§ 1 Information on the collection of personal data

(1) General information
Thank you for your interest in our website. The protection of your personal data when you visit our homepage is of particular importance to our management. The information below provides an overview of how we process your personal data and your rights under data protection legislation. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

If a data subject wishes to make use of special services offered by our company via our website, it may become necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we will generally obtain the consent of the data subject. Processing is always in accordance with the EU’s General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Janoschka Deutschland GmbH.

As data controller, Janoschka Holding GmbH has implemented technical and organisational measures to ensure that the personal data processed via this website are protected as completely as possible against loss, destruction, access, modification or distribution by unauthorised persons. This also includes the fact that your personal data are transmitted securely through encryption. We use the coding system TSL (Transport Layer Security).

Nevertheless, absolute protection cannot be guaranteed due to fundamental security gaps in Internet-based data transmissions.

(2) Data controller
Pursuant to Article 4(7) of the EU’s General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations, the controller is:

Linked2 GmbH
Osterfeldstraße 90
D-85737 Ismaning
+49 7825 92991 600
info@linked.global

Please send general questions about data protection at Janoschka Holding GmbH to Datenschutz(at)janoschka.com.

You can reach our data protection officer by post at the above address by adding - Data Protection Officer - or by e-mail at: Datenschutzbeauftragter(at)linked.global

(3) General information on data processing
We collect and use the personal data of our users only to the extent necessary to provide a functional website and to present our content and services. The personal data of our users are routinely collected and used only with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and processing of the data is permitted by law.

The following legal bases for the processing of your personal data are applicable:

• Processing based on your consent (Article 6(1)(a) GDPR)
• Processing for the performance of a contract to which the data subject is party. This also applies to processing operations necessary to take steps prior to entering into a contract (Article 6(1)(b) GDPR)
• Processing for compliance with a legal obligation to which our company is subject (Article 6(1)(c) GDPR)
• Processing where the vital interests of the data subject or of another natural person require the processing of personal data (Article 6(1)(d) GDPR)
• Processing for the purposes of a legitimate interest pursued by our company or by a third party, except where such an interest is overridden by the interests, fundamental rights and freedoms of the data subject (Article 6(1)(f) GDPR)

Legitimate interests can be in particular:

• delivering the contents of our website correctly;
• statistical evaluations to check and optimise the website;
• to provide law enforcement authorities with the necessary information in case of a cyber-attack; o responding to requests and providing services and/or information intended for you;
• the processing and transmission of personal data for internal or administrative purposes;
• the prevention and detection of fraud and criminal offences;
• ensuring the permanent functionality of our information technology systems and the technology of our website with the aim of increasing data protection and data security in our company.

§ 2 Your rights

(1) My rights as a data subject
You can request information about your stored personal data at the above address (Article 15 GDPR). Furthermore, you can demand correction if we have stored incorrect personal data about you (Article 16 GDPR). In addition, under certain conditions you can request the erasure of your data (Article 17 GDPR) or exercise the right to object (Article 21 GDPR). You also have the right to restrict the processing of your personal data (Article 18 GDPR) and the right to have your data released (Article 20 GDPR). The right to information and the right to erasure are subject to the restrictions set out in §§ 34 and 35 BDSG [Federal Data Protection Act].

If you are of the opinion that the processing of your personal data is contrary to the provisions of the General Data Protection Regulation, you have the right to contact your respective competent supervisory authority for data protection (Article 77 GDPR in conjunction with § 19 BDSG). In the case of Baden-Württemberg this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart.

If the processing of your data is based on your consent, you are entitled to revoke this consent to the use of your personal data at any time in accordance with Article 7 GDPR. Please note that such revocation is only effective for the future. Processing operations carried out prior to the revocation are not affected. Please also note that we may need to retain certain data for a certain period of time to comply with legal requirements.

(2) Information about your right to object under Article 21 GDPR
1. RIGHT OF OBJECTION BASED ON INDIVIDUAL CASES You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling within the meaning of Article 4 No 4 GDPR based on this provision.

If you object, we will no longer process your personal data unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

2. RIGHT TO OBJECT TO PROCESSING OF DATA FOR DIRECT MARKETING PURPOSES
In individual cases we will process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purposes of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made in any form and should be addressed to: To assert your rights, you are welcome to use the contact details given in item 1.

(3) Who receives my data?
Unless otherwise specified in the detailed descriptions of the offers, those departments within our company will be given access to your data that need it to fulfill our contractual and legal obligations or to implement our legitimate interests. We will only pass on information about you outside the company if this is permitted or required by law or official notification obligations, if it is necessary for the processing and thus the fulfillment of the contract or, at your request, to take steps prior to entering into a contract, if we have your consent or if we are authorised to provide information.

If we use contracted service providers for individual functions of our offer, these will have been carefully selected and commissioned by us, be bound by our instructions and be regularly checked. Your personal data will then be processed on the basis of commissioned processing contracts in accordance with Article 28 GDPR and we will ensure that the processing of personal data takes place in accordance with the provisions of the GDPR. In this case, the categories of recipients are website management providers.

If we would like to use your data for advertising purposes, we will inform you in detail about the respective processes below.

(4) For how long will my data be stored?
Unless otherwise specified in the detailed descriptions of the offers, we will process and store your personal data for as long as is necessary to fulfill our contractual and legal obligations.

Your personal data will be routinely deleted or blocked if they are no longer required for the fulfillment of contractual or legal obligations, if you have exercised your right to erasure, if all mutual claims have been fulfilled and if there are no other legal obligations to retain data or legal grounds justifying their storage.

§ 3 Collection of personal data when visiting our website

(1) Use of server log files Each time a data subject or automated system accesses the website, a number of general data and information are recorded in log files. This includes an internet protocol address (IP address), the browser types and versions used, the website from which an accessing system accesses our website (so-called referrer), the sub-websites that are accessed via an accessing system on our website, the date and time of access to the website and other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

The legal basis for the temporary storage of data and log files is based on Article 6(1)(f) GDPR with the above-mentioned legitimate interests. Temporary storage of the IP address by the system is necessary to ensure the delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. The data are also used to optimise the website and to ensure the security of our information technology systems. This is also based on our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR. The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. With regard to data collected for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of the data in log files are necessary for the operation of the website. A further possibility for checking the log files exists if there is a justified suspicion of illegal use or a definite attack on our website based on concrete evidence. Here, our legitimate interest in processing lies in the purpose of clarifying and prosecuting such attacks and unlawful uses.

(2) Use of cookies
Cookies are small files that are stored on users’ devices. Cookies can be used to store different information. This information can include, for example, the language settings on a web page or the location where a video was viewed.

As a rule, cookies are also used when a user’s interests or behaviour (e.g. viewing certain content, using functions, etc.) are stored on individual web pages in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also known as “tracking”, i.e. following the potential interests of users. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also known as “user IDs”).

If we use cookies or tracking technologies, we will inform you separately in our privacy policy.

Information on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask you for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the declared consent (Article 6(1)(a) GDPR).
Otherwise, the data processed by means of cookies will be processed on the basis of our legitimate interests (Article 6(1)(f) GDPR), e.g. in the commercial operation of our online service and its improvement, or if the use of cookies is necessary to fulfill our contractual obligations (Article 6(1)(b) GDPR).

General information on withdrawal and objection (opt-out): Regardless of whether the processing is based on consent or legal permission, you have the option at any time of withdrawing any consent you have given or objecting to the processing of your data by cookie technologies (collectively referred to as “opt-out”).

You can initially declare your objection using the settings of your browser, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online service).

Processing of cookie data based on consent: Before we process data within the scope of the use of cookies or have them processed, we ask users for their consent, which can be withdrawn at any time. Before consent has been given, cookies are used if need be, when necessary for the operation of our online offer. Their use is based on our interest and the interest of users in the expected functionality of our online offer.