Privacy policy

Data protection information
for website visitors, customers, suppliers, interested parties, applicants and other data subjects

With the following information, we would like to give you, as a visitor to our online offer, as a customer or interested party in our services, as a supplier, as an applicant or other data subject, an overview of the processing of your personal data by us and of your rights under data protection law. Which data is processed in detail and how it is used depends largely on the agreed services. Therefore, not all parts of this information will apply to you. 

1. responsible body and contact details of the data protection officer

Responsible for the processing of personal data within the framework of this website is:

Julius Zöllner GmbH & Co. KG
Kaullache 4
D-96328 Küps

Tel.: +49 (0) 9264 807 0
Web: https://www.julius-zoellner.de
E-Mail: info@julius-zoellner.de
(hereinafter referred to as the "Company" referred to)

You can reach our data protection officer at:

Julius Zöllner GmbH & Co. KG
- Data Protection Officer -
Kaullache 4
D-96328 Küps
info@julius-zoellner.de

2. processing of personal data in connection with your use of our websites, applications and online platforms

 Data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website

- Date and time at the time of access

- Amount of data sent in bytes

- Source/reference from which you reached the page

- Browser used

- Operating system used

- IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

Hosting

Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz.

Further processing on servers other than the aforementioned Shopify servers will only take place within the framework communicated below.

Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent given or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually whether to accept them or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

Integration of the Trusted Shops Trustbadge / other widgets

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings) and to offer Trusted Shops products to shoppers after they have placed an order.

This serves to protect our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which prevail in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany, with whom we are jointly responsible for data protection pursuant to Art. 26 DSGVO. Within the framework of this data protection notice, we inform you in the following about the essential contractual contents in accordance with Art. 26 (2) DSGVO.

The trust badge is provided within the framework of joint responsibility by a US CDN provider (content delivery network). An appropriate level of data protection is ensured by standard data protection clauses and further contractual measures. Further information on the data protection of Trusted Shops GmbH can be found in their data protection declaration.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call-up, transferred data volume and the requesting provider (access data) and documents the call-up. The IP address is anonymised immediately after collection so that the stored data cannot be assigned to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

After the order has been completed, your email address, which has been hashed using a cryptological one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you will subsequently be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 Para. 1 lit. f DSGVO for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA through standard data protection clauses and further contractual measures and in the case of Israel through an adequacy decision.

Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, please prefer to contact Trusted Shops GmbH with data protection questions and to assert your rights using the contact options specified in the data protection information linked above. Irrespective of this, however, you can always contact the data controller of your choice. Your enquiry will then, if necessary, be passed on to the other data controller for a response.

Contact

Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after your request has been processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Data processing when opening a customer account and for contract processing

Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part.

Data processing for order handling

In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b DSGVO.

Use of special service providers for order processing and handling

Shipcloud

Shipping is carried out via the shipping portal "shipcloud" (shipcloud GmbH, Lüdmoor 35a,
22175 Hamburg). In accordance with Art. 6 Para. 1 lit. b DSGVO, we pass on your data (name,
address and, if applicable, further information) to shipcloud exclusively for the purpose of
processing your online order. Data will only be passed on
to the extent that this is actually necessary for the processing.
Details on the data protection of shipcloud can be viewed on the website of shipcloud
under "shipcloud.io".

Use of payment service providers (payment services)

Apple Pay

If you choose the "Apple Pay" payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by charging a payment card deposited with "Apple Pay". Apple Pay uses security functions that are integrated into the hardware and software of your device to protect your transactions. To release a payment, you must enter a code that you have previously defined and verify it using the Face ID or Touch ID function on your device.

For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website from which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment.

Insofar as personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO.

Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate date and time, and whether the transaction was completed successfully. Anonymisation completely eliminates the possibility of any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorisation device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and deactivate "Allow payments on Mac".

Further information on data protection with Apple Pay can be found at the following Internet address: https://support.apple.com/de-de/HT203027

Google Pay

If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card deposited with Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than € 25, the prior unlocking of your mobile end device by the respective verification measure set up (such as facial recognition, password, fingerprint or pattern) is required.

For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the source website, which is used to verify a payment that has been made. This transaction number does not contain any information about the real payment data of your payment means deposited with Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the payment means deposited with Google Pay.

Insofar as personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO.

Google reserves the right to collect, store and analyse certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description provided by the merchant of the goods or services purchased, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of the legitimate interest in proper billing, the verification of transaction data and the optimisation and functional maintenance of the Google Pay service.

Google also reserves the right to merge the processed transaction data with further information that is collected and stored by Google when using other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection with Google Pay can be found at the following Internet address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Klarna

If you choose a Klarna payment service, the payment will be processed by Klarna Bank AB (publ)[https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first name and surname, street, house number, postcode, town, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be passed on to Klarna for the purpose of checking your identity and creditworthiness, provided that you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information received about the statistical probability of a payment default for a weighed decision about the establishment, implementation or termination of the contractual relationship.

You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the processing of payments in accordance with the contract.

Your personal data will be processed in accordance with the applicable data protection regulations and as specified in Klarna's Privacy Policy for Data Subjects Located in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

or for affected persons domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy .

Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

Shopify Payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of processing payments with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy.

You can find data protection information on Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy

IMMEDIATELY

If you select the payment method "SOFORT", the payment will be processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can obtain further information about SOFORT's data protection policy at the following Internet address: https://www.klarna.com/sofort/datenschutz.

Stripe

If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank sort code, any credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of processing payments with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.

Online marketing

Use of Google Ads Conversion Tracking

This website uses the online advertising programme "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across Google Ads clients' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f DSGVO. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.

You can obtain more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above for making an objection.

Web analytics services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In the process, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

All of the processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. Without this consent, Google Analytics will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

Tools and miscellaneous

beeclever

This website uses the cookie consent tool "GDPR Legal Cookie" of beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz a. Rh. to obtain effective user consent for cookies and cookie-based applications requiring consent. ("beeclever").

By integrating a corresponding JavaScript code, users are shown a banner when they access the page, in which they can give their consent to certain cookies and/or cookie-based applications by setting a check mark. The tool blocks the setting of all cookies that require consent until the respective user gives the corresponding consent by setting a checkmark. This ensures that such cookies are only set on the user's end device if consent has been granted.

In order for the cookie consent tool to be able to clearly assign page views to individual users and to individually record, log and store the consent settings made by the user for a session duration, certain user information (including the IP address) is collected by the cookie consent tool when our website is called up, transmitted to beeclever servers and stored there.

This data processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Further legal basis for the described data processing is furthermore Art. 6 para. 1 lit. c DSGVO. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Further information on data use by beeclever can be found at https://beeclever.de/pages/datenschutz.

Applications to job advertisements by e-mail

We advertise current vacancies on our website in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Inclusion in the application process requires that applicants provide us with all the personal data required for a sound and informed assessment and selection together with the application by e-mail.

The required information includes general information about the person (name, address, telephone or electronic contact) as well as performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labour and social law in the interest of social protection in the person of the applicant.

The components that an application must contain in order to be considered and the form in which these components are to be sent by e-mail can be found in the respective job advertisement.

After receipt of the application sent using the specified e-mail contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For queries arising in the course of processing, we use, at our discretion, either the e-mail address provided by the applicant with his/her application or a telephone number provided.

The legal basis for this processing, including contacting us for queries, is generally Art. 6 para. 1 lit. b DSGVO (for processing in Germany in conjunction with § 26 para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. DSGVO. DSGVO so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9(1)(h) GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his or her application prematurely, his or her data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months following notification. This period is measured on the basis of our legitimate interest in answering any follow-up questions about the application and, if necessary, to be able to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b DSGVO (for processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of implementing the employment relationship.

Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, you will be shown our location and it will be easier for you to find us.

Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you call up those sub-pages in which the Google Maps map is integrated; this information may also be transmitted to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

3. processing of personal data of business partners

Within the scope of the cooperation with business partners, the Company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter "Business Partner"):

• Contact information, such as first and last name, business address, business telephone number, business mobile number, business fax number and business email address,
• Payment data, such as information required to process payment transactions or prevent fraud, including credit card information and card verification numbers,
• other information whose processing is required in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, enquiries or details of projects,
• personal data collected from publicly available sources, information databases or credit bureaus; and
• to the extent legally required in the context of compliance screening: date of birth, ID and ID numbers, information on relevant court proceedings or other legal disputes involving business partners.

Personal data are also processed for the following purposes:

• Communication with business partners about products, services and projects, for example to process enquiries from the business partner or to provide technical information about products,
• Planning, execution and administration of the contractual business relationship, for example to process orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
• Implementation of marketing campaigns, market analyses, competitions, etc..,
• Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or harmful activity,
• Matching personal data with US sanctions lists under European Regulations 2580/2001 and 881/2002,
• Compliance with (i) legal requirements (e.g. tax and commercial retention obligations), (ii) existing compliance screening obligations (to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards; and
• Settling legal disputes, enforcing existing contracts and asserting, exercising and defending legal claims.

The processing of personal data is necessary to achieve the aforementioned purposes. Unless explicitly stated otherwise when collecting the personal data, the legal basis for the data processing is:

• the performance and fulfilment of a contract with you according to Art. 6 para. 1 lit. b DS-GVO,
• the fulfilment of legal obligations to which the company is subject pursuant to Art. 6 para. 1 lit. c DS-GVO, or
• the protection of legitimate interests according to Art. 6 para. 1 lit. f DS-GVO. The legitimate interest lies in the initiation, implementation and processing of the business relationship in the entrepreneurial traffic.

If you have expressly given your consent to the processing of your personal data in an individual case, this consent is the legal basis for the processing in accordance with Art. 6 (1) lit. a DS-GVO.

4. processing of personal data of applicants

a. Categories of data and purpose of data processing

As part of the application process, we generally process the following categories of personal data:

• Personal data (first and last name, date of birth, address, school-leaving qualification)
• Communication data (telephone number., mobile phone number, fax number, e-mail address)
• Data on assessment and evaluation in the application procedure
• Data on education (school, vocational training, civilian/ military service, studies, doctorate)
• Data on your professional career to date, training and work references
• Information on other qualifications (e.g. language skills, PC skills, voluntary work)
• Application photo
• Details of the desired salary
• Application history

Personal data that you provide to us as part of your application will be stored and used exclusively for the purpose of processing the application and, if necessary, for the implementation of the subsequent employment relationship.

b. Legal basis for the data processing

The processing of your personal data within the scope of the application procedure is based on Art. 6 para. 1 lit. b DS-GVO (establishment and execution of a contract) as well as § 26 para. 1 p. 1 BDSG.

c. Disclosure of data

Your data will be made available to the relevant staff in the HR department and the relevant staff or supervisors in the department(s) for the position for which you have applied. In the case of a speculative application, your documents will be made available to the relevant members of staff in the HR department and to the relevant members of staff or supervisors in the relevant specialist department(s) for which your application may be of interest.

Data will also be passed on if we are obliged to do so due to statutory provisions and/or official or court orders.

d. Transfer of personal data to third countries

A transfer to third countries is not planned.

e. Deletion periods for applicant data

If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for this storage is Art. 6 para. 1 lit. f DS-GVO. Our legal interest in this regard is the defence of any claims arising from the General Equal Treatment Act ("AGG“). In all other respects, the general deletion periods and notes under point 8 apply.

5. processing of personal data for customer satisfaction surveys and direct marketing

If you have given us your consent or if we are entitled to do so within the scope of existing customer relationships, your contact data will also be used for direct marketing purposes (such as invitations to trade fairs, newsletters) or to conduct customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right of objection in this regard, please write us an email at info@julius-zoellner.de or follow the corresponding instructions you received from us in any promotional email. The legal basis for the processing of your data for advertising purposes is Art. 6 para. 1 lit. f DS-GVO in the case of existing customer relationships or Art. 6 para. 1 lit. a DS-GVO if you have given us your consent.

6. social media

We use links ("Links") to the social networks Facebook, Google+, Instagram and YouTube in order to draw attention to our services and products and to get in touch with you as a visitor and user of these social media pages as well as our website.

You can recognise the links by the logo of the respective social network. When you click on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.

These are not so-called social plug-ins, where a connection and data transmission to the respective social network is already established when our website is called up. We would like to point out that you use the following services and their functions on your own responsibility. Furthermore, please note that when calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. In detail, these are the following third-party providers:

• Facebook , 1 Hacker Way, Menlo Park, California 94025, USA, privacy information at: https://de-de.facebook.com/policy.php
• Google+ of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy information at: https://policies.google.com/privacy?hl=de
• Instagram by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, privacy information at: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram Help Center&bc[1]=Privacyph%C3%A4re%20and%20Security
• YouTube of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy information at: https://policies.google.com/privacy?hl=de

7. recipients and categories of recipients

Within our company, those departments receive access to your data that need it to fulfil contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and integrity in particular. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting and sales and marketing.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. As a matter of principle, we may only pass on information about you if this is required by law, you have given your consent or we are authorised to provide information. Under these conditions, recipients of personal data may be:

• public bodies and institutions (e.g. tax authorities, prosecution authorities, family courts, land registry offices) if there is a legal or official obligation,
• Credit and financial services institutions or comparable institutions to which we transmit personal data in the course of carrying out the business relationship (e.g. banks, credit agencies),
• Creditors or insolvency administrators who enquire within the scope of a compulsory execution,
• Auditor,
• Service providers that we use within the framework of order processing relationships.

8. transmission to third countries

Data is transferred to bodies in countries outside the European Union (so-called third countries), insofar as

• it is necessary for the execution of your orders (e.g. delivery orders),
• it is required by law (e.g. reporting obligations under tax law) or
• you have given us your consent.

Furthermore, a transfer to bodies in third countries cannot be excluded in the following cases:

• to maintain and ensure the IT operation and IT security of the company as well as
• to combat money laundering, terrorist financing and other criminal acts.

9. storage period

We process and store your personal data as long as it is necessary for the fulfilment of our contractual obligations and the exercise of our rights.

If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their - temporary - further processing is necessary for the following purposes:

• Fulfilment of retention obligations under commercial and tax law from the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG). The retention and documentation periods specified there are generally two to ten years.
• preservation of evidence within the framework of the statutory limitation provisions. According to §§ 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

10. data security

Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical as well as organisational security measures to protect your personal data from loss, modification, destruction and from access by unauthorised persons or unauthorised disclosure. Our security measures are constantly being improved in line with technological developments.

11. data subject rights

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR.

With regard to the right to information and the right of deletion, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DS-GVO in conjunction with § 19 BDSG).

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018. Please note that the revocation only takes effect for the future.

You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out in particular on the basis of Article 6(1)(f) DS-GVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. In particular, this includes that the processing is necessary for the assertion, exercise or defence of legal claims.

In addition, you have the right not to be subject to fully automated decision-making in accordance with Art. 22 DS-GVO. As a matter of principle, we do not use fully automated decision-making for the establishment, implementation and termination of the business relationship. Should we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.

12. obligation to provide data

Within the scope of our business relationship, you must provide those personal contractual data that are necessary for the establishment, execution and termination of a business relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to conclude, execute and terminate a contract with you.

The same applies to the visit to our online offer and the collection of usage data. Without the collection of usage data, we and our service providers are not able to provide you with our online offer.

13 Profiling

We do not process your personal data in an automated way that produces legal effects against you or similarly significantly affects you.

14. up-to-dateness and changes of this privacy policy

This privacy policy is currently valid and has the status September 2021.