Data protection notice of pjur group Luxembourg S.A.
Data protection notice for the website on the domain www.pjurarabia.com.
We are very delighted about your interest on our company and website. The management of pjur group Luxembourg S. A. gives particularly high priority to data protection and the protection of your privacy. Below we will inform you in detail about how your data is handled.
1 Name and contact data of the controller
pjur group Luxembourg S.A.
87, Esplanade de la Moselle
6637 Wasserbillig, Luxembourg
Email address: info@pjur.com
Administrative Board: Alexander Giebel
Link to legal notice: https://pjurarabia.com/imprint/
(hereinafter “pjur”)
2 Automatic processing of the data when visiting the website
Description of data processing:
In conjunction with merely going to the website and visiting the subpages, we will transmit your internet browser information to our web server when our website is accessed due to technical reasons; your browser information is then temporarily saved in a log file (server log files) on pjur’s server.
What type of information and data is processed:
It consists of the name of the website being accessed, the data file, date and time of access, the data volume of the data transferred, the notification about successful access, the browser type (including version), the user’s operating system, URL referrer (the previously visited website), IP address, and the requesting provider.
Purpose and legal basis of data processing:
The data and information are processed for the purpose of ensuring the interference-free operation and security of the website, especially in the event of unauthorized access and attacks on the website. Furthermore, data processing serves the purpose of evaluating the data anonymously for statistical purposes by means of analyzing the user’s interests and user’s behavior. This data is temporarily saved while separated from other data that is entered when our website is used (e.g., login data for your account). Ensuring the smooth operation and security of the website, determining the user’s interests, and the analysis of the user’s behavior represent the legitimate interests of pjur. The legal basis for data processing is Article 6, para. 1, page 1, lttr. f of the General Data Protection Regulation (GDPR).
You have a right to object to the processing of your data at any time for reasons that stem from your particular situation. You can find more information about your right to object under point 13.7 in this Data Protection Notice.
Recipient of the data:
The data is transmitted only within the scope of the previously mentioned purposes to the following service providers bound by contract, which process the data on behalf of pjur in the manner previously described;
IT service providers:
- ITC GmbH NL Trier
Kiemstr. 1
54311 Trierweiler/ Germany - D.I.E. Webexperten UG
Handwerkerhof Rudolstadt
Stiftsgasse 21-25/ Mangelgasse 18
07407 Rudolstadt/ Germany - Cure S.A.
3, Schaffmill
6778 Grevenmacher/ Luxembourg
Duration of data retention:
The server’s log files are saved for a maximum of 7 days and then are erased. Exempted from such deletion is any data which is required to be saved for evidentiary purposes; it will not be deleted until final clarification of the respective incident has been completed.
3 Data collection and use for contract processing and communication
Description of data processing:
We collect personal data when you voluntarily provide us this information while placing an order or when you contact us (e.g., through the contact form or by sending an email). Required fields are identified as such since we must have the data to conclude the contract or to process your communication with us; without this information we cannot send the order or communicate with you.
What type of information and data is processed:
The type of data that is collected can be seen in the respective entry forms.
Additionally, we process the
– contract information (e.g., the object of the contract, contractual period, customer category)
– payment information (e.g., bank details, payment history)
of our customers, interested parties, and business partners for the purpose of providing contractual performance, services and customer service, marketing, advertising, and market research.
We process users’ data (e.g., the web pages visited on our website, interest in our products) and content information (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to show the users product information originating from the services they have used to date.
Purpose and legal basis of data processing:
We use the data you provided for processing the contract and for processing your requests in accordance with Article 6, para. 1, page 1, lttr. b) of the GDPR. If and when you have submitted your consent by deciding to set up a customer account in accordance with Article 6, para. 1, P. 1, lttr a) of the GDPR, we will use your data for the purpose of setting up a customer account.
Duration of data retention:
After the processing of the contract is complete or your customer account has been erased, your data will be restricted for additional processing and will be erased after mandatory retention periods defined in tax and commercial law have expired provided you have not expressly consented to further use of your data, or we reserve the right to the further use of your data in a manner that is legally permitted and we inform you of its retention in this notice. Erasure of the data shall be carried out after statutory warranty obligations and similar duties have expired, and the necessity for retaining the data shall be reviewed every three years; in the event of statutory archiving obligations, erasure shall take place after they expire.
The erasure of your customer account is possible at any time and can take place by means of sending a message to us using the contact information described below.
We will delete inquiries once they are no longer required. We will review the necessity every two years. Furthermore, statutory archiving duties shall apply.
4 Data transfer
For the fulfillment of the contract in accordance with Article 6, para. 1, p.1, lttr b) of the GDPR, we will transfer your data to the shipping company commissioned with delivery if it is required for delivering the merchandise ordered. Depending on which payment service provider you selected during the ordering process, we will transfer the payment information provided for processing payment to the financial institution that has been commissioned with the payment, and if applicable, to the payment service provider commissioned by us, or to the payment service selected. To some extent, payment service providers also collect this data themselves if you have an account with them. If this is the case, you have to log in with the payment service provider during the ordering process by using your login data. The data protection notice of the respective payment service provider shall apply.
5 Registration function
Description of data processing:
Users have the option of setting up a user account. During registration, the user will be informed of the required information. Users can be informed by email about information related to offers or registration, such as changes in the scope of our offers or technical circumstances.
Which information is processed:
The obligatory details required are saved: [title, first name, last name, email address, street/ house number, postal code/ city, country]. As part of the utilization of our registration and login functions and the use of the user account, we save the IP address and the time of the respective user’s actions.
Purpose and legal basis of data processing agreement:
The data entered during registration is used for the purpose of using the website in accordance with Art. 6, para. 1, p. 1, lttr. a) of the GDPR.
Saving the IP address and the time of the respective usage is undertaken on the basis of our legitimate interests in accordance with Art. 6, para 1, page 1, lttr f) GDPR and to protect the user from misuse and other unauthorized use. As a general rule, this data is not transferred to third parties unless it is required for the pursuit of our claims or there is a legal obligation to do so pursuant to Art. 6, para 1, page 1, lttr c) of the GDPR.
Duration of data retention:
If the user has canceled their user account, their data relating to the user account is deleted except when its retention is necessary because of reasons related to commercial or tax law pursuant to Art. 6, para. 1, page 1, lttr c) of the GDPR. It is incumbent on the user to save their data in the event notice of termination has been given before the end of the contract. We are entitled to irretrievably erase all of the user’s data that has been saved during the contractual period.
The IP addresses will be erased after 7 days at the latest.
6 Newsletter registration
Description and purpose of data processing:
If you register to our newsletter, we will use the mandatory information or the information you provide for this separately in order to send you our email newsletter on a regular basis.
If within the scope of registering for the newsletter, its contents are rewritten specifically, this is the decisive factor for the consent of the user. Furthermore, our newsletter contains information about our services and us.
The registration for our newsletter is carried out using a so-called double opt-in process. This means you will receive an email after you register in which you will be asked to confirm your registration. This confirmation is necessary so that no one can register with someone else’s email address. Registrations for the newsletter are recorded in order to be able to prove that the registration process was carried out in accordance with the legal requirements and to be able to clarify any potential misuse of your data if necessary. This includes saving information about the point in time of registration and confirmation as well as the IP address. Changes to your data with the mailing service provider will also be recorded. If you do not confirm your registration within 24 hours, your information will be restricted and automatically erased after 2 weeks.
To register for the newsletter, it is sufficient if you specify your email address. Optionally we kindly request you provide a name for the purpose of personally addressing you in the newsletter.
The newsletter contains a so-called “web beacon”; this means a pixel-sized file that is retrieved from our server when the newsletter is opened or from our mailing provider’s server, if we use one. Technical information, such as information about your browser and your system as well as your IP address and time of retrieval, will be initially collected within the scope of this retrieval.
This information will be used for technical improvements of services that are undertaken with the aid of the technical data or target groups and your reading behaviour, or with the aid of their retrieval location (which can be determined with the help of the IP address) or access times. The statistical surveys also include determining whether the newsletter is opened, when it is opened, and which links are clicked on. While this information may be assigned to the newsletter recipients due to technical reasons, it is neither our intention nor our that of our mailing service provider, if one is used, to monitor individual users. The analyses are intended more for us to learn about the reading behaviour of our users and to tailor our contents to their preferences or to send different contents according to our user’s interests.
Your email address is used only for the purpose of providing this newsletter. The email address will not be disclosed to third parties for advertising purposes.
Legal basis for data processing:
Sending the newsletter is done on the basis of your consent and in accordance with Art. 6, para 1, p.1, lttr a) & Art. 9, para 2, lttr a) GDPR. The recording of the registration process is undertaken on the basis of our legitimate interests and in accordance with Art. 6, para 1, p. 1, lttr f) GDPR. The analysis of users’ behaviour is undertaken pseudonymously on the basis of our legitimate interests in accordance with Art. 6, para 1, p. 1, lttr f) GDPR. The mailing service provider is used on the basis of our legitimate interests in accordance with Art. 6, para 1, p. 1, lttr f) GDPR and an order processing agreement in accordance with Art. 28, para 3, p.1 GDPR.
Recipients of the data:
The newsletter is sent by the mailing service provider on our behalf as part of processing and we will disclose your email address for this purpose. Sending the newsletter is carried out by the mailing service provider “Mail Chimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
This service provider is located in the USA and is certified under the EU-US Privacy Shield framework. An up-to-date certificate can be seen here. Due to the agreement between the USA and the European Commission, the latter has determined that the company certified under Privacy Shield has an adequate level of data protection.
You can see the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/ .
Duration of retention:
Cancelling the newsletter is possible at any time and can either be done by a message to the contact person listed below or by using the link contained in the newsletter. After cancellation, we will erase your email address if you have not expressly consented to the additional use of your data, or we have reserved the right to use this data in a manner that is legally permitted, and we will inform you of this in this notice. We can save the unsubscribed email addresses up to three years on the basis of our legitimate interests before we erase them for purposes of the newsletter mailing so that we can prove that consent had previously been given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for erasure is possible at any time if the previous existence of consent is confirmed at the same time.
Additional information:
The mailing service provider can use the data of the recipient in pseudononymous form, i.e. without being assigned to a user, for optimising or improving their own services, e.g. for technical optimisation of the mailing and the presentation of the newsletter or for statistical purposes. However, the mailing provider does not use the data of our newsletter recipients to write to them themselves or to disclose the information to a third party.
Objection and deletion option
You can revoke your consent at any time with future effect and request the data be erased pursuant to Art. 17, para 1 GDPR (e.g. by clicking on the cancellation link, which is also included in every newsletter, or by sending your revocation notice by email or mail to the contact details in the legal notice). The data will no longer be allowed to be processed from the moment your revocation declaration has been received. The data will be erased immediately. The withdrawal of consent shall not affect the lawfulness of processing before consent is revoked.
In accordance with Art. 21 GDPR, you can object to the analysis of users’ behaviour at any time by clicking on the cancellation link in the email or by informing us through other means.
You will find more information about the other rights you have and how you can exercise these rights at the end of this Privacy Notice.
7 Questionnaire and competition
Description and purpose of data processing:
Only the answers given as part of the survey will be processed. This data is only used for the purposes specified in the declaration of consent that use processing for market research and analysis purposes with regard to lubricant products. The entered personal information (information for the survey, without names) concerns sensitive data in addition to normal personal data in accordance with Art. 9, para 1 of the General Data Protection Regulation (GDPR), because the data may reveal information about my sexual life.
The data will not be merged with other data that comes from visiting our website.
Use of the survey is neither contractually nor legally required. Use of the survey is done on a voluntary basis. You are not obligated to participate in the survey. If you want to participate in the survey, you must fill in all the required information in the marked fields. These fields serve only for the purpose of the survey. If you do not fill in the required information for the survey, we unfortunately cannot process your request and you cannot participate in the survey.
If you would like, you can participate in a free raffle after you finish the survey, which we are offering to show our gratitude for your participation in the survey. As part of this raffle, winners will be awarded the prizes indicated in the competition. The participation in the competition is a reward for processing the data within the scope of the survey. During the competition, your first and last name can be voluntarily provided. Your email address is required so that we can contact you if you win. This email address will be recorded separately and will not be linked with your answers in the survey so that in this context, no special categories of personal data will be processed. In the event you win, you will also be requested to provide your name, mailing address and date of birth.
Legal basis for data processing:
The legal basis for processing personal data within the scope of the survey is the express consent to the processing of special categories of personal data (specifically: data about your sexual life and sexual orientation) in accordance with Art. 6, para 1, p. 1, lttr a) in conjunction with Art. 9, para 2, lttr a) of the GDPR.
The legal basis for processing data within the scope of the competition is the Competition Agreement within the meaning of Art. 6, para 1, p. 1 lttr b), Ver. 1 GDPR.
Recipients of the data:
For the survey, we use the software LamaPoll from the company Lamano GmbH & Co. KG, Frankfurter Allee 69, 10247 Berlin, Germany. The company merely has access to the answers of the survey. The email addresses will not be transmitted.
Duration of retention:
The data you provided in our survey will be promptly saved in such a way after your participation in the survey that it will not be linked to other data stemming from your visit to our website. We will no longer be able to establish a direct link to the remaining data. As a general rule, the remaining data will be saved for an unlimited period of time on the basis of your consent.
The personal data of the winners will be deleted two weeks after the prizes have been sent if it is not subject to any legal retention periods.
Objection and deletion option
You can revoke your consent at any time with future effect and can request that your data be erased in accordance with Art. 17, para. 1 GDPR. The data will no longer be allowed to be processed from the moment your revocation declaration has been received. The data will be erased immediately. The withdrawal of consent shall not affect the lawfulness of processing before consent is revoked.
You will find more information about the other rights you have and how you can exercise these rights at the end of this Privacy Notice.
8 Comments and posts
When users leave comments or other posts, their IP addresses are saved on the basis of our legitimate interests as defined in Art. 6, para. 1, page 1, lttr. f) of the GDPR. This is done for our security in the event that someone leaves behind illegal contents in their comments and posts (insults, prohibited political propaganda, etc.). If this is the case, we can be sued or prosecuted for the comment or post, which is why we are interested in the identity of the author.
9 Hosting
Description and purpose of data processing:
The hosting services we use serve to make the following services available: infrastructure and platform services, computing capacity, memory space and database services, security services, and technical maintenance services that we use for the purpose of operating this website.
Processed data:
Within this context, we or our hosting provider process the inventory data, contact data, content data, contract data, user data, meta and communication data of customers, interested parties and visitors of this website.
Legal basis for data processing:
The processing is based on our legitimate interests in securing the efficient and safe provision of this website pursuant to Art. 6, para.1, page 1, lttr. f) of the GDPR in conjunction with Art. 28, para 3 of the GDPR (job processing agreement).
10 Data processing for job applications
Description and purpose of data processing:
If you apply for a job at our company, we will process your personal data for the purpose of assessing it and processing your job application.
Processed data:
To assess your application, we process your personal information (name, address, telephone number, email address), your qualifications, your professional experience, other information on your resume, and additional documents, such as photographs and credentials.
Legal basis for data processing:
Data processing is required for carrying out a pre-contractual procedure between you and pjur. The legal basis is Article 6, para. 1, page 1, lttr. b) of the GDPR.
Duration of data retention:
Documents related to applications that do not lead to an applicant being hired will be erased six months after the application process has been completed. Application documents will only be saved for a selection process in the future if you have given your prior consent.
11 Cookies and web analysis
11.1 Cookies
Description of data processing:
We use so-called cookies on different pages to make our website attractive for visitors, to enable the use of certain functions, to display suitable products, or to conduct market research. Cookies are small text files which are transmitted by your web browser or other programs on the hard drive of your computer or in the memory of your terminal device (smartphone, tablet, etc.) and are saved there. Cookies enable specific information relating to the device and your visit to the website to be saved in order to identify you again when you visit our website the next time. Information is saved, such as the pages on the website that were visited, the length of the visit, or the individual input of users (e.g., login data) on the website while they were visiting, which is readout when they return to the website.
Temporary cookies, or to be precise, “session cookies” or “transient cookies”, are cookies that are deleted after users leave the website and close their browser. Information about users, such as the content of their shopping cart in an online shop or their login status, can be saved in this type of cookie. “Permanent” or “persistent” cookies refer to cookies that remain saved even after the browser is closed. “Third-party cookies” refer to cookies that are offered by providers other than the controller that operates the website (otherwise, if they are only the controller’s cookies, they are called “first-party cookies”).
Purpose and legal basis of data processing:
Cookies are absolutely necessary in order to be able to offer certain functions on the website, such as the shopping cart. Moreover, cookies serve, on the one hand, to make the website user friendly and thus to assist you as the user (e.g., saving login data so that you can fill out login form), and on the other hand, they serve to collect statistical data about the use of the website and enable the data to be analyzed for the purpose of improving the offer on the website. The legal basis is section 13, para. 1, p.2 of the German Telemedia Act. Additionally, the use of cookies serves to safeguard our overriding legitimate interests in providing an optimal presentation of our website while weighing the various interests at hand pursuant to article 6, para 1, p. 1, lttr f) of the GDPR.
You can set your browser in such a way that you can be informed about the placement of cookies and decide to accept individual cookies, or exclude the acceptance of cookies for specific situations, or exclude them in general. Every browser is different in the way that it manages cookie settings. They are described in the help menu of each browser; it explains to you how you can change your cookie settings.
A general objection to the use of cookies for the purpose of online marketing is explained for a variety of services, especially in the event of tracking, on the USA website http://optout.aboutads.info/?c=2&lang=EN or the EU website http://www.youronlinechoices.com/ .
Potential consequences of disabling cookies:
Disabling cookies can lead to limited functioning of this website.
Duration of data retention:
Some cookies we use are erased at the end of the browser session, i.e. when your browser is closed (session cookies). Other cookies will remain on your end device and help us recognize your browser the next time you visit the website (persistent cookies). You can find out about the length of time they are saved in the cookie settings of your web browser.
11.2 The use of Google Analytics for web analysis
Description of data processing:
This website uses Google Analytics for website analysis. This website analysis service is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com).
Google Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information on your use of this website normally is transmitted to a Google server in the USA and saved there. By activating IP anonymization on this website, the IP address is shortened before it is transmitted within the member states of the European Union or in another state that is party to the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted from your browser as part of Google Analytics is generally not merged with other data from Google.
If and when information is transferred to Google servers in the USA and is saved there, the American company Google LLC is certified under EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for the companies certified under Privacy Shield.
Which data is processed:
An overview of the processed data can be viewed under the following link:
support.google.com/analytics/answer/6004245. Google support is responsible for any up-dates / changes.
Purpose and legal basis of data processing:
The purpose of data collection is to determine and evaluate users’ behavior. It serves to safeguard our overriding legitimate interests in providing an optimal presentation of our website while weighing the various interests at hand pursuant to article 6, para. 1, p. 1, lttr. f) of the GDPR.
Duration of data retention:
Deletion of the data collected within this context is carried out once the purpose for its collection ceases to exist and the use of Google Analytics is finished. You can prevent the collection of the data which is generated by the cookie and is related to your use of the website (incl. your IP address) from being sent to Google and from being processed by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, you can click on this link to prevent the collection of data on this website by Google Analytics in the future. In doing so, an opt-out cookie will be saved on your terminal device. If you erase your cookies, you will have to click on the link again.
Additional information:
You can find out more information about the use of data by Google as well as the setting and objection options on Google’s websites:
https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google during your use of our partners’ websites or Apps),
http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”),
http://www.google.de/settings/ads (“Manage information that Google uses to display advertising”).
12 Online marketing
12.1 Google Ads Remarketing
Description of data processing:
We use Google Ads to advertise this website in Google search results and on third-party websites. Additionally, the remarketing cookie from Google is used when our website is visited; this cookie automatically makes interest-based advertising possible by using a pseudonymous cookie ID and the web pages you have visited as a basis.
Data processing that goes beyond this only occurs if you have given Google your consent for your web and App browser history to be linked by Google to your Google account and for the information from your Google account to be used for personalizing the ads you see on the internet. If, in this case, you are logged into Google while visiting our website, Google will use your data together with Google Analytics data in order to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data to Google Analytics data in order to generate target groups.
Google Ads is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
If and when information is transferred to Google servers in the USA and is saved there, the American company Google LLC is certified under EU-US Privacy Shield.
A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for the companies certified under Privacy Shield.
Recipient of the data:
Google Ads is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
Purpose and legal basis of data processing:
Data processing serves to safeguard our overriding legitimate interests in providing optimal marketing of our website while weighing the various interests at hand pursuant to article 6, para. 1, p. 1 lttr. f) of the GDPR.
Duration of data retention:
Deletion of the data collected in this context is carried out once the purpose for its collection ceases to exist and the use of Google Ads remarketing has ended.
You can deactivate the remarketing cookie by going to this link . Additionally, you can get information about the placement of cookies and cookie settings from Digital Advertising Alliance .
12.2 Google Maps
Description of data processing:
This website uses Google Maps for displaying geographical information.
When Google Maps is used, data about the website visitor’s use of the maps functions is transmitted and processed by Google; this information includes in particular the IP address as well as the user’s location information. We do not have any influence over this data processing.
If and when information is transferred to Google servers in the USA and is saved there, the American company Google LLC is certified under EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for the companies certified under Privacy Shield.
Purpose and legal basis of data processing:
Data processing is carried out to safeguard our overriding legitimate interests in providing an optimal presentation of our website while weighing the various interests at hand pursuant to article 6, para. 1, page 1, lttr. f) of the GDPR. Data processing is carried out on the basis of an agreement between the joint controllers in accordance with Art. 26 of the GDPR, which you can see here .
Recipient of the data:
Google Maps is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
Additional information:
To deactivate Google Maps and thereby prevent data transmission to Google, you have to deactivate the Java script function in your browser. If it is deactivated, Google Maps cannot be used or will only be able to be used to a limited extent.
You can find additional information about Google’s data processing in Google’s Privacy Notice. The terms of use for Google Maps contain detailed information about the map service.
12.3 Google Fonts
Description of data processing:
The script code for Google Fonts is incorporated into this website.
In this context, a connection between the browser you are using and Google’s servers is made. In this manner, Google becomes aware that our website was accessed by your IP address.
If and when information is transferred to Google servers in the USA and is saved there, the American company Google LLC is certified under EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for the companies certified under Privacy Shield.
Purpose and legal basis of data processing:
It serves to safeguard our overriding legitimate interests in providing a uniform presentation of the contents on our website while weighing the various interests at hand pursuant to article 6, para. 1, page 1, lttr. f) of the GDPR.
Recipient of the data:
Google Fonts is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de).
Additional information:
You can find additional information about Google’s data processing in Google’s Privacy Notice.
13 Social Media Plug-ins
13.1 The use of social plug-ins from Facebook, Twitter, Instagram
Description of data processing:
We use so-called social plug-ins (“plug-ins”) from social media networks on our website.
If you open a page on our website that contains this type of plug-in, your browser will set up a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plug-ins is transmitted directly from the respective provider to your browser and is embedded in the website. Through plug-in integration, the providers will receive information that your browser has accessed the corresponding page on our website, even if you do not have a profile or you are not logged-in at the moment. This information (including your IP address) is transmitted from your browser directly to a server of the respective provider (possibly in the USA) and is saved there. If you are logged into one of the services, the providers will be able to match the visit to our website directly with your profile in the respective social network. If you interact with the plug-ins through clicking on the “like” or “share” buttons for example, the corresponding information will also be directly transferred to a server of the provider and saved there. Moreover, information is published in the social network and is shown to your contacts on the network.
Purpose and legal basis of data processing:
This course of action serves to safeguard our overriding legitimate interests in providing optimal marketing of our website while weighing the various interests at hand pursuant to article 6, para. 1, p. 1, lttr. f) of the GDPR. If and when you are registered at respective social media networks, the processing of the data is also carried out on the legal basis of your consent in accordance with Art. 6, para 1, p. 1, lttr a) GDPR if you have given your respective consent when registering with a social media network.
Additional information:
https://www.facebook.com/policy.php
https://twitter.com/privacy
https://help.instagram.com/155833707900388
If you do not want the social networks to match your data that they collect on our website directly to your profile in the respective network you must log out of the respective network before you visit our website. You can also completely prevent plug-ins from being loaded with add-ons for your browser, e.g., with the NoScript script blocker (https://noscript.net/).
13.2 Youtube Video Plug-ins
Description of data processing:
Contents of third-party providers are embedded in our website. These contents are made available by Google (“provider”).
The extended privacy setting is activated for videos from Youtube that are embedded on our site. This means that no information about the website visitors will be collected and saved at Youtube unless they play a video.
Please refer to Google’s Privacy Notice for more information on the purpose and scope of data collection, as well as additional processing and use of the data by the provider, your rights related thereto, and setting options to protect your privacy: https://policies.google.com/privacy.
Purpose and legal basis of data processing:
The embedding of videos serves to safeguard our overriding legitimate interests in providing optimal marketing of our website while weighing the various interests at hand pursuant to article 6, para. 1, p. 1, lttr. f) of the GDPR.
Recipient of the data:
Youtube is a service provided by Google Ireland Limited, a company registered and run under Irish law, which is located in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
13.3 Our online presence on Facebook, Google, Twitter
Description of data processing:
Our presence on social networks and platforms serves to improve our active communication with our customers and interested parties. There we inform consumers about our products and ongoing special offers.
When visiting our online websites in social media, your data can be automatically collected and saved for market research and advertising purposes. So-called user profiles are created from this data using pseudonyms. These can be used, for example, to place ads within and outside of the platforms that presumably match your interests. Cookies are usually set on your terminal device for this purpose. The user’s behavior and interests are saved in these cookies.
If the previously mentioned social media platforms are headquartered in the USA, the following shall apply: There is a European Commission resolution on adequacy which applies to the USA. It draws on the EU-US Privacy Shield Framework. A currently valid certificate for the respective company can be seen here .
Please refer to the links for the Privacy Notices of the providers below in order to receive detailed information on processing and use of data by the provider on their websites, their contact information, your rights related thereto, and setting options for protecting your privacy, especially objection options (opt-out). If you still require assistance with this, you can contact us.
Facebook: https://www.facebook.com/about/privacy/
Purpose and legal basis of data processing:
Data processing is carried out on the basis of an agreement between the joint controllers in accordance with Art.26 of the GDPR, which you can see here:
Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
Google/ YouTube: https://policies.google.com/privacy
Twitter: https://twitter.com/de/privacy
Pursuant to Art. 6, para. 1, page 1, lttr. f) of the GDPR, the use of cookies serves to safeguard our overriding legitimate interests in providing an optimal presentation of our offer and effective communication with the customers and interested parties while weighing the various interests at hand. In the event you are requested by the respective social media platform operators to give your consent (agreement) to data processing, e.g. by means of checking a box, the legal basis of the data processing is Art. 6, para. 1, page 1, lttr. a) of the GDPR.
Additional information:
Objection options (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated
Twitter: https://twitter.com/personalization
14 Your rights
If your personal data is processed, you are considered a data subject as defined in the GDPR and you are entitled to the following rights against pjur:
14.1 Right to access (Art. 15 GDPR)
You can request confirmation from pjur about whether personal data pertaining to you is being processed. If this is the case, you can request us to provide you with information about this personal data and can obtain the additional information listed under Art.15 of the GDPR.
14.2 Right to rectification (Art. 16 GDPR)
You have a right against pjur to immediate rectification and/or to have incomplete information be completed if the processed personal data pertaining to you is incorrect or incomplete. You can also require completion by means of providing a supplementary statement.
14.3 Right to eraser (Art. 17 GDPR)
You can require that pjur immediately erase the personal data pertaining to you if one of the reasons listed in Art. 17, para. 1 of the GDPR applies.
If pjur has published the personal data pertaining to you and if we are required to erase it pursuant to Art.17, para. 1 of the GDPR, we will take appropriate measures while taking into account the technology available and implementation costs, as well as steps of a technical nature, to inform the controller responsible for the data processing that that you, as the data subject, have requested the erasure of all links to this personal data or any copies or replications thereof.
The right to erasure shall not exist under the conditions listed in Art. 17, para. 3 of the GDPR.
14.4 Right to restriction of processing (Art. 18 GDPR)
Under the conditions listed in Art. 18, para. 1 of the GDPR, you can request that the processing of the personal data pertaining to you be restricted.
If the processing of the personal data pertaining to you was restricted, this data may be processed – apart from its storage – only with your consent, or in order to assert, exercise or defend any legal claims, or in order to protect the rights of another natural or legal entity, or for reasons of substantial public interest of the European Union or member state.
If the restriction placed on processing has been restricted according to the aforementioned conditions, you will be informed by us before the restriction is lifted.
14.5 Right to notification (Art. 19 GDPR)
If pjur has corrected or erased the personal data pertaining to you or restricted its processing, we will notify all recipients who were disclosed the personal data pertaining to you about this correction or erasure of the data, or the restriction placed on its processing, unless this proves to be impossible or involves unreasonable expense or effort.
We can inform you about these recipients upon request.
14.6 Right to data portability (Art. 20 GDPR)
Under the conditions listed in Art. 20, para. 1 of the GDPR, you have the right to receive the personal data pertaining to you, which you gave to pjur, in a structured, commonly used and machine-readable format, and to have this data transmitted to another controller. You can also request that the personal data pertaining to you be transmitted directly from pjur to another controller to the extent it is technically feasible.
14.7 Right to object
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data pertaining to you, which shall be carried out on the basis of Art. 6 , para. 1, page 1, lttr. e) or f) of the GDPR.
Pjur will not process the personal data pertaining to you any more unless we can prove that there are compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data pertaining to you is processed in order to run direct marketing, you have the right to object to the processing of the personal data pertaining to you for the purpose of such advertising; this shall also apply to profiling provided it is connected to this type of direct marketing.
If you object to processing for the purposes of direct marketing, the personal data pertaining to you will no longer be processed for these purposes.
14.8 Right to revocation of informed consent under data protection law
You have the right to revoke your informed consent under data protection law at any time. Revoking consent shall not affect the legality of the processing consented to which has been carried out up until the revocation.
14.9 Right to lodge complaints at a supervisory authority
Notwithstanding another administrative or judicial remedy, you have the right to lodge a complaint at a supervisory authority, particularly one in a member state where you reside or work, or the location where the alleged infringement took place if you are of the opinion that the processing of the personal data pertaining to you violated the GDPR.
The supervisory authority which was submitted the complaint shall instruct the person making the complaint about the status and results of the complaint, including the option of seeking judicial remedy pursuant to Art. 78 of the GDPR.
Please contact our company’s data protection officer if you have any questions about the collection, processing or use of your personal data; if you would like to request information or have a correction made; if you would like have data restricted or erased; or if you would like to revoke consent that you may have given; or if you would like to object to a specific type of use of the data. Any person affected can contact our Data Protection Officer directly at any time to answer any questions or offer suggestions related to data protection and privacy issues.
Data protection officer:
Contact information for the data protection officer
If you would like to assert your rights related to your personal data or if you have more questions about the use of the data you provide us, please contact us:
pjur group Luxembourg S.A.
87, Esplanade de la Moselle
L-6637 Wasserbillig/ Luxembourg
Tel.: +352 74 89 89
Email: privacy@pjur.com
Website: www.dev-vn.pjur.com/data-protection-notice
Any person affected can contact our Data Protection Officer directly at any time to answer any questions or offer suggestions related to data protection and privacy issues.