The protection of your privacy and your personal data is something we take very seriously.
In this document, we provide detailed information on the data we process when you visit our website, and the form in which we process this data. By doing so, we fulfil our obligation to provide information to you in accordance with Art. 13 of the GDPR.
Responsible person and contact details for data protection officer:
The person responsible for the data processing that takes place on our website is:
Our data protection officer can be contacted at:
JBB Data Consult GmbH
10119 Berlin, Germany
1. Personal data
According to the GDPR, personal data means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
2. Functions of our website
In the sections below, we explain which data we process when you use the functions we offer. We also explain the legal basis for the processing of this data, how long we store your data, and which other parties, if any, will receive your data.
a) General use of our website
When you visit our website, we generally only collect and store personal data that you actively provide to us. However, the web service of our host also automatically records visits to our website including, in particular, the IP address of the person visiting the website. Your IP address will not be stored.
To maintain system security, our host also creates log files. These log files include information such as: The date of access, the URL, the content accessed and the information transmitted.
This information is only available to us in an anonymised format and therefore cannot be traced back to individuals.
Your IP address is processed to establish a connection to enable us to provide you with access to our website, in accordance with Art. 6, para. 1(f) of the GDPR. This purpose is classed as a legitimate interest.
Our log files are stored for 30 days.
b) Contact form
We provide a form that enables you to contact us. To use this form, you must provide your email address so that we can respond to your enquiry. You may also provide your name, a subject for your enquiry, and the details of the enquiry itself.
If you contact us via the email address provided on our website, we will obtain your email address and any other information that you include in your email. To enable us to look into your enquiry, we are required to process this data. When you contact us, we will process your data so that we can look into and respond to your enquiry. The legal basis for the processing of this data is Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.
We will store your emails and other correspondence with us for as long as required to process your enquiry, plus a further period of three years, in case you contact us again with reference to your original question. This does not apply if the content of your email initiates a contractual relationship with us. In such cases, the retention period will be based on the contract to which the email refers. We will provide a separate explanation of how your data will be processed under the relevant contract.
4. Rights of data subjects
The General Data Protection Regulation guarantees you certain rights, which you can exercise against us if there are legal grounds for you to do so.
- Art. 15 of the GDPR – Right of access by the data subject: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, which data is being processed and how the data is being processed.
- Art. 16 of the GDPR – Right to rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Art. 17 of the GDPR – Right to erasure (‘right to be forgotten’): You have the right to obtain from the us the erasure of personal data concerning you without undue delay. Please take note of the exception described under Point II. 4.
- Art. 18 of the GDPR – Right to restriction of processing: You have the right to obtain from the controller restriction of processing.
- Art. 20 of the GDPR – Right to data portability: Where we are processing your data based on your consent or to fulfil a contract, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from us, or to have the data transmitted to another controller, either directly or indirectly and insofar as it is technically feasible to do so.
- Art. 21 of the GDPR – Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on our legitimate interests or required in the public interest, or in the exercise of official authority.
If you object to the processing of your personal data, we will no longer process your personal data unless we can demonstrate that there are compelling grounds to do so which outweigh your interests, rights and freedoms, or where we are required to process your data to file, exercise or defend a legal claim.
If we process your personal data for direct marketing purposes, you have the right to object to such processing of your data at any time. If you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for this purpose.
- Art. 77 of the GDPR and §19 of the BDSG – Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the applicable regulations.
If you have granted your consent, you may revoke this consent at any time. In such cases, all data processing that has taken place prior to the revocation of your consent will be deemed legally compliant. To revoke your consent, you may click on the link provided in any email you receive from us to unsubscribe from our email service. You can also change the appropriate setting in your user account or send an email to email@example.com. If you send us a message stating that you no longer wish to receive emails from us, we will not send any further emails to the email address you indicate.
5. Obligation to provide data
You have no contractual or legal obligation to provide your personal data to us. However, without the data you provide, we will be unable to offer you our services.
6. Existence of automatic decision-making systems (including profiling)
We do not use automatic decision-making systems with any legal impact or other effect on you.
7. Internet-specific data processing
We use “cookies” to enhance the functionality of our Internet site and to make its use more convenient for you. When you enter our website, these “cookies” may be used to store data on your computer. You can adjust the settings on your browser to prevent cookies from being stored on your computer. However this may limit the functionality of our website.
Cookies will be stored on your computer when you are using this website. Cookies are small text files, which are stored on your hard drive in connection with the browser software you use and from which the body (in this case us) setting the cookie, will receive specific information. Cookies cannot execute programmes or transmit viruses to your computer. They simply serve the purpose of making the overall internet offering more user-friendly and effective.
b) Transient cookies are deleted automatically, once you close your browser. These include specifically the so-called session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to a common session. It allows your computer to be recognised when you visit the website next time. Session cookies are deleted once you log out or close your browser.
c) Persistent cookies are deleted automatically after a specified time, which can vary from one cookie to the next. You have the option to delete all stored cookies at any time via the setting options of your browser.
d) You can configure the settings of your browser according to your wishes. Which means you can e.g. refuse to accept third party cookies or all cookies. This setting option may, however, result in you not being able to use this website’s full functionality. You can also change the settings in your browser to ask for your permission every time a cookie tries to access your computer. You can find detailed information on how to change your browser settings in this guide.
Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
We use Google Analytics on our website. Google Analytics is a web analysis service that optimises the use of our website. The IP address that is communicated from your browser through the use of Google Analytics is not combined with other data from Google. As part of Google’s tracking system, information on products that you have ordered will also be transmitted.
The legal basis for the use of Google Analytics is Art. 6, para. 1(f) of the GDPR.
The following plugin enables you to opt out of Google tracking: http://tools.google.com/dlpage/gaoptout?hl=d
9. Joint processing
We work in close cooperation across our group of companies, which consists of foodspring GmbH, enduria GmbH Lobeckstr. 30-35, 10969 Berlin, and Goodminton AG, Lobeckstr. 30-35, 10969 Berlin. The other companies may therefore be granted access to personal data to the extent necessary to safeguard our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in the efficient and highest-quality processing of the inquiries or tasks in question or for group-wide purposes, such as group-wide reporting.
However, this does not result in any disadvantage for you. We have concluded a joint processing agreement with the other companies in accordance with Art. 26 GDPR. You can contact any of our companies to assert your aforementioned rights. The fulfilment of data protection obligations, in particular information obligations, is guaranteed by us.
10. Questions and comments