General Privacy Information
Below, we provide information on how and on what basis we process your personal data, as well as the rights you are entitled to.
1. Who is responsible for data processing?
Janus GmbH & Co. KG
Organizational Development, Team Development, Personal Development
Mühlenweg 1, D-85653 Aying
Tel.: +49 8095 87 33 80
Email: team@janusteam.de
You can contact our Data Protection Officer at the following email address: dsb@janusteam.de
2. Purposes of Processing and Legal Basis
Your personal data is processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other relevant data protection regulations.
We process your data—some of which is personal—for the initiation, execution, and fulfillment of contractual relationships, for preparing quotes and issuing invoices, as well as for contacting you and providing information as part of customer service.
2.1 Consent (Art. 6(1)(a) GDPR)
If you have expressly granted us consent to process personal data in specific cases (e.g., newsletter subscription), such consent serves as the legal basis for the processing described therein. You may revoke your consent at any time with future effect.
2.2 Implementation of pre-contractual measures and fulfillment of contractual obligations (Art. 6(1)(b) GDPR)
We process your personal data to carry out measures and activities within the scope of pre-contractual relationships, in particular for contract negotiations. Furthermore, your personal data is processed to fulfill our contracts with you, particularly in the context of order processing and the use of our services.
2.3 Compliance with legal obligations (Art. 6(1)(c) GDPR)
We process your personal data to the extent that this is legally required to fulfill commercial and tax law retention obligations or otherwise based on legal provisions (e.g., under the Money Laundering Act).
2.4 Protection of our legitimate interests or those of a third party (Art. 6(1)(f) GDPR)
We may also process your personal data based on a balancing of interests to protect our legitimate interests or those of a third party. This is done for the following purposes:
- to compare data with European and international anti-terrorism lists, if this goes beyond our legal obligations;
- to further develop services and products as well as existing systems and processes;
- to obtain information and exchange data with credit bureaus, if this goes beyond our economic risk;
- to disclose personal data as part of due diligence (list of obligations), e.g., in the case of company sales;
- to enrich our data through the research and use of publicly available data;
- for statistical evaluations or market analyses;
- for benchmarking;
- for internal and external investigations and/or security checks;
- for the enforcement of our rights and the defense against unjustified claims in the event of a legal dispute with you.
3. Categories of personal data processed by us
The following categories of data are processed:
- Personal data (e.g., name, nationality, occupation/industry),
- Contact details (e.g., address, email address, phone number),
- Bank details (e.g., account number),
- Tax data (e.g., VAT ID number)
- Information about your financial situation (e.g., creditworthiness data),
- Registry data and other data from public sources (e.g., the Internet, media, press, commercial and association registries, population registries, debtor directories, land registries).
4. Who receives your data?
We share your personal data within our company with the departments that require this data to fulfill contractual and legal obligations or to pursue our legitimate interests.
In addition, the following entities may receive your data:
- processors engaged by us (Art. 28 GDPR) and service providers for support activities, e.g., in the areas of IT services, logistics and printing services, archiving, document processing, data destruction, purchasing/procurement, media technology, tax and auditing, courier services; Trainers/course instructors
- Public authorities and institutions where there is a legal or regulatory obligation requiring us to disclose data;
- Entities and institutions based on our legitimate interest or the legitimate interest of a third party for the purposes listed in Section 2.4 (e.g., authorities, credit bureaus, debt collection agencies, lawyers, courts, experts).
5. Transfer of Your Data to a Recipient in a Third Country or to an International Organization
Data transfers to third countries (countries outside the European Economic Area – EEA) only take place to the extent that this is necessary for the performance of the contract (e.g., payment orders), or you have given us your consent, or this is otherwise permitted by law. In this case, we take measures to ensure the protection of your data, for example through contractual provisions. We transfer data exclusively to recipients who ensure the protection of your data in accordance with the provisions of the GDPR regarding transfers to third countries (Articles 44–49 GDPR).
In this context, the processing of your data in a third country may also be related to the engagement of service providers within the scope of data processing on our behalf.
6. How long do we store your data?
To the extent necessary, we process your personal data for the duration of our contractual relationship with you.
In addition, we are subject to various retention and documentation obligations arising, among other things, from the legal framework. The retention and documentation periods specified therein extend up to ten years beyond the end of the contract.
Ultimately, the retention period is also determined by the statutory limitation periods, which, for example, pursuant to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but may extend up to thirty years in certain cases.
7. To what extent is automated decision-making used in individual cases (including profiling)?
We do not use purely automated decision-making processes pursuant to Article 22 of the GDPR. Should we use such processes in individual cases, we will inform you separately.
8. Scope of your obligations to provide us with your data and data origin
You are only required to provide the data necessary for entering into and performing a contractual relationship with us, or data that we are legally obligated to collect or are entitled to collect to safeguard legitimate interests.
If we request additional data from you, you will be separately informed that the provision of such information is voluntary. We generally collect the data directly from you. In the context of corporate seminars and training sessions, we may also have received your personal data from the training organizer.
9. Data Subject Rights
You have the right:
- pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and information regarding the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
- to request, pursuant to Article 16 of the GDPR, the immediate rectification of inaccurate personal data or the completion of your personal data stored by us;
- to request, pursuant to Article 17 of the GDPR, the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- to request, pursuant to Article 18 of the GDPR, the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;
- pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of such data to another controller;
- pursuant to Art. 7(3) GDPR, to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.
If you wish to exercise any of these rights, please contact us or, if applicable, our Data Protection Officer.
Information about your right to object under Article 21 of the GDPRYou have the right to object to the processing of your personal data that is carried out on the basis of Article 6(1)(f) of the GDPR (data processing to safeguard legitimate interests) or Article 6(1)(e) of the GDPR (data processing for tasks in the public interest). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. Information about your right to withdraw consent under Article 7(3) of the GDPRTo the extent that we process your personal data for specific purposes based on your consent, you have the right under Article 7(3) of the GDPR to withdraw your consent at any time. Upon receipt of your withdrawal, we will cease processing the data for the purposes for which you granted us consent. The lawfulness of the processing prior to receipt of your withdrawal remains unaffected. Please note that the withdrawal takes effect only for the future. Processing that took place prior to the withdrawal is not affected. Objection to Processing for Direct Marketing PurposesIn the case of data processing for direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing, as well as to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The revocation/objection may be made in any form and should preferably be addressed to: Janus GmbH & Co. KG, Organizational Development, Team Development, Personal Development, Mühlenweg 1, D-85653 Aying
10. Your Right to Lodge a Complaint with the Competent Supervisory Authority
You have the right to lodge a complaint with the data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR). The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Phone: +49 (0) 981 180093-0, Email: poststelle@lda.bayern.de
Changes to this Privacy Policy
We revise this Privacy Policy in the event of changes to data processing or for other reasons that make this necessary. You can always find the current version on our website at https://www.janusteam.de/datenschutz.