Privacy Policy & Cookies
The protection of your privacy is an important concern for us. We process your personal data only in accordance with the provisions of the General Data Protection Regulation (GDPR) and other statutory data protection regulations, in particular the Federal Data Protection Act (BDSG). All data will of course be treated confidentially. With the following Privacy Policy, we would like to explain to you in detail how your data is handled when using our websites.
1. General information on the collection of personal data
In principle, the collection, processing and use of personal data for the use of our Internet presence is limited to the necessary extent and data. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we use the common SSL (Secure Socket Layer) procedure within our website in conjunction with the highest level of encryption supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
Responsible body
Responsible for the collection, processing and use of your personal data in accordance with Art. 4 para. 7 GDPR is:
JASMINE BORHAN STRATEGIC COMMUNICATIONS
Ursulastrasse 6, 80802 Munich
E-Mail: mail@jasmineborhan.com
2. Purpose and legitimate basis of the processing of your personal data as well as further information on specific data processing
2.1 Visiting our website
2.1.1 Description and scope of data processing
Whenever you visit our websites, our systems automatically record data and information from the computer system of the calling computer (personal data that your browser sends to our server). This also occurs if you do not register or otherwise provide us with information, for example through active entries. The following data is always collected when you visit our websites:
  • IP address of the user
  • Date and time of the request or access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes (from which the user’s system accesses our website)
  • Website that is called up by the user’s system via our website
  • Information about the browser type and version used
  • Operating system and its interface
  • Language and version of the browser software
  • This data is stored in the log files of our system. A storage together with other of your personal data does not take place regularly
    2.1.2 Purposes of data processing
    The storage of the aforementioned data, in particular the IP address by our systems, is basically only temporary for the duration of the session and is necessary to enable the proper operation and presentation of the website. This processing of your data also serves the purposes of evaluating and further ensuring system security and system stability as well as other administrative purposes.Insofar as your data is stored in our log files, this is also only done for reasons of ensuring the functionality of our websites. In addition, the data serves us to optimize and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
    2.1.3 Legitimate basis of data processing
    The legitimate basis for the processing and temporary storage of your personal data is Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interests follow from the purposes for data collection described above.
    2.1.4 Duration of storage
    Your data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.In the case of storage of your data in log files, this is the case after seven days at the latest. Storage beyond this period is only envisaged in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an allocation is no longer possible.
    2.1.5 Possibility of objection and removal
    The collection of your data for the provision of the website and the storage in log files if applicable is absolutely necessary for the operation of the website.There is therefore no possibility of objection.
    2.2 Contact form, e-mail contact
    2.2.1 Description and scope of data processing
    A contact form is integrated on our website, through which you can get in touch with us. When using the contact form, the data entered in the input mask is transmitted to us and stored:
  • E-mail-adress, last name, first name
  • In addition, your IP address and the date and time of the request are stored. For the processing of the data, your consent will be obtained during the sending process and reference will be made to this Privacy Policy.It is also possible to contact us via e-mail addresses provided by us. In this case, your personal data transmitted with the e-mail will be stored and processed by us, in particular to process your request or the reason for contacting us. The data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.
    2.2.2 Legitimate basis of data processing
    The legitimate basis for the processing of your data when using the contact form is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.The legitimate basis for the processing of your data when sending an e-mail to us is Art. 6 para. 1 sentence 1 lit. a as well as f GDPR. The processing is based on an implied consent and on our legitimate interests. If the e-mail contact is aimed at the conclusion of a contract, the additional legitimate basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
    2.2.3 Purposes of data processing
    The processing of personal data from the input mask or the e-mail sent to us serves only to process your contact with us. In the case of contacting us by e-mail, this indicates the necessary legitimate interest in the processing of the data by us. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
    2.2.4 Duration of storage
    We will delete your data as soon as it is no longer required for the purposes described. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. As a rule, the conversation is finished when the circumstances indicate that the reason for contacting us has been conclusively clarified.The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
    2.2.5 Possibility of objection and erasure
    You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, however, the conversation with you may not be able to continue. All personal data stored in the course of the contact will be deleted in this case.
    2.3 General information on the use of cookies
    When visiting and using our website, cookies are stored on your computer. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that makes it possible to uniquely identify the browser when the website is called up again. Some of them are essential, i.e. they are technically necessary for the operation of a website. Other cookies are used for statistical purposes or to analyze access to our website or for marketing purposes or to offer you the use of external media. Furthermore, a distinction is made between temporary/session cookies and longer stored cookies (so-called permanent cookies). Temporary cookies are deleted as soon as you close your browser. Permanent cookies remain for a longer period of time, but can be deleted manually at any time. This website uses only the following, technically necessary Cookie:
    Cookie Name: jb-cookiesPurpose: Detects whether the user has taken note of the cookie notice and privacy policy.
    Duration: 1 year
    The legitimate basis for data processing when using essential cookies is Art. 6 para. 1 p. 1 lit. f GDPR. If we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and to the extent that your interests or fundamental rights and freedoms, which require the protection of personal data, do not override our interests.
    2.4 External links
    If our websites link to the websites of other providers or partners, our privacy policy does not apply to their content. We have no influence on the compliance with the legal data protection regulations by these third party providers. Information about the data protection of the operators of these sites can be found on the respective websites.
    3. Passing on your data to third parties
    We do not share personal information with companies, organizations or individuals outside of our organization except in one of the following circumstances:
    3.1 With your consent
    We will disclose personal data to third companies, organizations or individuals outside of our company if you have given us your explicit consent to do so.
    3.2 Processing by other entities
    We may provide your personal data to our third party business partners, other trusted companies or individuals who process it on our behalf. This is always done on the basis of our instructions and in accordance with our Privacy Policy and other appropriate confidentiality and security measures.
    3.3 For legal reasons
    We will disclose your personal data to companies, organizations or individuals outside of our company if we have a good faith belief that access, use, preservation or disclosure is reasonably necessary to comply with, in particular, any applicable law, regulation or legal process, or to comply with an enforceable governmental request.
    4. Transfer of your data to a third country or international organization
    Except as expressly set forth in this privacy policy, we do not transfer your personal data to third countries or international organizations.
    5. Automated decision making
    Automated decision making does not take place.
    6. Integration of social media plug-ins and external service providers
    6.1 Integration of LinkedIn
    6.1.1 Description and scope of data processing
    Our website uses a social media plug-in from LinkedIn. You can recognize the plug-in and its provider by the mark on the box above its initial letter or logo. We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider collects the data via cookies, we recommend that you check the cookie settings via your browser's security settings and delete all cookies before clicking on the provider button.We would like to point out that, according to our information, the data transfer to the plug-in provider takes place regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider will also store this information in your user account and, if applicable, share it publicly with your contacts.
    6.1.2 Purposes of data processing
    The data transfer to the plug-in provider takes place in order to simplify the use of the plug-in provider's websites. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
    6.1.3 Consent to the transfer of personal data to a third country
    Subject to legal or contractual permissions, personal data may only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. Accordingly, data may be transferred if the European Commission has determined by way of a decision within the meaning of Art. 45 (1), (3) of the GDPR that an adequate level of data protection is provided in the third country concerned. The European Commission certifies third countries through such so-called adequacy decisions a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here:
    http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).
    Insofar as data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.Although LinkedIn has submitted to corresponding standard contractual clauses of the European Commission, U.S. companies are nevertheless obligated to disclose personal data to security authorities without you as the affected party being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against LinkedIn in the long term. Furthermore, the technical and organizational measures for the protection of personal data at LinkedIn may not fully meet the requirements of the GDPR in terms of quantity and quality.There is thus the possibility that the standard contractual clauses of the European Commission used by LinkedIn do not constitute sufficient guarantees within the meaning of Art. 46 (2) a) of the GDPR. By consenting to the collection of data by LinkedIn, you expressly agree to the data transfer presented here, whereby you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees. This consent can be revoked at any time. A revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
    6.1.4 Legitimate basis of data processing
    The legitimate basis is your explicit and voluntary consent in accordance with Art. 6 para. 1 sentence 1 letter a) GDPR to the processing of your personal data for presentation and advertising purposes.
    6.1.5 Duration of storage; possibility of objection and removal
    The cookies we use are stored on your computer and transmitted from it to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, it may no longer be possible to use all the functions of the website in full.
    6.1.6 Purposes and legitimate basis of data processing, duration of storage, possibility of objection and removal from the plug-in provider
    We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider. However, the plug-in provider may store the data collected about you as usage profiles and use them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider. For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy.
    6.1.7 Further information
    Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, can be obtained from: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, and at
    6.2 Integration of Vimeo
    6.2.1 Description and scope of data processing
    We have integrated Vimeo videos into our online offer, which are stored on https://vimeo.com/ and can be played directly from our website. By visiting our website, Vimeo receives the information that you have called up the corresponding sub-page of our website. In addition, the data that (as described above) is collected for technical reasons each time you visit our website is passed on to Vimeo.The data transfer takes place regardless of whether Vimeo provides a user account through which you are logged in or whether no user account exists. If you are logged in to Vimeo, your data will be directly assigned to your account. If you do not wish to have your data associated with your Vimeo profile, you must log out of Vimeo before activating the button. Vimeo stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Vimeo to exercise this right.
    6.2.2 Purposes of data processing
    Data processing, in particular the transfer of data to Vimeo, is carried out for the purpose of simplifying the use of our media content and increasing the attractiveness of our website. By integrating Vimeo films, we give you the opportunity to interact with the social network Vimeo and other users of this network, so that we can improve our offer and make it more interesting for you as a user.
    6.2.3 Consent to the transfer of personal data to a third country
    Subject to legal or contractual permissions, personal data may only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. Accordingly, data may be transferred if the European Commission has determined by way of a decision within the meaning of Art. 45 (1), (3) of the GDPR that an adequate level of data protection is provided in the third country concerned. The European Commission certifies third countries through such so-called adequacy decisions a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here:
    http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).
    Insofar as data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.
    Although Google has submitted to corresponding standard contractual clauses of the European Commission, US companies are nevertheless obliged to hand over personal data to security authorities without you as the affected party being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully meet the requirements of the GDPR in terms of quantity and quality.
    There is thus the possibility that the standard contractual clauses of the European Commission used by Google do not constitute sufficient guarantees within the meaning of Art. 46 (2) a) of the GDPR.
    By consenting to the collection of data by Google, you expressly agree to the data transfer set out here, whereby you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.
    This consent can be revoked at any time. A revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
    6.2.4 Legitimate basis of data processing
    The legitimate basis is your explicit and voluntary consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR to the processing of your personal data for presentation and advertising purposes.
    6.2.5 Duration of storage, possibility of objection and removal at Vimeo.
    We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by Vimeo. Vimeo stores the data collected about you, if applicable, as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Vimeo to exercise this right. For more information on the purpose and scope of data collection and processing by Vimeo, please refer to the provider's privacy policy. There you will also receive further information about your rights in this regard and setting options for the protection of your privacy:
    6.2.6 Further information
    Further information on the purpose and scope of the data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Vimeo LLC, 555 West 18th Street, New York 10011, and at
    https://vimeo.com/de/features/video-privacyvimeo.
    6.3 Integration of the services of Skyfillers
    6.3.1 Description and scope of data processing
    We use services, namely cloud solutions, of Skyfillers GmbH, Schiffsbrücke 66, 24939 Flensburg (hereinafter 'Skifillers').As part of the use of Skyfiller's services, personal data is also processed and stored. According to the contract with Skyfiller, this information is only processed within the EU or the EEA. However, we have no influence on the data transfer
    6.3.2 Purpose of data processing
    The use of Skyfillers services is essential for the functionality and complete provision of our content.
    6.3.3 Legitimate basis of data processing
    The legitimate basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a as well as f GDPR. The processing is based on an implied consent as well as on our legitimate interests.
    6.3.4 Further information
    For more information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options to protect your privacy, please visit:
    6.4 Integration of MailChimp
    6.4.1 Description, scope and purpose of data processing
    A contact form is integrated on our website (see section 2.2), which you can use to contact us. For this purpose, we use the services of Mail-Chimp. MailChimp is a service of The Rocket Science Group, LLC, 512 Means Street, Ste 404 Atlanta, GA 30318.In the course of using the services of Mailchimp, personal data is also processed and stored by Mailchimp. However, we have no influence on the data transmission.
    6.4.2 Consent to the transfer of personal data to a third country.
    Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special prerequisites of Art. 44 ff. GDPR are met. Accordingly, data may be transferred if the European Commission has determined by way of a decision within the meaning of Art. 45 (1), (3) of the GDPR that an adequate level of data protection is provided in the third country concerned. The European Commission certifies third countries through such so-called adequacy decisions a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).
    Insofar as data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible via binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.
    Although MailChimp has submitted to corresponding standard contractual clauses of the European Commission, US companies are nevertheless obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against MailChimp in the long term. Furthermore, the technical and organizational measures for the protection of personal data at MailChimp may not fully comply with the requirements of the GDPR in terms of quantity and quality.
    There is thus the possibility that the standard contractual clauses of the European Commission used by MailChimp do not constitute sufficient guarantees within the meaning of Art. 46 (2) a) GDPR.
    6.4.3 Legitimate basis of the data processing
    The legitimate basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) GDPR to the processing of your personal data for the purposes named in section 6.4.1.
    6.4.4 Further information
    Further information on the purpose and scope of the data collection and its processing, as well as further information on your rights in this regard and setting options to protect your privacy, can be obtained from: MailChimp LLC, 512 Means Street, Ste 404 Atlanta, GA 30318. and at
    https://mailchimp.com/de/help/about-the-general-data-protection-regulation/.
    7. Your rights
    You have the right to:
  • in accordance with Art. 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if they have not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or completion of your personal data stored by us;
  • in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
  • in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing
  • is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
  • to revoke your consent at any time in accordance with Art. 7 (3) GDPR (see also section 8.1). This has the consequence that we may no longer continue the data processing based on this consent for the future, and
  • complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
  • 8. Objection or revocation against the processing of your data
    If you have given your consent to the processing of your data, you may revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
    Insofar as the processing of your personal data is based on our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is presented by us in each case in the description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
    Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details above.