Data protection declaration

1. Information on the collection of personal data and contact details of those responsible
2. Data collection when visiting our website
3. Cookies
4. Data handling during the order process
5. Data handling when opening a customer account and for contract processing
6. Contacting customers
7. Use of your data for direct marketing
8. Rights of the parties concerned
9. Duration of the storage of personal data

1. Information on the collection of personal data and contact details of those responsible

1.1
Thank you very much for visiting our website. Below we would like to inform you about how we handle your personal data when using our website. Fundamentally, personal data is all data with which you can be personally identified.

1.2
Responsible for processing the data on our website as stipulated by the General Data Protection Regulation (GDPR) is:

Jah GmbH
Schünbusch Feld 3
21439 Marxen
Germany
Tel .:+4940399990360
Fax :+4940399990380
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

1.3
Those responsible have appointed the following data protection officer:

Gabriel Karim Jah
Schünbusch Feld 3
21439 Marxen
Tel. : +4940399990360
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

1.4
We use the most current technological encryption process (e.g. SSL or TSL) via HTTPS in order to protect your data during transmission.

2. Data collection when visiting our website

Every time you open our website, our system automatically collects data and information that your browser transmits to our server (server log files). The following data, which is technically necessary, is collected:

  • The website visited
  • The date and time of access
  • The number of sent data in bytes
  • The source/ link from which our site was accessed
  • The operating system used
  • The browser used
  • The IP address used (possibly anonymously)

The legal basis for this processing is Section 6, Para. 1, lit. f) GDRP, due to our justified interest in improving the reliability and in maintaining the functionality of our website. We do not pass on your personal data to third parties or otherwise use it. The system temporarily stores your IP address; this is necessary in order to make the website available on the user’s computer. For this, the user’s IP address needs to be saved for the entire duration of the session.

We reserve the right to screen the server log files of users afterwards should there be concrete indications of unlawful use. The data will be deleted as soon as it is no longer required for the purpose of their collection. The data will be deleted once the session has been ended in case it was collected for the provision of this website. The data will be deleted after a period of no more than seven day in the case that data was stored in log files. Storage beyond this timeframe is possible. In this case, the users’ IP addresses will be deleted or distorted so that an association to the user of the website is no longer possible. The collection of the data for the provision of the website and the storage of data to log files is imperative for operating the website. Consequently, the user cannot appeal this.

3. Cookies

Our website uses cookies.

Cookies are small text files that are stored on your computer. When a user visits a website, a cookie may be saved on their browser. Some of this website’s functions cannot be used without cookies. For this, it is necessary that the browser is recognised again after visiting another page. The user information collected by the technically necessary cookies will not be used to create user profiles. The abovementioned purposes also include our justified interest in processing personal information as per Section 6, Para. 1 lit. f) GDPR.

Furthermore, our website uses cookies that enable the analysis of a user’s surfing behaviour (so-called third-party cookies). More information about the extent, purpose, legal basis and possibilities for appeal can be found in the respective sections of the respective chapters of this data protection declaration.

You, as the user, have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, it may happen that you will not be able to have full access to all functions of the website. The transmission of flash cookies can be stopped by changing the settings in the Flash Player.

More detailed information about the settings can be found in the respective help menu of your browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies we use are deleted from your computer after your browser has been closed (session cookies). Other cookies will remain on your computer and allow us or our business partners (third-party cookies) to recognise your browser at your next visit to our website (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data, as well as IP address data to the extent necessary. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.

4. Data handling during the order process

4.1
If you would like to place an order through our online shop, it is essential for the conclusion of contract that you enter the personal information that we need to process your order. The data you enter will only be used to process your order.

We sometimes work together with external service providers to process your order. For this, we need to pass on your necessary personal data.

Si nous confions la livraison de vos marchandises à des entreprises de transport, nous transmettons vos données nécessaires à la livraison de la marchandise à l'entreprise de transport concernée.

If we employ a shipping company with the delivery of your goods, we will pass on the necessary data to them. Your data will also be shared with the financial institute delegated to process payment. You will subsequently be informed in the case that we utilise payment service providers.

The legal basis for sharing your data is Section 6, Para. 1, lit. b) GDPR.

4.2
We work together with external shipping partners in order to fulfil our contractual obligations. We share your name and shipping address (and if necessary, other information) only for the purpose of delivering the ordered goods in accordance with Section 6, Para. 1, lit. b) GDPR with the shipping partner selected by us.

4.3
Use of payment service providers

PayPal
When choosing the payment option PayPal, credit card via PayPal, direct debit via PayPal or, if available, “payment by invoice” or “payment by instalments” via PayPal, the payments are handled by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

We will share your personal data in accordance with Section 6, Para. 1, lit. b) GDPR, if necessary, with PayPal. PayPal reserves the right to conduct a credit check for the payment options credit card via PayPal, direct debit via PayPal or, if available, “payment by invoice” or “payment by instalments” via PayPal.

For this, your payment information is also shared in accordance with Section 6, Para. 1, lit. f) GDPR due to justified interest on behalf of PayPal to determine your solvency. The results of the credit check in regard to the statistic payment failure probability are used by PayPal for the purpose of deciding on whether to grant the respective payment method available or not.

The credit check may include probability values (score values). In as far as score values enter into the results of the credit check, they have their foundation in scientifically recognised mathematical and statistical processes. Address data, among other things, enters into the calculation of the score values.

Further information about what additional data is collected by PayPal can be viewed in PayPal’s data protection policy. This can be found under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may appeal the processing of your data at any time by sending a message to PayPal. PayPal will, however, retain the right to use your personal data if this is necessary to complete the payment process.

4.4
Performing credit checks

SOFORT
If you choose the payment option “SOFORT”, the payment is processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT").

We will pass on your personal information along with details regarding your order to SOFORT in accordance with Section 6, Para. 1, lit. b) GDPR solely for payment processing purposes and only in as far as necessary.

The SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
SOFORT’s data privacy policy can be viewed under: https://www.klarna.com/sofort/datenschutz

Creditreform Boniversum
In the case where we provide goods in advance (i.e. purchase on account), we reserve the right to conduct a credit check based on mathematical and statistical procedures to protect our justified interest in determining the solvency of our customers. The required personal data will be passed on to the following service provider in accordance with Section 6, Para. 1, lit. f) GDPR:

Creditreform Boniversum GmbH
Hellersbergstraße 11
41460 Neuss
Germany

The credit check may contain so-called score values (probability values) that, in as far as they are included in the results of the credit check, are based on a scientifically recognised mathematical and statistical procedure. Included in the calculation of these score values are, inter alia, your address information. You may appeal the processing of your information at any time by sending a message to those responsible or to the credit agency mentioned here. Where applicable, however, we reserve the right to process your personal information if this is necessary for the contractual payment process.

Schufa Holding
In the case where we provide goods in advance (i.e. purchase on account), we reserve the right to conduct a credit check based on mathematical and statistical procedure to protect our justified interest in determining the solvency of our customer. The required personal data will be passed on to the following service provider in accordance with Section 6, Para. 1, lit. f) GDPR:

SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden
Germany

The credit check may contain so-called score values (probability values) that, in as far as they are included in the results of the credit check, are based on a scientifically recognised mathematical and statistical procedure. Included in the calculation of these score values are, inter alia, your address information. You may appeal the processing of your information at any time by sending a message to those responsible or to the credit agency mentioned here. Where applicable, however, we reserve the right to process your personal information if this is necessary for the contractual payment process.

5. Data handling when opening a customer account and for contract processing

When you open a customer account with us, your personal data is collected and process in accordance with Section 6, Para. 1, lit. b) GDPR. The extent of the data is discernible in the input form. The data you enter is stored and used by us for contract processing.

You may delete your customer account at any time. To delete your account, please send a message to the person responsible or, if it is an option, you can delete it directly from within your account. In the latter case, we will block your information taking into consideration the tax and legally permissible retention period. Upon expiration of this retention period, your data will be deleted. Only your permission to permanently store data or a legal further use of your data from our side can prevent deletion.

6. Contacting us

If you contact us using our contact form, the data you entered into the contact form will be transmitted to us and stored. The data collected is shown on the entry form. When contacting us via email, only the data you indicated will be transmitted to us.

The data is only used for processing the conversation and your request. The legal basis for processing the data is Section 6, Para. 1, lit.

a) GDPR subject to existing permission on your part. The legal basis for processing the data that was transmitted in the course of an email is pursuant to Section 6, Para. 1, lit. f) GDPR. If the objective of the email is to conclude a contract, the legal basis stipulated in Section 6, Para. 1, lit.

b) GDPR also applies. The data will be deleted as soon as it is no longer necessary for the purpose for which the data was collected and in as far as no legal retention periods oppose this. This applies to the personal data entered in the contact form and that, which was transmitted by email, when the respective conversation with the user has ended. The dialogue is considered ended when it is clear that the issue concerned has been dealt with conclusively. The user, however, has the option to revoke his consent to process his personal data at any time. If the user contacts us via email, he can object to the storage of his personal data at any time. In this case, the conversation cannot be continued.

7. Use of your data for direct marketing

7.1
Newsletter

You may subscribe to our free newsletter from our website. The data you enter when registering for the newsletter are transmitted to us. The only mandatory information is your email address. Any additional information you may choose to enter will only be used for personal contact.

The legal basis for processing your data after registration for the newsletter is Section 6, Para. 1, lit. a) GDPR subject to existing permission from the user. Consent is obtained when you click the link in the confirmation email that we send to you upon registration of the newsletter.

When submitting your newsletter registration, we store your IP address as well as the date and time of registration. Storing this information serves to retrace possible misuse of your email address.

We use the data we collected when you registered for the newsletter only for the purpose of sending the newsletter. You can cancel your subscription to the newsletter at any time. Each newsletter has a link for this very purpose.

Hereby, it is also possible to revoke the consent to store personal data collected during the registration procedure.

7.2
Newsletter for existing customers

We may use your email address to send you our newsletter if you entered it when purchasing goods or services on our website. In such a case, only direct advertising for our own similar products or services will be sent via the newsletter.

The legal basis for the distribution of the newsletter as a result of sales of goods or services is Section 7, Para. 3, UWG as well as Section 6, Para. 1, lit. f) GDPR. Data is processed only insofar as it is based on our justified interest in direct advertising.

You will not receive the newsletter if you have already revoked the use of your email address for the purpose of direct advertising. You can also revoke your consent to use your email address for the abovementioned purpose later and at any time. The use of your email address for advertising purposes will be stopped immediately upon receipt of your appeal against the use of your email address.

7.3
Advertising by mail

If you have provided us with your name, surname, mailing address and other personal information when you placed an order, we reserve the right to store this information to protect our justified interest in direct advertising in accordance with Section 6, Para. 1, lit. f) GDPR and to mail our offers to you by regular post.

You may revoke the storage and use of your data for this purpose at any time by sending an email to the person responsible.

8. Rights of the parties concerned

8.1
The applicable data protection law grants you, as the party concerned, substantial rights in regard to processing your personal information (the right of access and the right to intervene) vis-à-vis the party responsible. Below we will inform you of these rights:

  • The right of access according to Section 15 GDPR:
    Upon request, the party responsible will be able to confirm whether personal data that concerns you is processed by them. You, furthermore, have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as the correction of data or the existence of the right to complain to a regulatory authority in regard to the origin of your data if these were not collected by us, the existence of automated decision making including profiling and, if necessary, conclusive information about the logic involved and the consequences for you as the party concerned and the desired implications of such processing, as well as your right to information, which warranties are in place in case of sharing your data to third countries in accordance to Section 46 GDPR;
  • Right of rectification Section 16 GDPR: 
    You have the right to immediate rectification of incorrect data concerning yourself and/or completing your incomplete data that is stored by us: the rectification or completion must be taken care of without delay.
  • Right to limit the processing of your date in accordance with Section 18 GDPR: 
    You have the right to request a restriction concerning the processing of your personal data provided that the disputed accuracy of your data is reviewed and if you refuse deletion of your data due to improper data processing and instead, request the limitation of the processing of your data provided you need your data for the assertion, exertion or defence of legal claims after the data has fulfilled its purpose and we no longer need this it or if you have filed an objection for grounds relating to your particular situation provided that it has not yet been determined whether our legitimate reasons prevail;
    If the processing of personal data concerning you was restricted, this data – apart from its storage – may only be processed with your consent or for the assertion, exertion or defence of legal claims or for the protection of rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state. If the processing was restricted, you will be informed by the person responsible before the restriction is lifted.
  • Right of deletion in accordance with Section 17 GDPR 
    You have the right to immediate deletion of your personal data if the conditions specified in Section 17, Para. 1 GDPR have been fulfilled. This right to deletion does not exist in particular, but snot conclusively, if processing the data is necessary to exercise the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exertion or defence of legal claims.
  • Right to information in accordance with Section 19 GDPR:
    Provided that you have exercised your right of rectification, deletion or limitation in regards to the processing of your data, the person responsible is obligated to inform all recipients of your personal information of the rectification or deletion of the data, or the limitation of processing if this is not impossible or causes a disproportionate effort. You also have the right to be informed of these recipients.
  • Right of data transferability in accordance with Section 20 GDPR:
    You have the right to receive the personal data you disclosed to us in a structured, common and machine-readable format or to request the transfer to another person responsible in as far as this is technically possible;
  • Right of revocation in accordance with Section 7, Para. 3 GDPR: 
    You have the right at any time to appeal the processing of your personal data that takes place on the basis of Section 6, Para. 1, lit e) or f) GDPR; this also applies to a profiling based on these provisions.
    You furthermore have the right to revoke your data protection consent declaration at any time with effect for the future. By revoking the consent, the legality of the processing up to the point of revocation will not be affected.
  • Right of complaint in accordance with Section 77 GDPR:
    Irrespective of other administrative or judicial legal remedy, you have the right of complaint to a supervisory authority, particularly in the member state of your residence, your workplace or the location of the supposed violation, if you are of the opinion that the processing of your personal data is contrary to GDPR regulations.

8.2
Right of objection
You have the right to object to the processing of your personal data at any time with effect for the future if we use your data due to our predominantly justified interest. Provided that you exercise your right to object, we will end the processing of your data if no verifiable, predominantly compelling reasons worth protecting oppose this or if further processing serves the exertion or defence of legal claims.

9. Duration of the storage of personal data

The duration of the storage of personal data always depends on the legal periods of retention. Once they have expired, we routinely delete the data if they are no longer required to complete a contract or contract initiation and/or we no longer have a justified interest in storing them further.