Data protection

Data protection information in accordance with Art. 13, 14 and 21 GDPR for the websites and external pages of Jetstream Management Services LLC

I. General information

  1. Person responsible

We take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible to you as the data subject are you sufficiently informed about the purpose, type and scope of the processing.

Our privacy policy therefore explains to you in detail which personal data we process when you use our website, all other subpages that refer to it and in the other cases that may be explained here.

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is the:

Jetstream Management Services LLC

Prime Tower, 91 1

Business Bay, Dubai

United Arab Emirates

P.O. Box: 418695

+971 (0) 42383167

business@jetstreammembers.com

Hereinafter referred to as "controller" or "we".

If you have any questions about data protection, please contact:

Jetstream Management Services LLC

Data protection

Prime Tower, 91 1

Business Bay, Dubai

United Arab Emirates

P.O. Box: 418695

business@jetstreammembers.com

Please note that links on our website may take you to other websites that are not operated by us, but by third parties. Such links are either clearly labelled by us or are recognisable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and the secure handling of your personal data on these websites operated by third parties.

  1. Definitions

2.1 From the GDPR

This privacy policy uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR) at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679, for example.

2.2 Cookies and similar technologies

Cookies are text files that are stored on or read from your device by a website. They contain combinations of letters and numbers, e.g. to recognise the user and their settings when they reconnect to the cookie-setting website, to enable them to remain logged in to a customer account or to statistically analyse specific user behaviour.

WebStorage technology makes it possible to store variables and values locally in the user's browser cache. The technology includes both the so-called "sessionStorage", which remains stored until the browser tab is closed, and the "localStorage", which is stored in the browser cache until the cache is emptied by the user. The localStorage technology makes it possible, among other things, to recognise the user and their settings when they visit our website."

2.3 Data categories

When we specify the categories of data processed, this refers in particular to the following data: master data (e.g. name, address, date of birth), contact data (e.g. e-mail addresses, telephone number, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. bank details, payment history, use of other payment service providers).e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers), location data (e.g. GPS data, IP geolocalisation, access points).

  1. Information on data processing

We process personal data only to the extent permitted by law. Personal data is only passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

Unless we are legally obliged to store or pass on data to third parties (in particular law enforcement authorities), the decision as to which personal data we process and for how long and to what extent we disclose it depends on which functions of the website you use in each individual case.

  1. Storage duration

The personal data will be deleted as soon as the purpose of the processing no longer applies or a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or fulfilment of a contract. If we are required to provide information about the storage period of cookies and similar technologies, you will find the relevant details at the end of this privacy policy (see III.).

Personal data that we process as part of an application (see below) will be stored for a period of six months after completion of the application process.

  1. Automated decisions in individual cases, including profiling, do not take place.

 

  1. Rights of data subjects

As a data subject, you have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 33 and 34 BDSG apply to the right of access and the right to erasure

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

You are free to lodge a complaint with any data protection supervisory authority. You can find a list of supervisory authorities at: https://www.bfdi.bund.de/ (under Infothek/Anschriften und Links)

  1. Obligation to provide

Unless otherwise explained below in the information on the legal bases, you are not obliged to provide personal data. In the cases of Art. 6 (1) (b) GDPR, however, the personal data is required for the fulfilment or conclusion of a contract. If you do not provide the personal data concerned, it will not be possible to fulfil or conclude the contract. If you do not provide the data in the cases of Art. 6 (1) (a), (f) GDPR, it is not possible to use the affected parts of our website.

  1. Right of objection and revocation of consent

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.

In accordance with Art. 7 para. 3 sentence 1 GDPR, you have the right to withdraw your consent given to us at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation therefore only applies to the processing planned after the revocation. Revocation is possible informally by post or e-mail. If you object, we will no longer process your personal data unless another (legal) basis permits this. However, if you revoke your consent and there is no other authorisation, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 1 letter b GDPR.

Objections and revocations can be made informally and should be addressed to:

Jetstream Management Services LLC

Prime Tower, 91 1

Business Bay, Dubai

United Arab Emirates

P.O. Box: 418695

business@jetstreammembers.com

 

II Data processing in connection with the use of our website

The use of the website and its functions regularly requires the processing of personal data.

Provision of the website

Purpose of processing: Functionality and optimisation of the website, ensuring the security of our information technology systems for purely informational use (without using additional functions such as contact forms or social media plugins) of our website; integration and display of functions and content (e.g. graphics) that we do not provide ourselves.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Usage data, connection data

Recipients of the data: Data is only transferred to third parties if this is necessary for the operation of our website. For this purpose, personal data is transferred to the following recipients:

Tailor Brands Ltd,

Applications

Purpose of processing: Processing your application and carrying out the application procedure; consideration of your application in future application procedures if you have given your express consent for this.

Legal basis: Art. 6 para. I lit. b GDPR in conjunction with Art. 88 para. 1 GDPR. Art. 88 para. 1 GDPR; for storage for future application procedures Art. 6 para. 1 letter a GDPR in conjunction with Art. 7 GDPR

Data categories: Master data, contact data, content data, contract data, possibly connection data, possibly usage data and possibly special categories of personal data within the meaning of Art. 9 para. 1 GDPR (depending on the specific job advertisement; only the data relating to your application that you provide to us and that we are authorised to process in the context of applications will be stored)

Recipient of the data: None

Intended third country transfer: None

Storage of data on your end device on the basis of consent: No

Contact us (contact form & e-mail contact)

Purpose of processing: Processing your contact enquiry.

Legal basis: Art. 6 para. 1 letter f GDPR; Art. 6 para. 1 letter b GDPR (if the enquiry leads to a (later) conclusion of a contract or concerns an existing contract)

Data categories: Master data, contact data, content data, possibly usage data, connection data, possibly contract data (depending on the type of enquiry)

Recipient of the data: None

Intended third country transfer: None

Storage of data on your end device on the basis of consent: No

Calendly

Customer account

Google Ads

Purpose of processing: Display of personalised advertisements in the Google advertising network based on your pseudonymised recorded surfing behaviour.

Legal basis: Art. 6 para. 1 letter a GDPR

Data categories: Usage data, connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c GDPR)

Storage of data on your end device on the basis of consent: Yes (details can be found in the overview at the end of this privacy policy)

Cloudflare

HubSpot

Purpose of processing: Use of the platform for inbound marketing, sales, CRM and customer service

Legal basis: Art. 6 para. 1 lit. b, f GDPR

Data categories: Master data, contact data, connection data

Recipient of the data:

HubSpot, Inc,

25 First Street, Cambridge, MA 02141 USA

Intended third country transfer:

USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c GDPR)

(Details can be found in the overview at the end of the data protection information)

Adobe Fonts

Purpose of processing: To personalise our website by using fonts loaded from Adobe servers.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Connection data

Recipient of the data: Adobe Systems Software Ireland Limited (Adobe Ireland), 4-6, Riverwalk Drive, Citywest Business Campus, Cooldown Commons, Dublin 24, D24 DCW0, Ireland

Intended third country transfer: No

Storage of data on your end device on the basis of consent: No

Google Recaptcha

Purpose of processing: Preventing the misuse of our website by checking whether access is made by humans and not by bots or similar programmes; ensuring the security of our website and our information technology systems.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Connection data, usage data

Recipient of the data: Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who have their habitual residence in the European Economic Area or Switzerland. Third country transfer: None

Storage of data on your end device on the basis of consent: No

Google Fonts

Purpose of processing: To personalise our website by using fonts loaded from Google servers.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c GDPR)

Storage of data on your end device on the basis of consent: No

YouTube

Purpose of processing: Integration of videos via the YouTube video plugin to personalise our website.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c GDPR)

Storage of data on your end device on the basis of consent: Yes (details can be found in the overview at the end of the data protection information)

III. Information on the storage duration of consent-based cookies and similar technologies

Below we inform you about the names and functional duration of the cookies and similar technologies used by the above-mentioned plugins and services - in case of your consent - according to the following scheme:

Name of the cookie/similar technology (duration of function)

Access to a cookie/similar technologies is generally only possible from the Internet address from which the cookie is set. This means that we do not have access to the cookies of the providers used (above). They have no access to our cookies. Third parties have no access to our cookies or those of the providers used. Access by third parties can only be gained through technical attacks, which we cannot control and for which we are not responsible.

Google:

_GRECAPTCHA (180 days)

Youtube:

VISITOR_PRIVACY_METADATA (180 days)

VISITOR_INFO1_LIVE (180 days)

YSC (Session)