Privacy Policy
Data protection declaration
The controller within the meaning of the General Data Protection Regulation is
Kaufbei GmbH, Oeyenhauser Straße 54 in 32584 Löhne
Managing director: Andreas Grauer
E-Mail:info@jatut.eu
Telephone: + 49 (0) 5731 - 2451540
Data protection officer
With this data protection notice, we inform you (also referred to as "user" or "data subject" in the following text) about our data processing in connection with the use of our platform. We also inform you about your rights with regard to the processing of your data. The term "data processing" always refers to the processing of personal data. We attach great importance to the protection of your privacy and the security of your personal data. Please read this agreement carefully to understand how we handle your data.
1. general information on data processing
We collect and process your personal data:
- When you install our app.
- When you visit our website without being a member.
- When you contact us.
- When you take out a free or paid membership with us.
The provision of your personal data as part of the conclusion and existence of the contractual relationship with us is voluntary.
1.1 Categories of personal data
The following personal data is requested from you:
- Place of residence
- your gender
- Date of birth
- First name and surname
- Height, figure
- Marital status
- Number of children
- Educational qualifications
- Occupation
- Interests
- "About me"
- Who you are looking for
In order to provide our services, we also require further information from you, such as preferences, personal values, preferences, appearance and other characteristics relevant to the partner suggestions, which serve as the basis for creating your profile. You can also enter photos, which will then be published in your user profile.
All your profile data is visible to other registered users on the website and app. In particular, your first name and age are visible.
We store the communication of the members that takes place via our platform, as well as the communication with us. Communication between members when logged in is encrypted.
1.2 Recipients or categories of recipients of personal data
If, in the course of our processing, we disclose your personal data to other persons and companies such as processors or third parties, transfer it to them or otherwise grant them access to the data, this is done on the basis of a legal permission (e.g. if a transfer of the data to third parties pursuant to Art. 6 para. 1 lit. b GDPR is necessary for the fulfillment of the contract), if you have consented or if a legal obligation provides for this.
1.3 Duration of the storage of personal data
We store your data for as long as is necessary to provide our online offering and the associated services or for as long as we have a legitimate interest in continuing to store it. In all other cases, we delete your personal data with the exception of data that we must continue to store in order to fulfill contractual or statutory (e.g. tax or commercial law) retention periods.
We block data that is subject to a retention period until the period expires.
1.4 Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR, i.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
2. data processing
We process your personal data for the following purposes and on the basis of the legal bases listed below. If the data processing is based on the legal basis of a legitimate interest, we will also explain our legitimate interest in the data processing below:
- To provide the platform and thus to fulfill the services mentioned in the General Terms and Conditions. This includes in particular
- Provision of our website for non-registered users;
- Provision and use of our website and app for registered members;
- Providing a contact option and answering inquiries via the platform;
- To operate our website, apps and to provide telemedia services expressly requested by users (legal basis is Section 25 (2) No. 2 TTDSG).
The legal basis for processing is the fulfillment of the contract with you. In some cases, the legal basis is also your consent. The legal basis is also our legal obligation and legitimate interest.
2.1 Cookies/Technologies
The Systems may use cookies and similar technologies to analyze your usage, store user preferences and provide you with a personalized experience. By using the Systems, you consent to the use of such technologies. However, you have the option to control the use of cookies in your browser settings.
The legal basis for the use of necessary cookies is Art. 6 para. 1 lit. f GDPR.
2.2 Hosting
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating our website.
In doing so, we or our processor process inventory data, contact data, content data, contract data, usage data, meta and communication data on the basis of our legitimate interests in the efficient and secure provision of the range of services in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR. Art. 28 GDPR.
3. data processing
3.1 In the context of using the app
Each time the app is accessed by the user's device, we automatically collect data and information from the operating system of the accessing device. This also includes storing the IP address. Specifically, we collect the following user data:
Each time the app is accessed, usage data of the respective app user is stored. These data are
- The operating system used and, if applicable, the browser type
- Current language setting of the smartphone
- Information about the user's internet service provider
- IP address (internet protocol address) of the accessing computer
- Device ID (e.g. IDFA, IDFV, Google Advertising ID) to identify your device(s) as part of secure authentication
- Name of the page accessed and, if applicable, the originating page
- Date and time of access
- Amount of data transferred
- Status message on whether the retrieval was successful
The following usage data is stored in the so-called login data records each time you log into the network:
- Date and time of login
- User ID on the platform (e-mail address)
- IP address (Internet Protocol address)
3.2 When contacting us by email, contact form or telephone
You can contact us via the e-mail address or telephone number published on our website or via the contact form.
If you use this contact method, the data you provide (e.g. surname, first name, address, telephone number), together with any personal data you provide, will be stored for the purpose of contacting you and processing your request. The following data is also collected when you contact us:
- IP address of the accessing computer;
- Date and time of the email.
The legal basis for the processing of personal data in the context of emails sent to us/by telephone is Art. 6 para. 1 lit. b or lit. f GDPR.
4. your rights
As a data subject, you have the following rights in connection with the processing of your personal data:
4.1 Right to information
(1) As a data subject, you have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:
- a) the purposes of the processing;
- b) the categories of personal data being processed
- c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
- d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- f) the existence of the right to lodge a complaint with a supervisory authority
- g) where the personal data are not collected from the data subject, any available information as to their source
- h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(2) If personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
4.2 Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you as the data subject have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
4.3 Right to erasure
4.3.1 You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:
- a) your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- b) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR and there is no other legal basis for the processing.
- c) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 (2) GDPR.
- d) Your personal data has been processed unlawfully.
- e) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
- f) Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
4.3.2 If we have made the personal data public and we are obliged to delete it in accordance with 4.3.1, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that a data subject has requested them to delete all links to this personal data or copies or replications of this personal data.
4.3.3 Sections 4.3.1 and 4.3.2 do not apply if the processing is necessary
- a) for exercising the right of freedom of expression and information;
- b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- c) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h) and i) and Art. 9 para. 3 GDPR;
- d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- e) for the establishment, exercise or defense of legal claims.
4.4 Right to restriction of processing
4.4.1 You have the right to obtain from us restriction of processing where one of the following applies
- a) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
- b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
- c) we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or
- d) you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours.
4.4.2 If processing has been restricted in accordance with section 4.4.1, your personal data - apart from being stored - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
4.5 Right to data portability
4.5.1 You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where
- a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and
- b) the processing is carried out by automated means.
4.5.2 When exercising your right to data portability in accordance with paragraph 1, you have the right to obtain that your personal data be transferred directly by us to another controller, insofar as this is technically feasible.
The right under section 4.5.1 must not adversely affect the rights and freedoms of others.
This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
4.6 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
4.7 Right of withdrawal
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
4.8 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation. The authority responsible for us is
- State Commissioner for Data Protection and Freedom of Information (LDI) NRW,
- Kavalleriestr. 2-4 in 40213 Düsseldorf.
The German text is of paramount importance because it is original.