Data privacy policy

Privacy Statement

I. Data privacy

In the following, we provide information about the collection of personal data concerning you when you use our website. Personal data are all information that relates to an identified or identifiable individual, such as their name, address, email address and user behaviour.

II. Controller according to the German Data Protection Act [Datenschutzgesetz]

1. The controller pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is:

JCK Holding GmbH Textil KG

Artlandstrasse 73

49610 Quakenbrück, Germany

Phone: +49 (0) 5431 188-100

Fax: +49 (0) 5431 188-101

www.jck.de

contact@jck.de

Commercial register: Osnabrück County Court, HRA number 7104

VAT ID No. pursuant to Section 27 of the German Value Added Tax Act [Umsatzsteuergesetz]: DE 151408322

The contact details of our data protection officer are:

Heiner Niehüser

Data protection officer

DSB Münster GmbH

Martin-Luther-King-Weg 42-44

48155 Münster, Germany

Phone: +49 251 71879-0

Email: hniehueser@dsb-ms.de

or at our postal address, with the supplement “F.A.O. Data Protection Officer”.

III. General information relating to data processing

1. Processing of personal data

We principally only process personal data concerning you to in so far as this is necessary to provide a functional website as well as our contents and services. We principally only process personal data concerning you after you have granted your consent unless it is not possible to obtain a consent in advance due to factual reasons and/or the processing of the data are permitted by statutory regulations.

 2. Processing of personal data according to the GDPR

Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for your consent for processing activities of personal data concerning you. Art. 6 Para. 1 lit. b GDPR serves as a legal basis for the processing of personal data concerning you, which is necessary in order to fulfil a contract, of which you are a contractual party. This shall also apply to the processing activities that are necessary for carrying out pre-contractual measures. Art. 6 Para. 1 lit. c GDPR serves as a legal basis insofar as processing of personal data concerning you is necessary to fulfil a legal obligation which we have to comply with. Should either your vital interests or those of another natural person render processing of personal data necessary, Art. 6 Para. 1 lit. d GDPR shall serve as the legal basis. If the processing is necessary to safeguard our legitimate interest or that of a third party and if your interests, basic rights and basic freedoms do not prevail Art. 6 Para. 1 lit. f GDPR shall serve as the legal basis for the processing.

3. Data erasure and storage duration

If the purpose of the storage ceases to apply personal data concerning you shall be erased or blocked. A storage beyond this time can be carried out insofar as this is envisaged by the European or national legislator in Union regulations, laws or other regulations to which we have to comply. With the expiry of the storage deadline stipulated by the stated standards the data shall be blocked or erased unless it is necessary to continue to store the data for the conclusion of a contract or to fulfil a contract.

IV. Provision of the website and creation of logfiles

1. Description and scope of the data processing

Each time our website is called up our system automatically collects data and information from your computer system.

The following data are collected in this case:

1.1. General information:

1.1.1. Date and time of access

1.1.2. Websites, which are called up by your system via our website

1.1.3. Websites from which your system accesses our website

1.1.4. Information about the type of browser and the version used

1.2. Information from you:

1.2.1. Your operating system

1.2.2. Your internet service provider

1.2.3. Your anonymised IP address

The data are also stored in the logfiles of our system. These data will not be stored together with other personal data concerning you.

2. The temporary data and logfile storage pursuant to GDPR

Art. 6 Para. 1 lit. f GDPR is the legal basis for the temporary storage of the data and the logfiles.

3. Necessity of the data processing

Your IP address will be and remain stored for the duration of the session. This temporary storage by the system is necessary to enable delivery of the website to your computer.

In order to ensure the functionality of the website the storage is carried out in logfiles. We use these data to optimise the website and to ensure the security of our IT systems. The data are not evaluated for other purposes, such as marketing.

According to Art. 6 Para. 1 lit. f GDPR these purposes also represent our legitimate interest in the data processing.

4. Duration of the storage

As soon as the data are no longer required to achieve the purpose for which they were collected, these will be erased. In the event that the data are collected to provide the website these data will be erased when the respective session is ended.

In the event that the data are stored in logfiles the erasure will take place after seven days at the latest. Storage beyond this deadline is possible. In this case, your IP address is erased or alienated so that it is no longer possible to allocate the calling client.

5. Possibility for objection and remedy

For the operation of the website, it is absolutely essential to collect the data for provision of the website and storage of the data in logfiles. There is therefore no possibility for an objection by you.

V.   Use of cookies

1. Description and scope of the data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. An allocation of the data to you is not possible. We use cookies in order to design our website more user-friendly.

The following data are stored and transmitted in the cookies:

1.1. Language settings

1.2. Log-in information for administrators.

The stored data are saved separately from other personal data concerning you.

2. The legal basis for the data processing

Art. 6 Para. 1 lit. f GDPR is the legal basis for the processing of personal data by using cookies.

3. Purpose of the data processing

We use technically necessary cookies in order to simplify the use of websites for you. Several functions of our website cannot be offered without the use of cookies.

We require cookies for the following applications:

3.1. Take-over of language settings

3.2. To note search terms

Your user data collected through technically necessary cookies will not be used to create user profiles.

4. Duration of the storage, possibility for objection and remedy

The cookies stored on your computer will be transmitted from there to our site. You as user have the control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. You can delete already stored cookies at any time, this is also possible automatically. Insofar as cookies have been deactivated for our website you may no longer be able to use all functions of the website.

The transmission of Flash cookies can only be prevented by changing the settings of the Flash player.

VI. Email contact

1. Description and scope of the data processing

You can contact us via our website exclusively by using the provided email address, a contact form is not available. When you contact us by email the data (your email address, if appliable your name and your telephone number) communicated by you will be stored by us in order to answer your questions.

The data are exclusively used for processing the conversation, these will not be forwarded to third parties. We will erase data collected in connection with this as soon as their storage is no longer necessary or will restrict their processing if there are legal obligations to retain them.

2. The legal basis for the data processing

Art. 6 Para. 1 lit. f GDPR is the legal basis for the processing of your data, which are transmitted in connection with the sending of an email.

3. Purpose of the data processing

The personal data concerning you are solely processed by us for processing your contact with us. Your contact with us by email represents a necessary legitimate interest on our part in the processing of the data.

4. Possibility for objection and remedy

You have the possibility to revoke your consent to the processing of the personal data concerning you at any time. For this purpose, please contact us by email, this way you can object to the storage of personal data concerning you at any time. The revocation will lead to the fact that the conversation can no longer be continued.

The objection can be announced in writing (by post), personally or by email.

In the event of an objection, all personal data concerning you, which were stored in connection with the contact, will be erased, unless they belong to the personal data, which we must retain due to statutory stipulations.

VII. Web analysis by Matomo (formerly PIWIK)

1. Scope of the processing of personal data

To analyse your surfing behaviour, we use the open-source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie on your computer pursuant to SubclauseFehler! Verweisquelle konnte nicht gefunden werden. 5. When individual pages of our website are called up, the following data are stored:

1.1. Two bytes of the IP address of your calling system, this means that the software is set in such a way that your IP addresses are not stored in full, but 2 bytes of the IP address are masked (Ex: 192.168.xxx.xxx). An allocation to your computer is therefore not possible.

1.2. The called website

1.3. The website from which you arrived at the accessed website

1.4. The subpages that are accessed from the accessed website

1.5. The dwell time on the website

1.6. The frequency in which the website was called up

The software runs exclusively on the servers of our website. Collected data will only be stored there. The data will not be forwarded to third parties.

2. The legal basis for the processing of personal data

Art. 6 Para. 1 lit. f GDPR is the legal basis for the processing of personal data concerning you.

3. Purpose of the data processing

The analysis of your surfing behaviour is possible through the collected data. The data acquired help us to compile and evaluate the information regarding the use of the individual components of our website. This way we can constantly improve the website and its user-friendliness. This substantiates a legitimate interest in the processing of the data according to Art. 6 Para. 1 lit. f GDPR. Your interest in the protection of personal data concerning you is sufficiently taken into account by the anonymisation of the IP address.

4. Duration of the storage

As soon as the data are no longer required for our recording purposes, they will be erased within a period of 30 days.

5. Possibility for objection and remedy

The cookies stored on your computer are transmitted from it to our site. You as the user have control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. You can delete already stored cookies at any time, this is also possible automatically. If cookies are deactivated for our website, you may no longer be able to use all the functions of the website.

We offer you the option of opting out of the analysis process on our website. In this way, another cookie is set on your system, which signals to our system not to save your data. If you delete the corresponding cookie from your own system in the meantime, you must set the opt-out cookie again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You can find more detailed information regarding the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/

VIII. Rights of the data subject

As a data subject in the sense of the GDPR, you have the following rights vis-à-vis us, insofar as personal data concerning you are processed by us:

1. Right to information

If personal data concerning you are processed by us, you are entitled to request information about such processing it. This concerns the following information:

1.1. for what purposes personal data concerning you is being processed;

1.2. which personal data concerning you are processed (categories);

1.3. to whom we have disclosed or will disclose personal data concerning you;

1.4. the period for which we plan to store your personal data or, if it is not possible to provide specific information on this, criteria for determining the storage period;

1.5. the right to rectify or erase personal data concerning you, the right to restrict or object to processing by us;

1.6. your right to lodge a complaint with a supervisory authority;

1.7. information about the source of personal data concerning you, if personal data concerning you have not been collected from you;

1.8. the existence of automated decision-making including profiling pursuant to Art. 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about where personal data concerning you are transferred (e.g. a third country or to an international organisation). Pursuant to Art. 46 GDPR, you may request to be informed about the appropriate safeguards in relation to the transfer.

If the right to information is likely to render impossible or seriously impede the achievement of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes, it may be limited to that extent.

2. Right to rectification

You have the right to have personal data concerning you corrected and/or completed if it is inaccurate or incomplete. We will make the correction without delay after receiving your notification. If your right to rectification is likely to make it impossible or seriously prejudice the achievement of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes, it may be limited to that extent.

3. Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

3.1. You dispute the accuracy of personal data concerning you for a period of time that allows us to verify the accuracy of the personal data;

3.2. you object to the erasure of personal data concerning you on the grounds of unlawful processing and request instead the restriction of the use of the personal data;

3.3.we no longer need your personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims; or

3.4.if you have objected to the processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether our legitimate grounds override your grounds.

After the restriction of our processing of personal data concerning you, such data may only be processed by us with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

If the right to restrict processing is likely to render impossible or seriously impede the achievement of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes, it may be limited to that extent.

4. Right to erasure

4.1.  Obligation to erase you may require us to erase personal data concerning you without undue delay and we are obliged to erase such data without undue delay if one of the following reasons applies:

4.1.1. The purpose for which the personal data concerning you was collected or otherwise processed is no longer necessary.

4.1.2. Your withdrawal of your consent on which the processing was based pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and the lack of any other legal basis for the processing.

4.1.3. Your objection pursuant to Art. 21 Para. 1 GDPR to the processing and there are no overriding legitimate grounds for the processing, or your objection to the processing pursuant to Art. 21 Para. 2 GDPR.

4.1.4. the unlawful processing of personal data concerning you

4.1.5. for compliance with a legal obligation under Union or Member State law to which we are subject, it may be necessary to erase the personal data concerning you.

4.1.6. Collection of the personal data concerning you has been carried out in relation to information society services offered pursuant to Art. 8 Para. 1 GDPR.

4.2. Information to third parties

If we have made the personal data concerning you public and we are obliged to erase it pursuant to Art. 17 Para. 1 GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform other data controllers who process your personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, the personal data concerning you.

4.3. Exceptions: The right to erasure does not apply to the extent that the processing is necessary

4.3.1. for the exercise of the right to freedom of expression and information;

4.3.2. for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject; or

4.3.3. pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR for reasons of public interest in the area of public health;

4.3.4. 89 Para. 1 GDPR for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, where the right referred to in Subclause VIII 4.1 is likely to make impossible or seriously prejudice the achievement of the purposes of such processing; or

4.3.5. for the establishment, exercise or defence of legal claims.

5. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that

6.1. the processing is based on consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and

6.2. the processing is carried out with the aid of automated procedures.

6.3. The transfer is technically feasible.

The freedoms and rights of other persons must not be affected by this.

7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications. You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR. Your right to object may be limited to the extent that it is likely to make impossible or seriously compromise the achievement of the research or statistical purposes and the limitation is necessary for the fulfilment of the research or statistical purposes.

8. Right to revoke the declaration of consent under data protection law

You can revoke your declaration of consent under data protection law at any time. This revocation applies exclusively to the future, which means that the revocation of consent does not affect the processing that has taken place up to that point.

9. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

9.1. is necessary for the conclusion or performance of a contract between you and us,

9.2. is permitted under Union or Member State legislation to which we are subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or

9.3. is done with your explicit consent. However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in Subclauses VIII 9.1.1 and 9.1.3, we take reasonable steps to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain our intervention, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data concerning you infringes the GDPR, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.