Introduction

Die JP KOM GmbH, Erkrather Str. 234b, 40233 Düsseldorf
Telefonnummer: +49 (0)211 6878 350
E-Mail: info@jp-kom.de

as the operator of the websites www.jp-kom.de and toolbox-social-media.de and as a service provider, is responsible for the personal data of the user (hereinafter "you") in the context of the EU's General Data Protection Regulation (GDPR) and other national data privacy laws of member states as well as other privacy notices.

We protect your privacy and your personal data. We collect, process and use your personal data in accordance with the clauses in this privacy notice, as well as all applicable data privacy guidelines, in particular the GDPR. This privacy notice defines which personal data related to you that we collect, process and use. We therefore ask that you read the following information carefully.

1. Collection of personal data

1.1 For the purposes of this privacy notice, personal data refers to any information relating to an identified or identifiable natural person (hereinafter "data subject"). This includes, in particular, your name, address, email address and telephone number.

1.2 Personal data also refers to any information relating to your use of our website. In this context, we collect personal data such as the following: information about your visits to our website, such as the scope of data transfer, the location you are accessing data on our website from, and other connection data and sources you access. This usually occurs through the use of log files and cookies. More detailed information on log files and cookies can be found below.

1.3  In general, your personal data is stored for the duration of the existing contractual relationship between you and us. Where we collect your IP address, this is only stored for the time that you use the website, and is then immediately deleted, or anonymized by shortening it.

2. Purposes of use and legal basis

2.1 Purposes of use
We use your personal data for the following purposes:

2.1.1 To deliver the relevant services requested by you, which includes answering your inquiries and for technical administration;

2.1.2 To fulfill our obligations resulting from any contractual agreements concluded with you;

2.1.3 To ensure that our website presentation is as effective and interesting to you as possible.

2.2 Legal basis
The processing of your personal data has the following legal basis:

2.2.1 The collection of the data listed under clause 1.2 (information about your visits to the website, e. g. the scope of data transfer, the location you access data on our website from, and other connection data) is based on Art. 6 § 1 f) of the GDPR. Accordingly, the processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

2.2.2 The collection of information relating to your computer as described in clauses 1.2 and 3.1 (IP address, status and data volume of the request) is based on Art. 6 Para. 1 f) of the GDPR (see above).

2.2.3 The processing of all other personal data by us is based on Art. 6 § 1 b) of the GDPR. Accordingly, processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2.2.4 Where the legal basis is your consent to the data collection / processing pursuant to Art. 6 §. 1 a) of the GDPR, you may withdraw this consent at any time. The lawfulness of any data processing that occurs prior to the withdrawal of consent shall remain unaffected.

3. Information about your computer, cookies and targeting

3.1 Each time you access our site, we collect the following information about your computer: your computer's IP address, the request made by your browser, and the time of this request. Additionally, the status and transferred data volume are collected as part of this request. Your computer's IP address is only stored for the duration of time that you are using the website, and is then immediately deleted, or anonymized by shortening it. We use this data to operate our website, in particular to identify and rectify errors, to determine utilization of the website and to make changes or improvements.

3.2 In some circumstances, we collect information about your use of our website through browser cookies. These are small text files that are stored on your computer and that save certain settings and data on the exchange with our system, via your browser. A cookie usually contains the name of the domain the cookie data was sent from, as well as information about the age of the cookie and an alphanumerical identifier. Cookies enable our systems to identify a user's device and potentially make default settings immediately available. As soon as a user accesses the platform, a cookie is sent to their computer's hard disk. Cookies help us improve our website and provide you with a better, more customized service. They enable us to recognize your computer when you return to our site, which in turn enables us to store information about your preferred activities on our website and therefore align our site with your personal interests (This includes advertising that appeals to you.), and to increase the speed at which your requests can be processed.

3.3 The cookies used by us only store the information described above regarding your use of the website. This information is not assigned to you directly, but through allocation of a cookie ID. The cookie ID is never combined with your name, your IP address or similar data that may allow a cookie to be assigned to you directly. For information on how to prevent the use of browser cookies, refer to clause 3.6 below.

3.4 Our website uses tracking technology. We use this technology to make our website offering more interesting for you. It allows us to address Internet users who have already shown an interest in our website via advertising on our partners' websites. These ads are inserted on our partners' sites using cookie technology and analysis of previous usage behavior. We only use this technology when you have consented to it, or if it is necessary for the conclusion or performance of a contract with you, or if it is otherwise legally permitted.

3.5 We work with business partners who help us make our Internet presence and our website more interesting for you. For this purpose, when you visit our website, cookies from these partner companies are also stored on your hard disk. These cookies are automatically deleted after the predefined period. Using only a cookie ID, the cookies of our partner companies also collect data that enables our marketing partners to show you advertising that may actually be of interest to you. For information on how to prevent the use of cookies like this, refer to 3.6 below.

3.6 If you wish to prevent the use of browser cookies, you can configure your browser so that cookie storage is blocked. Please note that, if you choose to do this, you may have restricted access to our website or may not be able to use it at all. If you only want to accept our own cookies, and block the cookies of our service providers and partners, you can choose the browser setting "Block third-party cookies“.

4. Google Maps

4.1 On a few pages, this website uses the Google Maps service by Google.

4.2 Each time you access a page on this website that uses Google Maps, a direct connection is established between your browser and a Google server in the US. Confirmation that you have visited this page with your IP address is then sent directly from your browser to the Google server and stored there. Through the use of Google Maps, information about your use of this website, including your IP address and the (home/start) address entered into the route planning function, is transferred to Google in the US. More detailed information about the terms and conditions of use and data privacy is available here:

• https://www.google.com/intl/de_US/help/terms_maps.html
• https://privacy.google.com/intl/de/businesses/mapscontrollerterms/

4.3 Purposes of processing
The purpose is the presentation of interactive maps and provision of a route planner.

4.4 Reference
To avoid repetition, please refer to clause 4 for further information about the use of the Google service.

4.5 If you do not want Google to collect, process or use data pertaining to you via this website within the scope of Google Maps, you can configure your browser settings to deactivate JavaScript. If you choose to do this, the map function will not be available to you.

5. Newsletter

5.1 We offer interested parties the opportunity to subscribe to a free newsletter ("News Service"). When registering for the newsletter, data from the registration form is sent to us. We store your name, your email address, the date and time of your registration and the IP address of the computer you used. During the registration process, we collect your consent to the processing of the data and refer you to this privacy notice. No data is shared with third parties in connection with the data processing related to the sending of the newsletter. The data is used exclusively for the purpose of sending the newsletter. The purpose of the data processing is the transmission of the newsletter.

5.2 Legal basis
The legal basis for processing data after a user has registered for the newsletter is the provision of consent pursuant to Art. 6 § 1 a) of the GDPR, and potentially also Art. 6 § 1 f) of the GDPR or Art. 7 § 3 of the German Act against Unfair Competition.

5.3 Duration of the data storage
The data shall be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address shall be stored for as long as the newsletter subscription remains active.

5.4 Rights of the data subject, opportunity to object
Subscription to the newsletter may be canceled by a user at any time. For this purpose, each newsletter contains a corresponding link. This also enables a data subject to withdraw their consent to the storage of any personal data collected during the registration process.

6. Social media plug-ins

6.1 We currently use the following social media plug-ins: Facebook, Twitter, Instagram, YouTube, SlideShare, LinkedIn and Xing. We employ the "two-click" method for this. This means that, in general, when you visit our website, initially no personal data is sent to the provider of the plug-in. You can identify the plug-in provider by the marking on the box, by their initial(s) or the logo. The buttons give you the opportunity to communicate directly with the plug-in providers. A plug-in provider only receives notification that you have accessed the corresponding website of our online offering when you click on the marked field and activate it. Furthermore, the data listed in clause 3 of this notice is also shared. So, upon activation of the plug-in, your personal data is sent to the relevant plug-in provider and stored there (in the US for American providers). Because the plug-in provider primarily collects the data using cookies, we recommend deleting all cookies via your browser's security settings prior to clicking on the shaded box.

6.2 We have no influence over the data that is collected or the relevant data processing procedures, nor are we aware of the volume of data that is collected, the purpose of the processing or the storage duration. We also do not possess any information on the erasure of data collected by the plug-in provider.

6.3 The plug-in provider stores the data collected about you in a user profile and uses this for the purposes of advertising, market research and / or to improve its website design. In particular, analysis like this is used (including for users who are not logged in) to display relevant advertising and to inform other users of the social media channel about your activities on our website. You have the right to object to the creation of this user profile, although you must turn to the relevant plug-in provider in order to exercise this right. Via the plug-ins, we give you the opportunity to interact with social media networks and other users so that we can improve our Internet offering and make it more interesting for you as the user. The legal basis for the use of plug-ins is Art. 6 § 1 f) of the GDPR.

6.4 The data transfer happens irrespective of whether you have an account with the plug-in provider or are logged in. If you are logged in with a plug-in provider, your personal data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link to the page, the plug-in provider stores this information in your user account and shares it publicly with your contacts. We recommend regularly logging out after using a social media platform, and in particular before activating the button, in order to avoid this information being assigned to your profile.

6.5 You can find further information on the purpose and scope of the data collection and its processing by the plug-in provider in the following privacy notices of the respective providers. These links also include information on your corresponding rights and how to configure your settings to protect your privacy.

• Facebook: http://www.facebook.com/policy.php; more information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook is subject to the EU-US Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework
• Twitter: https://twitter.com/privacy. Twitter is subject to the EU-US Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework
• Instagram: https://help.instagram.com/155833707900388; https://help.instagram.com/478745558852511; Instagram is owned by Facebook (see above).
• YouTube: https://policies.google.com/privacy?hl=de&gl=de
• SlideShare: https://www.linkedin.com/legal/privacy-policy; SlideShare is owned by LinkedIn (see below).
• LinkedIn: http://www.linkedin.com/legal/privacy-policy. LinkedIn is subject to the EU-US Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework
• Xing: http://www.xing.com/privacy

7. YouTube

7.1 There may be YouTube videos integrated in our online offering that are stored on http://www.YouTube.com and that can be played directly on our site.

7.2 When you visit the website, YouTube receives notification that you have accessed the corresponding page. Additionally, the data listed in clause 3 of this notice is shared with YouTube. This happens irrespective of whether you already have a YouTube user account that you are logged into, and even if you do not have a user account. If you are logged into Google, your data will be assigned directly to your account. If you do not wish this data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as a user profile and uses it for the purposes of advertising, market research and / or to improve its website design. In particular, analysis like this is used (including for users who are not logged in) to display relevant advertising and to inform other users of the social media channel about your activities on our website. You have the right to object to the creation of this user profile, although you must contact YouTube in order to exercise this right.

7.3 You can find further information on the purpose and scope of the data collection and its processing by YouTube at the following link:

• https://support.google.com/youtube/answer/2801895?hl=de
• https://www.google.de/intl/de/policies/privacy

Google also processes your personal data in the US and is subject to the EU-US Privacy Shield Framework (see clause 4.6)

8. MyFonts

8.1 These web pages use external fonts provided by MyFonts. MyFonts is a service of the Monotype Group and is one of its online sales channels for downloading entire typefaces or individual fonts. The integration of MyFonts occurs via connection to a server, usually a server of Monotype, which is also located in the US. Data transmitted to the server includes information on which web pages you have visited. The IP address of the browser on the end device of the user of these web pages is also stored by Monotype.

8.2 Purpose of processing
The purpose of the data processing is the integration of external fonts.

8.3 Legal basis for processing
The legal basis for the processing of your data is Art. 6 § 1 f) of the GDPR.

8.4 Rights of the data subject
You can object to the use of MyFonts by blocking the storage of cookies using the corresponding setting on your browser; however, please note that you may not be able to use the entire functionality of our website if you choose to do this. More detailed information can be found in Monotype's privacy policy, available here:

• https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/
• https://www.monotype.com/legal/privacy-policy/website-use-privacy-policy

9. Google reCAPTCHA

To ensure the security of your data when you are completing forms, in certain circumstances we use the reCAPTCHA service provided by Google Inc. Above all, this indicates whether the data is being entered by a a real person or is being improperly entered via machine or automated processing. The service includes the transmission of the IP address and potentially other data required by Google for the reCAPTCHA service to Google. This is subject to the specific data privacy terms of Google Inc. Further information on the data privacy guidelines of Google Inc. can be found at: http://www.google.de/intl/de/privacy oder https://www.google.com/intl/de/policies/privacy/

10. Amazon Partner program

As a participant in the Amazon Partner program, we have integrated Amazon components on our web pages. The legal basis for this is Art. 6 § 1 f) of the GDPR. When you click on one of these components, you will be taken to the corresponding offering on one of the web pages of the Amazon group. If you decide to buy the product being advertised, we receive a commission from Amazon. Amazon uses cookies to enable this service. Among other things, these cookies enable Amazon to see that you clicked on a partner link on our website. If you do not wish to consent to this processing, you can block the storage of cookies via the settings in your Internet browser. More detailed information can be found in clause 3 above. Furthermore, you can delete cookies that have already been accepted at any time via your Internet browser or using another software program. The operator of the Amazon components is Amazon EU S.à.r.l, 5 Rue Plaetis, L-2338 Luxembourg, Luxembourg. You can find more information and the Amazon privacy notice at https://www.amazon.de/gp/help/customer/display.html?nodeId=3312401.

11. Data security

All information that you share with us is stored on servers within the European Union. Unfortunately, data transfer via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website. We take technological and organizational measures to protect our website and other systems against the loss, deletion, access, modification or distribution of your data by unauthorized persons. In particular, your personal data is transmitted by us in an encrypted format. We use the Secure Sockets Layer protocol for this.

12. No disclosure of personal data

We do not share your personal data with third parties unless you have provided consent to this, or we are authorized or obligated to share the data on the basis of legal grounds and / or according to the instructions of authorities or courts. For example, it is required and legally permissible (see the legal basis under clause 2.2) to share your data for the purpose of performing a contract concluded with you for the supply of a product or the contracting of a service provider. This applies to disclosing your data to suppliers, transportation companies, banks or other service providers that may be involved in performing the contract. Any use beyond this requires your express consent. A legal obligation to disclosure may exist, in particular, for the purposes of providing information for a criminal prosecution, for an emergency response or for the enforcement of intellectual property rights.

13. Erasure of data and duration of storage

The personal data of the data subject shall be erased or locked as soon as the purpose for its original storage ceases to exist. It may be stored after this if European or national legislation requires it in specific rules, laws or other guidelines that the controller is subject to. The data shall also be locked or erased once the storage period defined in the relevant guidelines expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

14. Data privacy and third-party websites

This website may feature hyperlinks to third-party websites. If you follow a link to one of these sites, please note that we accept no liability for third-party content or data privacy terms. Please check the applicable privacy notices before you share personal data with these websites.

15. Changes to this privacy notice

We reserve the right to make changes to this privacy notice at any time, with future effect. The most up-to-date version is available on the website. Please visit the website regularly to stay informed on the latest privacy notice.

16. Your rights and how to contact us

You have comprehensive rights when it comes to the processing of your personal data. To begin with, you have a comprehensive right to information and can request the rectification, erasure or locking of your personal data. You can also request the restriction of processing of your personal data and have the right to object as well as the right to data portability. If you would like to exercise your rights and / or you would like more detailed information about this, please contact info@jp-kom.de.

Our data privacy officer’s contact information is:

Axel Dreyer
Schürmann Rosenthal Dreyer
Uerdinger Str. 62
40474 Düsseldorf, Germany
Telefonnummer: +49 (0)211 4155 8680
E-Mail-Adresse: duesseldorf@srd-rechtsanwaelte.de

Furthermore, you have the right to complain to a supervisory authority. The responsible supervisory authority is the State Officer for Data Privacy and Freedom of Information for North Rhine-Westphalia in Düsseldorf. If you have any questions or comments relating to the collection, processing and use of your personal data by us, please don't hesitate to get in touch using the information below.

Whistleblower system

Do you wish to report possible misconduct that you have observed at JP KOM GmbH on the basis of the Whistleblower Protection Act? Please use our external reporting system and the designated form. You decide what information you disclose.