ConServ GmbH
Privacy Policy
Introduction
With the following information, we would like to provide you, as the “data subject,” with an overview of the processing of your personal data by us and of your rights under data protection laws. Use of our websites is generally possible without entering personal data. However, if you wish to make use of special services provided by our company via our website, processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.
The processing of personal data, for example your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection provisions applicable to “lifecycl.ai.” Through this privacy policy, we would like to inform you about the scope and purpose of the personal data collected, used, and processed by us.
As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection possible of the personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone or by post.
You can also take simple and easy-to-implement measures to protect yourself against unauthorized access to your data by third parties. Therefore, we would like to provide you at this point with some guidance on the secure handling of your data:
Protect your account (login, user account, or customer account) and your IT system (computer, laptop, tablet, or mobile device) with secure passwords.
- Only you should have access to the passwords.
- Make sure that you always use your passwords for only one account (login, user account, or customer account).
- Do not use one password for different websites, applications, or online services.
- Especially when using publicly accessible IT systems or IT systems shared with other people, the following applies: you should always log out again after each login on a website, application, or online service.
Passwords should consist of at least 12 characters and should be chosen so that they cannot be easily guessed. Therefore, they should not contain common everyday words, your own name, or names of relatives, but should contain uppercase and lowercase letters, numbers, and special characters.
This privacy policy applies to the online offering of Jahn ConServ GmbH, which is accessible under the domain lifecycl.ai and the various subdomains (“our website”).
2. Who is responsible and how can I reach you?
Controller
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Jahn ConServ GmbH
Am Zollstock 1
61381 Friedrichsdorf
Representative of the controller:
Data Protection Officer
Compliant Business Solutions GmbH
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main
Alexander Jaber
ds.jcs@cb-sol.de
Definitions
The privacy policy is based on the terminology used by the European legislator and regulator when issuing the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
Among other things, we use the following terms in this privacy policy:
1. Personal data
Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2. Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for processing (our company).
3. Processing
Processing means any operation or set of operations performed with or without the aid of automated procedures in connection with personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or another form of provision, alignment or combination, restriction, deletion, or destruction.
4. Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of restricting its future processing.
5. Profiling
Profiling means any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
6. Pseudonymization
Pseudonymization means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not assigned to an identified or identifiable natural person.
7. Processor
A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
8. Recipient
A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union law or the law of the Member States are not considered recipients.
9. Third party
A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorized to process the personal data.
10. Consent
Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes in the form of a statement or another clear affirmative action by which the data subject indicates that they agree to the processing of personal data relating to them.
Legal basis for processing
Art. 6(1)(a) GDPR (in conjunction with Section 25(1) TTDSG) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to such processing operations that are necessary for carrying out pre-contractual measures, for example in cases of inquiries regarding our products or services.
If our company is subject to a legal obligation that makes the processing of personal data necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1)(c) GDPR.
In rare cases, the processing of personal data could become necessary in order to protect vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured at our premises and their name, age, health insurance data, or other vital information then had to be passed on to a doctor, hospital, or other third parties. In that case, the processing would be based on Art. 6(1)(d) GDPR.
Finally, processing operations could be based on Art. 6(1)(f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not override this. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, the legislator took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47 sentence 2 GDPR).
Our offering is generally aimed at adults. Persons under 16 years of age may not transmit personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and adolescents, do not collect it, and do not pass it on to third parties.
Cookies
General information about cookies
Cookies are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, or similar) when you visit our site.
Information is stored in the cookie that results in each case from the context of the specific end device used. However, this does not mean that we thereby obtain direct knowledge of your identity.
The use of cookies serves to make the use of our offering more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user-friendliness; these are stored on your end device for a specific defined period. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate our offering for you for the purpose of optimization. These cookies allow us to automatically recognize, when you visit our website again, that you have already visited it. The cookies set in this way are automatically deleted after a respectively defined period. The respective storage duration of the cookies can be found in the settings of the consent tool used.
Legal basis for the use of cookies
The data processed by the cookies that are needed for the proper functioning of the website are therefore necessary to safeguard our legitimate interests as well as those of third parties pursuant to Art. 6(1)(f) GDPR.
For all other cookies, the following applies: you have given your consent to this via our opt-in cookie banner within the meaning of Art. 6(1)(a) GDPR.
Information on avoiding cookies in common browsers
Via the settings of the browser you use, you have the option at any time to delete cookies, allow only selected cookies, or completely disable cookies. Further information can be found on the support pages of the respective providers:
- Chrome: https://support.google.com/chrome/answer/95647?tid=311178978.
- Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac?tid=311178978.
- Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?tid=311178978.
- Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09
For your benefit, our website does not use cookies.
Your rights as a data subject
Right to confirmation
You have the right to request confirmation from us as to whether personal data relating to you is being processed.
Right of access Art. 15 GDPR
You have the right at any time to obtain from us, free of charge, information about the personal data stored about you and a copy of this data in accordance with the statutory provisions.
Right to rectification Art. 16 GDPR
You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of processing, you have the right to request the completion of incomplete personal data.
Erasure Art. 17 GDPR
You have the right to request from us that personal data concerning you be erased without delay, provided that one of the legally stipulated grounds applies and insofar as the processing or storage is not required.
Restriction of processing Art. 18 GDPR
You have the right to request that we restrict processing if one of the legal requirements is met.
Data portability Art. 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have the personal data transmitted directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
Objection Art. 21 GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(e) (data processing in the public interest) or (f) (data processing on the basis of a balancing of interests) GDPR.
This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
In individual cases, we process personal data in order to conduct direct advertising. You can object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to us processing your data for direct advertising purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you that is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
You are free, in connection with the use of information society services and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.
Withdrawal of data protection consent
You have the right to withdraw consent to the processing of personal data at any time with effect for the future.
Complaint to a supervisory authority
You have the right to lodge a complaint with a supervisory authority responsible for data protection about our processing of personal data.
Transfer of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
- you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR,
- the disclosure is permissible pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
- in the event that there is a legal obligation for the disclosure pursuant to Art. 6(1)(c) GDPR, and
- this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the processing of contractual relationships with you.
In order to protect your data and, if necessary, to enable a transfer of data to third countries (outside the EU/EEA), this is done only in accordance with the legal requirements.
If the level of data protection in the third country has been recognized by means of an adequacy decision (Art. 45 GDPR), this serves as the basis for the data transfer.
If no adequacy decision exists, a data transfer takes place only if the level of data protection is otherwise secured, in particular by standard contractual clauses (Art. 46(2)(c) GDPR), express consent, or in the case of contractual or legally required transfer (Art. 49(1) GDPR).
In the Data Privacy Framework (DPF), the EU Commission has also recognized the level of data protection as secure for certified companies from the USA within the framework of the adequacy decision of 10 July 2023.
Duration of storage of personal data
The criterion for the duration of storage of personal data is the respective statutory retention period. After the expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.
How is my data processed in detail?
Below, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage duration. Automated decision-making in individual cases, including profiling, does not take place.
Provision of the website
Type and scope of processing
When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Purpose and legal basis
Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6(1)(f) GDPR. The collection of the data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21(1) GDPR. To the extent that further storage of the log files is legally required, processing is carried out on the basis of Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website is technically not possible without providing the data.
SSL/TLS encryption
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data, or contact inquiries that you send to us as the operator. You can recognize an encrypted connection by the fact that the browser’s address line shows “https://” instead of “http://” and by the lock symbol in your browser bar.
We use this technology to protect your transmitted data.
Contact form
Contact / contact form
When contacting us (e.g., by contact form or email), personal data is collected. Which data is collected in the event of using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your inquiry; this is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and no statutory retention obligations prevent deletion.
Presence on social media platforms
We maintain so-called fan pages or accounts or channels on the networks listed below in order to provide you with information and offers within social networks as well and to offer you further ways to contact us and obtain information about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with accessing and using our fan pages/accounts.
Data that we process from you
If you wish to contact us by messenger or via direct message through the respective social network, we generally process your user name through which you contact us and, if applicable, store further data provided by you insofar as this is necessary for processing/responding to your request.
The legal basis is Art. 6(1) sentence 1(f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).
(Static) usage data that we receive from the social networks
Through insights functionalities, we receive automatically provided statistics relating to our accounts. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views/plays, as well as information on the proportion of men/women among our fans/followers.
The statistics contain only aggregated data that cannot be related to individual persons. You cannot be identified by us through this.
Which data the social networks process from you
In order to view the contents of our fan pages or accounts, you do not have to be a member of the respective social network, and in this respect no user account for the respective social network is required.
Please note, however, that when the respective social network is accessed, the social networks also collect and store data from website visitors without a user account (e.g., technical data in order to display the website to you) and use cookies and similar technologies over which we have no influence whatsoever. Details can be found in the privacy policies of the respective social network (see the corresponding links above).
If you wish to interact with the content on our fan pages/accounts, for example to comment on, share, or like our postings/posts and/or to contact us via messenger functions, prior registration with the respective social network and the provision of personal data are required.
We have no influence on data processing by the social networks in connection with your use. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, and also for the analysis of user behavior (using cookies, pixels/web beacons, and similar technologies), on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data may also be stored by the social networks outside the EU/EEA and passed on to third parties.
Information, among other things, on the exact scope and purposes of the processing of your personal data, the storage duration/deletion, and guidelines on the use of cookies and similar technologies in connection with registration and use of the social networks can be found in the privacy policies/cookie policies of the social networks. There you will also find information on your rights and objection options.
