Privacy policy

(1) We hereby inform you about the collection of personal data when using our website in accordance with Art. 4 para. 1 of the EU General Data Protection Regulation (hereinafter: GDPR). Personal data is all data that allows conclusions to be drawn about your person, e.g. name, address, email address, user behaviour and, if applicable, user data such as the IP address.

(2) The controller within the meaning of Art. 4 (7) GDPR is

JH-Holding GmbH
Maximilianstraße 34
67433 Neustadt a.d. Weinstraße
Managing directors: Vinzenz Heindl, Jürgen Heindl (see also our legal notice)

You can reach our contact person for data protection, Ms Lenka Müller, at info@jhh.de.

(3) If you contact us by e-mail or via an online contact form, the data you provide (e.g. your e-mail address, your name and telephone number if applicable) will be stored by us in order to process your request or answer your questions. We delete the data collected in this process as soon as further storage is no longer required, or restrict processing if there are statutory retention obligations. Where possible, the personal data will be anonymised. The permissibility of this processing is based on Art. 6 para. 1 b) GDPR. You are not obliged to provide this data. However, failure to provide this data would mean that you would not be able to send us a message.

You have the rights listed below with regard to your personal data. To exercise these rights, you can contact us using the contact details listed under Section 1 (2).

(1) Right to object (Art. 7 GDPR)
If we process your personal data for direct marketing purposes, you have the right to object at any time, with future effect, to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You also have the right to object, on grounds relating to your particular situation, at any time with future effect to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. You can exercise your right to object free of charge using the contact details above.

(2) Right to information (Art. 15 GDPR)
You have the right to request confirmation from us at any time as to whether personal data concerning you is being processed and, if so, to request information about this personal data and the other information specified in Art. 15 GDPR.

(3) Right to rectification (Art. 16 GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

(4) Right to erasure (or “right to be forgotten”) (Art. 17 GDPR)
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 (1) GDPR applies and the processing is not necessary for one of the purposes specified in Art. 17 (3) GDPR.
(5) Right to restriction of processing (Art. 18 GDPR)
You can also request that the processing of your personal data be restricted if one of the conditions set out in Art. 18 para. 1 lit. a to d GDPR applies.

(6) Right to data portability (Art. 20 GDPR)
Under the conditions set out in Art. 20 (1) GDPR, you have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR, Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR and the processing is carried out by automated means.

(7) Right to withdraw consent (Art. 7 GDPR)
If the processing is based on your consent, you have the right to withdraw your consent at any time. This does not subsequently affect the lawfulness of the processing carried out between consent and its withdrawal.

(8) Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) at any time.

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with
otherwise transmit information to us, we automatically collect only the personal data that your browser transmits to our server. You are not obliged to provide this data. However, failure to provide this data would mean that you would not be able to access the website or would not be able to access it in full. This is the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

– IP address
– Date and time of the enquiry
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request originates
– browser
– Operating system and its interface
– Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. These are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

This website uses temporary, technically necessary cookies, the scope and function of which are explained below:
a) Temporary cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
b) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
The permissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the optimised presentation of its website. You are not obliged to provide this data. However, the provision of the data is necessary in order to be able to call up the operator’s website without errors (technically necessary cookies). If you do not accept cookies or delete cookies that have already been set, this may lead to functional restrictions on the website.

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service (Art. 6 (1) (b) GDPR) and to which the aforementioned data processing principles apply. You are not obliged to provide this data. However, failure to provide this data would mean that you would not be able to use the service in question.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data in the description of the offer.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

The operator uses the web analysis service Matomo. Matomo uses session cookies and JavaScript to statistically record your user data when you access and use the website, including the date and time of your visit to the website, your click behaviour on the website and the browser you use.

The operator will use this information to statistically analyse the use of the website and to constantly improve the user experience based on the analyses.

The permissibility of this processing is based on Art. 6 para. 1 a) GDPR and for the setting of the session cookie according to § 25 para. 1 TTDSG (consent). The provision of your personal data is voluntary and is not required for the use of the website.

The personal data collected as part of the use of Matomo is stored for 26 months. Where possible, the personal data is anonymised.

You can revoke your consent at any time using the contact details above.

(1) In addition to this website, we maintain presences in various social media. When you visit such a presence, personal data may be transmitted to the provider of the social network. We would like to point out that we have no influence on the data collection and further use of the data by the social networks.

(2) User data may also be transmitted to a server in a third country and thus processed outside the European Union.

(3) In addition to the storage of the specific data entered by you in this social medium, further information may also be processed by the provider of the social network.

(4) In addition, the provider of the respective social network may process certain data of the computer system from which you visit it – for example, your IP address, the processor type and browser version used, including plug-ins.

(5) If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.

(6) The scope and purpose of the data collection by the respective medium and the further processing of your data there, as well as your rights in this regard, can be found in the respective provisions of the respective controller, e.g. at

Google und YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA):

• Datenschutzerklärung: https://policies.google.com/privacy
• Opt-Out Möglichkeit: https://adssettings.google.com/authenticated

Linkedin (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland)

• Datenschutzerklärung: https://www.linkedin.com/legal/privacy-policy
• Cookie-Richtlinie: https://www.linkedin.com/legal/cookie-policy

The data collected when you access and use the website and the information you provide are transmitted to the operator’s server and stored there. Your data may also be passed on to the following categories of recipients:
Persons at the controller who are involved in the processing (e.g. marketing department, personnel administration, customer service, secretariat)
Affiliated companies
Processors (e.g. computer centre, IT service provider, software support)
Contractual partners of the operator (e.g. shipping service providers, banks, tax consultants, banks in the case of reimbursement of travel expenses)

When visiting the website, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party sites, nor can the operator control them. Such third-party sites are not subject to the operator’s data protection provisions.

JH-Holding GmbH

Maximilianstraße 34

67433 Neustadt a.d. Weinstraße

Managing directors: Vinzenz Heindl, Jürgen Heindl (see also our imprint)

You can reach our contact person for data protection Lenka Müller at info@jhh.de.

You have the opportunity to apply for our vacancies on the website. This requires you to provide a range of information. This mandatory information is specially labelled. Other information is voluntary, such as the link to your personal LinkedIn profile. We offer you the option of importing the CV required for the application from your LinkedIn profile. You also have the option of applying to us by email.

The controller processes your data for the purpose of carrying out the application process. The permissibility of this processing is based on Section 26 BDSG (new), according to which personal data of employees may be processed for the purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship.

Sometimes it may be necessary for us to process your data for the establishment, exercise or defence of legal claims. This is based on Art. 6 para. 1 f) GDPR (legitimate interest). The same legal basis applies to the use of this data for internal analyses in order to optimise the work processes taking place, to assess your performance and qualifications, to digitise documents and to optimise the work processes taking place overall.

If you do not provide the necessary information and documents to the person responsible, they will not be able to consider you in the application process. The provision of this data is therefore necessary for the conclusion of a contract.

We do not require the provision of special categories of personal data such as racial or ethnic origin, religious or philosophical beliefs or health data as part of the application process. If such information is nevertheless provided, this is done on a voluntary basis and has no effect on the selection decision.

The permissibility of this processing is governed by Section 26 (3) BDSG (new), according to which processing is permissible if it is necessary for the exercise of rights or the fulfilment of legal obligations under labour law, social security law and social protection law and there is no reason to assume that the data subject’s legitimate interest in the exclusion of processing prevails.

If you have given your consent for your data to be stored for a longer period of time, the controller will contact you in the event of suitable job vacancies.

The permissibility of this processing is based on Art. 6 para. 1 a) GDPR (consent). You can withdraw your consent to this processing at any time.

Your data will be deleted after you withdraw your consent, unless the controller has a legitimate interest in further storage. This may be the case if the controller must continue to store your data on the basis of a contract with you.

With regard to the processing of data on the basis of Art. 6 para. 1 a) GDPR, you have no obligation to provide the data. You will not suffer any disadvantages as a result of non-provision.

Your data will be stored for the first time upon receipt of your application. The duration depends primarily on the statutory retention obligations and our legitimate interest in further storage. Your application documents and data will be stored for 6 months after rejection, unless you have given your consent for longer storage.

A longer retention period may apply in individual cases if we have a legitimate interest in doing so and your interests worthy of protection do not conflict with this.

If you are hired, your data will be stored for the purpose of implementing the employment relationship and processed as employee data.