Part 1: General mandatory wording
1. General information
We, JB German Oil GmbH & Co.KG, and our affiliated companies welcome you to our websites and thank you for your interest in our company. We strive to offer you the best possible service; this also includes continuous optimizing of our Internet presence and, it goes without saying, protection of your data. Our server will automatically record data whenever you visit our websites. We do not, however, assign any personal identity to this data, which can, for example, be the domain name and IP address of the requesting computer or the date of access, duration of your visit or the website from which you visit us. This data is generally used for system security purposes as well as to continually optimize our sites and services. Data evaluation is exclusively of a statistical nature.
Any additional personal data, such as your name, address, telephone number or e-mail address, will not be gathered unless you specifically provide them to us (e.g. via the contact form or by email). It goes without saying that in such cases your data will only be gathered, processed or used for the purposes as indicated or for purposes arising from them, unless current legal regulations require us to pass them on. We will only use your data for other purposes (e.g. advertising or market/opinion research) if you have specifically consented to us doing so.
Please find below information about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (“GDPR”).
2. Data controller
The entity stated in our legal notice is responsible for collection and processing of the data described below.
We will store the IP address transmitted by your web browser for a period of seven days strictly for the purpose of being able to recognize, limit and rectify any attacks on our websites. After expiry of this period, we will erase or anonymize the IP address. The legal basis for this is Art. 6 Para. 1 lit. f GDPR.
3. Usage data
Whenever you visit our websites, for statistical purposes our web server will temporarily store in a log your so-called “usage data” to allow us to improve the quality of our websites. This data set comprises:
• The site from which the file was requested,
• The file name,
• The date and time of the request,
• The data volume transmitted,
• The access status (file transmitted, file not found),
• The description of the type of web browser used,
• The requesting computer’s IP address, shortened in such a way that it can no longer be linked to an identified individual.
The above-mentioned log data will only be stored in an anonymized form.
4. Data transfer to third parties
Within the framework of data processing on our behalf as defined by Art. 28 GDPR, we will transfer your data to service providers who assist us with the operation of our websites and the related processes. Our service providers are bound by strict instructions issued by us and subject to corresponding contractual obligations. We use the following service providers: (e.g. hosting service provider, web analysis service provider, newsletter service provider, etc.).
5. Data transfer to third countries
In some cases, we transfer personal data to a third country outside the EU. When doing so, we always ensure that there is an adequate level of data protection:
In the case of Google Analytics (USA) the adequate level of data protection results from the company’s corresponding participation in the Privacy Shield Framework (Art. 45 Para. 1 GDPR).
6. Use of cookies
Our websites sometimes use “cookies” to ensure that you have an user-friendly visit. Cookies are small text files which are stored on your end device and can be read. There are different kinds of cookies. “Session cookies” are deleted as soon as you close your browser, while “persistent cookies” are stored for longer than one session. Cookies can contain data which makes it possible to recognize the device being used. In some cases, cookies also contain information on certain settings; this information is not of a personal nature.
We use both session and persistent cookies on our websites.
These cookies do not contain personal data and we do not combine them with other data so that we can identify you personally. In addition to this, we employ an analysis tool which also uses cookies.
Processing is carried out on the basis of Art. 6 Para. 1 Clause 1 lit. f GDPR.
You have the option of setting your browser to inform you whenever you receive a cookie, thus making the use of cookies transparent for you. In addition to this, you can delete cookies at any time using the corresponding browser setting to block new cookies. Please note that our websites may not be displayed perfectly and that you may not be able to use certain features if you block cookies.
7. Data security
We have implemented technical and organizational measures to ensure that your data is protected as comprehensively as possible against undesired access. We use an encryption procedure on our sites. Your computer will use TLS encryption to transmit your data to our server via the Internet and vice versa. This is indicated by the locked padlock symbol in your browser status bar and the address line beginning with https://.
8. Your rights as a user
Under the terms of the GDPR, you have the following rights as a so-called “data subject” – the right to information (Article 15 GDPR); the right to rectification (Article 16 GDPR); the right to erasure (Article 17 GDPR); the right to restriction of processing (Article 18 GDPR); the right to object (Article 21 GDPR) and the right to data portability (Article 20 GDPR). Your rights to information and erasure are subject to limitations in accordance with Sect. 34 and 35 BDSG (German Federal Data Protection Act). In addition, you have a right to lodge a complaint with a supervisory authority (Article 77 GDPR in conjunction with Sect. 19 BDSG).
9. Right to object (Art. 21 GDPR)
Should data be gathered on the basis of Art. 6 Para. 1 lit. f (data processing for the purposes of legitimate interests), then you have the right to object to processing at any time on grounds relating to your particular situation. Should you do so, then we will no longer process your personal data unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
Under the terms of Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes data protection law regulations. You can assert this right in particular with a supervisory authority in the member state of your habitual residence; place of work or the place of the alleged infringement.
10. Data Protection Officer’s contact details
Our company Data Protection Officer will be pleased to provide you with any information you require, or respond to any feedback you have, concerning data protection:
Company: JB German Oil GmbH & Co KG
Data Protection Officer E-mail: datenschutz@jb-germanoil.de
Telephone: +49 (0) 40370047607
11. Concluding provisions
We reserve the right to update this data protection declaration at any time, either with or without prior notice. By using our website(s) you are declaring your agreement to these data protection regulations.
© 05/2018 JB German Oil GmbH & Co KG
Part 2: Individual wording (case by case)
1. Note on the Google Analytics analysis tool
We use Google Analytics, a web analysis service offered by Google Inc. (“Google”) to create pseudonymized usage profiles to facilitate the needs-based design of our websites. Google Analytics uses cookies which are stored on your end device and can be read by us. This allows us to recognize and count returning visitors. Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR respectively Sect. 15 Para. 3 TMG (German Telemedia Act) and in the interests of identifying how often our websites are visited by different users.
The information generated by the cookie concerning your use of this website is generally transmitted to a Google server in the USA, where it is stored. Activation of the IP anonymization function on this website means that Google will, however, truncate your IP address within European Union member states or other states party to the Agreement on the European Economic Area before transferring the data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (Google’s participation in the so-called “Privacy Shield Framework” ensures an adequate level of data protection as specified by Art. 45 Para. 1 GDPR) and truncated there. In addition to this, we have concluded a data processing contract with Google (USA) in accordance with Art. 28 GDPR. Working on behalf of this website’s operator, Google will use this information strictly for the purpose of analysing your use of the website; compiling reports on website activities and providing other services associated with the use of the website and the Internet for the website operator. Google may also transmit this information to third parties insofar as this is required by law or insofar as third parties process this data on behalf of Google. Google will not bundle the IP address transmitted from your browser in connection with Google Analytics with other data. For more information about how Google uses data which is generated when using its partners’ websites and apps, visit www.google.de/policies/privacy/partners.
You can object to processing at any time. To do so, please make use of one of the following options:
You can block installation of cookies by selecting the corresponding setting in your browser software; please, however, note that you will not be able to use all the functions of this website to their full extent if you choose to do so.
Over and above this, you can block the gathering of the data generated by the cookie and relating to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
In addition to this, you can block the gathering of data by Google Analytics by clicking the following link. This will install an opt-out cookie which prevents future gathering of your data when visiting this website:
<a href=“javascript:gaOptout()“>Click here to object to processing of your data by Google Analytics.</a>
Browser add-on to deactivate Google Analytics
The browser add-on to deactivate Google Analytics provides website visitors with more control over what data Google Analytics can gather about the websites visited. The add-on instructs Google Analytics’ JavaScript code not to transmit any information about the website visit to Google Analytics. Should you wish to use the add-on, please download it and install it on your current web browser. The browser add-on to deactivate Google Analytics is available for the Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari and Opera.
To the Google Analytics browser add-on
As an alternative to the browser add-on or when using a mobile device browser, please click the following link to prevent future gathering of your data by Google Analytics when visiting this website (the opt-out only functions in the browser and only for this domain). When you do so, an opt-out cookie will be installed on your device. Should you delete cookies in your browser, then you will need to click the link again.
Opt-out link to prevent data gathering by Google Analytics
2. Matomo
We use Matomo, a web analysis service to create pseudonymized usage profiles to facilitate the needs-based design of our websites. Matomo uses cookies which are stored on your end device and can be read by us. This allows us to recognize and count returning visitors. Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR respectively Sect. 15 Para. 3 TMG (German Telemedia Act) and in the interests of identifying how often our websites are visited by different users.
You can object to processing at any time. To do so, please click the following. In this case there will be an installation of an opt-out cookie which prevents future gathering of your data when visiting this website
3. We use Google Remarketing technology
We use Google’s Cross-Device Remarketing technology, so that, based on your visit to our website, targeted advertising on other internet pages can be brought to your attention. The data processing here, on the basis of your consent, is in compliance with article 6, section 1 (a) of the General Data Protection Regulation.
a. How does remarketing work?
When you visit our web pages, it is possible that Google may bring up recognition features for your browser or your terminal device (e.g. by creating what is known as a ‘browser fingerprint’), may evaluate your IP address or store a recognition feature in the form of a small text file on your terminal device (e.g. a ‘third party cookie’). It is further possible that Google may link your visit to our internet pages with one or more of these recognition features and store the associated data, in order to show you our advertising on other pages of the internet.
The recognition features described above are designed pseudonymously and can be used by Google to recognize your terminal device on other internet pages. If for example you visit a web page which participates in Google’s display advertising network (that is to say, shows advertising for Google), Google can recognize your terminal device and your browser, based on the features referred to above.
We may also provide our web pages with what are known as ‘remarketing tags’. This means that we can adopt keywords on our internet pages which contain statements about the content of the pages displayed (such as product or service categories). The keywords we use do not show any personal data or sensitive information. Google receives these keywords and stores them along with the recognition features referred to earlier. Therefore, when you visit a page which we have tagged with a keyword referring to a specific product category, Google stores this keyword and assigns it to the recognition features associated with you.
As a result we can request Google to display advertising on other websites based on the pages on our website that you have visited. So when you visit another internet page which participates in Google’s display advertising network, Google can recognize, based on the recognition features and associated keywords stored, whether our advertising (and what kind of advertising) should be shown to you.
More detailed information about the mode of functioning of Google Remarketing technology may be found at https://www.google.com/policies/technologies/ads/.
b. What is the meaning of Cross-Device Remarketing?
If you log in to Google services with your own log-in data, and/or use one or more of your own Google accounts, Google can link the recognition features of the different browsers and terminal devices involved. Therefore, if Google has assigned a particular recognition feature to the laptop, desktop PC, Smartphone or Tablet you are using, these recognition features can be associated with one another whenever you make use of or if you have previously made use of a Google service using your log-in data. In this way, Google can systematically present our advertising campaigns without reference to the specific terminal device. Google will only do this, however, if you have in the past given Google a declaration of consent to this form of data processing.
You have the possibility of adjusting your advertising settings
You are at liberty to opt out of this form of advertising at any time. To do this, please go to this page: https://support.google.com/ads/answer/2662922 – and disable personalized advertising. Please be aware that there is a possibility that these settings may not work for all terminal devices and browsers. More detailed information about this may again be obtained from https://support.google.com/ads/answer/2662922.
4. Social media plug-ins
For reasons of data protection, we do not directly incorporate any social plug-ins in our website. If you bring up our pages no data will be transmitted to social media services like Facebook, Twitter, XING and Google+. This rules out the creation of a profile for you by third parties.
You do, however, still have the possibility of sharing selected pages by clicking on a Facebook, Twitter, XING or Google+ button, and you can also see, just by bringing up the associated contributions, how frequently these have been shared in the past. For this purpose we use the Shariff solution, so as to offer an alternative to classic social plug-ins which is in compliance with data protection requirements.
The Shariff solution means that, as a first step, all data and functions required for presentation of the Facebook, Twitter, XING or Google+ buttons are provided by our web server. Only when you decide to share a contribution by means of the appropriate button, and click on it, will data be transmitted to the operator of the social media service in question.
5. Making contact via WhatsApp
You can likewise get in touch with us via WhatsApp. WhatsApp is an instant messaging service of WhatsApp Inc., a company located in the USA. We use your data only for the processing of your query. Furthermore, no other data processing will be either carried out or initiated by us.
Please be aware that all information that you communicate to us, including your telephone number, will be stored by WhatsApp Inc. on servers in the USA. The possibility cannot be excluded that WhatsApp Inc. may use your data, for instance in order to evaluate your habits, personal relationships, preferences and the like. We can exercise no influence whatever on the processing of your data by WhatsApp Inc.
6. Our Facebook page
Under the URL https://www.facebook.com/JB-German-Oil-GmbH-Co-KG , we operate an official Facebook page, based on Article 6, section 1 (f) of the General Data Protection Regulation. We do not at any time register, store or process personal data of our users on this page. Furthermore, no other data processing will be either carried out or initiated by us. The data you submit to our Facebook page (e.g. comments, videos or pictures) will at no time be used or processed for any other purposes.
Facebook uses what are known as ‘web tracking methods’ on this page. Please be aware of the following: the possibility cannot be excluded that Facebook may use your profile data, for instance in order to evaluate your habits, personal relationships, preferences and the like. We can exercise no influence whatever on the processing of your data by Facebook.
7. Embedded YouTube videos
On some subpages we incorporate YouTube videos in our website. Bringing up these subpages results in content being downloaded from YouTube. In this context, YouTube will also be given your IP address, as this is a technical requirement for accessing the content in question. We have fundamentally no influence on the further processing of the data by YouTube. However, we have taken care, when embedding the videos, to activate the extended data protection mode that YouTube offers.
8. Contact form
You have the possibility of getting in touch with us by means of an online form. In order to use our contact forms, we need your name and your e-mail address. Other data may be supplied by you, but are not mandatory. The legal basis for the processing of the data is article 6, section 1 (b) of the General Data Protection Regulation. We use your data exclusively for the purpose of processing your enquiry.
By sending this e-mail form you are declaring your consent to the electronic registration and storage of the data you have supplied. The legal basis for the processing of the data is article 6, section 1 (a) of the General Data Protection Regulation. We use your data exclusively for the purpose of processing your enquiry. You can revoke your consent at any time, e.g. by sending an e-mail to vertrieb@jb-germanoil.de
Online job applications
We process your personal data in accordance with the applicable data protection provisions, based on section 26 of the BDSG-neu [Federal Data Protection Act – Revised]. We process the data you relinquish to us in connection with your online application exclusively for the purpose of selecting from among the candidates. No data processing for other purposes will take place.
You yourself determine the scope of the data you would like to communicate to us in connection with your online application. Online applications are transmitted to our HR division and processed by HR as rapidly as possible. The data are transmitted in encrypted form. As a rule, applications are forwarded to the heads of the responsible specialist divisions of our company. Other than that, no sharing of your data takes place. Your details will be treated by us as confidential. If your application proves unsuccessful, your documents will be deleted on the expiry of 6 months.
If you wish us to have regard to your application in connection with other or future job vacancies, please do include a note on your application to this effect. Your data will then be processed in compliance with article 6, section 1 (a) of the General Data Protection Regulation. In this case, your application will be deleted after two years.
