Our privacy policy
1. Introduction
We are very pleased about your interest in our company. Data protection is of particular importance for the management of Jena Business development (Wirtschaftsförderungsgesellschaft Jena mbH). If you contact us electronically, by telephone or in person or if you wish to use our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek your consent.
Jena Business development works as a municipal company of the city of Jena according to §2 of the Thuringian community and county council (Thüringer Kommunalordnung – ThürKO, January 28, 2003) for the interests of business and industry.
The processing of personal data is carried out in accordance with the requirements of the EU Data Protection (EUDATAP) and in accordance with the country-specific data protection provisions applicable to Jena Business Development. By means of this privacy policy, we inform the public about the nature, scope and purpose of the personal data processed by us. Furthermore, you will be informed about your rights by means of this privacy policy.
2. Definitions
The privacy policy of Jena Business Development is based on the terminology used by the European directive and regulatory authority in the adoption of the EU Data Protection (EUDATAP). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.
We use the following terms in this privacy policy, including but not limited to:
a) Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
b) Person concerned
The person concerned is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing means any process or series of operations related to personal data, such as collecting, recording, organizing, ranging, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
d) Restriction of processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
e) Profiling
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
g) Person in Charge or Person in Charge of data processing
The person in charge or person in charge of data processing is the natural or legal person, public authority, institution or other body that, alone or in conjointly with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
h) Processor
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
i) Recipient
Recipient is a natural or legal person, agency, agency or other entity to whom personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as recipients.
j) Third Parties
Third parties are natural or legal persons, public authorities, institutions or bodies other than the data subject, the controllers, the processors and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.
k) Consent
Consent is any voluntarily given and unambiguously expressed act in the form of a statement or other unambiguous confirmatory expressed act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.
3. Rights of the person concerned
Each person concerned has the following rights, as granted to the controller by the European Regulatory and Regulatory Agency:
- right to information,
- right to rectification,
- right to cancellation,
- right to restriction of processing,
- right to object to the processing and
- right to data portability.
4. Automated decisions on a case-by-case basis, including profiling
Any person concerned by the processing of personal data shall have the right, as granted by the European legislature and the legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or the performance of a contract between the person concerned and the person responsible or (2) it takes place with the explicit consent of the data subject, Jena Business Development shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision.
If the data subject wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time.
5. Processing of personal data in the CRM system (customer database) of Jena Business Development
When contacting us (for example, by contact form, e-mail, telephone or via social media) the information of the user to process the contact request and its processing in accordance with. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System (“CRM System”) or comparable request organization. The following data can be stored:
• Address data
• contact details (e-mail, telephone, fax)
• Name / First name / Salutation / Title / Title in the company
• affiliation to industry and competence fields
• Memberships in working groups, which are supervised by the WFG
• Information on activities that have been carried out for the person concerned or together with her (delivery of materials, company visit, invitation to event, etc.)
Your data will be stored in our CRM system for as long as necessary to conduct our business relationship. We check the necessity every two years; Furthermore, the legal archiving obligations apply.
6. Events
With your binding event registration, you consent to the processing of personal data relating to you for the purpose of conducting the event and publishing your name, first name, title and your company. We process your data to create participant lists and name tags (name, first name, title, company name, location). We only process your data for as long as is necessary for the preparation and execution of the event. On request, we will delete your data without delay, unless legal retention requirements speak against it.
At our events may be made photo, sound and film recordings that are published in various media. If you do not agree in individual cases with the publication of the material, we ask for immediate notification before the start of the event.
7. General data and information on the use of our website
Jena Business Development has implemented numerous technical and organizational measures as data controller to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps so that absolute protection can not be guaranteed. For this reason, you are free to submit personal data to us in alternative ways.
7.1. Collection of general data and information
The website of the Jena Business Development collects a series of general data and information with each access to the website by you or an automated system. This general data and information is stored in the log files of the server. Can be detected
(1) used browser types and versions,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system comes to our website (so-called referrers),
(4) the sub-web pages, which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an internet protocol address (IP address),
(7) the internet service provider of the accessing system and
(8) other similar data and information used in the event of attacks on our information technology systems.
7.1.1. survey purposes
The Jena Business Development does not draw any conclusions about the use of this general data and information. Rather, this information is needed to
(1) to deliver the contents of our website correctly,
(2) to optimize the content of our website as well as the advertising for it,
(3) to ensure the permanent functioning of our information technology systems and the technology of our website as well as
(4) To provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack.
This anonymously collected data and information are therefore statistically and further evaluated by the Jena Business Development with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
7.1.2. Cancellation and blocking
We process and store your personal data only for the period required to achieve the purpose of the storage or as provided for by the European directives and regulations or any other legislator in laws or regulations which the controller is subject to.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
7.1.3. Record keeping
According to Art. 17 (3) GDPR, there is no obligation to delete, as far as a legal obligation – in particular a legal retention period – precludes. Retention periods may be e.g. from Section 257 of the German Commercial Code (HGB) or Section 147 of the German Tax Code (AO).
7.2. cookies
The websites of Jena Business Development use cookies. Cookies are text files that are stored and stored on a computer system via an Internet browser.
7.2.1. Use of cookies
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual’s browser from other internet browsers that contain other cookies. A particular web browser can be recognized and identified by the unique cookie ID.
Through the use of cookies, Jena Business Development can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.
By means of a cookie the information and offers on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies need not reenter their credentials each time they visit the website, as this is done by the website and the cookie stored on the user’s computer system.
7.2.2. Deactivation of cookies
The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
7.3. Newsletter
With our newsletter we inform you about current developments at the economic and scientific location Jena and point to events.
7.3.1. Consent
With your consent, you can subscribe to our newsletter. The newsletter topics are named in the declaration of consent.
7.3.2. Registration
To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data.
The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a DS-GMO.
We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. It is the rapidmail GmbH prohibited to use your data for purposes other than sending the newsletter. A passing on or a sale of your data is not allowed to rapidmail GmbH. rapidmail is a German, certified newsletter software provider, which was carefully selected according to the requirements of the DSGVO and the BDSG.
7.3.3. Revocation
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to unsubscribe.jenawirtschaft@jena.de or by sending a message to the contact details stated in the imprint.
7.4. Web Analytics: Use of Matomo
On this website, using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Mataomo”) based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 para. 1 lit. f DSGVO data collected and stored.
7.4.1. Cookies
For the evaluation of this data, cookies (more details in section 7.2.) Are stored on your computer. You can adjust the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website to the full extent. The prevention of the storage of cookies is possible through the setting in your browser. Preventing the use of Matomo is possible by removing the following checkmark to enable the opt-out plug-in:https://piwik.jena.de/piwik1/index.php?module=CustomOptOut&action=optOut&idSite=38&language=en
7.4.2. AnonymizeIP
This website uses Matomo with the extension “AnonymizeIP”. As a result, IP addresses are processed in shortened form, which means that direct personal reference can be excluded. The IP address transmitted by Matomo from your browser will not be merged with other data collected by us.
The program Matomo is an open source project. Third-party privacy information is available at matomo.org/privacy-policy/.
7.5. Use of social media plug-ins
7.5.1. Types of social media plug-ins
We currently use the following social media plug-ins on our site:
- Facebook,
- LinkedIn and
- Youtube.
We use the so-called two-click solution. In other words, when you visit our site, no personal data is initially passed on to the providers of the plug-ins. The provider of the plug-in can be identified by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the highlighted field and activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online service. In addition, the data referred to in point 2 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider carries out the data collection, in particular via cookies, we recommend that you delete all cookies before clicking on the greyed-out box via the security settings of your browser.
7.5.2. Our knowledge
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing, the retention periods. We also have no information to delete the data collected by the plug-in provider.
7.5.3. Evaluation and right of objection
The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, whereby you must contact the respective plug-in provider to exercise it. The plug-ins allow us to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f DS-GMO.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares your contacts publicly. We recommend logging out regularly after using a social network, but especially before activating the button, as this will prevent you from being associated with your profile with the plug-in provider.
7.5.4. Addresses of the plug-in providers
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the privacy statements of these providers provided below. There you will also find further information about your rights and settings options for protecting your privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; For more information about data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and http: //www.facebook .com / about / privacy / your-info # everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, privacyshield.gov/EU-US Framework
b) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US Framework.
c) YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
7.6. YouTube videos
7.6.1. Integration of YouTube
We have included YouTube videos in our online offering, which are stored at www.YouTube.com and can be played directly from our website. YouTube content is only included in the “extended data protection mode”. YouTube provides this itself, thereby ensuring that YouTube does not initially store any cookies on your device. However, when you visit the relevant pages, the IP address and other data are transmitted and you are informed in particular which of our Internet pages you have visited. However, this information cannot be assigned to you unless you have registered with YouTube or another Google service (e.g. Google+) or are permanently registered.
7.6.2. Transmission of data
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in point 2 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to associate with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these User Profiles, and you must be directed to YouTube to use them.
7.6.3. Further information
For more information on the purpose and scope of your data collection and processing through YouTube, please read the privacy policy. You’ll also get more information about your rights and privacy settings here: www.google.com/intl/en/policies/privacy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US Framework.
8. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions of a data protection character is:
Wirtschaftsförderungsgesellschaft Jena mbH
Managing Director
Wilfried Röpke
Leutragraben 2-4
07743 Jena
Telephone: 03641-8730030
Fax: 03641-8730059
Website: www.jenawirtschaft.de
E-mail: jenawirtschaft[at]jena.de
9. Contact details of the data protection officer
You can reach our data protection officer as follows:
Landgraf Datenschutz GmbH
Markt 22
07743 Jena
E-Mail: dsb[at]landgraf-datenschutz.de
Telephone: +49 3641-3161180