Privacy Policy

We appreciate you visiting our website www.jambou.com and your interest in our services. In this privacy and data protection declaration, we have put together information for you regarding the processing of your personal data. The separate text passages explain among other things from what sources, to what purposes and on which legal basis your data is processed, for how long this is stored and whether your data is passed on to others. In addition we give you information regarding the claims and rights, to which you are entitled according to data protection regulations. This data privacy declaration is valid solely for the use of the website www.jambou.com. If you are forwarded to other websites from our site, the data protection regulations of the respective operation are valid there, over which we have no influence.

I. Information regarding the Responsible Party

1. Name and Address of the Responsible Party

The responsible party for the processing of your personal data in the sense of Art 4 No. 7 GDPR is:

Jambou GmbH
Friedrichstrasse. 171
10117 Berlin
Germany
Tel: +49 30 609 886 290
Fax: +49 30 609 886 299
E-Mail at Jambou

This information can be called up at any time pursuant to Articles 12, 14 and 21 GDPR at http://www.jambou.com/privacypolicy.htm and can be downloaded and printed.

2. Name and Address of the Data Protection Officer

The Data Protection Officer of the responsible party is:

Mr. Camillo Bartoli-Bock
Friedrichstrasse. 171
10117 Berlin
Germany
Tel: +49 30 609 886 290
Fax: +49 30 609 886 299
E-Mail at Datenschutz Jambou

II. General Information Regarding Data Processing

1. Scope of the processing of personal data

Your personal data is only processed by us, if this is necessary for offering a functional website as well as for our content and services or if you have consented to the use of the data. An exception exists in such cases as it is not necessary to obtain prior consent or if it is not possible for factual reasons and the processing of data is permitted according to legal regulations.

2. Legal basis for the processing of personal data

If we request consent from the data subject for processing personal data, Art 6. Sec. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for this.
With the processing of personal data, which is necessary for the fulfilment of a contract, of which the data subject is a contractual party, Art.6 sec.1 lit.b GDPR serves as a legal basis. This is also valid for processing that is necessary for carrying out pre-contractual measures. If a processing of personal data is necessary for fulfilling a legal obligation, which our company is subject to, Art.6 sec.1 lit.c GDPR serves as the legal basis.

If a processing of personal data is necessary for fulfilling a legal obligation, to which our company is subject, Art.6 Sec.1 lit.c GDPR serves as the legal basis.
If the processing is necessary for keeping a legitimate interest of our company or of a third party and the interests, basic rights and fundamental freedoms of the data subject are not predominant to the afore-mentioned interest, then Art.6 sec.1 lit.f GDPR serves as a legal basis for the processing.

3. Data deletion and duration of storage

Your personal data will be categorically deleted or blocked as soon as the purpose for storage ceases to exist. In the case of collecting the data to make the website available this is the case, when the respective session is ended. In the case of the storage of data in logfiles, this is the case at the latest after seven days. Storage may take place over and beyond that time. In this case the IP addresses of the users are deleted or altered and disguised, so that a mapping of the client that is calling up is no longer possible Storage can take place in addition to that, if this is provided for by the European or national legislator in Union regulations, laws or other provisions, to which we as the responsible party are subject. Blocking or deletion of data also takes place, if the legally prescribed storage deadline expires, unless a necessity for further storage of data exists per conclusion of a contract or for the fulfilment of a contract.

4. Possibility for objection and removal

The collection of the data necessary for providing the website stated in Clause III. 1. is absolutely necessary for operating the website jambou.de. Consequently, there is no possibility of objection for the user. If you do not wish us to process the data for operating our website named in Clause III.1. then you cannot use our website.

III. Processing of your data for the provision of our website

1. Description and scope of data processing

With each calling up of our website, our system automatically collects data and information also from the computer system of the computer that is calling it up. The following data is hereby collected:
  • Information about the type of browser and the version used
  • The user's operating system
  • The user's internet service provider
  • The user's IP address
  • Date and time of access
  • Websites, from which the system of user came to our website
  • Websites that are called up by the system of the user via our website

This data is also stored in logfiles. Storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for temporary storage of data and the storage of logfiles is Art.6 sec.1 lit.f GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system, is necessary to enable the delivery of the website to the computer of the user. For this, the IP address of the user must remain stored for the duration of the session. The remaining data serves to optimize the website and for its correct display, as well as for ensuring security and functionality of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest for data processing pursuant to Art.6 sec.1 lit.f GDPR lies in these purposes.

4. Duration of the storage

Data is deleted as soon as it is no longer necessary for fulfilling the purpose of its collection. In the case of collection of data for providing a website, this is the case as soon as the session is terminated. The data stored in the logfiles is deleted after 31 days.

5. Possibility for objection and removal

The collection of the data necessary for providing the website stated in Clause III. 1. is absolutely necessary for operating the website www.jambou.com. Consequently, there is no possibility of objection for the user. If you do not wish us to process the data for operating our website named in Clause. III.1. then you cannot use our website.

IV. Cookies

1. Description and scope of data processing

We use cookies that are technically necessary for the correct delivery and display of our website in your browser. Cookies are text files that are stored in the internet browser and/or are stored by the internet browser on the computer system of the user. If a user calls up a website, then a cookie can be stored on the users operating system. These cookies contain a characteristic sequence of characters that enables a clear identification of the browser, when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require the ability to identify the browser calling up, also after a change of page. In the cookies thereby e.g. the data to the language settings or login information is stored and transmitted.

2. Legal basis for data processing

The legal basis for the use of the technically necessary cookies is Art. 6 sec. 1 lit. f) GDPR.

3. Purpose of Data Processing

The purpose of the use of technically necessary cookies and the collection of personal data connected with this is the correct delivery and display of our website in all current browsers. Our legitimate interest according to Art. 6 sec. 1 lit. f) GDPR lies herein. At the same time the technically necessary cookies also serve your legitimate interest in the correct display of our website in the browser you use.

The data collection using cookies is not used by us for creating user profiles or for tracking our page visitors.

4. Duration of the storage, Possibility of objection and removal

Cookies are stored on the computer of the user and transmitted by the user to our website. Consequently you as the user have the full control over the use of cookies and their duration of storage on your end device. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Already stored cookies can be deleted at any time. This can take place automatically. If cookies that are technically necessary for our website are deactivated, then it is possible that not all functions of the website can be used any longer to the full extent. Instructions for carrying out the settings necessary for this can be found here:
  • For Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&ref_topic=14666
  • For Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
  • For Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
  • For Safari: https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US

V. Email contact

1. Description and scope of data processing

For queries pertaining to our services or for exercising your rights explained in Clause VI, you can contact us via email (info@jambou.com). In this case the personal data that you transmit will be stored your message, your name, your email address and if stated by you, your telephone number). In this context, data is not passed on to third parties. Data is solely used for processing your message. At the point in time of sending the message the date and time of your contact is stored.

If you contact us via email you consent to your email address, your message as well as the date and time of the contact being processed for the correspondence with you.

2. Legal basis for data processing

If a consent exists for the processing of your data for the email correspondence, the legal basis for this is Art. 6 Sec. 1 lit a) GDPR. The legal basis for the processing of data that is transmitted in the course of sending an email, is additionally Art.6 Sec.1 lit.f GDPR. If the email contact has the intention of concluding a contract, then in addition the legal basis for the processing is Art.6 sec.1 lit.b GDPR.

3. Purpose of data processing

The processing of your data serves our and your legitimate interest of communicating in this way and for receiving and processing your communications, Art. 6 sec. 1 lit. f) GDPR. If the email contact serves the purpose of concluding a contract, then it also at the same times serves the contract reason, foundation and implementation, Art. 6 sec. 1 lit. b) GDPR.

4. Duration of storage

Data is deleted as soon as this is no longer necessary for fulfilling the purpose of its collection. For personal data that is transmitted via email this is the case, when the respective conversation with you has ended.The conversation ends, if from the circumstances it can be derived that the issue concerned has been conclusively clarified. In addition to that the data is only stored by us, if and for as long as it is subject to a legal storage deadline and/or are is required by us for enforcing legal claims from our business relationship with you. The additional personal data transmitted during the sending process is deleted at the latest after a deadline of seven days. The emails, which you have sent us, are deleted after the expiry of the legal deadline for storage or, if such does not exist, 6 months after termination of the conversation with you.

5. Possibility of objection and removal

You have the possibility at any time of revoking your consent to the processing of your personal data. If you contact us via email, then you can object to the storage of your data independent of this at any time. In such a case the conversation can no longer be continued. Further information for exercising your right to revoke and object can be found in Clause VI. of this data protection and data privacy declaration. All personal data that had been stored in the course of the contact will be deleted in this case.

VI. Your rights as a data subject

If your personal data is processed by us, then you are a data subject in the sense of the GDPR and you are entitled to the following rights with respect to us as the responsible party:

1. Right to information

You can request from us as the responsible party a confirmation, whether personal data pertaining you is processed by us. If such processing takes place, then you can request from us as the responsible party the following information:

  • The purpose for which the personal data is processed;
  • The categories of personal data that are processed;
  • The recipient and/or the categories of recipients to whom personal data relating to you has been or shall be disclosed;
  • The planned duration of the storage of the personal data pertaining to you or if concrete details are not possible to this, criteria for determination of the duration of storage;
  • The existence of a right for correcting or deleting the personal data pertaining to you, a right to the limitation of the processing by the responsible party or a right to objection to this processing;
  • The existence of a right of appeal or complaint to a supervisory authority;
  • All available information with respect to the origin of the data, if the personal data is not collected from you as the data subject;
  • You have the right to request information, whether the personal data pertaining to you is transmitted to a third country/state or to an international organization. In this respect you can request to be informed with respect to the suitable guarantees according to Art. 46 GDPR in connection with the transmission.

2. Right to correction

You have the right to correction and/or completion with respect to us as the responsible party, if the processed personal data pertaining to you is incorrect or incomplete. As the responsible party we must correct this without undue delay.

3. Right to the limitation of the processing Under the following conditions you can request the limitation of personal data pertaining to you:

  • if you contest or dispute the correctness of the personal data pertaining to you for a duration that gives us the possibility of checking the correctness of personal data;
  • if the processing is not lawful and you refuse the deletion of personal data and instead request the limitation of the use of personal data;
  • we no longer require the personal data for the purposes of processing, you however require this for the making valid, exercising or defence against legal claims, or
  • if you have filed an objection or complaint to the processing according to Art.21 sec.1 GDPR and it has not yet been determined, whether our legitimate interests are predominant to your reasons.

If the processing of the personal data pertaining to you is limited, this data may apart from its storage only be processed with your consent or for making valid, exercising or defending against legal claims or for the protection of rights or another natural person or legal entity or for reasons of an important public interest of the Union or a member state.

If the limitation of processing has been restricted by the above-mentioned prerequisites, then you will be informed by me before the limitation is removed.

4. Right to deletion

(a) Obligation to delete

You can request of us as the responsible party, that the personal data pertaining to you be deleted without undue delay and we are obliged to delete the data without undue delay, as long as one of the following reasons applies:

  • The personal data pertaining to you has been collected for purposes or other reasons that are no longer necessary.
  • You retract or revoke your consent to the processing based on Art.6 sec.1 lit.a or Art.9 sec.2 lit.a GDPR and another legal basis for processing does not exist.
  • You file an objection or appeal against the processing according to Art.21 sec.1 GDPR and there are no predominant legitimate reasons for the processing, or you make an objection or appeal against the processing pursuant to Art.21 sec.2 GDPR.
  • The personal data pertaining to you was processed unlawfully.
  • The deletion of the personal data pertaining to you is necessary for fulfilling a legal obligation according to Union law or the law of Member States that we are subject to.
  • The personal data pertaining to you was collected in connection with the services offered by the information society according to Art.8 sec.1 GDPR.

(b) Information to third parties

If we have made the personal data pertaining to you public and are obliged to delete it pursuant to Art.17 sec.1 GDPR, taking the available technologies and the implementation costs into consideration, we shall take appropriate measures also of a technical nature, in order to inform the responsible person for data processing, who processes personal data, that you as the data subject have requested the deletion of all links to this personal data or of copies and replications of this personal data.

(c) Exceptions

The right to deletion does not exist, if the processing is necessary

  • for exercising the right to freedom of expression and information;
  • for fulfilling a legal obligation, that the processing and the responsible party is subject to according to the law of the Union or the Member states or for the fulfilment of a task that lies in public interest or takes place in the exercising of official authority, which has been vested in the responsible party;
  • for reasons of public interest in the area of public health according to Art.9 sec.2 lit.h and i as well as Art.9 sec.3 GDPR;
  • for archive purposes of public interest, scientific or historical research purposes or for statistical purposes according to Art.89 Sec.1 GDPR, to the extent that the right stated under section a) foreseeably makes the realization of the aims of this processing impossible or seriously impairs this or
  • for the making valid, exercising or defence against legal claims.

5. Right to be informed

If you make the right to correction, deletion or limitation of processing valid with respect to us, then we are obliged to inform all recipients, to whom the personal data pertaining to you has been disclosed, of this correction or deletion of the data or limitation of the processing, unless this proves itself to be impossible or is connected with a disproportionate effort. You have the right to be informed of these recipients.

6. Right to Data Portability

You have the right to receive the personal data pertaining to you, which you have made available to us, in a structured, common and machine-readable form. In addition you have the right to transfer this data to another responsible person without obstruction by us, as long as

  • the processing is based on a consent according to Art.6 Sec.1 lit.a GDPR or Art.9 Sec.2 lit.a GDPR or on a contract according to Art.6 Sec.1 lit.b GDPR and
  • the processing takes place using automated processes..

In exercising this right you further have the right to obtain the personal data pertaining to you directly from us or another responsible party, as long as this is technically feasible. Freedoms and right of other persons may not be inhibited by this.

7. Right of objection

You have the right, for reasons which result from the special situation, at any time to object against the processing or personal data relating to you, which takes place according to Art.6 Sec.1 lit.e or f GDPR. This is also valid for profiling based on these provisions.
In this case, we shall no longer process the personal data pertaining to you, unless compelling legitimate reasons for the processing are proveable by us, which are predominant to your interests, rights and freedoms or the processing serves the making valid, exercising or defending of legal claims.
If the personal data pertaining to you is processed in order to carry out direct marketing, you have the right to at any time make an objection against the processing of personal data pertaining to you for the purposes of such advertising. This is also valid for profiling, if it is in connection with such direct marketing.
If you object to the processing for the purposes of direct marketing, then the personal data relating to you will no longer be processed for these purposes.

The objection is without formal requirements and can be declared in writing to Jambou GmbH, Friedrichstrasse. 171, 10117 Berlin, Germany or via email (info@jambou.com), via telefax (fax No. +49 30 609 886 299) or also via telephone (Tel. Nr. +49 30 609 886 290). You have the possibility in connection with the use of services of the information society - irrespective of the Directive 2002/58/EU - to exercise your right to objection by means of an automated process, with which technical specifications are used.

8. Rght to Revocation of the Data Protection Declaration of Consent You have the right to revoke or withdraw your data privacy and protection declaration of consent at any time. By revoking the consent the legality of the processing that took place on the basis of the consent up until the withdrawal of consent remains unaffected. The withdrawal of consent is without formal requirements and can either be declared in writing to Jambou GmbH, Friedrichstrasse. 171, 10117 Berlin, Germany oder via email (info@jambou.com) or via telefax (fax No. +49 89 30 609 886 299) or also via telephone (tel. No. +49 30 609 886 290).

9. Complaint to a Supervisory Authority Irrespective of any other administrative, regulatory or judicial remedies, you have the right to a complaint to a supervisory authority, in particular in the member state of your place of residence, your workplace or the place of the alleged violation, if you are of the opinion that the processing of the personal data pertaining to you is in breach of the GDPR. The supervisory authority, to which the complaint can be filed, informs the complainant of the status and the results of the complaint including the possibility of a judicial redress according to78 GDPR.