1. Subject matter and scope
We take the protection of your personal data very seriously. This privacy notice explains what personal data we collect, how it is processed and for what purposes. We always process your personal data in accordance with statutory data protection regulations and this privacy notice.
2. Data controller
JetDrones GmbH
Terminalstraße Mitte 18
85356 München
E-Mail: info@jetdrones.ai
3. Data Protection Officer
Christian Schmoll
Rechtsanwalt, Fachanwalt IT-Recht
Kaiserplatz 2
80803 München
datenschutz@birkle-it.com
Any data subject may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.
4. Visiting the website
Every time you visit our website, our system automatically collects data and information from the computer system of the device used to access the site. In order for the pages to be displayed in your browser, the IP address of the device you are using must be processed. In addition, further information about your device’s browser is collected.
Under data protection law, we are obliged to ensure the confidentiality and integrity of the personal data processed by our IT systems. The data is also used to rectify errors on the website.
The following data is logged for these purposes:
IP address of the accessing computer
Operating system of the accessing computer
Browser version of the accessing computer
Name of the file accessed
Date and time of access
Amount of data transferred
Referring URL
This data is deleted after 7 days. Our website is hosted by a service provider on the basis of data processing on our behalf in accordance with Article 28 of the GDPR.
The legal basis for this data processing is Article 6(1)(f) of the GDPR. Our overriding legitimate interest is the operation of this website and the implementation of the data protection objectives of confidentiality, integrity and availability.
5. Contact and Customer Database
If you contact us to request information or a quote, the details you provide will be stored for the purpose of processing your enquiry.
Enquiries are stored in our CRM system. We may use this data for direct marketing purposes. You may object to such use for direct marketing at any time. Details of your right to object are set out below under ‘Right to object’.
The CRM system is regularly reviewed to determine whether data can be deleted. Should data no longer be required in the context of a customer or prospect relationship, or should the customer’s conflicting interest take precedence, we will delete the relevant data, provided that this does not conflict with any statutory retention obligations.
The legal basis for this storage and processing is Article 6(1)(f) of the GDPR. Our overriding legitimate interest in this regard is to maintain communication with our customers, prospective customers and suppliers, to nurture our customer relationships and to carry out direct marketing activities. If the purpose of establishing contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
6. Provision of Services (Customers and Suppliers)
We process the data of our customers, suppliers and service providers in connection with the performance of the relevant contractual services. In doing so, we may process master data (for example, the surname and first name of the contact person(s), address), contact details (for example, email address, telephone number), contractual data (for example, subject matter of the contract, term), payment data and data collected in the course of providing the service and/or required for the provision of the service.
The legal basis for this storage and processing is the performance of a contract or the implementation of pre-contractual measures in accordance with Article 6(1)(b) of the GDPR.
7. Cookies
Our website uses cookies. Cookies are pieces of information transferred from our web server—or third-party web servers—to your browser and stored there for later retrieval. Cookies may take the form of small files or other types of data storage. They store information related to the specific device being used. Cookies contain a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again. A cookie also contains information regarding its origin and storage duration. However, this does not mean that we gain direct knowledge of your identity through them. We use cookies to make our website more user-friendly. On the one hand, we use so-called session cookies, which are stored only for the duration of your visit to our website (e.g., to enable the storage of your shopping cart contents). A session cookie stores a randomly generated, unique identification number, known as a session ID. Session cookies are automatically deleted after you leave our website. In addition, we use temporary cookies that are stored on your device for a specific period (so-called first-party cookies). If you visit our site again, the system automatically recognizes that you have visited us before and recalls the inputs and settings you previously made, so you do not have to enter them again. We also use cookies for other purposes, such as web analytics. These cookies are also automatically deleted after a defined period. This usage is explained in further detail below. You have the option to prevent cookies from being set by adjusting your browser settings accordingly. However, please note that this may limit your ability to use our website. Cookies do not install or launch any programs or other applications on your computer. You may object to the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (https://optout.networkadvertising.org/) and, additionally, via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). The legal basis for the processing of personal data using cookies is Article 6(1)(f) of the GDPR. Our overriding legitimate interest lies in the operation, analysis, and optimization of our website and our customer interactions.
8. Google Analytics
We use web analytics services on our website (or parts thereof) to track how visitors use our site and to optimize the website and its presentation overall. We use the web analytics service Google Analytics with IP anonymization. Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Cookies are set as part of Google Analytics. Data is also transmitted to the USA. As part of the IP anonymization process, the IP addresses of our website visitors collected by Google are truncated within the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to Google in the USA and truncated there. The transmitted IP addresses are not combined with other data held by Google. You can prevent the storage of cookies by adjusting your browser settings accordingly. Furthermore, you can prevent Google from collecting data generated by the cookie regarding your use of the online service and from processing this data by downloading and installing the browser plugin available at the following link; this plugin informs Google Analytics via JavaScript that no data or information regarding website visits may be transmitted to Google Analytics: http://tools.google.com/dlpage/gaoptout?hl=de The use of Google Analytics involves the transmission of personal data to a third country outside the EU. Google holds a Privacy Shield certification, which can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, appropriate safeguards for data transmission are in place in accordance with Art. 46 GDPR. The legal basis for this data processing in the context of web analytics is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website and our customer interactions.
9. Google Maps
We use the Google Maps (API) service provided by Google Ireland Limited on our website. Google Maps enables the display of interactive maps. When you visit subpages of our website that utilize Google Maps, information regarding your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. The use of Google Maps involves the transfer of personal data to a third country outside the EU. Google holds Privacy Shield certification, which can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, appropriate safeguards for data transfer are in place in accordance with Art. 46 GDPR. Further information regarding data processing by Google can be found in Google’s privacy policy: https://www.google.com/policies/privacy. The legal basis for this data processing is Art. 6(1)(f) GDPR. Our overriding legitimate interest lies in the analysis, optimization, and economic operation of our website and our customer interactions.
10. Social Media Buttons
Social media buttons for the social networks Twitter, Xing, Instagram, and LinkedIn are integrated into our website. If you click on one of these social media buttons, you will be redirected to our pages on the respective social network. In this case, the provider of the respective social network receives information that your browser has accessed the corresponding page of our website, even if you do not have a profile on that social network or are not logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider. If you click a social media button and are either logged into the respective social network or subsequently log in on that network’s page, the transmitted information may be associated with your account on that social network. For information regarding the purpose and scope of data collection and processing by the providers of the respective social networks, provider details, contact information, and your rights and privacy settings, please consult the respective privacy policies of the social network providers. The legal basis for the integration and use of the social media buttons is Art. 6 (1) (f) GDPR. Our overriding legitimate interest lies in the marketing of our services and our website.
11. Social Media Pages (“Fan Pages”)
We maintain publicly accessible profiles on the social media networks Twitter, Xing, Instagram, and LinkedIn (“Social Media Pages” or “Fan Pages”). When you visit one of our Social Media Pages while logged into the respective social media network, the provider of that network may analyze your usage behavior, associate the information collected with your account on that network, and enrich your profile data there. Even if you are not logged in or do not have an account with the respective social media network, the provider may still collect personal data about you—such as your IP address or data gathered via cookies. The operators of these social media networks can create user profiles based on this data. Your user profile may then be used to display interest-based advertisements to you, both on the social media network’s own websites and on other websites. When you visit one of our Social Media Pages, we share responsibility with the social media network provider for the collection and processing of your personal data that takes place there. For information regarding the collection and processing of your personal data in this context, please refer to the privacy policy of the respective social media network. We do not possess any further information on this matter.
We are happy to provide you with information regarding the appropriate safeguards for data transfers to third countries pursuant to Art. 46 GDPR upon request at any time. You may exercise your rights as a data subject under Chapter III of the GDPR (right of access, rectification, erasure, restriction of processing, data portability, etc.) against both us and the provider of the respective social media network. In this context, please note that our ability to influence the processing of personal data and the implementation of data subject rights regarding our social media pages is limited to the options made available to us by the respective provider. The legal basis for our use of social media pages is Art. 6(1)(f) GDPR. Our overriding legitimate interest lies in maintaining an online presence and marketing our products and services. You can find Twitter’s privacy policy at https://twitter.com/de/privacy. You can find Xing’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung. You can find Instagram’s privacy policy at https://help.instagram.com/519522125107875. You can find LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy.
12. Use of Leadfeeder
Our website uses technologies provided by Dealfront (Liidio Oy, part of Dealfront Group GmbH) (“Dealfront”) to analyze visitor behavior. During this process, a visitor’s IP address is processed to help us understand which companies (B2B) are visiting our website. As part of this processing, the IP address is enriched with associated information, such as the company name or industry code. To this end, the website visitor’s IP address and corresponding session data are compared against an extensive whitelist of known companies at the start of the session. Any processing of personal data in this context is based on our legitimate interest (Art. 6(1)(f) GDPR) in optimizing our products, services, sales, and marketing activities. To prevent this processing, website visitors can install and configure ad blockers or use NoScript plugins in their browsers. The data is deleted as soon as it is no longer required for the intended purposes; however, statutory retention obligations may necessitate a longer retention period for the data in question. We have entered into a data processing agreement with Dealfront to ensure compliance with applicable data protection standards.
13. Fonts
To display the content of our website correctly and attractively across different browsers, we use font libraries on this site. Accessing these font libraries automatically triggers a connection to the library operator. In the process, the operator receives information indicating that the font required for our website has been accessed from your IP address. You can prevent the use of such libraries and the associated data transmission by installing a JavaScript blocker (e.g., www.noscript.net). We use Google Web Fonts provided by Google Ireland Limited (https://www.google.com/webfonts/). Using Google Web Fonts involves the transmission of data to the USA. Further information regarding data processing by Google can be found in Google’s privacy policy: https://www.google.com/policies/privacy. Google holds Privacy Shield certification, which can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Consequently, appropriate safeguards for data transmission are in place in accordance with Art. 46 GDPR.
The legal basis for this data processing is Article 6(1)(f) of the GDPR. Our overriding legitimate interest lies in the optimization and economic operation of our website and the customer interactions taking place via it.
14. Job Applications
We collect and process personal data from applicants for the purpose of managing the application process. If an applicant submits their application documents to us electronically, this processing is carried out electronically. If we enter into an employment contract with an applicant, the submitted data will be processed for the purpose of the employment relationship in compliance with statutory regulations. If no employment contract is concluded with the applicant, the application documents will be deleted immediately after the conclusion of the application process, unless deletion is precluded by an overriding legitimate interest—such as the defense against claims or the need to preserve evidence under the General Equal Treatment Act (AGG). The legal basis for this storage and processing is the performance of a contract or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
15. Age Restriction
This website is not intended or designed for use by children under the age of 16. We do not knowingly collect personal data from or about individuals under the age of 16.
16. Recipients of Data
Within our organization, your data is accessed by those internal departments or organizational units that require it to fulfill their tasks—whether to perform contracts with you, process data based on your consent, or safeguard our overriding legitimate interests. Data is disclosed to third parties only in compliance with legal requirements. We share your data with third parties only if, for example, this is necessary for contractual purposes pursuant to Art. 6(1)(b) GDPR, or to safeguard our overriding legitimate interest in the effective conduct of our business operations pursuant to Art. 6(1)(f) GDPR. When we engage service providers or third-party vendors to provide the website and/or our services, we implement appropriate legal safeguards as well as suitable technical and organizational measures to ensure the protection of your personal data. If we use content or tools from service providers or third-party vendors in the course of providing the website and/or our services, and their registered office is located in a third country, a data transfer to a third country generally takes place. “Third countries” are understood to be countries where the GDPR is not directly applicable law—i.e., countries outside the EU or the European Economic Area. Data is transmitted to third countries only if there is an adequate level of data protection, consent, or another legal basis for doing so—specifically, appropriate safeguards pursuant to Art. 46 GDPR. We may acquire or sell the company, parts of the company, or individual assets. Personal data may be transferred in connection with such a sale, merger, reorganization, or similar event. In such cases, your personal data will, of course, continue to be processed in accordance with this privacy information. The legal basis for such a transfer is our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR in the effective conduct and further development of our business operations.
17. Your Rights
You have the right to obtain information free of charge regarding your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to have this data corrected, blocked, or deleted. You also have the right to restrict processing and to object to processing. Furthermore, you have the right to have the data that we process by automated means handed over to you or to a third party in a common, machine-readable format. To exercise your rights, please contact us using the contact details provided above for the controller. You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht) (https://www.lda.bayern.de).
18. Revocation of Consent
Some data processing operations are only possible with your express consent. You may revoke consent you have already given at any time. An informal notification sent to us by email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation remains unaffected by the revocation.
19. Right to Object
Where your data is processed to safeguard our overriding legitimate interests, as explained in this privacy information, you may object to such processing with effect for the future. Please contact us using the contact details provided above. In principle, you are entitled to this right to object only if there are grounds arising from your particular situation (Art. 21(1) GDPR). Once you have exercised your right to object, your personal data will no longer be processed for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims. If the processing is carried out for direct marketing purposes, you may exercise your right to object in this regard at any time (Art. 21(2) GDPR); in such cases, your personal data will no longer be processed for direct marketing purposes, regardless of the reasons for the objection.
20. Obligation to provide data
The provision of personal data is neither required by law nor by contract, nor are you obliged to provide personal data; however, the provision of personal information is necessary for the conclusion and performance of the contract, insofar as certain details are mandatory for the purpose of concluding and performing a contract.
21. Automated decision-making
We do not engage in automated decision-making, including profiling.
22. Storage and deletion
We adhere to the principles of data avoidance and data minimization. We therefore store your personal data only for as long as is necessary to achieve the purposes stated herein or as required by statutory retention periods. If the purpose for storage ceases to apply or a statutory retention period expires, the personal data is routinely blocked or deleted in accordance with legal requirements.
23. Technical and organizational data security measures
We implement organizational, contractual, and technical security measures in accordance with the state of the art to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. 24. Amendments to this data protection information We reserve the right to amend this privacy policy from time to time to ensure it always complies with current legal requirements or to reflect changes to our services—for example, when introducing new services. The new privacy policy will apply to any subsequent visits.