Privacy Policy

Privacy policy

The requirements of the EU General Data Protection Regulation (hereinafter referred to as GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (compare Articles 13 and 14 GDPR). If you have any questions or comments about this privacy policy, you can send them at any time to the following e-mail address: datenschutz@jebsen-jessen.de

Table of Contents:

Overview

In this section of the privacy policy, you will find information on the scope of application, the controller, its data protection officer and data security.

Scope of application

Data processing by Jebsen & Jessen Trading Solutions GmbH and its subsidiaries can essentially be divided into two categories:

- For the purpose of contract processing, all data required for the performance of a contract with Jebsen & Jessen Trading Solutions GmbH will be processed. If external service providers are also involved in the processing of the contract, your data will be passed on to them to the extent necessary in each case.
- When you access the Jebsen & Jessen Trading Solutions website/application, various pieces of information are exchanged between your terminal device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimize our website.

This data protection declaration applies to the following offers:
- our online offer available at jj-tradingsolutions.com
- whenever otherwise referred to this privacy statement from one of our offers (e.g. websites, subdomains, mobile applications, web services or integrations in third-party sites), regardless of the way you access or use it.
All these offers are also referred to collectively as "services".

Controller

The controller of data processing - i.e. the person who decides on the purposes and means of the processing of personal data - in connection with the services is
Jebsen & Jessen (GmbH & Co.) KG
Rödingsmarkt 16
20459 Hamburg
E-mail: datenschutz@jebsen-jessen.de

Data protection officer

You can contact our data protection officer as follows:
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
D-22589 Hamburg
anfragen@dsextern.de

Data security

In order to develop the measures required by Article 32 of the GDPR and thus achieve a level of protection appropriate to the risk, we have established an information security standard in our company.

Data processing in detail

In this section of the privacy policy, we inform you in detail about the processing of personal data within the scope of our services. For better clarity, we structure this information according to certain functionalities of our services. During the normal use of the services, different functionalities and thus also different processing operations may take effect one after the other or at the same time.

General information on data processing

Unless otherwise specified, the following applies to all processing operations described below:

No obligation to provide
There is neither a contractual nor a legal obligation to provide the personal data. You are not obliged to provide data.

Consequences of non-provision
In the case of required data (data that is marked as mandatory when entered), failure to provide it will mean that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.

Consent
In various cases, you have the option of giving us your consent to further processing in connection with the processing described below (where applicable, for part of the data). In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes we pursue with these processing operations.

Transfer of personal data to third countries
If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated permissibility requirements. The permissibility requirements are regulated by Art. 44 -49 GDPR.

Hosting with external service providers
In individual cases, our data processing is carried out using so-called hosting service providers who provide us with storage space and processing capacity in their data centers and also process personal data on our behalf according to our instructions. These service providers either process data exclusively in the EU or we have guaranteed an appropriate level of data protection with the help of the EU standard data protection clauses.

Transmission to government authorities
We transfer personal data to government authorities (including law enforcement authorities) if this is necessary for the fulfillment of a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) GDPR) or if it is necessary for the assertion, exercise or defense of legal claims (legal basis Art. 6 para. 1 f) GDPR).

Storage period
We do not store your data longer than we need them for the respective processing purposes. If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their temporary storage is still necessary. Reasons for this may include, for example, the following: The fulfillment of retention obligations under commercial and tax law, or the preservation of evidence for legal disputes within the framework of the legal statute of limitations. It is also possible for us to continue to store your data with us if you have given your express consent for this.

Data categories
- Personal master data: Title, salutation/gender, first name, last name, date of birth.
- Address data: Street, house number, if necessary address additions, postal code, city, country
- Contact data: Telephone number(s), fax number(s), e-mail address(es)
- Access data: Date and time of the visit to our service; the page from which the accessing system accessed our site; pages called up during use; data for session
identification (session ID); in addition, the following information of the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information. - Application data: Curriculum vitae, references, proofs, work samples, certificates, pictures.

Accessing the website/application

Here we describe how we process your personal data when you access our services. In particular, we point out that the transmission of access data to external content providers is unavoidable due to the technical functioning of information transmission on the Internet.

Data protection information for applicants

We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you below with information on the processing of your personal data in connection with the application. All applications are processed by the HR department of Jebsen & Jessen Hamburg Group and the responsible HR Business Partner of the respective company.
Who is responsible for data processing?
The controller of applicant data processing is different from the controller of general data processing.
The joint data controllers within the meaning of data protection law are.
Jebsen & Jessen (GmbH & Co.) KG
Rödingsmarkt 16
20459 Hamburg
("Jebsen & Jessen")

and its subsidiaries themselves Address
Jebsen & Jessen Trading Solutions GmbH
Jebsen & Jessen Life Science GmbH
Jebsen & Jessen Chemicals GmbH
Jebagro GmbH
(each a "Jebsen & Jessen Subsidiary")
(Jebsen & Jessen and Jebsen & Jessen Subsidiaries together also "Jebsen & Jessen Group of Companies", "we", "us") You will find further information about our company, details of the persons authorized to represent it and also further contact options in our imprint on our website https://www.jebsen-jessen.de/en/impressum// and on the websites of the Jebsen & Jessen subsidiaries. Which of your personal data do we process? And for what purposes? We process personal data that you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process. This information includes, in particular, your contact details, the information contained in your CV and your references.

What is the legal basis for this?
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. In our application form on our website, you have the option of having CV data automatically extracted from documents or your profile on Xing.com or LinkedIn.com by a tool and transferred in structured form to the appropriate form fields (so-called "CV parsing"). The offer to you to use CV parsing serves the user-friendly design of the application process and is based on Section 26 (1) sentence 1 BDSG. The tool does not serve the purpose of screening applications. Any decision on the suitability of a candidate is made by one of our employees.
If you do not apply to us via the applicant management system, we will transfer your application into the system and also use CV parsing for this purpose to extract your data from the CV into the system. This processing is also based on Section 26 (1) sentence 1 of the BDSG and is necessary to carry out the application process effectively and securely.
If you apply for a specific position, you can consent to us reviewing your application for further employment opportunities in our company. This processing is based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to this at any time. The revocation of your consent does not affect the permissibility of the data processing carried out up to this point. Furthermore, you are free to consent to the inclusion of your application in our general applicant pool. We will then store your application on the basis of Art. 6 Para. 1 lit. a GDPR for newly opening positions. You can revoke your consent to this at any time. The revocation of your consent does not affect the permissibility of the data processing carried out up to this point. Should the data be required for legal prosecution after the application process has been completed, if applicable, data processing may be carried out on the basis of Art. 6 (1) lit. f GDPR for the purpose of safeguarding legitimate interests. Our legitimate interest then consists of the assertion or defense of claims.

How long will the data be stored?
Data of applicants will be deleted after 6 months in case of rejection. In the event that you have consented to your data being included in the applicant pool, your data will be deleted there after two years. If you are accepted as part of the application process and are hired, we will transfer your personal data from the applicant data system to our HR information system.

To which recipients will the data be forwarded?
After receipt of your application, your applicant data will be viewed by the personnel department at Jebsen & Jessen, which is responsible for all subsidiaries. In addition to the Jebsen & Jessen HR department, the relevant employees of the subsidiaries have access to those applications that relate to their subsidiary. As a matter of principle, only those persons have access to your data who require it for the proper conduct of our application process. We use specialized applicant management software from the provider d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg ("d.vinci") for the application process. D.vinci acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing agreement with this provider, which ensures that the data processing is carried out in a permissible manner. The provider of the CV parsing tool and to that extent our processor is Textkernel BV, Nieuwendammerkade 28/a17, 1022, Amsterdam, The Netherlands ("Textkernel"). Textkernel processes the received data immediately and sends it back after analysis without any storage by entering it into the form fields and displaying it to the user.

Where is the data processed?
The data is primarily processed in data centers within the Federal Republic of Germany and in some cases also in other EU or EEA countries.

Consent to the examination of further deployment options
I consent to Jebsen & Jessen considering my application not only for the selected position, but also for other employment opportunities within the company. I agree that other companies of the Jebsen & Jessen group of companies may have access to my personal data for this purpose. If my details include a picture and/or references to my ethnic origin, religion or health (e.g. skin color, headgear, glasses), my consent also relates to these details. My application will be deleted from the system after six months at the latest. This consent is voluntary. I can refuse it without giving reasons and without having to fear any disadvantages. I can also revoke this consent at any time in text form (e.g. letter, e-mail) and without giving reasons. In the event of revocation, my application will no longer be reviewed for further employment opportunities. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Consent to inclusion in the applicant pool
I agree that Jebsen & Jessen may include my application in the applicant pool of the Jebsen & Jessen Group of Companies. Applications in the applicant pool are considered on an ongoing basis for newly opening positions. I agree that my personal data may be repeatedly inspected by the personnel department for this purpose and, if suitable, that other companies of the Jebsen & Jessen group of companies may be granted access to my personal data. If my details include a picture and/or references to my ethnic origin, religion or health (e.g. skin color, headgear, glasses), my consent also relates to these details. My application will be deleted from the system after two years at the latest. This consent is voluntary. I can refuse it without giving reasons and without having to fear any disadvantages. I can also revoke this consent at any time in text form (e.g. letter, e-mail) and without giving reasons. In the event of revocation, my application will be deleted from the applicant pool. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Contact form

When contacting us, the user's details are processed for the purpose of handling the contact request and its processing pursuant to Art. 6 para. 1 lit. b., Art. 6 para. 1 lit. f. GDPR processed. The user's details may be stored in a customer relationship management system ("CRM system") or comparable request organization. We delete the inquiries if they are no longer necessary. We review the necessity every two years; Furthermore, the legal archiving obligations apply.

Tracking

In the following, we describe how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes. The description of the tracking methods also includes information on how you can prevent or object to the data processing. To generally agree to the tracking, to generally reject it or to set individual preferences, please use the consent management tool, which is displayed to you at the beginning of the website visit and is permanently available by pressing the button displayed at the bottom of the screen. Please note that the so-called "opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new end device or in a different browser, or if you have deleted the cookies set by your browser, you must declare the rejection again. The tracking methods presented process personal data only in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.
Purposes of the processing
The analysis of user behavior by means of tracking helps us to check the effectiveness of our services, to optimize them and adapt them to the needs of users, and to correct errors. It also serves to statistically determine key data on the use of our services (reach, intensity of use, user surfing behavior) on the basis of uniform standard procedures and thus to obtain values that can be compared across the market. Tracking to measure the success of advertising campaigns serves to optimize our ads for the future and also to enable marketers and advertisers to optimize their ads accordingly. The purpose of tracking to optimize the display of advertising is to show users advertising tailored to their interests, to increase the success of advertising and thereby also to increase advertising revenues.
Legal basis of the processing
For services that make the behavior of data subjects on the Internet traceable and for the creation of user profiles, informed consent as defined by the GDPR is required.
The tracking methods used in detail

Reach measurement with Google Analytics
The following data is processed as part of the reach analysis: the type and version of browser you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, the time you spend on the website, and the external links you click. The IP address of users is anonymized before it is stored. Google Analytics uses cookies that are stored on the user's computer and that enable an analysis of the use of our online offer by the user. In the process, pseudonymous user profiles can be created from the processed data. The cookies have a storage period of one week. The information generated by the cookie about your use of this website is only stored on our server and is not passed on to third parties. Users can object to the anonymized data collection by Google Analytics at any time with effect for the future by clicking on the corresponding button in the consent management tool. In this case, a so-called opt-out cookie will be stored in their browser, with the result that Google Analytics will no longer collect any session data. If users delete their cookies, however, this has the consequence that the opt-out cookie is also deleted and must therefore be reactivated by the users. The logs with the users' data are deleted after 6 months at the latest. If we ask the users for consent (e.g. in the context of a cookie consent), the legal basis of this processing is Art. 6 para. 1 lit. a. GDPR. Otherwise, the users' personal data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) are processed.

e.) Consent to the use of cookies
Consent to the use of cookies. For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst. When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned. CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR). Data processing agreement We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR. Server log files Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us.
The following data is collected:
-Your consent status or the withdrawal of consent
-Your anonymised IP address
-Information about your Browser
-Information about your Device
-The date and time you have visited our website
-The webpage url where you saved or updated your consent preferences
-The approximate location of the user that saved their consent preference
-A universally unique identifier (UUID) of the website visitor that clicked the cookie banner.

Social Media-Plugins

This website may contain add-on programs (plugins) from social networks such as: Facebook, Google+, Twitter or Pinterest, which are operated by third parties and via which messages can be transmitted to the corresponding social network with the help of a button in order to rate, recommend or share content, for example. In doing so, we pursue the purpose and legitimate interest of making our Services better known. We configure our services so that data transmission only takes place when you click the button. The legal basis for the data transfer in this case is Art. 6 I f) GDPR. The respective provider is responsible for the data protection-compliant processing of the transmitted data.

Rights of the data subjects

Right to object

According to Art. 21 GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1).

Right of access by the data subject

You have the right to know whether personal data concerning you are processed by us, which personal data these are, if any, as well as further information according to Art. 15 GDPR.

Right to rectification

You have the right to demand that we correct any inaccurate personal data concerning you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

Right to erasure ("right to be forgotten")

You have the right to request that we delete personal data concerning you without undue delay, provided that one of the grounds set out in Article 17(1) of the GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17(3) of the GDPR.

Right to restriction of processing

You are entitled to request a restriction in the processing of your personal data if one of the conditions regulated in Art. 18(1) a) to d) GDPR is met.

Right to data portability

According to Art. 20 GDPR you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance by us or to obtain that a direct transfer is made by us, if this is technically possible. This shall always apply if the basis of the data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data held only in paper form.

Right of withdrawal in case of consent

Insofar as the processing is based on your consent, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of appeal

You have a right of appeal to a supervisory authority. This is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Tel. +4940 428 54 4040, E-Mail: mailbox@datenschutz.hamburg.de.

Amendment of this privacy policy

We reserve the right to change this Privacy Policy from time to time as we update our processes. Please visit this page regularly to review the most current privacy policy. This privacy policy was last updated on 05.06.2023.