The following is intended to provide you, as the data subject, with an overview of personal data processed by JoCos GmbH and your rights under data protection laws. Our website can generally be used without entering personal data. If you wish to use special services offered by our company on our website, it may be necessary to process personal data. However, you can also choose to transmit personal data to us using alternative methods, for instance by telephone or by post.
The controller as defined by the GDPR is:
Tel.: (+49) 941 463 703 0
III. Data protection officer
You can contact the data protection officer at:
Tel.: (+49) 941 569 550 20
Please feel free to contact our data protection officer directly for any questions or suggestions you may have pertaining to data protection.
IV. Log files
When merely using our website for informational purposes, we only collect the data your browser transmits to our server (in so-called “server log files”). Our website collects a series of general data and information every time you or an automated system accesses the website. This general data and information are stored in the log files of the server. The following may be collected:
- Name of the web page accessed
- Date and time of access
- Data volume transmitted
- Message of successful retrieval
- Browser type and version
- User’s operating system
- Referrer URL (the page previously visited)
- IP address
- Requesting provider
We do not draw any conclusions that allow us to identify you as a person when using the general data and information. Rather, this information is required to properly deliver the contents of our website, to ensure the permanent functionality of our IT systems and the technology of our website as well as to provide law enforcement authorities with the necessary information in the event of a cyber attack. We therefore analyse this collected data and information with the objective of increasing data protection and data security at our company to ultimately ensure an ideal level of protection for the personal data we process. The data from the server log files is stored separate from all personal data provided by a data subject. This data is stored for a maximum of 7 days. The legal basis for data processing is Article 6 (1) (f) of the GDPR. Our legitimate interest results from the purposes stated above. The website is hosted by Czewo Data GmbH.
VI. Our website content – contact options, job portal
1. Contact options
Personal data is processed when contacting us (e.g. by phone / email / contact form / form for request for proposal). This data is stored and used for the purpose of responding to your request or to contact you and the technical administration associated with that. The legal basis for data processing is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) of the GDPR. On principle, the data relating to the inquiry is erased after your inquiry has been processed. This is the case when circumstances indicate the respective matter has been conclusively resolved and no statutory retention periods conflict with erasure. If you contact us with the objective of concluding a contract, e.g. using the form for request for proposal, Article 6 (1) (b) of the GDPR (precontractual relationship) can also be relevant. We then store your personal data in our CRM.
The following data is collected in line with the contact form:
- Name (required field)
- Email address (required field)
- Desired date
- Telephone number for queries
The following data is collected in line with the form for request for proposal:
- Name (required field)
- Email address (required field)
- Information about the desired product
- Information about the desired packaging (bottles, cans, etc.)
- Information about desired specifications content (ingredients, etc.)
- Information about the desired volume
- Information about annual volumes
- Information about comparable products on the market
Furthermore, during transmission we process your personal data (see log files) in accordance with Article 6 (1) (f) of the GDPR based on our legitimate interest in a technically secure and proper use of our form.
Moreover, we use Google reCAPTCHA in line with the forms. Google reCAPTCHA is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, which allows us to determine whether a request is from a natural person or an automated programme. In this context, a connection is made to the Google servers and your IP address and possibly browser data, such as your user agent, transmitted. Furthermore, the duration and your mouse movements are recorded via Google reCAPTCHA to distinguish between human and automated requests. This serves maintaining the security and functionality of our website. Therefore, the use of this service is based on your consent given to us by ticking the respective box in the form, in accordance with Article 6 (1) (a) of the GDPR. You cannot submit the form without giving us your consent. We therefore kindly ask you to contact us in another way, e.g. by phone or email, if you do not want to give us your consent.
2. Application management / job portal
We collect and process the personal data of applicants for application process purposes. Data can also be processed electronically. This particularly applies if an applicant submits corresponding application documents to us electronically, e.g. sends them to us via email. The legal basis for data processing is Article 6 (1) (b) of the GDPR in conjunction with § 26 of the German Data Protection Act (BDSG). If the person is hired, the data is placed into the personnel file and stored there. If you are not hired, we delete your application documents 6 months from the rejection. Until then, the data is processed according to Article 6 (1) (f) of the GDPR based on our legitimate interest (AGG – General Act on Equal Treatment). If we would like to include you in our pool of applicants, we will get your separate consent for this purpose in accordance with Article 6 (1) (a) of the GDPR. In this case it is then stored for one year.
VII. Web analysis
We use Google Analytics, a web analysis service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie on your use of this website such as
- browser type/version,
- operating system used,
- referrer URL (the website previously visited),
- host name of the accessing computer (IP address),
- time of the server enquiry,
is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of our website. This information may also be transmitted to third parties. Under no circumstances is your IP address merged with other Google data. The IP addresses are anonymized to ensure it cannot be matched with an individual (IP masking). These processing procedures are solely conducted after receiving explicit consent in accordance with Article 6 (1) (a) of the GDPR.
Furthermore, you can prevent the data on your use of the website from being collected and processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
You can find more information on data privacy related to Google Analytics on the Google Analytics help page (https://support.google.com/analytics/answer/6004245?hl=de).
VIII. Other services
1. Google Tag Manager
This website uses the Google Tag Manager, a cookie-less domain that does not collect any personal data but helps us organize and control website tags. Nevertheless, we would like to make you aware of Google Tag Manager being used. This tool triggers a tag which may collect data on your end (e.g. Google Analytics). The Google Tag Manger does not access this data itself.
2. Google Search Console
We use the Google Search Console. We use this console to monitor and manage how our website is listed in the Google search results for optimisation purposes and, if necessary, to be able to detect and rectify errors. However, data collection only takes place on the Google pages, not on ours. Further information can be found here: https://support.google.com/webmasters/answer/9128668?hl=de
3. Google Web Fonts
4. Google Maps
IX. Your rights as a data subject
- Right to confirmation: You have the right to request a confirmation from us on whether or not your personal data is being processed.
- Right of access Article 15 GDPR: You have the right to receive free information about the personal data we store in regard to you at any time as well as to receive a copy of this data in compliance with the legal provisions.
- Right to rectification Article 16 GDPR: You have the right to request the rectification of your incorrect personal data. You further have the right to request that incomplete personal data is completed, taking the purposes of processing into account.
- Erasure Article 17 GDPR: You have the right to request us to immediately erase your personal data if one of the legally intended reasons applies and processing or storage is not required.
- Restriction of processing Article 18 GDPR: You have the right to request us to restrict processing if one of the legal requirements applies.
- Data portability Article 20 GDPR: You have the right to receive your personal data you provided us with in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without obstruction by us, who were provided with the personal data, provided that processing is based on consent in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR or on a contract in accordance with Article 6 (1) (b) of the GDPR and processing is conducted with the help of automated processes, provided that processing is not required to perform a task which is in the public interest or in exercising public authority we were assigned. In exercising your right to data portability, you also have the right to have the personal data directly transmitted from one data controller to another controller in accordance with Article 20 (1) of the GDPR where technically feasible and provided that this does not affect the rights and freedoms of other persons.
- Objection Article 21 GDPR: You have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data, under Article 6 (1) (e) (data processing in public interest) or (f) (data processing based on balanced interests) of the GDPR. This also applies to profiling based on these provisions in terms of Article 4 (4) of the GDPR. If you exercise your right to object, we will no longer process your personal data unless we are able to demonstrate compelling and legitimate reasons for this processing, which override your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims. In individual cases, we process personal data for purposes of direct advertising. You can object to the processing of personal data for purposes of such advertising at any time. This also applies to profiling, provided that it is related to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Furthermore, you have the right, for reasons resulting from your special situation, to object to the processing of your personal data that we conduct for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless such processing is required to fulfil a task in the public interest. Irrespective of Directive 2002/58/EC, you have the option, in connection with the use of information society services, of exercising your right to object using automated procedures that use technical specifications.
- Withdrawal of consent pertaining to data privacy: You are entitled to withdraw your consent given for the processing of personal data at any time in the future. You can address your withdrawal to the following email address at our company: email@example.com
- Lodging a complaint with a supervisory authority: You have the right to lodge a complaint to a supervisory authority for data protection in connection with our processing of personal data. The authority responsible for us in all cases is the Bavarian State Office for Data Protection Supervision (LDA Bayern).