Data Protection Notice

I. Name and address of the responsible person

joke mechanix GmbH

Mr. U. Fielenbach
Asselborner Weg 14-16
51429 Bergisch-Gladbach 

E-Mail: mechanix(at)joke.de
Telephone: +49 (0) 22 04 / 8 39 - 0
Telefax: +49 (0) 22 04 / 8 39 - 13

II. Name of the data protection officer

The data protection officer of the data controller is:
Christian Bergmann / QMB Bergmann
dsb(at)joke.de

III. General information on data processing

1. Scope of the processing of personal data

We process personal data of visitors to our website only insofar as this is necessary to provide a functional website as well as our content and other services. The processing is carried out at least in accordance with the DSGVO, and for a specific purpose in accordance with Art. 6 of the DSGVO.

2. Your rights as a visitor to our website

You are entitled to the following rights vis-à-vis us as the controller:

  • Right to information
  • Right to rectification
  • Right to restriction of processing
  • Right to deletion
  • Right to information
  • Right to data portability.
  • Right of objection
  • Right of revocation in the case of a declaration of consent
  • Right to complain to a data protection supervisory authority

3. Deletion of data and storage period

In principle, personal data will be deleted or blocked as soon as the purpose of the storage/processing no longer applies. Data may be stored beyond this if this is provided for or prescribed by law. Further information on deletion periods and the storage period is provided in the data protection notices in relation to specific applications.

4. Purpose and legal basis of this website

The purpose of this website is essentially customer communication and marketing as well as the service in the form of a shop on this website. The legal basis is the legitimate interest of the responsible party according to Art. 6, Para. 1, lit. f of the DSGVO.

The legitimate interest results from our company's desire to also contact interested parties worldwide via the Internet and to disseminate our products, contact persons and marketing information.

5. Automatic decision-making / profiling

In principle, no automatic decision-making takes place on this website, but it cannot be ruled out that search engines run processes in the background which we cannot influence. If we use third-party providers where we know that automatic decision-making is implemented via these providers, we explicitly point this out.

6. Processing pbD for purposes other than those stated here

If the purposes of processing indicated here change, we will update the information contained here.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  1. information about the browser type and the version used
  2. the IP address of the user
  3. date and time of access
  4. websites from which the user's system accesses our website
  5. websites that are accessed by the user's system via our website

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 letter f, DSGVO (legitimate interest). In addition to maintaining the function of the website, the legitimate interest also includes enabling the host to analyse malware or attacks on the website and to combat them together with the law enforcement authorities.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

As already explained, the storage of data in log files serves to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

4. Duration of storage

The above-mentioned data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP address of the user is deleted or alienated by us, so that an assignment of the calling client is no longer possible, and the data contained no longer have any personal reference.

V. Cookies / Cookie or Consent Banner

We use cookies on our website. When you first access our website, you decide in what form or whether you wish to accept cookies and their functions, unless they are functional cookies that are required for the technical operation of the website. For the use of our web shop, consent is required in accordance with the DSGVO. Everything else can be seen in the table shown here:

to the table

VI. Newsletter

1. Description of the purpose and scope of data processing as well as the legal basis

On our website you have the possibility to register for a newsletter. All data requested here is voluntary, with the exception of your e-mail address, which we need to confirm that you have registered personally with us for the newsletter and so that we can send you the newsletter. 

For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection declaration.

The newsletter is sent as an information offer for customers and interested parties as well as direct advertising:

If you purchase goods or services on our website and provide your e-mail address, this may subsequently be used by us to send a newsletter, taking into account the law on unfair competition. In such a case, only direct advertising for our own and similar goods or services will be sent via the newsletter.

No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

The newsletter is sent based on your consent in accordance with DSGVO Art. 6, Lit a.

2. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.

3. Newsletter tracking

Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded tracking pixel, we can see how many of the sent e-mails were opened and which links in the e-mail were called up and how often.

Such personal data collected via the tracking pixels contained in the newsletters are stored and analysed by the controller in order to optimise the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are entitled to revoke the declaration of consent given at any time. After a revocation, this personal data will be deleted by the controller.

VII. Contact form

1. Description, purpose, legal basis and type of data processing

On our website, we offer you the possibility to contact us via our contact form. The purpose of the processing is to give you the opportunity to contact us via different communication channels. The following data is collected as part of the registration process and based on your consent (DSGVO Art. 6 lit a), the legitimate interest of the responsible party (DSGVO, Art.6 lit f):

We would like to collect the following data, whereby the information marked with an "*" is mandatory:

  1. date and time of sending
  2. salutation*
  3. surname*
  4. first name
  5. company
  6. street and house number
  7. postcode/city *
  8. country*
  9. e-mail*
  10. telephone number
  11. subject
  12. comment*

By clicking the "send" button, you consent to the processing of the data.

2. Duration of storage

Die Daten werden gelöscht, sobald sie für die Erreichung des hier zugrundeliegenden Zweckes nicht mehr erforderlich sind, oder Sie werden dadurch, dass sich aus der Verarbeitung Ihres Kommentars ein neuer Zweck ergibt, innerhalb einer internen Verarbeitung dem neuen Zweck The data will be deleted as soon as they are no longer required to achieve the purpose here, or they will be assigned to the new purpose within an internal processing by the fact that a new purpose arises from the processing of your comment and will be further processed about it. We will provide you with more detailed information on this via our "Duty to inform", below.

3. Possibility of objection and removal

You have the possibility at any time to object to the continuation of your enquiry via the contact form. At the time of your objection, the processing will be interrupted and the collected data will be deleted if there are no other legal grounds for deletion, e.g. legal requirements such as retention periods.

VIII. Privacy policy on the use and application of Google Analytics with anonymisation function

On our website we use Google Analytics with anonymisation function. This collects and analyses data on the behaviour of visitors to websites.

For example, the following data is collected:

  • from which website someone came (referrer)
  • which sub-pages of the website are accessed
  • how often internet pages are accessed
  • how long you stay on websites or spend time there.

The purpose of performing this service on our website is to analyse visitor flows to optimise the website and to analyse the costs and benefits of internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The addition "gat.anonymizeIp" is used for web analysis via Google Analytics. If our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area, the IP address of the website visitor's Internet connection is shortened and anonymised by Google using this add-on.

Google also uses the data and information for online reports on activities on our website and to provide other services in connection with the use of our website. Google Analytics sets a cookie on the system of the person concerned. The setting of the cookie enables an analysis of the use of our website.

Each time our website is accessed, on which a Google Analytics component has been installed, data from the data subject is automatically transmitted to Google for the purpose of online analysis.

As part of this process, Google receives personal data, such as the IP address of the data subject, the IP address is used to trace the origin of the visitors and the clicks, to then enable commission settlements as a result.

By means of the aforementioned cookie, the following data is collected and stored with reference to the person concerned:

  • The access times
  • The location from which the access originated
  • The frequency of visits to our website

Each time you visit our website, this data, including the IP address of the person concerned, is forwarded to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may also share this data with third parties.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. This setting of your internet browser would also prevent Google from setting a cookie on your system.

In addition, a cookie already set by Google Analytics can be deleted again at any time via the internet browser or other software programmes.

You also have the option to object to the collection and use of personal data by Google Analytics. To do this, you must download and install a browser add-on under the link tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no more data and information may be transmitted to Google Analytics.

The installation of the browser add-on is considered by Google as an objection. If the data subject's information technology system is deleted, formatted, or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person, it is possible to reinstall or reactivate the browser add-on.

Further information and Google's privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is also explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

IX.  Duty to inform according to Art. 12/13 and 14 of the DSGVO for customers, interested parties and suppliers of the company joke mechanix GmbH

General information

Pursuant to Art. 12 of the GDPR, the controller shall take appropriate measures to provide data subjects with all information pursuant to Art. 13 and 14 of the GDPR in a precise, transparent, comprehensible and easily accessible form, in clear and simple language. This communication shall be made in writing and may also be made electronically. In special cases, if the identity of the data subject has been proven, also orally.

As far as our order processing allows, you will receive the necessary and required information about our order papers, offers, enquiries, order or order confirmations as a PDF by e-mail or handed over directly. As a rule, we make the necessary information available to all affected parties on the Internet on our website in our data protection declaration and refer to it in our mail signatures.

We take our duty to inform very seriously and therefore inform you in full about your rights in relation to our duty to inform in relation to the GDPR. Nevertheless, we cannot exclude the possibility that our presentation of the information, in the form in which we have made it, is not understood by you. If this is the case, please contact us and we will immediately find a way to inform you in such a way that it is understandable for everyone.

What happens if the purpose stated here changes?

If the original purpose of the processing of your personal data changes, we will inform you via an adapted information. If you do not find the purpose of the processing of your personal data here, please contact us so that we can promptly provide you with the information in person or in writing or inform you where to find this information.

Name and contact details of the person responsible 

Mr. Udo Fielenbach /Managing Director
Tel.: 0 22 04 / 8 39-545
Mail: geschäftsführung(at)joke.de

Name and contact details of the data protection officer

Christian Bergmann / dsb(at)joke.de

Explanation of the processing activities

This information concerns at least the following processing activities where personal data of prospective customers, customers and suppliers are directly processed.

  • Accounting
  • Lettershop
  • Accident report / first aid book
  • Website/Shop
  • Order processing (including enquiries, offers, logistics)
  • In-house training
  • Service repair
  • New customer acquisition
  • Complaint processing

Indication of the purpose of the processing as well as the legal basis.

  • Accounting
  1. Purpose - to carry out all accounting transactions with customers and suppliers.
  2. Legal basis - according to DSGVO Art. 6 letter b) fulfilment of a contract or financial legal requirements.
  • Lettershop
  1. Purpose - informing customers in the form of an Infopost
  2. Legal basis - according to the DSGVO Art.6 letter f) to protect the legitimate interest of the responsible party, to fulfil the business purpose, sale and offer of products.
  • Accident reporting / first aid book
  1. Purpose - To ensure that accidents that may occur to customers during a visit to the company joke mechanix GmbH are correctly documented and, if necessary, insured and accounted for via the BG as the insurance carrier
  2. Legal basis - DSGVO Art 6 letter c) Fulfilment of a legal obligation.
  • Website/Shop
  1. Purpose - To offer and facilitate the purchase of goods and products via new media.
  2. Legal basis - According to DSGVO Art.6 letter f) to protect the legitimate interest of the controller, to fulfil the business purpose, selling and offering products.
  • Order processing (including enquiries, offers, logistics)
  1. Purpose - Offering, enquiring about services and products. Processing of orders.
  2. Legal basis - according to the DSGVO Art. 6 letter b) pre-contractual measures or fulfilment of a contract. As well as the protection of the legitimate interest of the responsible party for the fulfilment of the business purpose according to Art. 6, letter f) of the DSGVO.
  • In-house training
  1. Purpose - to provide product training for customers.
  2. Legal basis - safeguarding the legitimate interest of the controller to fulfil the business purpose according to Art 6, letter f) of the GDPR. In the case of a corresponding agreement to conduct training, the implementation of pre-contractual measures and fulfilment of contracts according to Art 6, letter b) of the DSGVO.
  • Service repair
  1. Purpose - To carry out service repairs in the event of complaints about our own products and repairs to third-party devices.
  2. Legal basis - In the event of a complaint, if applicable, consideration of the Product Liability Act and, in addition, in the event of third-party repairs and complaints, the performance of pre-contractual measures and fulfilment of contracts in accordance with Article 6, letter b) of the GDPR. As well as the protection of the legitimate interest of the responsible party for the fulfilment of the business purpose according to Art 6, letter f) of the DSGVO.
  • Acquisition of new customers
  1. Purpose - to expand the customer base in order to increase the success of the business.
  2. legal basis - safeguarding the legitimate interest of the controller to fulfil the business purpose according to Art 6, letter f) of the GDPR.
  • Complaint processing
  1. Purpose - To increase customer satisfaction and avoid customer dissatisfaction by optimising the processing of complaints.
  2. Legal basis - Consideration of the product liability law and implementation of pre-contractual measures and fulfilment of contracts according to Art. 6, letter b) of the GDPR. As well as the protection of the legitimate interest of the responsible party for the fulfilment of the business purpose according to Art 6, letter f) of the DSGVO.

Designation of recipients or categories of recipients of personal data.

In principle, all employees with PC access also have access to all data in the ERP system. In the area of marketing and advertising, there are separate systems to which only marketing has direct access and other employees only have limited access, via marketing.

 

  • Accounting - All employees of joke mechanix GmbH who have access to the ERP system and view documents must guarantee a secure operational process.
  • Lettershop - Marketing department, sales, management
  • Accident reporting / first-aid book - Head office/reception, management assistance and representatives, first-aiders, if necessary, accident witnesses.
  • Website/Shop - Service provider of the webshop, sales, marketing.
  • Order processing (including enquiries, quotations, logistics) - Purchasing, sales, warehouse/shipping
  • In-house training - GF assistance, sales
  • Service repair - especially the service and repair department, but also all employees with system access
  • New customer acquisition - primarily the sales department, data that has been imported into the system is internally visible to all employees with ERP system access.
  • Complaint processing - all employees with PC access to the ERP system.

Is there any transmission to a third country or an international organisation.

No, as long as you as a customer or supplier do not have your registered office in such a country.

How long is the personal data stored or what rules are applied for the storage period?

In principle, the statutory retention periods are observed. This means that all documents that are processed for accounting purposes are stored for at least 10 years, and accident reports and entries in the first-aid book are stored for at least 5 years or until a case that is still being processed is closed.

We will keep your data updated and transparent as far as possible and block it if necessary. Currently, we do not have the possibility to limit the storage and deletion of data after a fixed period of time. For this reason, we have formed a project group to address this issue. As soon as we have found a satisfactory solution to this task, the issue of the storage period or deletion of system data will be presented here.

Your further rights as a data subject

You have the right of access, rectification, erasure or restriction of processing, as well as the right to object to processing and the right of data portability to your data processed by the data controller.

If the processing of your personal data is based on your consent, you have the right to object to this consent at any time or to revoke it without affecting the lawfulness of the processing carried out based on the consent until revocation.

You have the right to complain to a supervisory authority:

Is the provision and processing of your data required by law/contract or necessary for the conclusion of a contract?

 

  • Accounting - yes both contractually and by law
  • Lettershop - no
  • Accident report / first aid book - yes legally
  • Website/Shop - no
  • Order processing (including enquiries, offers, logistics) - yes contractually and subsequently also legally see accounting
  • In-house training - no
  • Service repair - yes contractually and with reference to the Product Liability Act also legally
  • New customer acquisition - no
  • Complaints processing - yes contractually and with reference to the Product Liability Act also legally

Are you obliged to provide your data and what would be the consequences if you do not provide your data

  • Accounting - no, (no personal data) company data is usually sufficient, but direct communication would be considerably more difficult, especially with large companies.
  • Lettershop - no, you will no longer receive any information
  • Accident report / first-aid book - yes, accidents would no longer be documented, the BG would not provide any benefits in the event of an occupational accident.
  • Website/shop - no, you would not be able to order goods on the internet.
  • Order processing (including enquiries, offers, logistics) - no (no personal data) company data is usually sufficient, but direct communication would be made much more difficult, especially with large companies.
  • In-house training - yes, since training is conducted on a person-related basis and certificates are issued, which could then no longer have any reference to the person.
  • Service repair - no, (no personal data) company data is usually sufficient, but direct communication would be considerably more difficult, especially with large companies.
  • New customer acquisition - no, there is no direct personal contact, this can only be done directly via the company.
  • Complaint processing - no, (no personal data) company data is usually sufficient; however, direct communication would be considerably more difficult, especially with large companies

Does the processing of your data involve automatic decision-making or profiling?

no

If we have not received your personal data directly from you, from which source do they originate?

If we have not received your personal data from you personally, we obtain your data from public sources such as the telephone directory, Internet (your homepage/search engines/social networks) or other public sources. In individual cases it is possible that we have received your contact details from your company via telephone or e-mail contact. Either from your colleagues, superiors or the head office of your company. In special cases, it is also possible that we have received your data in the course of order processing by our customer, as we may deliver goods to you on his behalf, which you have ordered from our product range.

joke mechanix GmbH
Asselborner Weg 14 - 16
D-51429 Bergisch Gladbach, German
Telephone: +49 (0) 22 04 / 8 39-0
Fax: +49 (0) 22 04 / 8 39-13
E-Mail: mechanix(at)joke.de