Data Privacy Statement

Thank you for visiting our website. See below for information on what data we collect from your visit and for what purposes. Please contact our data-protection officer at any time if you have questions or queries.   
   
Please note also that for reasons of better readability, we do not differentiate between male and female forms of language. All personal pronouns etc. therefore refer equally to either or both genders.  
   
Section 1: Personally identifiable data

The term “personally identifiable data” within the meaning of art. 4, sect. 1 of the relevant German data-protection legislation (DS-GVO/GDPR) covers all information referring to you personally, such as your name, postal address, e-mail addresses and user behaviour.  
   
Section 2: Legality of data-processing

The processing of personal data (see art. 4, sect. 2 DS-GVO/GDPR) is legitimate if one of the following conditions exists:  
   
- The person concerned has given consent to the processing of personal data for one or more specific purposes;
- Data-processing is required for the fulfilment of an agreement to which the person concerned is party or for the implementation of pre-contractual provisions at the request of the person concerned;
- Data-processing is required for compliance with a legal provision to which the party responsible is subject;
 - Data-processing is required to protect the vital interests of the person concerned or of another individual;
- Data-processing is required to perform a task in the public interest or in the exercise of public authority transferred to the party responsible;
- Data-processing is required to safeguard the legitimate interests of the party responsible or of a third party, unless the interests or fundamental rights and freedoms of the person concerned regarding the protection of personal data outweigh such requirements, especially if the affected person is a child.  
   
Section 3: The party responsible

The party responsible within the meaning of art. 4, sect. 7 of the EU Data Protection Regulation (DS-GVO/GDPR) is

Jotun (Deutschland) GmbH
Represented by
Haferweg 38
22769 Hamburg, Germany
Tel.:            +49 (0) 40-85 1960  
Fax:            +49 (0) 40-85 6234  
E-mail:             info@jotun.com  
   
Our data-protection officer is

Carrolin Leja
Hafenstrasse 1a
23568 Lübeck, Germany
Tel.:            +49 451 - 16 08 52 -12   
Fax:            +49 451 - 16 08 52 -99 -12   
Mobile:        +49 170 486 1775   
E-mail:        carolin.leja@hub24.de 
   
Section 4: Contact via e-mail

Whenever you contact us by e-mail, we save the data that you have sent us in order to answer your enquiries.  
   
These data are:  
   
- Your name
- Your e-mail address
- Your telephone number
- The subject line of your message
- Your message
- Your IP address
- The sending date and time of your message

We delete the stored data concerned once they are no longer needed, or restrict their processing if they are subject to statutory retention obligations.  
   
We do not transfer the data concerned to third parties. The data are used exclusively for the processing of the communication concerned.  
   
The legal basis for such data-processing is your consent under the terms of art. 6, sect. 1, subsection 1, paragraph a of DS-GVO/GDPR, which you supply by willingly contacting us.  
   
You have the right to revoke at any time your consent previously granted under the terms of data-protection legislation. The withdrawal of consent will not affect the legality of data-processing carried out on the basis of consent granted up to the moment of such revocation.  
   
Section 5: The collection of personally-identifiable data when you visit our website

If you use our website for information purposes only (i.e. without registering, logging in or otherwise providing us with information), we may collect the following personal data:  
   
Server log files and data for statistical evaluation
If you opt to view our website, we may collect the following data, which are technically necessary for us to provide you with online content, to ensure the stability and security of our website, and to carry out statistical evaluations of usage under the terms of art. 6, sect. 1, subsection 1, paragraph f of DS-GVO/GDPR:  
   
- IP address
- The date and time of your enquiry
- The content requested (specific web page)
- The volume of transmitted data in each case
- The type of web browser used
- Your operating system
- The referring URL

We may process the above-mentioned data for the following purposes:  
   
- to ensure smooth connections to and from the website
- to ensure the ease of use of our website
- to evaluate system security and stability and
- for statistical analysis

The legal basis for our processing of personally-identifiable data is art. 6, sect. 1, subsection 1, paragraph f of DS-GVO/GDPR. Our legitimate interest is derived from the purposes of data collection listed above. We shall under no circumstances use the data so collected to obtain further personal information about you.  
   
Cookies
We also use cookies on our site.  
   
These are small files that your browser automatically creates and saves to your end-user device (PC, laptop, tablet, smartphone, etc.) whenever you visit our site.  
   
Cookies do not cause any damage to your device, and do not contain any viruses, Trojans or other malicious software.  
   
The cookie stores information related to your specific end-user device, but does not allow us to identify you directly.  
   
The use of cookies serves, on the one hand, to make your experience of our website more enjoyable. We therefore use so-called “session cookies” in order to recognise that you have previously visited individual pages of our website. These are automatically deleted once you leave our site.  
   
We also use temporary cookies to make our website more user-friendly. These cookies are stored on your device for a specified period of time. If you re-visit our website to take advantage of our services, we automatically detect your previous visit and call up the information and settings that you have entered without you having to enter them again.  
   
We likewise use cookies to collect statistical data on the usage of our website and to optimise the content that we offer. These cookies allow us to recognise automatically your previous visits to our website. The cookies concerned are automatically deleted after a defined period of time.  
   
The www.jotun.com website uses the following cookies:  
   
-    CookieConsent  
-    MyList  
-    Registerform  
-    accesform

Data obtained from cookies are processed for the purposes indicated as required to safeguard our legitimate interests under the terms of art. 6, sect. 1, subsection 1, paragraph f of DS-GVO/GDPR.  
   
Most web browsers accept cookies automatically. However, you can configure your browser so that it does not store cookies on your computer, or make it display a warning before a new cookie is created in relation to, for example, the acceptance of third-party cookies. The complete disabling of cookies may however block your access to certain features of our website.  
   
Google Analytics
We also use the above analysis tool to evaluate and optimise our web pages. It allows us to verify, for example, how many users visit our site, what information they request and how often they access our content.  
   
We use Google Analytics, a web-analysis service supplied by Google, Inc. of 1600 Amphitheater Parkway Mountain View, CA 94043, USA.  
   
Usage is also subject to what is known as Universal Analytics. This makes it possible to collate data and information on sessions and interactions involving multiple devices. The system assigns a pseudonymous user-ID to analyse users’ activities across a range of devices.  
   
This tracking tool uses cookies, which are the basis for user-analysis on our website. The information collected in this way on your usage of our website is transferred to and stored on a server owned by Google and located in the United States of America.  
   
If IP-masking is enabled on this website, Google will use only a previously-truncated version of your IP-address within the member states of the European Union or signatories to the agreement creating the European Economic Area. Only in exceptional cases will a full IP address be transferred to a Google server in the USA and truncated there. The IP address obtained from your web browser by Google Analytics will not be linked to any other data held by Google.  
   
Google will employ this information on behalf of us, as the operator of the website, to evaluate the use of our website by visitors. This involves the creation of reports on website activity which allow us to improve our website’s features and the online services that we provide as the website operator.  
   
The legal basis of our use of Google Analytics under the terms of data-protection law is art. 6, sect. 1, paragraph f of DS-GVO/GDPR. The relevant data-processing takes place in accordance with our legitimate interests.  
   
Data obtained by Google Analytics from cookies, user IDs or linked to user-specific advertising are automatically deleted after 14 months. Data that have reached their expiry date in this context are automatically deleted. This automated deletion takes place at one-month intervals. Please go to www.google.com/analytics/terms/us.html or https://policies.google.com/privacy?hl=en-GBfor further information on the terms and conditions of use and the data-privacy policy of Google Inc. regarding Google Analytics.   
   
If you wish to disable the storage of cookies on your web browser, please open the program’s settings and configure them accordingly. This may however block your access to certain features of our website. You can also download and install an add-on designed to prevent the transfer to Google Analytics of your usage data. Please go to: https://tools.google.com/dlpage/gaoptout?hl=en-GB. So-called “opt-out” cookies then prevent the collection of your data when you use our website.  
           
Section 6: Job applications

Our page at https://www.jotun.com/de/de/corporate/career/index.aspx provides users with information on situations vacant throughout the JOTUN Group and on how to apply for them.  
   
We may use Webcruiter, a job-application management tool (see https://candidate.webcruiter.com/en-gb/Account/SpaLogin?ReturnUrl=%2Fcv%3Ftenantid%3D334570%26companyid%3D334570), in this context to assign interested users to specific advertised vacancies. This includes speculative applicants who have uploaded their CV.  
   
The associated application processes are not managed by our German company, but by Jotun A/S - Head Office, P.O. Box 2021, N-3202 Sandefjord, Norway. In both cases, Jotun A/S collects, processes and stores the following data:  
   
- Name
- E-mail address
- Password
- Telephone number
- The personal data in your CV

You will receive a message directly from JOTUN A/S shortly afterwards to confirm the receipt of your job application or CV. This will include full information on the further processing of personal data in the context of the application procedure.  
   
Your information will of course only be used for the processing of your application. We do not pass on data to third parties outside our group of companies or the service provider Webcruiter.  
   
The legal basis for the collection and processing of the corresponding data is art. 6, sect. 1, subsection 1, paragraph a of DS-GVO/GDPR. Our use of the service provider Webcruiter is subject to art. 6, sect. 1, subsection 1, paragraph f of DS-GVO/GDPR.  
   
You also have the right, at any time and without indicating your reasons, to cancel the collection and storage of your data by JOTUN A/S. The data concerned will then be deleted with immediate effect, subject to possible statutory retention obligations.  
   
Section 7: Surveygizmo survey tool

Our German website makes occasional use of a largely anonymised user-survey tool approved by our parent company Jotun A/S (Norway). Known as “Surveygizmo”, it tracks advertising on the site for a specific period and is used to gather feedback on current trends. It does so without reference to specific or identifiable site users and without accessing their personal data.  
   
If visitors to our website use this tool to respond to surveys in this context, there is in principle no collection of personal data by us or the online tool concerned, and any such information that is obtained is not processed or stored. The survey is anonymous. No IP-addresses or geographical coordinates are saved.   
   
An exception applies only if users opt, on a voluntary basis and before the conclusion of the response process, to enter their contact details (first name, last name and an e-mail address) into the online tool.  This is not obligatory. The legal basis in this case is art. 6, sect. 1, subsection 1, paragraph a of DS-GVO/GDPR. Data obtained in this way are saved and/or processed for the sole purpose of contacting users to respond to their feedback. The data concerned will then be deleted, especially if the survey is concluded and no longer displayed.    
   
The Surveygizmo tool carries Privacy Shield certification and the survey takes place via an https-protected link. For further details of the terms and conditions of use and data-privacy policy of the service provider Surveygizmo, please go to https://help.surveygizmo.com/help/anonymous-surveys or https://www.surveygizmo.com/privacy/gdpr/.  
   
Section 8: Data disclosure to service providers under the terms of art. 6, sect. 1, paragraphs b and f of DS-GVO/GDPR  
 
We do not normally transfer your data to any third party or parties. Exceptions apply only if there is a legal obligation to do so, or if disclosure is necessary for the implementation of the contractual relationship, or if you have supplied your explicit consent.  
   
The operation and optimisation of our website, along with our business activities and our fulfilment of contractual agreements, entail the involvement of various service providers who process data on our behalf. This includes, for example, centralised IT services and the hosting of our website.  
   
The corresponding organisations that carry out order processing on our behalf may have access to data as and when required, exclusively subject to our instructions. We apply specific data-security measures and carry out regular inspections in order to fulfil our legal responsibility for the existence of adequate data-protection provisions on the premises of companies engaged by us for the above purposes.  
   
The following categories of organisation have access to data under the terms of art. 13, sect. 1, paragraph e (in conjunction with art. 4, sect. 9) of DS-GVO/GDPR: IT service providers and suppliers of hosting services.  
   
Section 9: Your rights  
   
You can exercise the following rights regarding our use of your personally identifiable data:  
   
General rights:  
- the right to information,
- the right to correction or deletion,
- the right to restrict processing,
- the right to object to processing,
- the right to data portability.  
   
If and insofar as processing takes place with your consent, you are entitled to revoke, with future effect, your permission granted to us.
   
Rights relating to data processing in accordance with legitimate interests
You are entitled at any time, under the terms of art. 21, sect. 1, of DS-GVO/GDPR and for reasons relating to your specific situation, to object to the processing of your personally identifiable data subject to art. 6, sect. 1, paragraph e of DS-GVO/GDPR (data processing in the public interest) or pursuant to art. 6, sect. 1, paragraph f DS-GVO/GDPR (data processing in order to protect a legitimate interest). This also applies to profiling based on these provisions. If you express your objection, we will no longer process your personal data, unless we can demonstrate valid and legitimate grounds for processing which outweigh your interests, rights or freedoms; or if such processing is required for the establishment, exercise or defence of legal claims.  
   
Right to appeal to a supervisory authority
You also have the right to appeal to a competent data-protection supervisory authority concerning our processing of your personal data. Our competent supervisory authority is:  
   
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (The Hamburg Commissioner for Data Protection and Freedom of Information)
Klosterwall 6 (Block C)  
20095 Hamburg, Germany
 
Appeals may in principle also be submitted to a different data-protection authority.
  
   
This data-privacy statement is currently valid and in force as of May 2018. It may be necessary to amend this data-privacy statement in the light of further development of our website, the services that we offer online and/or new legal or regulatory requirements.  
   
The currently valid version of the data-privacy statement can be accessed (and printed out if required) at any time by going to https://www.jotun.com/de/de/corporate/datenschutzerklarung.aspx.