Data Protection Policy

Paul Jost GmbH
Heerstraße 20
44653 Herne
Managing director: Michael Prahl and Markus Elmendorf

phone: +49 (0)2325 9596-0
fax: +49 (0)2325 9596-50

E-Mail: info@paul-jost.com

Weitere Informationen finden Sie im Impressum: https://www.jost-recycling.com/de/servicenavigation/impressum

Data Protection officer
Mark Scheerbarth

E-Mail: dsb@firmen-datenschutz.eu

Website: https://www.firmen-datenschutz.eu

Collection and storage of personal data

1) On selecting this website

When you select this website https://www.jost-recycling.com/ (as well as any subpages) your browser (e.g. Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, Opera, Apple Safari etc.) automatically sends information to the server of this website. This information is temporarily stored in a so-called logfile. The information concerns the following:

  • IP address of the requesting terminal device (e.g. desktop PC, laptop, tablet, smartphone etc.) used to visit this website
  • Date and time of the visit
  • Name and URL of the requested page / requested file
  • Website from which the visit is made (so-called referrer URL)
  • Access status/HTTP status code
  • Data volume transferred
  • Browser used, where applicable operating system of the terminal device and name of your access provider

Type and purpose of use

The above data are processed for the following purposes:

  • Provision of a problem-free connection to the website
  • Convenient use of the website
  • Analysis of system security and stability
  • For administrative purposes.

The legal foundation for data processing is provided by Art. 6 (1) S. 1 Letter f GDPR. The legitimate interest is derived from the listed purposes of data collection. The data collected are not used to draw conclusions as to your person.

Use of cookies

Cookies are used on this website. Cookies are data which are created by your browser when you visit a website and are stored locally on your terminal device. Information is stored in a cookie which is dependent on the terminal device you use. This does not mean that this facilitates direct knowledge of your identity.

Cookies do not in principle cause any damage. They do not transfer viruses and do not read out any fixed disk content or email addresses. Cookies are used to optimise the user experience and therefore to make the visit to this website more pleasant. Two types of cookies are used for the original operation of the website: session cookies and temporary cookies. Session cookies are used to recognise which pages of this website you have already visited. They are automatically deleted when you leave the site. Temporary cookies are stored on your terminal device for a certain fixed period. If you visit this website at a later date, your browser (if you also used it before) sends the information stored in the cookie back to this website. This enables individual information which has been adjusted to your needs, in particular which entries and settings have been made, to be displayed so as to avoid having to enter it again. Further cookies may be set by third providers. In this respect we refer to the separate description further down on the programs and plug-ins used.

Google Maps

We use Google Maps (Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to be able to offer you interactive maps with the stated site directly on the website in a convenient and visually appealing manner.

On selecting our website Google receives the information that you have selected the corresponding URL of our website with the map function. In addition, the data listed in section 1) of this data protection policy are transferred. The data are transferred in any case irrespective of whether you have a Google user account or are logged in via this account. If you have logged in with a Google user account, Google can make an assignment to it. Google processes your data and creates profiles to improve maps and also in particular to offer advertising and conduct market research. You have a right to object to this type of use of your data, whereby you must get in touch with Google directly in this respect.

The legal foundation for data processing is Art. 6 (1) S. 1 Letter. f GDPR. The legitimate interest is derived from the listed purposes of data collection.

For more detailed information on data processing by Google and possible settings, please refer to Google’s data protection policies at http://www.google.com/intl/de/policies/privacy/.

Google LLC is certified for the US-European data protection treaty “Privacy Shield”, which guarantees compliance with the level of data protection in the EU. For more detailed information, please refer to https://www.privacyshield.gov/EU-US-Framework.

Google web fonts

We use the web fonts service on this website which is provided by Google (Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to design the font in a uniform and visually appealing manner.

The selected font is loaded and incorporated externally by Google servers. Through the connection between your internet browser and servers of Google LLC. data of your site visit are automatically collected and passed on to Google LLC. The collected information is the data listed under section 1) of this data protection policy.

The legal foundation for data processing is Art. 6 (1) S. 1 Letter. f GDPR. The legitimate interest is derived from the listed purposes of data collection.

For more detailed information on data processing by Google and possible settings, please refer to Google’s data protection policies at http://www.google.com/intl/de/policies/privacy/.

Google LLC is certified for the US-European data protection treaty “Privacy Shield”, which guarantees compliance with the level of data protection in the EU. For more detailed information, please refer to https://www.privacyshield.gov/EU-US-Framework.

YouTube videos

YouTube videos are integrated into our website and can be played directly from our pages. These videos are integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube unless you start the videos. Data is only transmitted, as described below, when you play the videos. We have no influence on this transmission. The legal basis for displaying these videos is Art. 6 para. 1 sentence 1 lit. a GDPR, which means that videos are only integrated with your consent.

When you visit our website, YouTube is informed that you have visited the relevant subpage of our website. In addition, the aforementioned basic data such as your IP address and the time of your visit will be transmitted, regardless of whether you have a YouTube account and are logged in or not. If you are logged in to Google, your data will be assigned directly to your account. To avoid a link to your YouTube profile, you must log out before activating the button. YouTube uses your data to create user profiles that are used for advertising purposes, market research and/or the needs-based design of its website. This analysis takes place even if you are not logged in, in order to deliver targeted advertising and to inform other users of the network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The information collected is stored on Google servers, also in the USA. The European Commission has adopted an adequacy decision for the EU-U.S. Data Privacy Framework (successor to the "Privacy Shield"). The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. Google is certified accordingly. We have also concluded so-called standard contractual clauses with Google to ensure an adequate level of data protection in third countries.

Further details about the purpose and scope of data collection and processing by YouTube can be found in their privacy policy. There you will also find additional information about your rights and options to protect your privacy at:
www.google.de/intl/de/policies/privacy.

2) On contacting

By email

When you send us an email, your email address (where applicable with the name selected by you as sender information), the subject you select and the content of the message are processed. It is necessary to process data to be able to answer your request appropriately or to take the measures you request and satisfy other legal obligations towards you which are the subject matter of the request. Only those data are processed which are required for the above purposes.

The legal foundation for data processing is our legitimate interest in answering your request in accordance with Art. 6 (1) S. 1 Letter. f GDPR.

If your email is sent to enter into a contractual relationship with us or so that pre-contractual measures may be taken by us, the legal foundation for processing is also Art. 6 (1) Letter b GDPR.

The personal data are deleted after completion of your request unless statutory storage duties are contrary to this.

By fax or post

If you send us a letter or a fax, any personal data provided and the matter communicated will be processed. Data processing is necessary to be able to suitably answer your request or take the measures you have requested or to be able to satisfy other legal obligations towards you which are the subject matter of the request. Only those data are processed which are required for the above purposes.

The legal foundation for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 (1) Letter f GDPR.

If the contact is made by post or fax, in order to enter into a contractual relationship with us or so that we can initiate pre-contractual measures, the legal foundation for processing is also Art. 6 (1) Letter. b GDPR.

The personal data are deleted after completion of your request unless statutory storage duties are contrary to this.

3) Contractual relationships and satisfaction of other legal claims

If you enter into a contractual relationship with us, if there is a pre-contractual obligation (initiation of a contract) or we are required to satisfy other legal rights towards you, we collect the following data:

  • Title
  • First name and surname
  • < >

Land line and / or mobile telephone number

  • Email address
  • In the B2B area, first name and surname of the contact partner in the company, where applicable
  • Bank details
  • Tax and / or turnover tax ID number.
  • Credit inquiries to credit insurance company
  • Information necessary for arrangement and handling of contract or to satisfy any other legal claims towards you.

Type and purpose of use

The above data are processed for the following purposes:

  • To be able to identify you during arrangement of contract, as contracting party or for other legal claims
  • To be able to satisfy pre-contractual measures, the contractual relationship or other legal claims towards you
  • To conduct correspondence with you
  • For invoicing

The legal foundation for data processing is Art. 6 (1) S. 1 Letters b, c, f GDPR. The data processing is necessary for the listed purposes to suitably implement the contract or to satisfy other legal obligations towards you.

The personal data are deleted after completion of your request unless statutory storage duties are contrary to this or if you have consented to storage beyond this in accordance with Art. 6 (1) S. 1 Letter a GDPR.

The storage period for contracts and standing order documents, if they do not provide the foundation for bookkeeping, as well as for forwarding documents is 6 years (in the event of standing order documents this period starts after expiry of agreement, Section 147 (3) S. 1 German Tax Code - Abgabenordnung). Invoices must be kept for 10 years in accordance with Section 147 (2) in conjunction with Section 147 (1) No.1, 4, 4 a German Tax Code.

Passing-on data

Your personal data will only be passed on to third parties if:

  • You have given an explicit consent in accordance with Art. 6 (1) S. 1 Letter a GDPR
  • Passing on in accordance with Art. 6 (1) S. 1 Letter f GDPR is necessary to assert, exercise or defend against claims and it is not to be assumed that you have an overriding interest in your data not being passed on (this also includes the use of processors if the requirements of Art. 28 GDPR are satisfied)
  • A statutory obligation exists for passing on in accordance with Art. 6 (1) S. 1 Letter c GDPR
  • This is lawful and, according to Art. 6 (1) S. 1 Letter b GDPR, necessary for the performance of a contract with you. This includes in particular the passing on of necessary personal data to forwarding and transport companies to deliver the goods or services or the bank details / account details to the bank handling the payment or the payment service provider.
    The passed on data may be used by the third party exclusively for the stated purposes.

Otherwise, your personal data are not passed on to third parties.

Applications

We process applicant data only for the purpose and for the conducting of the application procedure in accordance with the statutory requirements. The legal foundations for the processing of applicant data are Art. 6 (1) Letter b. GDPR as well as Art. 6 (1) Letter f. GDPR if this is necessary for us, in legal procedures for example. Section 26 Federal Data Protection Act (BDSG) furthermore applies.

The requisite data for the application are marked accordingly if we provided an online form; they also result from the job descriptions. They are usually first name and surname, address, contact data (e.g. telephone / mobile number, email address), cover letter, curriculum vitae and references. The possibility also exists for you to voluntarily provide us with further information within the scope of your application.

On sending / transmitting your application to us, you declare your consent to the processing of your data for the purpose of conducting the application procedure in accordance with the data protection policy and the scope set out therein.

If you voluntarily communicate to us special categories of personal data listed in Art. 9 GDPR (e.g. health data, religion etc.), they will also be processed in accordance with Art. 9 (2) Letter b GDPR. If we request special categories of personal data (Art. 9 (1) GDPR) from applicants, they are processed additionally in accordance with Art. 9 (2) Letter a GDPR. They may be health data, for example, where necessary for doing the job.

If we provide an online form for applications, the data will be transferred to us in an encrypted form in accordance with the latest level of scientific knowledge.

If you send us an email, you must take care of encryption yourself. Alternatively you can send us the application by post.

The data you send with respect to the application may by further processed by us if an employment relationship arises. If the application was unsuccessful, the data will be deleted. The application data will also be deleted if you withdraw your application. You are, of course, entitled to do so at any time.

The data are deleted after 6 months unless the application is withdrawn. This ensures that we can answer any questions on your application which may arise subsequently and furnish substantiating documents with respect to the Equal Treatment Act. Invoices on the reimbursement of travel expenses will be archived in accordance with the requirements of tax law.

Data subject rights

You have the following rights:

  • In accordance with Art. 15 GDPR, to request information on whether personal data concerning you are being processed. If personal data are being processed, you have a right to information about these personal data and to the following information:
    purposes of processing, categories of personal data, recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification or erasure of personal data concerning you or to the restriction of processing or of a right to object to this processing, the existence of a right to complain to a supervisory authority, the origin of your data where the data has not been collected by you, as well as on the existence of automated decision-making including profiling and meaningful information about the details;
  • In accordance with Art. 16 GDPR, to request the rectification or completion of your data stored by us without due delay;
  • In accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us where processing is not necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend against legal claims;
  • In accordance with Art. 18 GDPR, to request the restriction to processing your personal data if you contest the accuracy of the data, if the processing is unlawful, but you oppose the erasure and require them for the establishment, exercise or defence of legal claims or you have lodged objection to the processing in accordance with Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, to obtain your personal data you have provided to us in a structured, commonly used and machine-readable form or to transmit those data to another controller;
  • In accordance with Art. 7 (3) GDPR, to withdraw your consent at any time towards us. This means that we may no longer continue the data processing based on this consent for the future;
  • In accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. For this purpose you may have recourse to the supervisory authority at your place of residence or place of work or the place of the alleged infringement.

Right to object

Where your personal data are processed on the basis of a legitimate interest in accordance with Art. 6 (1) S. 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR where grounds are submitted which are based on your special situation or the objection is directed at direct marketing. In the case of direct marketing, you have a general right to object without stating a special situation. If you would like to make use of your right to object, an email to info@paul-jost.com is sufficient.

Data security

This website uses the SSL procedure in conjunction with the highest encryption level which is supported by your browser. This is usually a 256 bit encryption. The web server forces the selection of the SSL variant for your security. The SSL certificate is of course renewed on a regular basis on expiry of the time period. Whether a page is transferred encrypted can be recognised by the key or lock symbol in the top or bottom bar of your browser. Furthermore, technical and organisational security measures are taken to protect your data against random or deliberate manipulations, partial or complete loss, destruction or against unauthorised access by third parties. These security measures are continuously improved or adjusted in accordance with technical progress.

Up-to-dateness of the data protection policy

Status of the data protection policy is January 2024.

It may be necessary to alter the data protection policy. This may be necessary due to a further development of the website, altered offers or statutory and official requirements. The current data protection policy may be found at any time on this website at https://www.jost-recycling.com/de/servicenavigation/datenschutzerklaerung.