Privacy Policy
We inform you according to the legal requirements of data protection law (in particular according to BDSG n.F. and the European Data Protection Regulation “DS-GVO”) about the nature, scope and purpose of processing personal data by our company. This privacy policy also applies to our websites and social media profiles. Regarding the definition of terms such as “personal data” or “processing,” we refer to Art. 4 DS-GVO.
Name and contact details of the responsible party
Our responsible party (hereinafter “Responsible Party”) within the meaning of Art. 4 Para. 7 DS-GVO is:
JollyVolt GmbH
Josef-Fischhaber-Str. 49c
82319 Starnberg
Managing Directors: Dr. Susanne Koblitz, Ian Murdoch
Email: info@jollyvolt.com
Data types, processing purposes and categories of affected persons
1. Types of data we process
Usage data (access times, visited websites, etc.), inventory data (name, address, etc.), contact data (telephone number, email, fax, etc.).
2. Purposes of processing (Art. 13 Para. 1 c) DS-GVO)
Processing of contact inquiries.
3. Categories of affected persons (Art. 13 Para. 1 e) DS-GVO)
Visitors/users of the website, collectively referred to as “users.”
Legal bases for processing personal data
Where we have obtained your consent, Art. 6 Para. 1 S. 1 lit. a) DS-GVO is the legal basis. Where processing is necessary for the performance of a contract or pre-contractual measures, lit. b) applies. Where processing is necessary to comply with a legal obligation, lit. c) applies. Where processing protects vital interests, lit. d) applies. Where processing is necessary to protect our or a third party’s legitimate interests and your interests do not outweigh these, lit. f) applies.
Sharing personal data with third parties and data processors
As a rule, we do not share data with third parties without your consent. Where this occurs, it is based on the legal bases mentioned above, for example when sharing data with payment providers for contract performance or pursuant to a court order. We also employ carefully selected data processors (e.g. for web hosting) under data processing agreements pursuant to Art. 28 DS-GVO, which we monitor regularly.
Data transmission to third countries
Your data is primarily processed by companies subject to the DS-GVO. Should processing by third-party services outside the EU/EEA occur, these must meet the requirements of Art. 44 et seq. DS-GVO, such as an EU Commission adequacy decision or Standard Contractual Clauses. Where we obtain your express consent for transmission to the USA pursuant to Art. 49 Para. 1 S. 1 lit. a) DS-GVO, we point out the risk of access by US authorities.
Deletion of data and storage duration
Unless stated otherwise in this policy, your personal data is deleted or blocked once the consent for processing is revoked or the purpose for storage ceases, unless further retention is required for evidentiary purposes or by statutory retention obligations (e.g. § 257 HGB — 6 years; § 147 AO — 10 years).
Automated decision-making
We do not employ automated decision-making or profiling.
Website provision and log files
If you use our website for informational purposes only, we collect the personal data transmitted by your browser to our server, including: IP address; internet service provider; date and time of access; browser type, language and version; content of the access; time zone; HTTP status code; data volume; referring websites; operating system. This data serves the user-friendly, functional and secure delivery of our website as well as its optimisation and statistical evaluation. The legal basis is our legitimate interest pursuant to Art. 6 Para. 1 S. 1 lit. f) DS-GVO. For security reasons this data is stored in server log files for 90 days and then automatically deleted.
Contact via form / email
When you contact us via the contact form or email, your information is processed to handle your inquiry. The legal basis is Art. 6 Para. 1 S. 1 lit. a) DS-GVO where consent is present, otherwise lit. f) (and lit. b) where contact aims at contract conclusion). We may store your information in a CRM system. Data is deleted once it is no longer necessary, i.e. when the conversation ends, subject to statutory retention obligations. You may revoke your consent at any time.
Google Analytics
We have integrated Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google sets a cookie to analyse your website usage; we have enabled IP anonymisation (“anonymizeIP”), so IP addresses are only processed in shortened form within the EU/EEA. The legal basis is your consent (Art. 6 Para. 1 S. 1 lit. a) DS-GVO) and/or our legitimate interest (lit. f)). You can prevent cookies via your browser settings or install the opt-out plugin at tools.google.com/dlpage/gaoptout. See also Google’s Privacy Policy.
Presence in social media
We maintain profiles in social media. When you access our profile, the data protection notices and terms of the respective network apply. Data within social networks is typically processed for market research and advertising. The legal basis is our legitimate interest (Art. 6 Para. 1 S. 1 lit. f) DS-GVO) or your consent (lit. a) in conjunction with Art. 7). For LinkedIn, see the LinkedIn Privacy Policy.
Rights of the affected person
You have the right to withdraw consent (Art. 7 Para. 3), to object to processing based on legitimate interests (Art. 21), and in particular to object to processing for advertising and data analysis at any time and free of charge. You also have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to lodge a complaint with a supervisory authority. To exercise these rights, contact JollyVolt GmbH, Josef-Fischhaber-Str. 49c, 82319 Starnberg, info@jollyvolt.com.
Data security
We have implemented appropriate technical and organisational security measures. All data between your browser and our server is encrypted and transmitted via a secure SSL/TLS connection.
Status: 06.05.2024