Data protection
Privacy Policy
1. Information about the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Cookies
4. Contact
5. Data processing when opening a customer account and for contract processing
6. Comment function
7. Use of your data for direct marketing
8. Data processing for order processing
9. Use of social media: social plugins
10. Use of social media: video
11. Online Marketing
12. Rights of the data subject
13. Duration of storage of personal data
1. Information about the collection of personal data and contact details of the controller
1.1. We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.
1.2. The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is JCR Solution & Consulting GmbH, Rubinstraße 9, 80995 Munich, Germany, Tel.: +49 177 4641001, Email: 45bside@studio-lu.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3. For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.
2. Data collection when visiting our website
If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.
3. Cookies
To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If individual cookies implemented by us also process personal data, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies will also be stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.
Please note that you can set your browser to inform you about the use of cookies and to decide individually whether to accept them or to reject cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these settings for each browser at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
4. Contact
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when you use a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.
5. Data processing when opening a customer account and for contract processing
According to Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us to perform a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time and can do so by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data that is permitted by law, about which we will inform you accordingly below.
6. Comment function
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you chose will be saved and published on the website. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content through a comment. We need your email address in order to contact you if a third party should object to the content you have published being illegal. The legal basis for storing your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.
7. Use of your data for direct marketing
7.1. Subscribe to our newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing any other data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we save your IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.
7.2. Newsletter dispatch via MailChimp
Our email newsletter is sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically evaluate the newsletter on our behalf. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked. MailChimp uses web beacons to automatically create general, non-personal statistics on the response behavior to newsletter campaigns. Based on our legitimate interest in the statistical evaluation of newsletter campaigns to optimize advertising communication and better target recipient interests, the web beacons also collect and use data from the respective newsletter recipient (email address, time of retrieval, IP address, browser type, and operating system) in accordance with Art. 6 (1) (f) GDPR. This data allows individual conclusions to be drawn about the newsletter recipient and is processed by Mailchimp to automatically create statistics that show whether a specific recipient has opened a newsletter message.
If you wish to deactivate data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
MailChimp may also use this data itself, in accordance with Art. 6 (1) (f) GDPR, based on its own legitimate interest in tailoring and optimizing the service to meet customer needs, as well as for market research purposes, for example, to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to contact them directly or to share it with third parties.
To protect your data in the USA, we have entered into a data processing agreement with MailChimp based on the European Commission's standard contractual clauses to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following internet address: http://mailchimp.com/legal/forms/data-processing-agreement/.
MailChimp is also certified under the US-European data protection agreement "Privacy Shield" and is therefore committed to complying with EU data protection regulations.
You can view MailChimp’s privacy policy here: https://mailchimp.com/legal/privacy/
7.3 Advertising by post
Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) (f) GDPR and to use it to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.
8. Data processing for order processing
8.1. To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.
8.2. Use of payment service providers
- Amazon Pay
If you select the "Amazon Pay" payment method, payment processing will be carried out by the payment service provider Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we will forward the information you provided during the ordering process, along with information about your order, in accordance with Art. 6 (1) (b) GDPR. Your data will be forwarded exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find further information about Amazon Payments' privacy policy at the following website address: https://pay.amazon.com/de/help/201751600
- Wirecard
If you choose one of the payment methods offered by the payment service provider checkoutportal by wirecard, payment processing will be carried out via the payment service provider checkoutportal by wirecard, Wirecard UK & Ireland Ltd, 1st Floor Ulysses House, Foley Street Dublin 1, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, IBAN (if applicable), BIC (if applicable), invoice amount, currency, and transaction number (if applicable). In accordance with Art. 6 (1) (b) GDPR, your data will be passed on exclusively for the purpose of payment processing with the payment service provider checkoutportal by wirecard. Your data will only be passed on to the extent that this is actually necessary for processing the payment.
9. Use of social media: social plugins
LinkedIn as a standard plugin
Our website uses so-called social plugins ("plugins") of the online service LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). You can recognize the LinkedIn plugins by the LinkedIn logo or the "Recommend" button on our website.
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to LinkedIn's servers. The plugin content is transmitted directly from LinkedIn to your browser and integrated into the page. Through this integration, LinkedIn receives the information that your browser has accessed the corresponding page on our website, even if you do not have a LinkedIn profile or are not currently logged into LinkedIn. This information (including your IP address) is transmitted from your browser directly to a LinkedIn server in the USA and stored there.
If you are logged in to LinkedIn, LinkedIn can directly associate your visit to our website with your LinkedIn account. If you interact with the plug-ins, this information is also transmitted directly to a LinkedIn server and stored there. The information is also published on your LinkedIn account and displayed to your contacts there.
The data processing operations described are carried out in accordance with Art. 6 (1) (f) GDPR on the basis of LinkedIn's legitimate interests in displaying personalized advertising in order to inform other users of the social network about your activities on our website and to tailor the service to meet your needs.
If you do not want LinkedIn to directly associate the data collected through our website with your LinkedIn account, you must log out of LinkedIn before visiting our website. You can also prevent the LinkedIn plug-in and thus the data processing described above from loading in the future using add-ons for your browser, e.g., the script blocker "NoScript" (http://noscript.net/).
LinkedIn Corporation, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
For information on the purpose and scope of data collection and further processing and use of data by LinkedIn, as well as your rights and settings options for protecting your privacy, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
10. Use of social media: video
Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
This uses the extended data protection mode, which, according to the provider, only initiates the storage of user information when the video(s) is played. When embedded YouTube videos are started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube," these serve, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to be assigned to your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research, and/or tailoring its website to meet your needs. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right.
Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established each time this website is accessed, which may trigger further data processing operations without our control.
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy
11. Online Marketing
Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. This is our interest in showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie in your internet browser's user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR.
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
You can find further information about Google’s privacy policy at the following internet address: http://www.google.de/policies/privacy/
You can permanently deactivate cookies for advertising preferences by preventing them through the appropriate settings in your browser software or by downloading and installing the browser plug-in available under the following link:
http://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
12. Rights of the data subject
12.1. The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:
- Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to information about the guarantees in place under Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification in accordance with Art. 16 GDPR: You have the right to have any incorrect data concerning you rectified without undue delay and/or to have any incomplete data stored by us completed;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not apply if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;
- Right to information pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obligated to inform all recipients to whom the personal data concerning you was disclosed of this rectification, erasure, or restriction of processing, unless doing so proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller, where technically feasible;
- Right to revoke consent granted in accordance with Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data in question immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation.
- Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
12.2. RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right of objection as described above.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
13. Duration of storage of personal data
The duration of storage of personal data is determined by the respective statutory retention period (e.g., retention periods under commercial and tax law). After expiration of this period, the corresponding data will be routinely deleted unless it is no longer required for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in continued storage.
