Our privacy policy

1. Introduction

We are very pleased about your interest in our company. Data protection is of particular importance for the management of Jena Business development (Wirtschaftsförderungsgesellschaft Jena mbH). If you contact us electronically, by telephone or in person or if you wish to use our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek your consent.
Jena Business development works as a municipal company of the city of Jena according to §2 of the Thuringian community and county council (Thüringer Kommunalordnung - ThürKO, January 28, 2003) for the interests of business and industry.
The processing of personal data is carried out in accordance with the requirements of the EU Data Protection (EUDATAP) and in accordance with the country-specific data protection provisions applicable to Jena Business Development. By means of this privacy policy, we inform the public about the nature, scope and purpose of the personal data processed by us. Furthermore, you will be informed about your rights by means of this privacy policy.

2.       Definitions

The privacy policy of Jena Business Development is based on the terminology used by the European directive and regulatory authority in the adoption of the EU Data Protection (EUDATAP). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.

We use the following terms in this privacy policy, including but not limited to:

    a) Personal data

    Personal data is any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

    b) Person concerned

    The person concerned is any identified or identifiable natural person whose personal data is processed by the controller.

    c) Processing

    Processing means any process or series of operations related to personal data, such as collecting, recording, organizing, ranging, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

    d) Restriction of processing

    Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.

    e) Profiling

    Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.

f) Pseudonymisation

    Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

    g) Person in Charge or Person in Charge of data processing

    The person in charge or person in charge of data processing is the natural or legal person, public authority, institution  or other body that, alone or in conjointly with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

    h) Processor

    The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

    i) Recipient

    Recipient is a natural or legal person, agency, agency or other entity to whom personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as recipients.

    j) Third Parties

    Third parties are natural or legal persons, public authorities, institutions or bodies other than the data subject, the controllers, the processors and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.

    k) Consent

    Consent is any voluntarily given and unambiguously expressed act in the form of a statement or other unambiguous confirmatory expressed act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.

3. Rights of the person concerned

Each person concerned has the following rights, as granted to the controller by the European Regulatory and Regulatory Agency:
- right to information,
- right to rectification,
- right to cancellation,
- right to restriction of processing,
- Right to object to the processing and
- Right to data portability.
 

4.        Automated decisions on a case-by-case basis, including profiling

Any person concerned by the processing of personal data shall have the right, as granted by the European legislature and the legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or the performance of a contract between the person concerned and the person responsible or (2) it takes place with the explicit consent of the data subject, Jena Business Development shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision.
If the data subject wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time.

5. Processing of personal data in the CRM system (customer database) of Jena Business Development

When contacting us (for example, by contact form, e-mail, telephone or via social media) the information of the user to process the contact request and its processing in accordance with. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System ("CRM System") or comparable request organization. The following data can be stored:
• Address data
• contact details (e-mail, telephone, fax)
• Name / First name / Salutation / Title / Title in the company
• affiliation to industry and competence fields
• Memberships in working groups, which are supervised by the WFG
• Information on activities that have been carried out for the person concerned or together with her (delivery of materials, company visit, invitation to event, etc.)
Your data will be stored in our CRM system for as long as necessary to conduct our business relationship. We check the necessity every two years; Furthermore, the legal archiving obligations apply.

6. Events

With your binding event registration, you consent to the processing of personal data relating to you for the purpose of conducting the event and publishing your name, first name, title and your company. We process your data to create participant lists and name tags (name, first name, title, company name, location). We only process your data for as long as is necessary for the preparation and execution of the event. On request, we will delete your data without delay, unless legal retention requirements speak against it.
At our events may be made photo, sound and film recordings that are published in various media. If you do not agree in individual cases with the publication of the material, we ask for immediate notification before the start of the event.

7. General data and information on the use of our website

Jena Business Development has implemented numerous technical and organizational measures as data controller to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps so that absolute protection can not be guaranteed. For this reason, you are free to submit personal data to us in alternative ways.

7.1. Collection of general data and information

The website of the Jena Business Development collects a series of general data and information with each access to the website by you or an automated system. This general data and information is stored in the log files of the server. Can be detected

(1) used browser types and versions,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system comes to our website (so-called referrers),
(4) the sub-web pages, which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an internet protocol address (IP address),
(7) the internet service provider of the accessing system and
(8) other similar data and information used in the event of attacks on our information technology systems.

7.1.1. survey purposes

The Jena Business Development does not draw any conclusions about the use of this general data and information. Rather, this information is needed to
(1) to deliver the contents of our website correctly,
(2) to optimize the content of our website as well as the advertising for it,
(3) to ensure the permanent functioning of our information technology systems and the technology of our website as well as
(4) To provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack.
This anonymously collected data and information are therefore statistically and further evaluated by the Jena Business Development with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.

7.1.2. Cancellation and blocking

We process and store your personal data only for the period required to achieve the purpose of the storage or as provided for by the European directives and regulations or any other legislator in laws or regulations which the controller is subject to.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
 

7.1.3. Record keeping

According to Art. 17 (3) GDPR, there is no obligation to delete, as far as a legal obligation - in particular a legal retention period - precludes. Retention periods may be e.g. from Section 257 of the German Commercial Code (HGB) or Section 147 of the German Tax Code (AO).

7.2. cookies

The websites of Jena Business Development use cookies. Cookies are text files that are stored and stored on a computer system via an Internet browser.

7.2.1. Use of cookies

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual's browser from other internet browsers that contain other cookies. A particular web browser can be recognized and identified by the unique cookie ID.
Through the use of cookies, Jena Business Development can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.
By means of a cookie the information and offers on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies need not reenter their credentials each time they visit the website, as this is done by the website and the cookie stored on the user's computer system.

7.2.2. Deactivation of cookies

The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

7.3. Newsletter

With our newsletter we inform you about current developments at the economic and scientific location Jena and point to events.

7.3.1. Consent

With your consent, you can subscribe to our newsletter. The newsletter topics are named in the declaration of consent.

7.3.2. Registration

To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data.
The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a DS-GMO.
We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. It is the rapidmail GmbH prohibited to use your data for purposes other than sending the newsletter. A passing on or a sale of your data is not allowed to rapidmail GmbH. rapidmail is a German, certified newsletter software provider, which was carefully selected according to the requirements of the DSGVO and the BDSG.

7.3.3. Revocation

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to unsubscribe.jenawirtschaft@jena.de or by sending a message to the contact details stated in the imprint.

7.4. Web Analytics: Use of Matomo

On this website, using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Mataomo") based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 para. 1 lit. f DSGVO data collected and stored.

7.4.1. Cookies

For the evaluation of this data, cookies (more details in section 6.2.) Are stored on your computer. You can adjust the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website to the full extent. The prevention of the storage of cookies is possible through the setting in your browser. Preventing the use of Matomo is possible by removing the following checkmark to enable the opt-out plug-in: