Data privacy policy

Privacy policy

I.
Name and address of the controller
The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is:

Company: J. D. Theile GmbH & Co. KG
Street, No. : Letmather Str. 26-45
Zip code, City : 58239 Schwerte
Country : Germany
Phone number : +49 2304 757-0
E-mail address : info@jdt.de
Website : www.jdt.de

II.
Contact details of the data protection officer
E-mail address datenschutz@jdt.de

III.
General information on data processing

1. Scope of the processing of personal data
As a matter of principle, we process personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a) EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the case of processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c) DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) f) DSGVO serves as the legal basis for the processing.

3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV.
Provision of the website

1. Description and scope of data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected in this process:

(1) information about the browser type and version used;
(2) the operating system of the user;
(3) the user's Internet service provider;
(4) the IP address of the user;
(5) the date and time of access;
(6) websites from which the user's system accesses our website;
(7) websites that are accessed by the user's system via our website;
(8) graphic resolution of the user

This data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f) DSGVO.
 
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) DSGVO.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of the storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling computer is no longer possible.

5. Possibility of objection and elimination
The collection of data for the provision of the website and the storage of the data (in log files) is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V.
Use of cookies

1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when our website is called up again.

We use cookies to make our website user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.

When calling up our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f) DSGVO.

3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of our website for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:

(1) Acceptance of language settings.

The user data collected by technically necessary cookies are not used to create user profiles.

4. Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

VI.
free

VII.
Registration

1. Description and scope of data processing
On our website, we offer users the opportunity to register in a customer portal by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

 
Name
Company
E-mail
Customer number
Language
Username
Password

At the time of registration, the following data is also stored:

(1) Date and time of registration.

As part of the registration process, the user's consent to the processing of this data is obtained.

2. Legal basis for data processing
The legal basis for the data processing of the data is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent.

3. Purpose of the data processing
User registration is required for the provision of certain content and services on our website.
 
(1) Document retrieval (certificates)
(2) Order history (customer)

4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This is the case for the data collected during the registration process when the registration on our website is cancelled and modified.

Continuing obligations require the storage of personal data during the term of the contract. In addition, warranty periods must be observed and the storage of data for tax purposes. It is not possible to determine in general terms which storage periods must be observed in this regard, but rather these are determined on a case-by-case basis for the contracts and contracting parties concluded in each case.

5. Possibility of objection and elimination
As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time. The user can change the data in the dialog within the customer portal. The deletion of the data requires the user to contact JDT. The data can only be deleted by JDT.

 
VIII.
Contact form and e-mail contact

1. Description and scope of data processing
On our website there is a contact form which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
These data are:      

*mandatory fields                                    

At the time of the page call of the contact form, the following data are also stored:

(1) The IP address of the user,
(2) Date and time of registration.

For the processing of the data, your consent is obtained in the context of the processing of the contact form and reference is made to this privacy policy.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

2. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) DSGVO.

3. Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This applies to the personal data from the input mask of the contact form and those sent by e-mail and takes place when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The personal data collected during the sending process will be deleted immediately after sending the contact data (e-mail)!

5. Possibility of objection and elimination
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conservation cannot be continued.

The revocation of the consent and the objection to the storage must be addressed in writing to JDT and will be carried out immediately, unless other legal or statutory provisions (e.g. retention periods, etc.) contradict!

All personal data stored in the course of contacting us will be deleted in this case.

IX.
Web analysis by Matomo (formerly PIWIK)

1. Scope of the processing of personal data
We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. The software sets a cookie on the user's computer (for cookies, see already above). If individual pages of our website are called up, the following data is stored:

(1) 2 bites of the IP address of the user's calling system,
(2) the web page called up,
(3) the website from which the user accessed the accessed website (referrer),
(4) the sub-pages accessed from the accessed website,
(5) the time spent on the web page,
(6) the frequency with which the web page is accessed.

The software runs exclusively on the servers of our website. A storage of the personal data of the users only takes place there. No data is passed on to third parties. The software is set in such a way that the IP addresses are not stored completely, but 2 bites of the IP address are masked (example: 192.168.XXX.XXX). In this way, an assignment of the shortened IP address to the calling computer is no longer possible.

2. Legal basis for the processing of personal data
The legal basis for the processing of the users' personal data is Art. 6. Paragraph 1 lit. f) DSGVO.

3. Purpose of the data processing
The processing of the users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest, in the processing of data according to Art. 6 para. 1 lit. f) DSGVO. By anonymizing the IP address, the interest of users in their protection of personal data is sufficiently taken into account.

4. Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after 30 days.

5. Possibility of objection and removal
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the setting in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

X.
Company contact data

Data, of prospective customers and customers, which are initiated by daily processes and which are raised for the order initiation, contract fulfilment and for the receipt of the business relations, are stored purpose-bound in our EDP. Personal data is obtained in various ways (correspondence, electronic correspondence, business cards, website publications, etc.).

XI.
Your rights as a data subject (DSGVO Art. 12-22 and Art. 34)

(1) You have the following rights vis-à-vis us with regard to the personal data concerning you:
- Right to information (Art. 15),
- Right to rectification or erasure (Art. 16 and Art. 17),
- Right to restriction or processing (Art. 18),
- Right to object to processing (Art. 21),
- Right to data portability (Art. 20).

(2) If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort (Art. 19).

You have the right against the controller to be informed about these recipients (Art. 15(1)(c)).

(3) You have the right to revoke your declarations of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation (Art. 7 (3) DSGVO).

(4) You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is made with your explicit consent, is permitted by applicable law or is necessary for the conclusion or performance of an agreement/contract entered into between you and us (Art 22).

(5) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 15(1)(f).