privacy

Data protection declaration according to the requirements of the GDPR

1. Responsible body for data protection and data protection officer

The person responsible is:

JoeWP | Lisbon Office
Rua Correia Teles, 28 A
1350-100 – Lisbon
contact[at]joewp.com
Web: joewp.com

If you have any questions about data protection, please contact our data protection officer:

JoeWP | Lisbon Office
Rua Correia Teles, 28 A
1350-100 – Lisbon
contact[at]joewp.com
Web: joewp.com

2. Legal basis

The basis for the collection and processing of personal data is always the latest European law. You can find all of the following legal bases in the General Data Protection Regulation (GDPR). Depending on the purpose of the data collection, one or more of the following legal bases apply:
– Consent – Basis: Article 6 (1) (a) of the General Data Protection Regulation (GDPR). – Consent – Basis: Article 6 (1) (a) of the General Data Protection Regulation (GDPR). Consent can either be given in writing in the form of a declaration or with some other clear confirmatory action. Regardless of this, consent must always be voluntary! In addition, it must apply to a very specific case and clearly state that the data subject consents to the processing of their personal data. To do this, the data subject must be adequately informed and understand the consent.

– Necessity to fulfill the contract or to carry out preparatory measures – Basis: Article 6 Paragraph 1 lit. b GDPR. What is meant by this: The data is either required so that we can fulfill our contractual obligations towards you or we need the data to prepare a contract with you.
– Processing to fulfill legal obligations – Basis: Article 6 Paragraph 1 lit c GDPR. What is meant by this: We are required to process the data, e.g. due to a law or other (state / official) regulations.
– Processing to safeguard legitimate interests in accordance with Article 6 Paragraph 1 lit. f GDPR. What is meant by this: The processing of the data is necessary in order to safeguard legitimate interests on our part or third parties, unless your interests or fundamental rights and freedoms that require the protection of personal data outweigh this.


3. Rights of data subjects

You are the data subject when it comes to your personal data. You are therefore entitled to the following rights with regard to data processing by us – to the extent specified in the respective articles of the General Data Protection Regulation:
– Right to information according to Art. 15 GDPR
– Right to rectification in accordance with Art. 16 GDPR
– Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
– Right to restriction of processing in accordance with Art. 18 GDPR
– Right to data portability in accordance with Art. 20 GDPR
– the right of objection in accordance with Art. 21 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data Data violates the GDPR.


4. Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data in order to conclude or fulfill a contract.


5. Concrete data processing

5.1 Data processing on our website

5.1.1 Customer account / use of your email address

When you visit our website, our web server collects and stores the following data:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– content of the request (specific page)
– Access status / HTTP status code
– Amount of data transferred in each case
– Website from which the request comes so-called referrer
– Browser
– Operating system and its interface
– Language and version of the browser software
– screen resolution
– Unique device names (MAC addresses or, for mobile devices, the IMEI)

The IP address and the host name are only available to us in anonymized form in the log files. The other data is stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. f GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the functionality of our website and its availability.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be saved for the duration of the session.

The data is stored to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Duration of storage

The log files are deleted from the system after 6 weeks at the latest. If there is a need to keep the data for the aforementioned purpose due to specific events, further storage is possible. In any case, as already mentioned, the IP addresses of the users are anonymized so that they can no longer be assigned to a specific user.

Opposition and removal option

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.


5.1.2 Customer account

You have the option of registering on our website and creating a customer account.

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

You give your consent by voluntarily creating a customer account.

Purpose of data processing

In order to protect your customer account against access by third parties, we save your user name and password. An evaluation of the data for marketing purposes does not take place in this context.

Duration of storage

We save your data as long as your customer account exists. Any further storage is possible as long as it concerns commercial letters that are subject to retention under commercial and tax law. The statutory retention period then applies.

Opposition and removal option

You have the option to delete your customer account at any time.


5.1.3 Orders

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. b GDPR.

Purpose of data processing

In order to be able to deliver the order as requested, we save your contact data, your order and payment information. We can also use your e-mail address to inform you about your credit card that is about to expire, failed payments or for other reasons necessary for the execution of the contract.

Duration of storage

Orders are commercial letters that are subject to retention under commercial and tax law. The respective statutory retention period applies.

Opposition and removal option

A deletion can only take place if there is no legal retention period; in this case, however, the data will be blocked for other use.


5.1.4 Payment for your order

Your payment data will be transmitted to the corresponding payment service provider depending on the payment method you have selected. The payment service provider is responsible for your payment data. Information, in particular about the responsible office of the respective payment service provider, the contact details of the data protection officer of the payment service provider and the categories of personal data processed by the payment service providers, can be obtained from the following addresses:

– PayPal (Europe) S.à.r.l. et Cie., Luxembourg, data protection declaration: www.paypal.com/de/webapps/mpp/ua/privacy-full


5.2 Contacting JoeWP

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. f und ggfs. also lit. a GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in answering a customer request or answering a contact request on other topics.

Purpose of data processing

You can use the contact form, our e-mail address or telephone number to ask us questions and send us messages. In this context, we only process your data in order to contact you in the desired way and to answer your request.

Duration of storage

The data will be stored for as long as is necessary to process the request. Insofar as these are commercial letters that are required to be retained under commercial and tax law, they will also be stored for the statutory retention period.

Opposition and removal option

The contact seeker has the option at any time to revoke his consent to the processing of personal data or to object to further use. If the contact seeker contacts us by e-mail, he can object to the storage of his personal data at any time. A deletion can only take place if there is no legal retention period; in this case, however, the data will be blocked for other use. In such a case, the conversation cannot be continued.


5.3 Participation in competitions

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a uand ggfs. also lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the implementation of the respective competition.

Purpose of data processing

If you take part in one of our competitions, we collect data that is necessary for the execution of the competition. These are usually an individual competition entry (e.g. a comment or a photo), as well as your name and contact details. It is possible that we transfer this data to our competition partners, e.g. to send you the prize. Data processing and data transfer can vary depending on the competition and is therefore specifically described in the respective conditions of participation. Participation in the competition and the associated data collection is of course voluntary.

Duration of storage

We save your data as long as it is necessary to carry out the competition. Any further storage is possible as long as it concerns commercial letters that are subject to retention under commercial and tax law. The statutory retention period then applies.

Opposition and removal option

A deletion can only take place if there is no legal retention period; in this case, however, the data will be blocked for other use.


5.4 Newsletter

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

Purpose of data processing

Advertising information will only be sent to your e-mail address as part of our newsletter if you are an existing customer and have consented to the use of your e-mail address for these purposes.

In addition, we save the IP address you used and the time of your registration and confirmation. This enables us to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

Duration of storage

We save your data as long as you have registered for the newsletter. Any further storage will only take place if there are additional statutory retention periods. In this case, your data will be blocked from sending newsletters.

Opposition and removal option

You can revoke your consent to the sending of newsletters at any time, either by clicking on the unsubscribe link in the newsletter, by updating the communication settings in your customer account, or by sending us a message to contact@joewp.com with the subject “Unsubscribe from newsletter”.


5.5. Social Media Plug-Ins: Facebook, Google+

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Article 6 Section. 1 lit. f GDPR.

Purpose of data processing

We have integrated social media plugins on our blog, which you can use to share certain content via social networks. In order to protect your privacy, we offer you these social plugins as so-called “2-click buttons”. The “2-click solution” prevents data (e.g. your IP address) from being transmitted to social networks when you open our website. For this purpose, the buttons are deactivated by default and are only activated when the social plugins are clicked for the first time.

After activation, the plugins also collect personal data such as your IP address and send this to the server of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website concerned is accessed. In this way, the providers can also create profiles of your usage behavior. The data is used to show you personalized advertising and for the purposes of market and opinion research.

Duration of storage

We do not store your data directly ourselves. Our system only sets cookies that save whether or not you have activated a social plugin.

Opposition and removal option

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned to your existing account with the plug-in provider. We do not have any precise information about the specific use of the data or the storage period. Please read the data protection declaration of the respective provider.

We have integrated the plugins of the following providers on our website:

– Facebook (Facebook Inc., USA, data protection declaration: www.facebook.com/policy.php)

– Google+ (Google Inc., USA; privacy policy:www.google.com/policies/privacy/partners/?hl=de)


6. Cookies

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

Cookies are small text files that are stored on your computer when you visit our website and that allow your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or the entries you made there. This avoids having to re-enter all required data each time you use it. Cookies also enable us to recognize your preferences and to tailor our website to your areas of interest.

JoeWP uses cookies with the help of which pseudonymous user profiles are created in compliance with the legal requirements, but also to make the use of our website as optimal as possible. We can evaluate the usage profiles in order to understand the use of our website, to determine target groups for our products and thus to optimize our offers. If we create pseudonymous usage profiles, we do not directly associate this data with you and therefore cannot trace any specific activities back to you.

We use the “Borlabs” cookie consent tool to manage the various cookies. Here you have the option of agreeing or disagreeing with the use of cookies.

Duration of storage

The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.

Opposition and removal option

With the exception of the essential cookies, which are necessary to display the website, you can object to the activation of cookies at any time for the future. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen ändern”/]

6.1 Google Analytics, Google Conversion Tracking

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Article 6 Para. 1 lit. f GDPR.

Purpose of data processing

Our website uses Google Analytics, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics enables us to evaluate your use of the website in order to compile analyzes of website activity and to make use of other services related to website activity and internet usage. You can find more information on terms of use and data protection at www.google.com/analytics/terms/de.html or at www.google.de/intl/de/policies/.

In addition, we use the Google Conversion Tracking service in connection with Google Analytics. This enables us to record the behavior of our website visitors. For example, we can see how often the contact form has been filled out. We are also shown how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) have led to our website.

Duration of storage

The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.

Opposition and removal option

You can object to the activation of Google Analytics at any time for the future after you have given your consent via the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen ändern”/]

6.2 Facebook

6.2.1 Custom Audience Pixel

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

This website uses Custom Audience Pixel, a service provided by Facebook Inc., USA. Custom Audience Pixel is a Java script code that we have integrated on each of our websites. We use Custom Audience pixels to collect information about the way visitors use our website. This pixel collects and reports to Facebook information about the user’s browser session, a hash value of the Facebook ID and the URL that is being viewed. Every Facebook user has a unique and device-independent Facebook ID, which enables us to address and recognize users across multiple devices on the Facebook social network, so that we can address our visitors again for advertising purposes in the context of Facebook ads .

For more information about Facebook and its privacy settings, please refer to the data protection information and the terms of use of Facebook Inc.

Duration of storage

After 180 days, the user information is deleted until the user visits our website again. No personal information is therefore disclosed to Relaxound about the individual website visitors and we can only advertise website target groups to customers as soon as they have reached a significant number in terms of numbers.

Opposition and removal option

You can object to the activation of Custom Audience Pixel at any time after you have given your consent using the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.

[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Einstellungen ändern”/]

6.2.2 Custom Audience List Procedure

Legal basis

The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

In order to only be able to show our customers relevant advertising measures, we use Facebook Custom Audience (list procedure). We send pseudonymized email addresses to Facebook. The email addresses are encrypted before they are sent to Facebook, i.e. a hash value (a combination of different letters and numbers) is formed from the email addresses. Facebook can compare these hash values with the corresponding hash values of the email addresses of Facebook users. In this way, it is determined which customers are also Facebook users, and targeted advertising can be displayed or not displayed on the Facebook platform. You can find more information about Facebook Custom Audiences at www.facebook.com/legal/terms/customaudience.

Duration of storage

The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.

Opposition and removal option

You can object to the activation of Custom Audience list procedures at any time after you have given your consent via the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.Change cookie settings

7.0 Use of Jitsi Meet video conference

We do not save any information about you or your video chats – the nginx-based web server is configured so that it does not write any log files:

LOGS

access_log off;
error_log off;

Video chats
The open source software Jitsi Meet is used to transmit video and audio signals within video chats. On the basis of WebRTC, data or media streams are transmitted in encrypted form via Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). However, WebRTC does not (yet) offer the option of encrypting video chats with several people end-to-end. This means: the video chat is encrypted on the transport route or in the network, but on the video chat server that hosts Jitsi Meet, all data traffic is decrypted and can therefore be viewed by the operator.

As the operator, however, we do not save any information about you or the video chats. Nothing is logged or saved / recorded. If you do not have us as the operator, you also have the option of hosting your own Jitsi Meet instance.

Logfiles Video chat
Jitsi Meet is delivered with the logging level INFO as standard, Jitsi Meet is delivered with the logging level INFO as standard. In this mode, the video bridge records the IP addresses of the participants. Since we do not want to collect and save this information, we have set the logging level to WARNING.

nano /etc/jitsi/videobridge/logging.properties
.level=WARNING

STUN / TURN-Server
The STUN protocol recognizes clients that are e.g. are behind a router or firewall and have a NAT address. With the help of the STUN server, NAT clients can find out their public IP address and are then able to establish a direct communication link between (two) participants. In order to avoid the transmission of the IP address to external providers, the Jitsi instance uses a STUN / TURN server that is operated by us.

Legal notice

This privacy policy was drawn up on the basis of provisions of various legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this website, if not stated otherwise within this document.

Last updated: January 11, 2021