Privacy notice

Preamble

This privacy notice explains the types of personal data we process, the purposes for which we process them, and the scope of that processing. It applies to all processing of personal data we carry out, both in the course of our services and in particular on our websites, in mobile applications and within external online presences such as our social-media profiles (together: the "online offering").

Controller

Stefan Junge
Freiherr-vom-Stein-Straße 11
57518 Betzdorf, Germany

Email: impact@jufinity.de

Overview of processing

Types of data processed

• Master data, employee data, contact data, content data, usage data
• Meta, communication and procedural data; log data

Categories of data subjects

• Employees, users, third parties, whistleblowers

Purposes of processing

• Communication, security measures, feedback
• Provision of our online offering and user experience
• IT infrastructure, whistleblower protection, public relations

Relevant legal bases

We process personal data on the following GDPR legal bases:

• Consent (Art. 6(1)(a) GDPR) — the data subject has given consent to the processing for one or more specific purposes.
• Legal obligation (Art. 6(1)(c) GDPR) — processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate interests (Art. 6(1)(f) GDPR) — processing is necessary for the legitimate interests of the controller or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override those interests.

In addition to the GDPR, German national data-protection law applies, in particular the German Federal Data Protection Act (BDSG).

Security measures

We take appropriate technical and organisational measures in accordance with statutory requirements, taking into account the state of the art, implementation costs, the nature, scope, circumstances and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons. This includes securing the confidentiality, integrity and availability of data, including TLS/SSL encryption (HTTPS) for online connections.

Retention and deletion

We delete personal data we process in line with statutory requirements as soon as the consents on which processing is based are withdrawn or no further legal basis exists for the processing. Exceptions apply where statutory obligations or special interests require longer retention or archiving.

Data-subject rights

Under the GDPR you have the following rights, in particular under Art. 15-21 GDPR:

• Right to object to processing based on legitimate interests at any time on grounds relating to your particular situation, and at any time to processing for direct marketing.
• Right to withdraw consent at any time.
• Right of access, including a copy of your data.
• Right to rectification of incorrect data and to completion of incomplete data.
• Right to erasure ("right to be forgotten") and to restriction of processing.
• Right to data portability in a structured, commonly used and machine-readable format.
• Right to lodge a complaint with a supervisory authority.

Online offering and web hosting

We process user data to make our online services available. This includes the user's IP address, which is required to deliver the content and functions of our online services to the user's browser or device. Access to our online offering is logged in server log files (URL accessed, date and time, transferred data volume, success status, browser type and version, operating system, referrer URL, IP address and requesting provider). Log information is stored for a maximum of 30 days and then deleted or anonymised. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Use of necessary cookies

"Cookies" are small text files stored on users' devices that can hold certain information, such as a selected language setting. We use strictly necessary cookies only. We do not use cookies for analytics, tracking or marketing purposes, and we do not embed any third-party services for such purposes.

Cookie used: To store your language selection (German or English) we set the "NEXT_LOCALE" cookie. It contains only the code of the language you selected (e.g. "de" or "en"), does not allow recognition across different websites, and serves solely to display our online offering in your chosen language. You can delete the cookie at any time via your browser settings.

Legal basis and consent: As this cookie is strictly necessary to provide the service you have expressly requested, no consent is required for its use under Section 25(2) no. 2 TDDDG (the German ePrivacy provision). Where personal data is processed in this context, it is based on our legitimate interests in a user-friendly and functional online offering (Art. 6(1)(f) GDPR).

Contact and enquiry management

When you contact us, for example by email or telephone, and within existing user and business relationships, we process the information provided by the enquiring person to the extent necessary to answer the enquiry and any measures requested.

Data processed: master data (e.g. names, addresses); contact data (e.g. email address, telephone numbers); content data (e.g. the text of your message, business details such as company and role); meta, communication and procedural data (e.g. the time of the message).

Data subjects: communication partners.

Purposes: communication; organisational and administrative procedures; feedback.

Legal bases: performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR) where the enquiry serves to initiate or perform a contractual relationship; otherwise our legitimate interests in answering enquiries (Art. 6(1)(f) GDPR).

Providing professional publications (whitepaper): On individual pages of our online offering we provide professional publications such as a whitepaper as a PDF file for immediate download. No form and no email address are required, and there is no newsletter sign-up. Retrieving the file only produces the server log files described under "Online offering and web hosting". We do not analyse who downloads a file.

Erasure: We delete enquiries once they have been dealt with, unless statutory retention obligations apply. We review the necessity every two years. Where statutory archiving obligations apply, deletion follows once those periods expire.

Appointment scheduling and online meetings (Cal.com)

We use the service "Cal.com" to schedule appointments and hold online meetings. When you click the "Book a call" button (or a similar button) on our website, you are redirected to a booking page provided by Cal.com. You enter your data and book the appointment there.

Data processed: As part of the booking, the data you provide is processed, in particular your name and email address (mandatory) as well as optional details such as additional notes and the email addresses of any additional guests you invite. This is supplemented by appointment data (date, time, time zone, and the type and duration of the meeting). If we hold the meeting via the integrated video function "Cal Video", the data arising during the video call (e.g. image, audio, chat) is also processed.

Purposes: arranging, managing and holding appointments and communicating with you.

Legal bases: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) where the appointment serves to initiate or perform a contractual relationship, otherwise our legitimate interests in efficient scheduling and communication (Art. 6(1)(f) GDPR).

Provider: Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. Cal.com engages its own sub-processors to provide the service (including the provider of the video function). Third-country transfer: your data is processed in the USA. The transfer is safeguarded by the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement (Art. 28 GDPR) concluded with Cal.com. Privacy policy: cal.com/privacy.

Using Cal.com is voluntary. If you prefer not to book via Cal.com, you can contact us directly by email (impact@jufinity.de).

Blogs and publication media

We operate a blog and similar publication media. Reader data is processed only insofar as necessary for presentation, communication between authors and readers, or security purposes. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Social-media presences

We maintain online presences on social networks (LinkedIn) and process user data within this context to communicate with users active there or to provide information about ourselves. User data may be processed outside the European Union by these networks, which may carry risks for users (e.g. enforcement of user rights may be harder).

LinkedIn: Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland; Legal basis: legitimate interests (Art. 6(1)(f) GDPR); Privacy policy: linkedin.com/legal/privacy-policy.

Joint controllership for page statistics (LinkedIn Page Insights): When you visit or interact with our LinkedIn company page, LinkedIn provides us with statistics and insights in aggregated form ("Page Insights") that help us understand which content resonates. The data required for this is collected and processed by LinkedIn, partly by means of cookies that LinkedIn may store on your device when you visit the page. We have no determining influence over the specific design of this processing or the underlying raw data; we receive the statistics only in aggregated form that cannot be traced back to individuals.

For the processing carried out in connection with Page Insights, we are joint controllers with LinkedIn within the meaning of Art. 26 GDPR. LinkedIn has set out the essential content of this arrangement and the allocation of data protection responsibilities in the "Page Insights Joint Controller Addendum", available at https://legal.linkedin.com/pages-joint-controller-addendum. Under this addendum, LinkedIn assumes primary responsibility for processing the Insights data and for handling data subject rights. You can exercise the corresponding rights both with us and directly with LinkedIn. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in an appealing presentation and in analysing the reach of our posts.

Note on cookies: The statement elsewhere in this policy that we do not use analytics, tracking or marketing cookies refers exclusively to our website jufinity.de. On the LinkedIn platform, LinkedIn uses its own cookies and technologies over which we have no influence. Please refer to LinkedIn's privacy policy and cookie policy for information and settings options.

Changes and updates

Please review this privacy notice regularly. We update it whenever changes to our data processing make this necessary. If changes require action on your part (e.g. consent) or other individual notification, we will inform you.

Glossary

Terms such as "personal data", "processing", "controller", "master data", "contact data", "content data", "usage data" and "log data" are used in the sense of the GDPR.

Created with the free Datenschutz-Generator.de by Dr Thomas Schwenke