/Privacy Policy
Privacy Policy2022-07-23T20:44:07+00:00

Privacy Policy


 We appreciate your interest in our website.

The protection of your privacy is very important to us. Below we inform you about what data we collect when using our website at www.emeraldjaaz.com (hereinafter also “website”) and in the use of the services offered there for what purpose and what we use this data. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The use of our website is usually possible without providing personal information. As far as on our sides personal data (for example name, address or email addresses) are raised, this takes place, as far as possible, always on a voluntary basis. These data will not be disclosed to third parties without your explicit consent.

Please note that data transmission over the Internet (for example, when communicating via email) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.

The protection of your personal data and your privacy is very important to us. We comply with the provisions of the European General Data Protection Regulation (GDPR).


1. Controller and Contact Information

Controller within the meaning of the GDPR is the operator of the website www.emeraldjaaz.com:

Emerald Jaaz GmbH (the “Provider”), represented by Jarmila Zářická,
Zum Apothekerhof 2,
60594 Frankfurt am Main, Germany

If you have any questions regarding data protection or if you wish to exercise rights or claims regarding your personal data, please contact us at jz@emeraldjaaz.com.


2. Encryption

Our website uses TLS encryption for security reasons and to protect the transmission of data that you send to us as site operator. You can recognize the encrypted connection in the address line of your browser by the “https: //” browser line and the lock symbol located there.

When TLS encryption is enabled, the data that you send to us can not be read by third parties.


3. Definitions

a) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

b) ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

c) ‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

d) ‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

e) ‘controller‘ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

f) ‘processor’ means a natural or legal person, public authority, body or body which processes personal data on behalf of the controller.


4. Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies:

The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR.


5. Purpose of Processing

  • Providing the online offer, its functions and contents;
  • execution of contracts;
  • answering contact requests and communicating with users;
  • safety measures;
  • audience measurement / marketing.


6. Data Collection, Processing and Use of Personal Data

a) Automatically collected data

When visiting the page www.emeraldjaaz.com the web server records on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f GDPR automatically called log files. These data include the

  • browser type and version;
  • used operating system;
  • referrer URL (the previously visited page);
  • IP address of the requesting computer;
  • access date and time of the server request and
  • the file request of the client (file name and URL).

These data are collected and stored for a period of 7 days only for the purpose of statistical analysis and for security purposes (for example, to investigate abusive or fraudulent activities). After that they will be deleted. If longer retention of the data is required for evidential purposes, they shall be exempted from the cancellation until final clarification of the incident.

b) Registration

You can browse the website of www.emeraldjaaz.com without having to provide personal data yourself.

When you register to use the full offer of www.emeraldjaaz.com, we collect, process and use the personal data provided by you in accordance with Art. 6 (1) lit. b GDPR for the fulfillment of our contractual obligations and services. In form fields, the information we need for the services you require is marked as mandatory; other information is voluntary.

For the conclusion and processing of contracts and the provision of our services, we collect and store the following data:

  • Inventory data (e.g., names, addresses);
  • contact information (e.g., email, telephone numbers);
  • content data (e.g., text input, photographs, videos);
  • usage data (e.g., websites visited, access times);
  • meta / communication data (e.g., device information, IP addresses).

In addition we process

  • contract data (e.g., subject matter, term, customer category);
  • payment details (e.g., bank details, payment history)

from our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

c) Use of a contact form

When using our contact form, we collect your email address and your name on the basis of Art. 6 para. 1 lit. b) GDPR for the fulfillment of (pre) contractual obligations or implementation of measures. These personal data that you provide us in the context of this contact request are only needed to answer your request and are used for the associated technical administration. The transfer to third parties does not take place.

If you have given us your consent to the storage of your data, you have the right to revoke your consent with effect for the future at any time. In this case your personal data will be deleted immediately.

Your personal data will also be deleted without your revocation if we have processed your request or if you revoke the consent given here for storage. This also happens if the storage is inadmissible for other legal reasons.

d) Contact by email

You can also contact us directly via our email adress jz@emeraldjaaz.com. In this case, we save on the basis of our legitimate interests in accordance with Art. 6 (1) lit. f GDPR or to fulfill (pre) contractual obligations or implementation of measures pursuant to Art. 6 (1) lit. b GDPR your email address and your email. This personal data, which you provide us by getting in contact with us, is only needed to answer your inquiry or contacting and is used for the associated technical administration.

The transfer to third parties does not take place.

Your personal data will also be deleted without your revocation, if we have processed your request or you revoke a given consent for storage. This also happens if the storage is inadmissible for other legal reasons.

e) Newsletter

We will inform you by email at your request regularly about the current price development and other interesting offers from our product and service range. The registration is voluntary and takes place via the so-called ‘double opt-in procedure‘. After registering you will receive an email requesting confirmation of your registration. This is necessary so that no third party can log in with a foreign email address. In order to be able to prove the registration in accordance with the legal requirements, the registration date, the confirmation time and the IP address are logged based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

During the registration you consent to the processing of the specified data for sending and/or receiving emails (Article 6 (1) lit. a GDPR). You also agree that data about your usage behavior (namely opening and clicking links in the e-mail) are collected and processed by us in order to tailor the content of the mailings to your needs. For example, if you click on x-topic links multiple times but not on y, you’ll only get links to x in future mailings.


7. Disclosure of Personal Data to Third Parties and Data Processors

a) A transfer of your personal data takes place in accordance with Art. 6 (1) lit. b GDPR, if this is necessary for the execution and fulfillment of contractual obligations. In these cases, we strictly comply with the requirements of data protection laws. The amount of data transmission is limited to the minimum (e.g., name, address). Our contractual partners may only use the data transmitted in this way to fulfill the contract.

b) Furthermore, we provide data only on the basis of your express consent (Article 6 (1) lit. a GDPR), if provided by law (Article 6 (1) lit. c GDPR) or on the basis of our legitimate interests (Article 6 (1) lit. f GDPR), e.g. with the use of agents, webhosters, etc.).

Hosting services are used to provide infrastructure and platform services, computing capacity, storage and database services, security and technical maintenance services. We, or our hosting provider, process inventory data, contact information, content data, contract data, usage data, meta and communication data of customers, prospects and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to Art. 6 (1) lit. f GDPR. The processing of data by a processor is governed by a contract or other legal act under the Union or Member State law according to Art. 28 GDPR.

c) If we process data in a third country, i.e. outside the European Union (EU) or the European Economic Area (EEA) or in the context of the use of third party services or disclosure, or transmission of data to third parties, this is done only if it fulfills our (pre) contractual obligations (Art. 6 (1) lit. b GDPR), on the basis of your consent (Art. 6 (1) lit. a GDPR), due to a legal obligation (Art. 6 (1) lit. c GDPR) or on the basis of our legitimate interests (Art. 6 (1) lit. f GDPR). Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. The processing is done e.g. on the basis of specific guarantees, such as international agreements for an appropriate level of data protection (e.g. for the USA through the ‘Privacy Shield Agreement’) or in compliance with officially recognized specific contractual obligations (so-called “standard contractual clauses”).


8. Cookies

In order to make the use of the website more user-friendly and effective, we store ourselves or by a third party commissioned by us on the hard disk of the customer so-called cookies.

“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart in an online shop or a login status are saved. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status could be saved if users visit a shop after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A “third-party cookie” refers to cookies that are offered by providers other than the person who manages the online offer (otherwise, if it is only their cookies, this is called “first-party cookies”).

If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The complete exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be found in a variety of services, especially in the case of tracking, via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/ be explained.

Furthermore, the storage of cookies can be achieved by switching them off in the settings of the browser. Please note that not all features of this online offer may be used then.


9. Use of Web Analytics Tools

Based on our legitimate interests within the meaning of Art. 6 (1) lit. f GDPR we use tools or plugins for web analysis to optimize our online presence and in order to be able to put together more tailored offers for you. For this cookies are used, the IP address forwarded and / or different types of data recorded and evaluated. These include, for example, the number of website visitors, visit duration, average page load time, origin of the visitors.

This website uses Google Analytics, a web analysis service provided by Google Inc. (www.google.de). Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if you activate the IP anonymization on this website, your IP address will be previously reduced by Google within Member States of the European Union or in other signatory states to the European Economic Area Agreement. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services associated with website use and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from Google’s processing of this data by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout

For more information, see

http://www.google.com/intl/de/analytics/privacyoverview.html
(general information about Google Analytics and privacy).

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law.(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).


10. Use of YouTube

We have integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to freely watch video clips and other users for free viewing, rating and commenting. YouTube allows the publication of all types of videos, so that both complete film and television broadcasts, but also music videos, trailers or user-made videos via the Internet portal are available.

Provider of this service is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Each visit to one of the pages of our website that has integrated a YouTube component (YouTube video) automatically causes your internet browser to connect to a YouTube server to download the specific content from YouTube. More information about YouTube can be found at

https://www.youtube.com/yt/about/en/

As part of this technical process, YouTube and Google are aware of the specific site visited by the data subject. If the data subject is logged in to YouTube at the same time, YouTube recognizes by calling a sub-page containing a YouTube video, which specific bottom of our website the affected person visits. This information is collected by YouTube and Google and associated with the individual YouTube account.

YouTube and Google will always receive information through the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube at the time of access to our website; this happens regardless of whether the person clicks on a YouTube video or not. If such transfer of this information to YouTube and Google is not wanted by the data subject, you may prevent the transfer by logging out of their YouTube account before calling our website.

YouTube’s privacy policy, which gives more information about the collection, processing and use of personal data, is available at

https://www.google.com/intl/en/policies/privacy/


11. Use of Social Plugins

Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of article 6 (1) lit. f. GDPR), we use so-called social plugins (“plugins”).

a) LinkedIn

Our website uses features of the LinkedIn network. Provider is the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you click on the LinkedIn “Share-Button” (plug-in), you will  forwarded in a separate browser window to LinkedIn. If you are logged into your user account at LinkedIn you will be forwarded directly to your user account. The plugin establishes a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our website with your IP address. In addition, LinkedIn will be able to associate your visit to our website with you and your user account. We point out that we have no knowledge of the transmitted (personal) data and their use by LinkedIn.

For more information, see the LinkedIn privacy statement at:
https://www.linkedin.com/legal/privacy-policy

b) Instagram

Within our online offer functions and contents of the service Instagram can be integrated. Provider of the Instagram service is Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. This can be, e.g. content such as images, videos, or text and buttons that users use to promote their content, subscribe to the creators of content, or subscribe to our posts.

If the users are members of the platform Instagram, Instagram/Facebook can assign contents and functions to the profiles of the users there.

Privacy Statement of Instagram:
http://instagram.com/about/legal/privacy/

c) Facebook

We use the plugin of the social network facebook.com. This is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins can be interaction elements or content (eg videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white “f” on blue tile, the terms “Like”, or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook social plugins can be viewed here:

https://developers.facebook.com/docs/plugins/

When a user invokes a feature of this online offering that contains such a plugin, a direct connection is established with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by it into the online offer. In the process, user profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore we inform the users according to our knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the “Like” button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users, can be found in the privacy policy of Facebook:

https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other settings and inconsistencies regarding the use of data for promotional purposes are possible within the Facebook profile settings:

https://www.facebook.com/settings?tab=ads

or via the US website

http://www.aboutads.info/choices/

or via the EU-website

http://www.youronlinechoices.com/.

Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law.
(https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).


12. Links to Other Websites

Please note that our pages may contain links to websites of third parties, to which this privacy policy does not extend. We do not control what data third parties collect or what they will do with it.In this respect, we refer to the privacy policy of the respective provider.


13. Your Rights

For your rights and further questions on the subject of personal data, you can contact us at any time under the contact details mentioned above under no. 1.

You have the following rights:

a) Right of access by the data object

You have the right at any time to request free information about your personal data being processed, their origin and recipient or categories of recipients, the purpose of the data processing, the planned duration of the data storage and a copy of the personal data that is the object of the processing (Art. 15 GDPR).

b) Right to rectification

You have the right at any time to obtain from the controller the rectification of inaccurate personal data immediately or the completion of incomplete personal data concerning you (Art. 16 GDPR).

c) Right to withdraw consent

You have the right to withdraw your consent to data processing at any time and with effect for the future, without the need for withdrawel reasons (Art. 7 (3) GDPR).

d) Right to erasure (‘right to be forgotten‘)

You have the right to have your personal data erased immediately if they are no longer necessary for the purposes for which they were collected or otherwise processed, or if you withdraw your consent to lawful processing and no other legal basis for storage exists. If you are object to the processing and there are no priority interests for processing, your data will also be deleted. Finally, the data are deleted if the processing is inadmissible for other legal reasons (Art. 17 GDPR).

e) Right to restriction of processing

You have the right to restrict the processing of your personal data for a period that allows us to verify the accuracy, provided that you contest the accuracy of your personal data.

A restriction also applies if the processing is unlawful, but you reject the deletion of your personal data and require a restriction of use instead of deletion, we no longer need your personal data for the purposes, but you to assert, exercise or defend Legal claims or you have objected to the processing, but it is not yet clear whether there are legitimate reasons for us for data storage that outweigh your interest (Article 18 GDPR).

f) Right to data portability

You have the right to receive your personal data concerning you in a structured, commonly used and machine – readable format and to transmit those data to another controller, provided the processing is based on consent and the processing is carried out by automated means (Art. 20 GDPR).

g) Right of object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR, including profiling based on those provisions. The personal date is no longer processed unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If your personal data are used for the purpose of direct marketing, you have the right to object to such processing at any time (Article 21 GDPR).

h) Right to complain

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR).


14. Data Deletion

We will immediately delete your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed or if you revoke your consent to lawful processing and no other legal basis for storage exists.

If the data is not deleted because it is necessary for other and legitimate purposes, its processing will be restricted. The data is blocked and not processed for other purposes. This includes e.g. for data that must be kept for commercial or tax reasons.