Privacy policy

Last updated on December 1, 2023

1. Introduction

With the following information, we would like to give you as a "data subject" an overview of the processing of your personal data by us and your rights under data protection laws. This concerns both the use of our website https://www.jambo5.com, as well as the personal data processed when using our services within jambo5 and related applications. The processing of personal data, for example your name, address or email address, is always in line with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to us. By means of this privacy policy, we would like to inform you about the scope and purpose of the personal data collected, used and processed by us.

2. Responsible person

The responsible person in the sense of the GDPR is the:

relleumSystem GmbH
Wilhelmstraße 10
53604 Bad Honnef
Germany
Email: gdpr@jambo5.com
Representative of the responsible: Wolfgang Müller, Patrick Wolf

3. Data Privacy Officer

We would like to point out that no data protection officer needs to be appointed.

If you have any questions on the subject of data protection, you can reach us at the email address: gdpr@jambo5.com.

4. Technology

4.1 SSL/TLS-Encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line.

4.2 Data collection when visiting the website and using Jambo5

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (in so-called "server log files"). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server log files. The following can be recorded

1. the browser types and versions used,
2. the operating system used by the accessing system,
3. the website from which an accessing system arrives at our website (so-called referrer),
4. the sub-websites that are accessed via an accessing system on our website,
5. the date and time of an access to the Internet site,
6. an Internet protocol address (IP address),
7. the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your person. This information is rather required in order to

1. to deliver the contents of our website correctly,
2. to ensure the long-term functionality of our IT systems and the technology of our website, and
3. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

Therefore, the data and information collected are processed by us for technical necessity and further aims at increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. The data of the server log files are stored separately from any personal data provided by a data subject. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above.

4.3 Additional data collection when using Jambo5

When using Jambo5, we collect data anonymously without user assignment for troubleshooting and performance optimization of our services.

4.4 Webhosting of the website

We use Hetzner, a web hosting provider among others, for our website. The service provider is the German company Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. You can learn more about the data processed by using Hetzner in the privacy policy at www.hetzner.com/legal/privacy-policy.

4.5 Webhosting Jambo5 services

We use Microsoft Azure in Europe (Germany, Netherlands) and Hetzner Cloud in Germany for our Jambo5 services.

5. Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

1. you have given your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR,
2. the disclosure is permissible pursuant to Art. 6 (1) sentence 1 lit. f GDPR to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
3. in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, as well as
4. this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you.

6. Cookies

6.1 Website

This website does not use cookies.

6.2. Jambo5 services

Jambo5 services only store necessary technical cookies and, after successful login to Jambo5, a cookie with a longer storage period over several sessions.

6.2.1. Necessary cookies

Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

7. Analysis

We use various tools on our website that log data about usage and errors on the website in anonymized form.

No cookies or other data are stored in the browser that enable the assignment of a later visit.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the listed purposes for data collection.

7.1 Posthog

We use Posthog to better understand the needs of our users and to optimize this service and experience.

Posthog is a technology service that helps us better understand our users' experiences (e.g. how much time they spend on which pages, which links they click, what users like and dislike, etc.) and enables us to build and maintain our service based on user feedback.

Posthog does not use cookies and other technologies to identify a visitor or to establish a connection between different visits.

Posthog collects data about behavior and their devices. This includes a device's IP address (which is processed during your session and stored in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only) and the preferred language in which our website is displayed.

Posthog stores this information on our behalf in anonymized form within the EU. Posthog is contractually prohibited from selling the data collected on our behalf.

Further information on data protection can be found at posthog.com/privacy.

8. Contents of our website and use of Jambo5

8.1 Data processing when opening a customer account and for contract processing

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the performance of a contract or when opening a customer account for the use of Jambo5. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done via the customer portal at portal.jambo5.com or by email to gdpr@jambo5.com. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part, about which we inform you accordingly below.

8.2 Services / Digital Goods

We transmit personal data to third parties only if this is necessary for the processing of the contract, for example, to the credit institution entrusted with the processing of payments.

A further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

In addition, we collect monitoring data (used memory, the volume of uploads and downloads) in order to be able to detect any use of jambo5 that is contrary to the contract or abusive.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

9. Newsletter mailing

9.1 Promotional newsletter

On our website, you are given the opportunity to subscribe to our company’s newsletter. Which personal data are transmitted to us when ordering the newsletter, results from the input mask used for this purpose.

We inform our customers and business partners at regular intervals by means of a newsletter about our offers. The newsletter of our company can be received by you in principle only if

1. Who have a valid email address and
2. they have registered to receive the newsletter.

For legal reasons, a confirmation email will be sent to the email address that you entered for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email is used to check whether you, as the owner of the email address, have authorized the receipt of the newsletter.

When you register for the newsletter, we also store the IP address of the IT system used by you at the time of registration, as assigned by your Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of your email address at a later date and therefore serves our legal protection.

The personal data collected in the context of a registration for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances. No personal data collected as part of the newsletter service will be passed on to third parties. The subscription to our newsletter can be cancelled by you at any time. The consent to the storage of personal data that you have given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, you will find a corresponding link in each newsletter. Furthermore, it is also possible to unsubscribe from the newsletter dispatch directly on our website at any time or to inform us of this in another way.

The legal basis for data processing for the purpose of sending the newsletter is Art. 6 para. 1 lit. a GDPR.

10. Payment provider

10.1 Stripe

For payment processing we also use the payment service provider Stripe payments Europe Limited (SPEL) (1 Grand Canal, Street Lower, Grand Canal Dock, Dublin, D02 H210, Irland). We only transfer the purchased product, the price and an ID assigned to you to the payment service provider to which we can book the purchase and assign a payment confirmation.

You can view Stripe’s privacy policy here: stripe.com/en-us/privacy.

11. Your rights as a data subject

11.1 Confirmation right

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

11.2 Right of access Art. 15 GDPR

You have the right to receive from us at any time free of charge information about the personal data stored about you and a copy of this data.

11.3 Right to rectification Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

11.4 Deletion Art. 17 GDPR

You have the right to demand that we delete the personal data concerning you without delay, provided that one of the reasons provided for by law applies and insofar as the processing is not necessary.

11.5 Restriction of processing Art. 18 GDPR

You have the right to demand that we restrict processing if one of the legal requirements is met.

11.6 Data portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format.

You also have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

11.7 Revocation of consent under data protection law

You have the right to revoke consent to the processing of personal data at any time with effect for the future.

11.8 Complaint to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

12. Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period necessary to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject.

If the purpose of storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

13. Duration of the storage of personal data

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of the contract.

14. Actuality and modification of the privacy policy

This privacy policy is currently valid and has the status as of December 1, 2023.

Due to the further development of our internet pages and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration.

You can access and print out the current data protection declaration at any time on our website at www.jambo5.com/de/datenschutzerklaerung.