Privacy policy for visitors to our website/online shop, users of the online shop, customers, suppliers and job applicants

This privacy policy is addressed to (i) all visitors to the website (https://www.jacob-rohre.de/) and visitors, users and customers of the online shop (https://www.jacob-shop.com/) of Fr. Jacob Söhne GmbH & Co. KG (“we” or “us”), to (ii) customers and suppliers outside the website/online shop, and (iii) job applicants. In accordance with the General Data Protection Regulation (GDPR), we are the data controller in relation to the processing of this personal data.

Personal data means all information that relates to an identified or identifiable natural person. This privacy policy explains how we process your personal data and what rights and choices you have.

1. Name and contact details of the controller and data protection officer


Data controller responsible for processing:

Name:        Fr. Jacob Söhne GmbH & Co. KG

Address:     Niedernfeldweg 14, 32457 Porta Westfalica, Germany

Telephone:     +49 571 9558-0

Email:        post(at)jacob-rohre.de

Our data protection officer can be contacted at:

Email:        dsb(at)jacob-rohre.de

2. Processing of personal data on the website or in the online shop

Below you will find information about our processing of personal data on our website and online shop. Based on the type of personal data, we explain the purpose of the processing and the legal basis on which the personal data is processed. We also set out how long the personal data will be stored.

2.1 Visiting our website or online shop purely for informational purposes

If you only visit our website or online shop for informational purposes, without actively providing us with data via registration or in any other way, we only process data about the internet connection that your browser transmits to our server.

Type of personal data Processing purposes and legal basis

Server log files

Browser type and browser version, operating system used,Referrer URL, Host name of the accessing computer, Time of the server request, IP address (automatically abbreviated) 


When you visit our website or online shop, your browser automatically processes information that your browser automatically transmits to us in “server log files”. This data is collected in order to optimise our online products in the future as well as to ensure data protection and data security.

The data is processed in accordance with Article 6(1)(b) or (f) GDPR.

 


Log data collected automatically is deleted after the purpose of the processing has been fulfilled, usually 7 days after it has been collected, unless it is necessary, in individual cases, to store it for longer for reasons of data and system security or to identify and correct errors.

The personal data listed in this section 2.1 is collected automatically by our IT systems when you visit our website or online shop. The website or online shop may not be displayed optimally if the personal data is not processed.

2.2 Contacting us via the online contact form or by email

We process the personal data listed below in order to keep you informed about our products and services, and to answer other enquiries from you.

Type of personal data Processing purposes and legal basis

Online contact form/e mail
Contact details (name, telephone number, address, reason for contact, etc.), email address


If you contact us via our website or online shop, or request informational material or a catalogue, we process your details from the online contact form or your e mail in order to deal with your enquiry and the associated technical administration and to respond to any follow-up questions.

Before we conclude a contract with you, this data is processed in accordance with
Article 6(1)(b) GDPR, otherwise it is based on the mutual interest in processing the data in accordance with Article 6(1)(f) GDPR.

 

We only store your personal data in accordance with this section 2.2 for as long as is necessary to provide you with the information you have requested from us and to establish any potential business relationship with you.

If the applicable law requires us to retain certain personal data for legally defined periods of time (for example in connection with business transactions), we will continue to store the relevant personal data for as long as necessary. In this case, the legal basis for the processing of the personal data is Article 6(1)(c) GDPR. Your personal data will be deleted immediately if it is no longer required for the purposes of complying with the statutory requirements.

We collect the personal data listed in this section 2.2 directly from you when you provide us with the personal data yourself. If we did not process this personal data (with the exception of any optional information), it would not be possible to provide the services described in this section 2.2.

2.3 Job applications

In the context of job applications, we process the following personal data.

Type of personal data

Processing purposes and legal basis

 

Application details

Personal details such as

(i) Name, private contact details (email address, telephone number, postal address)

 

and other professional information provided by you as part of the application, such as

 

(ii) curriculum vitae, letters of recommendation, covering letter, work permit, previous employment, training history, languages spoken, skills relevant to the job and references

 

as well as information provided during the application process (some of which is required by law), such as

 

(iii) date and place of birth, marital status, number of children, driving licence information and disability status, if applicable

 

 

It is necessary to process the personal data specified above in connection with a job application, which may be made by email, via a company page (social media, see section 4), or by post, in order to select suitable employees, to give notice of the outcome of an application, to coordinate the application process (e.g. personal interview), and to establish an employment relationship.

 

The data is processed in accordance with

Section 26(1) sentence 1 BDSG (Bundesdatenschutzgesetz [German Federal Data Protection Act]).

 

 

 

 

 

 


We collect the personal data specified in this section 2.3 directly from you as a job applicant during the application process.

If your application to us is unsuccessful, we will retain this personal data for three months after notifying you of our decision. In this case, the legal basis for the processing the data, in addition to the above, is Article 6(1)(f) GDPR. Our legitimate interest is to use this personal data, if necessary, in relation to legal disputes with applicants, in particular in connection with the AGG (Allgemeine Gleichbehandlungsgesetz [General Equal Treatment Act]).

2.4 Use of the shop for detailed product views and in connection with orders

We also process the personal data listed below in order to inform you about our products or services and to process your orders.

Type of personal data

Processing purposes and legal basis

 

Registration of a customer account

Compulsory information for registration (VAT ID, company, company address, company telephone number or mobile phone number, country, company email address, title, name, department, account email address, password)

Optional additional information (P.O. box/postal code, company fax number, company URL, personal fax number)

 

 

You have to create a customer account in order to use some functions on our website or in our online shop (more detailed product information/orders). As part of this registration, we process your personal data in order to be able to offer you these functions.

 

The processing of this data is carried out for all information required to fulfil the contract in accordance with Article 6(1)(b) GDPR, and for all further information due to mutual interest in accordance with Article 6(1)(f) GDPR.

 

 

 

 

 

Direct advertising

Contact details (name, telephone number, address, reason for contact, etc.), email address

 

Compulsory registration data, if applicable (see above)

 

If you are one of our customers and you have been inactive for no more than three years, we may contact you by email to inform you about our current products and services as part of our existing business relationship.

 

The data is processed in accordance with
Article 6(1)(f) GDPR.

 

 

Processing (online) orders:

Registration data, order communication data, order data (product, quantity, etc.), payment data (all necessary invoice information)

 

 

In the case of an order or other contract-related processing, we use the personal data to process or handle the order and other contract-related enquiries. The processing may also be used to resolve disputes or enforce the contractual agreement.

 

This data is processed in accordance with Article 6(1)(b) GDPR.

 

Credit check

Payment data

 

 

Before delivery of the ordered goods, we may have a credit check carried out using the payment data. This is done to protect us against non-payment.

 

This data is processed in accordance with Article 6(1)(b) and, if applicable, (f) GDPR.

 

 

Compliance check and other legal obligations

e.g. information about legal disputes that may be relevant for antitrust purposes.

 

The purpose of the processing is to ensure compliance with legal obligations (such as accounting obligations, tax regulations), compliance audits or recording obligations (for example, under competition laws, export laws, trade sanctions and embargo laws or the prevention of white-collar crime or money laundering); in individual cases, this may involve us matching your contact information or other information you provide with applicable lists of sanctioned parties and contacting you to confirm your identity if such a match occurs, or recording any interaction with you that may be relevant for antitrust purposes.

 

This data is processed in accordance with Article 6(1)(b) or (c) GDPR.

 

 


We only store your personal data in accordance with this section 2.4 for as long as is necessary in each case to provide the services, sell our products or provide the information you have requested from us and to manage the business relationship with you or to check compliance. If you wish to delete your customer account, we will do so on receipt of your request.

If the relevant applicable law obliges us to retain certain personal data for legally defined periods of time (such as in connection with business transactions), we will continue to store specific personal data for as long as we are legally obliged to do so. In this case, the legal basis for the processing of the personal data is Article 6(1)(c) GDPR. Your personal data will be deleted immediately if it is no longer necessary to comply with the statutory requirements.

We collect the personal data listed in this section 2.4 directly from you when you provide us with the personal data yourself. If we did not process this personal data (with the exception of the optional information), it would not be possible to provide the services listed in this section 2.4.

2.5 Cookies and analysis services

(a) Information about cookies

We use “cookies” on our website and online shop for various purposes. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by the browser. Session cookies, which are used in particular to enable the customer account and the shopping basket functions to work, are currently used on our website and in our online shop. This is done by processing the login status of the user FE/BE and the cookie preference.

Specifically, the following session cookies are used on this website: fe_typo_user, be_typo_user, be_lastLoginProvider, PHPSESSID, cookieconsent_dismissed, cookie _et_coid.

The data processing is carried out on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest is the provision/optimisation of our online services and our web presence.

The data specified above will be processed for as long as it is necessary to achieve the purpose stated above. The storage period of the session cookies usually lasts until the end of your visit to our website or online shop. Depending on the type of browser you are using, there may be default settings activated that restore pages that you have previously visited and this allows session cookies to be stored for longer.

(b) Information about the etracker analysis service

On our website and in our online shop, we also use services from etracker GmbH, based in Hamburg, Germany (www.etracker.com) to analyse usage data. None of the cookies used enable a statistical analysis of the use of our website/online shop by visitors or usage-related content or advertising to be displayed. Only the following data is processed:

  • the pseudonymised IP address;
  • Information about the end device, operating system and browser used;
  • geographical information, to a maximum of city level;
  • the URL accessed with the associated page title and optional information on the page content;
  • the website from which the accessed individual page was reached (referrer site);
  • the subsequent pages that were accessed from the web page visited within an individual website;
  • the length of time spent on the website;
  • other interactions (clicks) on the website, such as search terms entered, files downloaded, videos viewed, items ordered.

    The data processed with etracker is processed and stored by etracker on our behalf exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited in this respect and awarded the “ePrivacyseal” data protection seal of approval.

    The data processing is carried out on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest is the optimisation of our online services and our web presence. The privacy of our visitors is particularly important to us, so the IP address is pseudonymised at the earliest possible stage by etracker and the log-in or device identifiers are converted to a unique key at etracker which is not assigned to an individual person. etracker does not use the data in any other way, combine it with other data or pass it on to third parties.

    (c) Deactivation, objection

    You can prevent session cookies (section 2.5 (a)) from being stored on your computer by changing the settings of your Internet browser, for example by deactivating all automatic setting of cookies. If specific cookies are deactivated, the functionality of the website may be restricted.

    You can object to the data processing described above (section 2.5 (b)) through etracker at any time, provided it is done on a personal basis.

     

    Your objection will not have any adverse consequences for you.

    3. Processing of personal data of customers/suppliers outside the website/online shop

    We also process your personal data for the purposes stated in sections 2.2 and 2.4 of this privacy policy (to inform you about our products and services and to respond to other enquiries from you, to process your orders and, if applicable, to carry out a credit or compliance check), insofar as you contact us as a (potential) customer or (potential) supplier outside our website/online shop (e.g. by post, fax or via other communication channels).

    The data processed, the legal basis and the storage period are organised in exactly the same way as described in the relevant information in sections 2.2 and 2.4 of this privacy policy.

    4. Social Media

    In addition to our website and online shop, we also maintain company pages (company profiles) on various social media providers (see the social media providers listed in section 4.2) in order to communicate with customers, interested parties and job applicants who are active there and to inform them about our products and services and our job vacancies.

    4.1 Icons on our website or online shop

    In this context, we only use simple links on our website or online shop for the integrated icons of the social media providers, and those icons do not establish a connection to the social media platform when loading the website or online shop. The social media links and icons used here differ in this respect from the commonly used “Like” buttons, which transmit data to social media providers when a website is loaded without even having to click on the button.

    4.2  Processing of your data when visiting our company pages

    (a) YouTube, Xing and Twitter

    If you visit our company’s pages on YouTube, Xing or Twitter directly or by clicking on the media link and use the contact options provided there (including a comment function), your personal data will be processed by us there to the extent specified in sections 2.2 and 2.3.

    In addition, your personal data collected via the social media provider's own website (our company page) will also be transmitted to the social media platform provider and processed by that provider. It is likely that the social media provider will also process additional information as well as store the data specifically entered by you on this social media platform. If you are logged into your personal user account of the specific network while visiting such a social media platform, the social media platform can assign the visit to your account. If you do not want them to make this assignment, you need to log out of your account before visiting our company website and possibly delete the cookies. For further information on the purpose and scope of data processing there and on the further processing and use of your data, please refer to the data protection terms of the relevant social media provider:

    YouTube

    YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

    Privacy policy: https://policies.google.com/privacy?hl=en&gl=de

    Xing

    Xing is operated by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany.

    Privacy policy: https://privacy.xing.com/en/privacy-policy

    Twitter

    Twitter is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland.

    Privacy policy: https://twitter.com/en/privacy

     

    Finally, YouTube and Twitter give us access to “statistical data” (in particular: YouTube: the number of visitors to our company page, the scope of interactions, the average duration of video playbacks, the number of daily active users, access sources, demographic data (information about which countries and cities our visitors come from and statistics on the gender ratio of our visitors); Twitter: the number of visitors to our company page, the scope of interactions, which are generated by the social media providers from the personal data they themselves collect and make available to us in anonymised form. It is not possible for us to draw conclusions about individual users or have access to individual users.

    We do not receive any access to statistical data from Xing.

    (b) Facebook, Instagram and LinkedIn

    If you visit one of our company pages on Facebook, Instagram or LinkedIn by clicking on the media link or directly and use the contact options provided there (including a comment function), your personal data will also be processed by us to the extent specified in sections 2.2 and 2.3.

    The processing by us is carried out on the basis of a balancing of interests in accordance with Article 6(1)(f) GDPR. By processing personal data, we are pursuing the interest of providing visitors and users with a contemporary range of information and interaction options on our company pages.

    We are jointly responsible for these company pages with Facebook, Instagram and LinkedIn within the meaning of the GDPR. As the (jointly) responsible party for these company pages, we have entered into agreements with Facebook, Instagram and LinkedIn which regulate, among other things, the conditions for using the company page. When you visit our company pages on Facebook, Instagram or LinkedIn, the respective social media providers process personal data from you. Some of the personal data collected and processed when you use our company pages is made available to us in aggregated form via “insights” (user statistics). The user statistics created (in particular: Facebook: the number of visitors to our company page, the amount of interactions (“Like” data, page subscribers, reactions to posts), information about videos (number of views, popularity of videos), demographic data (information about age group, gender, education level, profession; relationship status); Instagram: Activity information (reactions: Like/Hearts, comments, how content is shared or saved, how many people have accessed a profile in response to a story, clicks on links in a profile), demographic data; LinkedIn: posts (number of times a post was viewed, number of times a post and the company were clicked, likes, comments, shares), followers (whether organic or not, demographic data), visitors (how many times the same visitor, demographic data) are transmitted to us in anonymised form only. We have no access to the underlying data. More detailed information on data processing, especially with regard to user statistics, can be found in the agreements on data protection responsibility:

    For Facebook and Instagram:

    https://www.facebook.com/legal/terms/page_controller_addendum

    For LinkedIn:

    https://legal.linkedin.com/pages-joint-controller-addendum

    The extent to which the social media providers collect and process personal data is set out in the privacy statements in the links below. This means that we have no influence on whether Facebook, Instagram or LinkedIn transmit personal data to third parties. In particular, it is possible that personal data is processed outside the European Union by Facebook Inc, Instagram Inc or LinkedIn Inc based in the USA.

    Facebook

    Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

    Privacy policy: https://www.facebook.com/about/privacy/ 

    Instagram

    Instagram is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

    Privacy policy: https://help.instagram.com/519522125107875

    LinkedIn

    LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

    Privacy policy: https://www.linkedin.com/legal/privacy-policy 

    5. Other services integrated on the website

    We include videos on our websites with information about the ordering process, our products, the configuration of our products and for similar purposes. These videos are stored on our own server and can be played directly from our website or online shop.

    In order to make access to the videos technically possible and, if necessary, to be able to track security-related events, the relevant access data is automatically saved each time the videos are accessed.

    Depending on the browser used, the following data is collected:

    IP address of the requesting computer; date and time of the request; access method/function desired by the requesting computer; input values transmitted by the requesting computer (file name, etc.); access status of the web server (file transferred, file not found, command not executed); name of the requested file; URL from which the file was requested and/or the desired function was initiated.

    The data processing is carried out on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest is the presentation of our products and as a result the simplification of orders via our website or online shop

    The above data will be processed and, in particular, stored for as long as is necessary to achieve the purpose specified above. The data is usually stored until the end of your visit to our website or online shop. Depending on the type of browser you are using, there may be default settings activated that restore pages that you have previously visited and this allows data to be stored for longer.

    6. Recipients of personal data

    We share your personal information with the following recipients:

    6.1 We use contract processors for processing personal data for the purposes indicated. These process the personal data for us on our behalf. We retain control over the personal data in question and, as the controller, remain responsible for the data processing.

    6.2 To process payments for orders, we transmit payment details to banks or payment service providers if required by the payment method.

    6.3 If necessary, we transmit contact information to logistics companies in order to implement the transport of goods.

    6.4 In individual cases, we may share the personal data required for the order with our international representatives (other companies within the corporate group) at your request. If the European Commission has not issued a decision on adequacy for the respective third country outside the European Economic Area, this is done on the basis of Article 49(1)(b) GDPR.

    6.5 We transmit personal data in individual cases to courts, law enforcement agencies, supervisory authorities, other authorities, tax consultants and lawyers, provided this is legally permissible or required.

    7. Automated decisions

    We will not use your personal data to make automated decisions (including profiling) about you that will have a legal effect on you or a similar significant impairment for you.

    8. Your rights

    8.1 According to the legal regulations you have the following rights:

    • The right to information about your personal data: this enables you to obtain a copy of the personal data we process about you and to verify whether we process it lawfully;
    • The right to rectify the personal data that we process from you: this allows you to have incomplete or inaccurate data corrected;
    • The right to erase your personal data: this allows you to request that we delete or remove your personal data if we have no further reason to continue processing it;
    • The right to object to the processing of your personal data if processing is based on our legitimate interests (or those of a third party) and if your particular situation gives you grounds to object to the processing on this basis. In particular, you have a right to object if we process your data for direct marketing purposes;
    • The right to restrict the processing of your personal data: this allows you to request the suspension of processing your personal data, for example if you wish us to establish its accuracy or processing basis; and
    • Under certain circumstances, the right to have your personal data transmitted to another controller.

    8.2 If you have given us your consent for the processing of your personal data, you have the right to revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of the consent up to the time of revocation.

    8.3 You have the right to complain to a competent supervisory authority at any time.