processing operations are based on the legal basis of Art. 6 Para. 1 letter c) GDPR in connection with Art. 15 to 22 GDPR and § 34 para. 2 BDSG.
6. Your rights
As an affected person, you have the right to assert your rights as an affected person vis-à-vis our company. You have the following rights in particular:
7. Right to object
As stipulated in Art. 21 GDPR, you have the right to object to any processing which arises from the legal basis in Art. 6 para. 1 sentence 1 e) or f) GDPR.If we process personal data for direct marketing purposes, you can object to this processing in accordance with Art. 21 para. 2 and para. 3 GDPR.
8. Data protection officer
You can contact our data protection officer at:
II. Data processing on our website
When using the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected during your visit to the website. In data protection law, the IP address is generally also considered a personal date. An IP address is assigned to every device connected to the internet by the internet provider so that it can send and receive data.
1. Data transmission to the USA
Visiting our website may involve the transfer of certain personal data to the USA. For the transfer of data to the USA as a third country, i.e. a country in which the GDPR is not applicable law, the European Commission has decided in accordance with Art. 45 GDPR that an adequate level of data protection is required for companies certified under the EU-US Privacy Shield. The transfer to the USA will then take place in a permissible manner. Certified companies are listed by the U.S. Department of Commerce at: www.privacyshield.gov/list.
2. Processing of server log files
In case of a purely informative use of our website, general information which is transmitted by your browser to our server is automatically (hence not via registration) stored. By default, this includes: type of browser/version, operating system used, accessed page, previously accessed page (referrer URL), IP address, date and time of the server query and HTTP status code.
The processing is necessary for the purposes of pursuing our legitimate interests and is based on the legal foundation of Art. 6 para. 1 sentence 1 f) GDPR. This processing serves the technical administration and security of our website. The stored data is deleted when there are no specific indications that prompt us to suspect, on reasonable grounds, any illegal activity which requires the further review and processing of the information for this reason. We will not be able to identify you as a data subject from the information we hold. Therefore Art. 15 to 22 GDPR do not apply pursuant to Art. 11 para. 2 GDPR, unless you provide additional information to enable identification in order to exercise the rights set out in these articles.
3. Contact form
Our website contains a contact form which you can use to send us messages. The transfer of your personal data in these messages is encrypted. All data fields designated as mandatory fields are required to process your request. Your request cannot be processed if you do not provide all the necessary information. The disclosure of other personal data is voluntary. Alternatively, you can send us a message via the contact email address.
The legal basis for the data processing is provided in Art. 6 para. 1 sentence 1 b) GDPR.
4. White Paper
You also have the option of receiving white papers on various specialist IT issues via our website. We collect the personal data available from the respective form in order to provide you with a white paper. The legal basis for the data processing is provided in Art. 6 para. 1 sentence 1 b) GDPR.
5. Support Platform
We offer a support platform through which our customers can submit support requests. Personalized access data (e-mail address and password) are required for use. Further personal data may be processed within the scope of use. The data will only be processed for the purpose of providing the service. The processing is based on the legal basis of Art. 6 Para. 1 letter b) GDPR.
Our website also provides the option of subscribing to our newsletter. Once you subscribe, we will regularly provide you with news on our current offers. Subscribing to the newsletter requires a valid email address. If you subscribe to our newsletter on our website, we will process personal data such as your email address and possibly your name for dispatching purposes. We also track your reading behaviour and the access rates of our newsletter. Here, we analyse how often you accessed the newsletter and which links were clicked. The legal basis for this processing is provided in Art. 6 para. 1 sentence 1 a) GDPR. You can withdraw your consent at any time by unsubscribing from our newsletter.
To verify the email address, you will first receive a registration email which you must confirm via a link (double opt-in). When subscribing to the newsletter, we also store the IP address, as well as the date and time of the registration. Processing of this data is required to prove that consent has been issued. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 sentence 1 c) in conjunction with Art. 7 para. 1 GDPR).
8. Google AdWords Conversion Tracking
We use the online advertising programme Google AdWords by Google LLC (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; “Google”) to run advertisements with Google. If you access our website via a Google advertisement, Google will set a cookie on your end device (“conversion cookie”). Each AdWords customer is assigned a different conversion cookie so that the cookies cannot be tracked via the websites of other AdWords customers. The information obtained through the cookie is used to compile conversion statistics. We use this to determine the total number of users who clicked one of our Google advertisements. However, we do not receive any information which can be used to personally identify the user.
If this involves the processing of personal data, this shall be done on the legal basis of Art. 6 para. 1 sentence 1 f) GDPR. The data processing serves our legitimate commercial interests. You can object to your inclusion in conversion tracking by preventing the setting of cookies via your browser settings. In addition to this, you can delete cookies that have already been set in your browser at any time. The withdrawal of your consent does not affect the legality of the processing that took place on the basis of your consent prior to revocation of your consent. Google is certified under the EU-US Privacy Shield agreement and thus provides a suitable guarantee of adherence to European data protection law.
9. Google Analytics
We make use of Google Universal Analytics. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This enables us to contextualize individual user actions and analyze long-term relations.
Data on user actions is stored for a period of 14 months, after which it is automatically deleted. Deletion of data for which the storage period has expired automatically takes place once a month.
We only use Google Analytics with IP anonymization enabled, which means that Google will truncate the IP address of users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to and truncated by Google servers in the United States. The IP address transmitted by your browser is not merged with other Google data.
We also use Google Analytics (remarketing) advertising features. This feature, combined with the multi-device features of Google AdWords and Google DoubleClick, allows us to display advertisements in a more targeted manner and present users with ads relevant to their specific interests. The remarketing function displays ads and products that have been found to be of interest to users on other websites in the Google network. This function allows us to link advertising target groups created via Google Analytics Remarketing with the multi-device functions of Google AdWords and Google DoubleClick. This way, interest-related, personalized advertising messages that have been adapted to you on the basis of your previous usage and surfing behavior on one terminal (e.g. mobile phone) can also be displayed on another of your terminals (e.g. Tablet or PC).
If you have given your consent, Google will link your web and app browser history to your Google Account for this purpose. This allows the same personalized advertising to be displayed on any device you sign in to with your Google Account. The aggregation of the data collected in your Google Account is based solely on your consent, which you may give to or withdraw from Google. (Art. 6 para. 1 letter a) GDPR).
Google Analytics collects data for advertising purposes for these linked services. To support the remarketing feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data. This is used to define and create target groups for multi-device advertising. Google cookies are used to collect additional access data for advertising purposes and identifiers.
The legal basis for such processing of your data in the context of Google Analytics is your consent Art. 6 para.1 a) of the GDPR. In order to comply with our duty of proof under Art. 7 Para. 1 GDPR we document any consent you have given us. Since we are obliged to do so, this storage is based on the legal basis of Art. 6 Para. 1 letter. c) GDPR).
You can withdraw your consent by activating this link. This will deactivate Google Analytics again. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de. You can also delete or prevent the Google Analytics cookies from being saved by adjusting the settings of your browser software.
We cannot exclude the possibility that Google Analytics may transmit the data processed to Google LLC, which is based in the USA. Google LLC is certified under the EU-US Privacy Shield, thereby offering an adequate level of data protection in accordance with Art. 45 GDPR.
10. Integrated services and content of third parties
We use services and contents on our website that are provided by third-party vendors. Integration of these requires the technical processing of your IP address so that the contents can be sent to your browser. Your IP address is therefore forwarded to the respective third-party vendor.
This data processing is conducted to safeguard our legitimate interests regarding the optimisation and economical operation of our website. They arise from the legal basis of Art. 6 para. 1 sentence 1 f) GDPR.
We have included the “Google Maps” service for the depiction of maps on our website. Google Maps is provided by Google Ireland Limited (Ireland/Europe). When using Google Maps, we cannot exclude the possibility that the processed data may be transferred to Google LLC, which is based in the USA. Google LLC is certified under the EU-US Privacy Shield which offers an appropriate level of data protection in accordance with Art. 45 GDPR.
We use the “YouTube” service provided by YouTube LLC (USA) to play videos on our website. YouTube is a subsidiary of Google and is certified under the Privacy Shield agreement; it thus guarantees adherence to European data protection law.
III. Data processing on our Facebook fanpage
When you visit our Facebook fanpage, on which we present our company or individual products from our range, certain information about you will be processed. Facebook Ireland Ltd (Ireland/EU) is solely responsible for this processing of personal data. For more information about Facebook’s processing of personal data, please visit www.facebook.com/privacy/explanation.
1. Processing of page insights
Facebook provides us with anonymous statistics and insights for our Facebook fanpage, which help us understand the types of actions people take on our fanpage (known as “page insights”). These page insights are created based on certain information about individuals who have visited our fanpage. This processing of personal data is done by Facebook and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our fanpage and improving our fanpage based on this knowledge. The legal basis for this processing is Art. 6 Para. 1 letter f) GDPR. Under no circumstances will we assign the information obtained via the page insights to a specific Facebook profile via the reference to “Like” information for our page.
We have reached an agreement with Facebook on processing as joint controllers, which defines the distribution of data protection obligations between us and Facebook. For details of the processing of personal data to create page insights and the agreement between us and Facebook, please visit www.facebook.com/legal/terms/information_about_page_insights_data.
2. Processing data communicated to us through our fanpage
We also process information that you have provided to us through our Facebook fanpage. Such information may include your Facebook name, contact information or a message to us. We will only process this personally identifiable information if we have previously specifically asked you to provide it to us, such as in a survey or a competition. This processing is carried out by us as the sole responsible party.
If your request is directed to the conclusion or execution of a contract with us, Art. 6 Para. 1 letter b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 Para. 1 letter f) GDPR.
IV. Further data processing
1. Contractual relations
For the establishment or implementation of the contractual relationship with our customers, the processing of the personal, contract and payment data provided to us is regularly necessary. The legal basis for this processing is Art. 6 Para. 1 letter b) GDPR. In addition, we process customer and prospect data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Para. 1 letter f) GDPR and serves our interest in further developing our services and to inform you specifically about offers from Janz Tec AG. Further data processing can take place with your comsent (Art. 6 para. 1 letter a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 para. 1 letter c) GDPR).
2. Employment Applications
When you apply to us for employment, we only process application data for purposes related to your interest in current or future employment at our company and the processing of your employment application. Your application will only be processed and taken note of by the respective contact persons. All employees entrusted with data processing are obligated to maintain confidentiality of your personal data.
Should we not be able to offer you employment, we shall store your application data for up to six months after a respective rejection in order to be able to answer questions arising in relation to your application and rejection. This shall not apply in the event that legal provisions prevent deletion, when further storage is required for providing proof or when you have explicitly consented to a longer storage period.
The legal basis for the data processing is provided in § 26 para. 1 sentence 1 BDSG. Should we store your application data for a period exceeding six months and you have provided explicit consent, we wish to point out that you can withdraw this consent at any time in accordance with Art. 7 para. 3 GDPR. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.