49170 Hagen a.T.W.
For the assertion of rights within the framework of data protection or for questions regarding the use, collection, or processing of your personal data, please contact our data protection officers:
SBS DATA PROTECT GmbH
1. security and protection of your personal data
As the body responsible under data protection regulations, we undertake to protect your personal data and treat it confidentially. The collection, storage, modification, transmission, blocking, deletion, and use of your personal data is carried out based on the applicable legal provisions, in particular the General Data Protection Regulation (GDPR).
We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by our external service providers.
2. data storage duration
We store your personal data for as long as it is necessary to achieve the respective purpose of the processing or the storage is subject to a statutory retention period.
We store data that we process based on your consent until you revoke your consent.
We store data that we process for the performance of a contract with you for as long as the contractual relationship exists and, if necessary, beyond that if statutory retention periods oblige us to do so.
We store data that we process based on our legitimate interests for as long as your interest in deleting the data does not outweigh this.
3. access data
When you use our website for information purposes, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Operating system and its interface
- Language and version of the browser software
However, our web server stores this data separately from other data; we can't assign this data to a specific person. Error logs, which record faulty page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.
This data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR to protect the legitimate interests of JETASO, namely the optimisation of our offer.
4. log file information
In addition, log file information (your IP address) is stored as soon as you log into your account and make changes there (e.g. place an order or change your contact details). Log files for email traffic via our mail servers are deleted after eight weeks. The longer retention period is necessary for analysing faults in sending or receiving, as well as for ensuring the functionality of the mail services and combating spam.
This data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO to protect our legitimate interests, namely the prevention of misuse of our offer.
In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie with certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the internet offer as a whole more user-friendly and effective .
Our website uses the following types of cookies, the scope, and functionality of which are explained below:
- Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out.
- Persistent cookies are automatically deleted after a predefined time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
- Flash cookies are not collected by your browser, but by your Flash plug-in. These objects store the required data regardless of the browser you are using and have no automatic expiry date.
- Third party cookies are not set by JETASO, but by a third party provider. Third party cookies are generated, for example, by the "social media plugins" (see below) of the social networks of Facebook, Instagram, or the services of Google Analytics, YouTube, etc. which are integrated into the website of JETASO. These third party cookies are generated by integrated plugins or technologies of the respective organisations. JETASO has no influence on the cookies and privacy settings of these services or organisations and expressly points out that our third party services are subject solely to their respective cookie and privacy policies .
Cookie information of the following third-party services can be found under these links:
- YouTube, Google Analytics:
- Facebook, Instagram:
ou can configure your browser setting according to your preferences and refuse to accept cookies. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually. We would like to point out that by deactivating cookies you may not be able to use all the functions of this website.
If you contact us by e-mail or via our contact form, the data you provide (your e-mail address and name) will be stored by us to answer your questions. We delete the data accruing in this context after the storage is no longer necessary, e.g. when your request has been dealt with. Otherwise, processing will be restricted if there are legal obligations to retain data.
The legal basis for this processing is your consent according to Art. 6 para. 1 p. 1 lit. a GDPR.
7. Collection of personal data upon conclusion of the contract and payment
We store the following personal data as part of an order:
- Telephone number,
- E-Mail Adress,
- Possibly a different delivery address,
- Payment details
We use this data exclusively to execute the contract and the necessary communication with you. This includes the initiation, conclusion, processing, warranty, and, if necessary, the reversal of the purchase contract. The data will be stored by us until the complete execution of the purchase contract. Insofar as commercial and tax retention periods exist, the duration of storage can be up to 10 years.
The recording and processing are carried out within the framework of the concluded contract between JETASO and the customer according to Art. 6 para. 1 p. 1 lit. b GDPR. The legal basis for the further storage for reasons of tax and commercial law is the necessity according to the law under Art. 6 para. 1 p. 1 lit. c GDPR.
8. Data transmission to third parties
We only disclose your personal data to third parties to the extent that this is necessary for the performance of the contract or to protect our legitimate interests. We also use external service providers (order processors) for the execution of the contract. Separate order data processing agreements have been concluded with the service providers to ensure the protection of your personal data.
- For the purpose of the so-called hosting of our server systems as well as the technical administration of the IT systems required for hosting, data of the website visitors, customers or other interested parties of our offer may be processed by our hosting provider. This involves the following data: IP address, log files, surname, first name, address, order data, turnover, account data, contract data, participation data, tax data, PDF downloads.
- To carry out the delivery, the customer's first name, surname, address, e-mail address and telephone number will be forwarded to our partner company to carry out the delivery.
- For payment processing, the customer's payment data, namely first name, last name, address, e-mail address, telephone number, date of birth, IBAN, BIC, and IP address are forwarded to credit institutions or payment intermediaries, depending on which payment method you have chosen.
- To process our accounting, we pass on personal data, namely first name, last name, address, e-mail address, and telephone number in connection with customer orders to our external accounting service provider.
The data transfer to the service providers named under 8 a) - d) is carried out for the implementation of the contractual relationship with you as a customer, as well as for the protection of our legitimate interests. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b and lit. f GDPR.
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address to send you the newsletter .
You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail, via the form on our website, by e-mail to
Our service provider for sending the newsletter is CAMPAIGN MONITOR. A separate order data processing agreement has been concluded with the service provider to ensure the protection of your personal data.
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in the section "Access data" and the web beacons with your e-mail address and an individual ID. The data is only collected pseudonymously, i.e. the IDs are not linked to your other personal data, and a direct personal reference is excluded. You can object to this tracking at any time by clicking on the separate link provided in every e-mail or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.
This data processing is based on your consent. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR
9. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.
Alternatively, you can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website: "Activate opt-out cookie" for Google Analytics!
Please note that if you delete the cookies in your browser settings, this may result in the opt-out cookie also being deleted and you may have to reactivate it.
This website uses Google Analytics with the extension "anonymizeIp". This means that IP addresses are processed in abbreviated form, which means that it is impossible to link them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Third party information:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: http://www.google.com/analytics/terms/de.html,
overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
This data processing serves to measure and evaluate visitor flows on our website to obtain an accurate overview of visitor numbers, usage interests, and other relevant information for the design of our corporate structure and website. This data processing is carried out based on Art. 6 para. 1 sentence 1 lit. f GDPR to protect the legitimate interests of JETASO, namely the optimisation of our offer.
10. Facebook fan page
JETASO uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (hereinafter: Facebook) for the information service offered here. In addition, there is a link to the Facebook fan page of JETASO on the website.
According to the ECJ, there is joint responsibility within the meaning of Article 26 of the GDPR between Facebook and the operator of a Facebook fan page for the personal data processed via the Facebook fan page. For this reason, Facebook and JETASO have concluded an agreement on joint responsibility, which you can access here.
JETASO provides you with the following information on data processing on our Facebook fan page:
The processing of your personal data on the Facebook fan page of JETASO is carried out under joint responsibility with: Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
When you access a Facebook fan page, the IP address of your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised and deleted after 90 days, at least if it is a German IP address. In addition, Facebook stores further information about the end devices of its users, e.g. the internet browser used. This may enable Facebook to assign IP addresses to individual users. If you are logged into your Facebook account while visiting our fan page, a cookie with your Facebook ID is stored on your terminal device. Based on this cookie, Facebook can track that you have visited our fan page and how you have used it. Facebook uses this information to present you with content or advertising tailored to you.
If you do not wish to do this, you should log out of your Facebook account or deactivate the "stay logged in" function. We also recommend deleting the cookies on your device and closing and restarting your browser. This process deletes Facebook information that Facebook can use to link to you.
However, if you want to use the interactive functions of our fan page, you would have to log in to Facebook again with your Facebook login information. This will also enable Facebook to link to you again.
The data collected about you in this context will be processed by Facebook and may be transferred outside the European Union.
Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook as well as on the setting options for advertisements. The data usage guidelines are available at the following link: http://de-de.facebook.com/about/privacy
Facebook's full data policy can be found here: https://de-de.facebook.com/full_data_use_policy
Opt-out options can be set here: https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com
Facebook Inc., the U.S. parent company of Facebook Ireland Ltd., is certified under the EU-U.S. Privacy Shield and thus undertakes to comply with the requirements of European data protection law. Further information on Facebook's Privacy Shield status can be found here:
The transmission and further processing of users' personal data to third countries, such as the USA, as well as the associated possible risks for you as a user cannot be assessed by us as the operator of the Facebook fan page.
Facebook also provides a range of statistical data for JETASO as a fan page operator as part of the so-called "Insights" function. These statistics are generated and provided by Facebook. We as the operator of the fan page do not influence the generating, in particular, we cannot prevent this function. Within the framework of the "Insights" function, the following information is presented to us for the categories "Fans", "Subscribers", "Reached persons" and "Interacting persons" for a selectable period:
Page activity such as page views, page previews, and actions on the page; Reach activity such as 'likes', people reached, and recommendations, Post activity such as post interactions, video views, comments, and content shared.
Facebook provides more information on this at the following link: http://de-de.facebook.com/help/pages/insights.
JETASO uses this data, which is available in aggregated form, to make posts and activities on the fan page more attractive to users, such as for planning the content and timing of posts. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f GDPR, namely our legitimate interest in optimising our offer.
Duration of storage
We store the information transmitted by Facebook at most as long as your interest in deletion or anonymisation does not prevail.
If you no longer wish to have the data processing described here in the future, please cancel the connection of your user profile to our fan page by using the functions "I no longer like this page" and/or "Do not subscribe to this page".
Your rights as a data subject
11. Use of social media plugins
We use social media plug-ins from YouTube, Facebook and Juicer.
We use the so-called two-click solution. This means that when you visit our site, no personal data is passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by marking the box with its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, and the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research, and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.
Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and set options for protecting your privacy:
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is a subsidiary of Google LLC, which has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland; Facebook Inc, the U.S. parent company of Facebook Ireland Ltd, is certified under the EU-U.S. Privacy Shield and thus commits to comply with European data protection law. Further information on Facebook's Privacy Shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Facebook's full data policy can be found here: https://de-de.facebook.com/full_data_use_policy
Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
This data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR to protect the legitimate interests of JETASO, namely the optimisation of the offer.
12. your rights as a data subject
You have the right to:
- Information about the processing of your data
- Correction or deletion of your data
- Restriction of processing
- Objection to processing
- Data portability
- Revocation of your given consent with effect for the future
- Complaint to a data protection supervisory authority A list of all supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Austrian data protection authority: https://www.dsb.gv.at/
We hope that this information has helped you to exercise your rights. If you would like more information on the data protection provisions, we are at your disposal.