Privacy Policy

Controller

• Name of the Agency: ZJS WebWorks, Unternehmergesellschaft (haftungsbeschränkt)
• Address: Sudetenstraße 12B, 30559 Hanover, Germany
• Contact Details: +4915231383387, zerin@zjs-webworks.com or online@zjs-webworks.com
• Authorized Representative: Jens-Holger Maas (Managing Director)
• Data Protection Officer: Zerin Hebibović

General Information
This Privacy Policy informs you about the processing of personal data by our agency in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection regulations.
The use of our website is generally possible without providing personal data. Personal data will only be processed if necessary or if there is explicit consent.

Data Collected and Purposes of Processing

Automatic Data Collection When Visiting the Website

• Data Collected: IP address, browser type/version, operating system, referrer URL, hostname of the accessing computer, time of server request. Data is processed in an anonymized or pseudonymized manner whenever possible and is not combined with other data sources.
• Purpose: Ensuring the functionality of the website, analyzing user behavior (e.g., via cookies or tracking tools).
• Legal Basis: Art. 6(1)(f) GDPR (legitimate interests).

Server Log Files

• Data Collected: Browser used, operating system used, referrer URL, IP address, time of server request. This data is used solely to ensure the trouble-free operation of the site and to improve the offering.
• Purpose: Ensuring the functionality of the website, defending against and analyzing attacks.
• Legal Basis: Art. 6(1)(f) GDPR (legitimate interests).
• Storage Period: Data is retained for up to 60 days and then deleted.

Data Collected via Online Forms

• Data Collected: Name, email address, telephone number, message text. This data is not shared with third parties without explicit consent.
• Purpose: Handling inquiries and customer service.
• Legal Basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interests).

Data Collected for Applications

• Data Collected: Application documents (e.g., name, contact details, résumé, certificates). This data is treated confidentially and is used solely for the application process.
• Purpose: Conducting the application process.
• Storage Period: Up to 6 months after the conclusion of the application process, unless there is explicit consent for longer storage.
• Legal Basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Data Collected for Events and Functions

• Data Collected: Name, email address, and possibly other information for registration. This data is deleted after the event concludes, unless legal retention periods apply.
• Purpose: Organizing and conducting the event.
• Legal Basis: Art. 6(1)(b) GDPR.

Data Collected for Newsletter Subscription

• Data Collected: Email address, and possibly name.
• Purpose: Sending information and marketing materials.
• Legal Basis: Consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent to receive the newsletter at any time.

Data for Advertising or Analysis

• Data Collected: Information about user behavior (e.g., via tracking tools like Google Analytics).
• Purpose: Analyzing user behavior to optimize offerings.
• Data is anonymized; opt-out options are available.

Disclosure of Data

• Categories of Recipients: IT service providers, hosting providers, marketing service providers.
• Data Transfer to Third Countries: If data is processed outside the EU/EEA, this occurs only under appropriate safeguards (e.g., standard contractual clauses).

Cookies and Similar Technologies
Our website uses cookies:

• Technically Necessary Cookies: Required for operating the website.
• Statistics Cookies: Used to analyze user behavior.
• Marketing Cookies: Used for personalized advertising.
• Cookie Banner Notice: You can adjust your settings at any time via our cookie banner.
• You can disable cookies in your browser settings. However, not accepting cookies may limit some functionality of the website.

Note on Cookies: Cookies are small text files stored on your computer’s hard drive. The session cookies we use are temporary and expire automatically when you close your browser. Most internet browsers allow you to block the storage of cookies. If you do not consent to the cookies we use, please disable them in your browser settings.

Data Subject Rights
You have the following rights:

• Right of Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)
• Right to Withdraw Consent (Art. 7(3) GDPR)
• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

The competent supervisory authority for our company is:
Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hanover, Germany.

Storage Period

• The storage period is determined by the applicable statutory retention periods and the specific purpose of data processing.
• Data is deleted as soon as it is no longer required for the stated purpose.

Security

• We use technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
• These measures include encryption technologies, access restrictions, and regular reviews of our security procedures.

Links to Third Parties

• Our website may contain links to external sites. We have no control over the content or data protection practices of these third-party providers.
• We recommend reviewing the privacy policies of any such third-party providers.

Changes to This Privacy Policy