PRIVACY POLICY

1) Introduction and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (DSGVO) is Eva-Elisabeth Schwarz, Im Schönblick 20, 74564 Crailsheim, Germany, Phone: Fon: +49 (0)7951 963 19 12, info(at)jagstheim. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2) Data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. In some cases, these cookies are automatically deleted after the browser is closed (so-called “session cookies”), in other cases, these cookies remain on your terminal device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract, according to Art. 6 para. 1 lit. a DSGVO in the case of granted consent or pursuant to Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of the use of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) Registration with the portal or forum

You can register on our website by providing personal data. Which personal data is processed for the registration can be seen from the input mask used for the registration. We use the so-called double-opt-in procedure for the registration, i.e. your registration is only completed if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory. You can provide all other information voluntarily by using our portal.

If you use our portal, we store your data required for the fulfillment of the contract, including any information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 para. 1 lit. f GDPR.

In addition, we store any content you publish (such as public posts, bulletin board entries, guestbook entries, etc.) in order to operate the website. We have a legitimate interest in providing the website with the full user-generated content. The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you delete your account, your public statements, especially in the forum, will remain visible to all readers, but your account will no longer be accessible. All other data will be deleted in this case.

6) Data processing for the handling of donations

For the processing of donations that you may send us, we usually process the following personal data: First and last name, address, e-mail address.

Your data will be stored by us together with the details of the donation amount, donation frequency and donation purpose and kept for ten years.

Depending on the selected payment method, the above data will also be forwarded to the payment service provider selected by you for the donation and processed there exclusively and only to the extent necessary to process your donation.

The above processing operations are carried out on the basis of Art. 6 para. 1 lit. b DSGVO and serve exclusively to properly execute your donation payment and record it for accounting purposes. The storage for a period of 10 years is based on Art. 6 para. 1 lit. c DSGVO in conjunction with § 147 AO, according to which we are subject to a corresponding obligation to retain information about the business transaction.

7) Comment function

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties by posting a comment or posts illegal content. We need your e-mail address to contact you if a third party objects to your published content as being illegal.

The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as being illegal.

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties by posting a comment or posts illegal content. We need your e-mail address to contact you if a third party objects to your published content as being illegal.

The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as being illegal.

The follow-up comments can be subscribed by you as a user. For this purpose, you will receive a confirmation e-mail to ensure that you are the owner of the specified e-mail address (double opt-in procedure). The legal basis for data processing in the case of subscription to comments is Art. 6 para. 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future. For more information on how to unsubscribe, please refer to the confirmation email.

8) Page functionalities

8.1 Facebook plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Only when you activate the plugins and thus in accordance with Art. 6 para. 1 lit. a DSGVO, your browser establishes a direct connection to the provider’s servers. Here, independent of a login into an existing user profile, information about your used end device (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and processed there if necessary.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc, USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.2 Instagram plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Only when you activate the plugins and thus in accordance with Art. 6 para. 1 lit. a DSGVO, your browser establishes a direct connection to the provider’s servers. Here, independent of a login into an existing user profile, information about your used end device (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and processed there if necessary.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred: Meta Platforms Inc., USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.3 LinkedIn plugins

Plugins of the social network of the following provider are used on our website: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Only when you activate the plugins and thus in accordance with Art. 6 para. 1 lit. a DSGVO, your browser establishes a direct connection to the provider’s servers. Here, independent of a login into an existing user profile, information about your used end device (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and processed there if necessary.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred to: LinkedIn Inc., USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.4 Twitter plugins

Plugins of the social network of the following provider are used on our website: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

These plugins allow direct interactions with content on the social network.

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Only when you activate the plugins and thus in accordance with Art. 6 para. 1 lit. a DSGVO, your browser establishes a direct connection to the provider’s servers. Here, independent of a login into an existing user profile, information about your used end device (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and processed there if necessary.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred to: Twitter Inc., USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.5 Xing plugins

The “XING Share Button” of the following provider is used on this website: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
When you access this website, your browser briefly establishes a connection to the provider’s servers, which are used to provide the “XING Share Button” functions (in particular the calculation/display of the counter value). The provider does not store any personal data, in particular IP addresses. There is also no evaluation of your usage behavior via the use of cookies in connection with the “XING Share button”.

8.6 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. In the process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not want the assignment to your account, you must log out before pressing the play button.

All of the aforementioned processing, in particular the setting of cookies for the reading of information on the end device used, will only take place if you have given us your express consent to do so in accordance with the German Data Protection Act. Art. 6 par. 1 lit. a DSGVO have given. You can revoke your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

9) Tools and other

9.1 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users on page access in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Further legal basis for the processing is furthermore Art. 6 para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

You can find more information about the operator and the setting options of the cookie consent tool directly in the corresponding user interface on our website.

9.2 Google Maps

This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. By using this service, you will be shown our location and it will be easier for you to find us.

Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to servers of Google and stored there, this can also lead to a transmission to the servers of Google LLC. come in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google’s legitimate interest in the display of personalized advertising, market research and/or the tailored design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, you also have the option to completely disable the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website can then not be used.

To the extent legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO obtained. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above to make an objection.

10) Rights of the data subject

10.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:

• Right to information according to Art. 15 DSGVO;
• Right to rectification pursuant to Art. 16 DSGVO;
• Right to erasure pursuant to Art. 17 DSGVO;
• Right to restriction of processing pursuant to Art. 18 DSGVO;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability according to Art. 20 DSGVO;
• Right to revoke consent given in accordance with Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO, the data concerned will be stored until you revoke your consent.

If there are legal retention periods for data that are required in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 Para. 1 lit. b DSGVO, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part to continue storing it.

When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object according to Art. 21 para. 1 DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object according to Art. 21 para. 2 GDPR exercise.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

12) iThemes Security

We have included iThemes Security on this website. The provider is iThemes Media LLC, 1720 South Kelly Avenue Edmond, OK 73013, USA (hereinafter “iThemes Security”).

iThemes Security is designed to protect our website from unwanted access or malicious cyberattacks. For this purpose, iThemes Security collects, among other things, your IP address, time and source of login attempts, and log data (e.g., the browser used). iThemes Security is installed locally on our servers.

iThemes Security transmits IP addresses of recurring attackers to a central database of iThemes in the USA (Network Brute Force Protection) to prevent such attacks in the future.

The use of iThemes Security is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website against cyberattacks as effectively as possible. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

13) Revocation, changes, corrections and updates

The user has the right to receive, upon request and free of charge, information about the personal data stored about him. In addition, the user has the right to correct incorrect data, blocking and deletion of his personal data, provided that this does not conflict with any legal obligation to retain data.

Cookie selection