privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of
what happens to your personal data when you visit this website. Personal data is
all data with which you can be personally identified. Detailed information on
For information on data protection, please refer to our privacy policy listed below this text.
privacy policy.

Data collection on this website

Who is responsible for data collection on this
website?

The data processing on this website is carried out by the website operator.
Contact details can be found in the section “Information on the responsible body” in this
Privacy Policy.

How do we collect your data?

Your data will be
one by you communicating it to us. This may, for example, be data that you enter in a
Enter contact form.

Other data is collected automatically or with your consent when you visit
of the website by our IT systems. This is mainly technical data (e.g. Internet browser,
Operating system or time of page access). This data is collected automatically as soon as you
enter the website.

What do we use your data for?

Part of the data is collected to
to ensure error-free provision of the website. Other data may be used to analyze your
user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain information about the origin, recipient and purpose of your
You also have the right to request rectification or
to request deletion of this data. If you have given your consent to data processing,
You can revoke this consent at any time for the future. You also have the right
under certain circumstances, to restrict the processing of your personal data
You also have the right to lodge a complaint with the competent supervisory authority
to.

You can contact us at any time with any questions about this or other issues relating to data protection.
turn around.

analysis tools and third-party tools

When you visit this website, your browsing
Behavior can be statistically evaluated. This is done primarily with so-called analysis programs.

Detailed information about these analysis programs can be found in the following
privacy policy.

2. Hosting

We host the content of our website with the following provider:

Host Europe

The provider is Host Europe GmbH, Hansestraße 111, 51149, Cologne
(hereinafter Host Europe) When you visit our website, Host Europe records various log files including
your IP addresses.

For details, please see Host Europe’s privacy policy: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

The use of Host
Europe is based on Art. 6 Paragraph 1 Letter f of GDPR. We have a legitimate interest in
to ensure the most reliable presentation of our website. If consent is requested,
the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and Section 25 Para.
1 TDDDG, insofar as the consent allows the storage of cookies or access to information in the
end device of the user (e.g. for device fingerprinting) within the meaning of the TDDDG. The
Consent can be revoked at any time.

3. General information and mandatory information

data protection

The operators of these pages take the protection of your personal data very seriously.
seriously. We treat your personal data confidentially and in accordance with the legal
data protection regulations and this privacy policy.

When you use this website,
Various personal data are collected. Personal data is data that you
can be personally identified. This privacy statement explains
what data we collect and what we use it for. It also explains how and for what purpose the
happens.

We would like to point out that data transmission over the Internet (e.g.
Communication via email) may have security gaps. Complete protection of data against
Access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on
this website is:

justStars GmbH
Pannierstr. 19
12047 Berlin

E-Mail: [email protected]

Telephone: Telephone: + 49 (0) 30 8733 3236
Email: Email: [email protected]

The responsible body is the natural or legal person who, alone or jointly with others,
about the purposes and means of processing personal data (e.g. names, e-mail
addresses, etc.).

storage period

Unless a more specific storage period is specified in this privacy policy
your personal data will remain with us until the purpose for data processing
If you make a legitimate request for deletion or consent to
If you revoke your consent to data processing, your data will be deleted unless we have other legal
legitimate reasons for storing your personal data (e.g. tax
or commercial retention periods); in the latter case, deletion takes place after the expiry of
these reasons.

General information on the legal basis for data processing on this website

If you
have consented to data processing, we process your personal data on the basis of Art.
6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, provided that special categories of data according to Art. 9 Para. 1 GDPR
In case of explicit consent to the transfer of personal data
If data is transferred to third countries, data processing is also carried out on the basis of Art. 49 (1) (a) GDPR.
If you agree to the storage of cookies or access to information on your device (e.g. via
Device Fingerprinting), the data processing will also be carried out on the basis of §
25 para. 1 TDDDG. Consent can be revoked at any time. If your data is required for the performance of the contract or for
Implementation of pre-contractual measures is necessary, we process your data on the basis of
Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary to fulfil a
legal obligation are required on the basis of Art. 6 Paragraph 1 Letter c of GDPR. The data processing
may also be based on our legitimate interest in accordance with Art. 6 (1) lit. f GDPR.
The relevant legal bases in each individual case are set out in the following paragraphs of this
Privacy Policy informed.

Recipients of personal data

As part of our business activities
We work with various external bodies. This sometimes involves the transmission of
personal data to these external parties. We only disclose personal data
external bodies if this is necessary for the performance of a contract, if we are legally
are obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate
Interest in the transfer according to Art. 6 para. 1 lit. f GDPR or if another legal basis
Data transfer permitted. When using contract processors, we pass on personal data of our
Customers only on the basis of a valid contract for order processing. In the case of
For joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing

Many data processing operations are
only possible with your express consent. You can revoke your consent
The legality of the data processing carried out up to the time of revocation remains
Revocation remains unaffected.

Right to object to data collection in special cases and to direct advertising (Art. 21
GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PARAGRAPH 1 LIT. E OR F
DSGVO, YOU HAVE THE RIGHT AT ANY TIME TO REQUEST ACCESS TO THE PROCESSING FOR REASONS ARISING FROM YOUR
SPECIAL SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA
THIS ALSO APPLIES TO ANY ACTION BASED ON THESE PROVISIONS
PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND
YOU TO THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL
WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE
CAN COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING
WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR
PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING
LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

WILL YOUR
PERSONAL DATA IS PROCESSED IN ORDER TO OPERATE DIRECT MARKETING, YOU HAVE
RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU
DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING,
TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT,
YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF
USED FOR DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

right to lodge a complaint with the competent supervisory authority

In case of
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a
supervisory authority, in particular in the Member State of their habitual residence, their
place of work or the place of the alleged violation. The right of appeal exists
without prejudice to any other administrative or judicial remedy.

right to data portability

You have the right to request data that we process based on
your consent or in fulfillment of a contract, to yourself or to a third party in
in a common, machine-readable format. If you have requested direct
If you request that the data be transferred to another responsible party, this will only be done if it is technically
is feasible.

information, correction and deletion

You have the right, within the framework of the applicable legal
provisions, you have the right to obtain information about your stored personal data free of charge at any time.
Data, their origin and recipient and the purpose of data processing and, if applicable, a right to
Correction or deletion of this data. For this and other questions on the subject of personal
You can contact us at any time if you have any questions about your data.

Right to restriction of processing

You have the right to request the restriction of
to request that your personal data not be processed. You can contact us at any time to do so.
The right to restrict processing exists in the following cases:

  • If you
    If you dispute the accuracy of your personal data stored by us, we usually need time
    to check this. For the duration of the check, you have the right to
    to request restriction of the processing of your personal data.
  • If the
    If the processing of your personal data was/is unlawful, you can instead
    request the restriction of data processing before deletion.
  • If we have your
    personal data, but you need them for the exercise, defence or
    If you need to exercise legal claims, you have the right to request the deletion of your personal data
    to request restriction of the processing of your personal data.
  • If you have a
    If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your and our
    As long as it is not yet clear whose interests prevail, you have the
    Right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these may
Data – apart from storage – only with your consent or to assert,
Exercise or defense of legal claims or to protect the rights of another
natural or legal person or for reasons of important public interest of the
European Union or a Member State.

SSL or TLS encryption

This site uses for security reasons and to protect
the transmission of confidential content, such as orders or inquiries that you send to us as
Site operators send SSL or TLS encryption. Recognize an encrypted connection
Remember that the address line of the browser changes from “http://” to “https://” and
by the lock symbol in your browser bar.

If SSL or TLS encryption is enabled,
The data you send to us cannot be read by third parties.

Encrypted payment transactions on this website

After completing a
paid contract, you are obliged to provide us with your payment details (e.g. account number with
direct debit authorization), this data is required for payment processing.

Payment transactions via common payment methods (Visa/MasterCard, direct debit)
occurs exclusively via an encrypted SSL or TLS connection.
You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://”
changes to “https://” and by the lock symbol in your browser line.

At
Encrypted communication means that your payment details that you send to us cannot be
be read by third parties.

4. Data collection on this website

cookies

Our websites use so-called “cookies”. Cookies are small
Data packets and do not cause any damage to your device. They are either temporarily
for the duration of a session (session cookies) or permanently (permanent cookies) on your device
Session cookies are automatically deleted after your visit. Permanent cookies
remain stored on your device until you delete them yourself or until you activate automatic
Deletion occurs through your web browser.

Cookies can be used by us (first-party cookies) or
from third-party companies (so-called third-party cookies). Third-party cookies enable the integration
certain third-party services within websites (e.g. cookies for processing
of payment services).

Cookies have various functions. Many cookies are technically
necessary because certain website functions would not work without them (e.g. the
shopping cart function or the display of videos). Other cookies can be used to evaluate the
user behavior or for advertising purposes.

Cookies that are necessary for the
electronic communication process, to provide certain functions you have requested
(e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring
of the web audience) (necessary cookies) are based on Art. 6 Para. 1 lit. f GDPR
stored unless another legal basis is specified. The website operator has a legitimate
Interest in the storage of necessary cookies for technically error-free and optimized provision
its services. If consent to the storage of cookies and similar
recognition technologies, the processing is carried out exclusively on the basis of these
Consent (Article 6 (1) (a) GDPR and Section 25 (1) TDDDG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and
Allow cookies only in individual cases, accept cookies for certain cases or generally
and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, the functionality of this website may be limited.

You can find out which cookies and services are used on this website here
Privacy Policy.

consent with Cookiebot

Our website uses Cookiebot’s consent technology to store your
Consent to the storage of certain cookies on your device or to the use of certain
technologies and document them in compliance with data protection regulations. The provider of this technology is Cybot
A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

If
When you enter our website, a connection is established to Cookiebot’s servers in order to
To obtain consents and other declarations regarding the use of cookies.
Cookiebot places a cookie in your browser to assign the consents granted or their revocation to you.
The data collected in this way will be stored until you request us to delete it,
Delete the cookie yourself or the purpose for storing the data no longer applies. Mandatory legal
Storage obligations remain unaffected.

Cookiebot is used to ensure the legally
to obtain the required consent for the use of cookies. The legal basis for this is
Art. 6 para. 1 lit. c GDPR.

registration on this website

You can register on this website to
to use additional functions on the site. We use the data entered for this purpose only for the purpose
the use of the respective offer or service for which you have registered. The
The mandatory information requested during registration must be provided in full. Otherwise,
we will reject the registration.

For important changes, such as in the scope of the offer or in
For technically necessary changes, we use the email address you provided during registration to
to inform in this way.

The data entered during registration is processed
for the purpose of implementing the user relationship established by the registration
and, if necessary, to initiate further contracts (Article 6 (1) (b) GDPR).

The data provided during registration
The data collected will be stored by us as long as you are registered on this website and will
subsequently deleted. Statutory retention periods remain unaffected.

5. Social Media

Instagram

This website includes functions of the Instagram service. These
Functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5,
Ireland.

When the social media element is active, a direct connection is established between your
device and the Instagram server. Instagram receives information about
your visit to this website.

If you are logged into your Instagram account, you can
By clicking the Instagram button you can link the contents of this website with your Instagram profile.
This allows Instagram to associate your visit to this website with your user account. We would like to point out that
We as the provider of the pages have no knowledge of the content of the transmitted data or their use by
Instagram received.

The use of this service is based on your consent in accordance with Art. 6 para. 1
lit. a GDPR and Section 25 Paragraph 1 TDDDG. Consent can be revoked at any time.

As far as with the help of the
tools described here collect personal data on our website and send it to Facebook or Instagram
We and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The
Joint responsibility is limited exclusively to the collection of data and
their forwarding to Facebook or Instagram. The processing that takes place after forwarding by
Facebook or Instagram is not part of the joint responsibility. The joint responsibility
Commitments were laid down in a joint processing agreement. The wording
the agreement can be found at: https://www.facebook.com/legal/controller_addendum. Loud
this agreement, we are responsible for providing data protection information when using the Facebook
or Instagram tools and for the data protection-safe implementation of the tool on our
Website. Facebook is responsible for the data security of Facebook and Instagram products.
Rights of data subjects (e.g. requests for information) with regard to the data processed by Facebook or Instagram
You can assert your rights regarding the processed data directly with Facebook. If you exercise your rights with us
We are obliged to forward these to Facebook.

The data transfer to the
USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-
de.facebook.com/help/566994660333381
.

For further information please see the
Instagram privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified according to the “EU-US Data Privacy
Framework” (DPF). The DPF is an agreement between the European Union and the
USA, which ensures compliance with European data protection standards for data processing in the USA
Every company certified according to the DPF is obliged to
to comply with data protection standards. Further information on this can be obtained from the provider at the following link:
https:
//www.dataprivacyframework.gov/s/participant-search/participant-
detail?contact=true&id=a2zt0000000GnywAAC&status=Active
.

6. Plugins and tools

Font Awesome (local hosting)

This site uses fonts for uniform display
Font Awesome. Font Awesome is installed locally. A connection to servers of Fonticons, Inc. is not established.
instead of.

For more information about Font Awesome, see the Font Awesome Privacy Policy
Awesome under: https://fontawesome.com/privacy.

7. eCommerce and payment providers

Processing of customer and contract data

We collect, process and use
personal customer and contract data for the justification, content design and
Changes to our contractual relationships. Personal data about the use of these
We only collect, process and use website (usage data) to the extent necessary to provide the user with the
To enable or bill for the use of the service. The legal basis for this is Art. 6
Paragraph 1 lit. b GDPR.

The collected customer data will be deleted after completion of the order or termination
the business relationship and expiry of any existing statutory retention periods.
Statutory retention periods remain unaffected.

Data transfer when concluding a contract for online shops, retailers and
shipping of goods

When you order goods from us, we will pass your personal data on to the
The transport company entrusted with the delivery and the payment processing
Payment service providers. Only data that the respective service provider requires for the
The legal basis for this is Art. 6 (1) lit. b GDPR, which provides
Processing of data to fulfill a contract or to take pre-contractual measures is permitted.
If you have given your consent in accordance with Art. 6 (1) lit. a GDPR, we will store your email
Address to the transport company entrusted with the delivery so that they can inform you by email
about the shipping status of your order; you can revoke your consent at any time
revoked.

payment services

We integrate payment services from third-party companies on our website. If
You make a purchase from us, your payment details (e.g. name, payment amount,
account details, credit card number) from the payment service provider for the purpose of payment processing
processed. These transactions are subject to the respective contractual and data protection provisions of the
respective provider. The use of payment service providers is based on Art. 6 Para. 1 lit. b GDPR
(contract processing) and in the interest of a smooth, comfortable and secure
payment transaction (Article 6 (1) (f) GDPR). If your consent is requested for certain actions,
Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be withdrawn at any time for
the future is revocable.

We use the following payment services / payment service providers within the framework of this
website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24
Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

The data transfer
to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For details, see the
PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

8. Own services

handling of applicant data

We offer you the opportunity to apply to us
(e.g. by email, post or online application form). Below we will inform you about
Scope, purpose and use of your personal data collected during the application process
Data. We assure you that the collection, processing and use of your data is in accordance with
applicable data protection law and all other legal provisions and your data is strictly
be treated confidentially.

Scope and purpose of data collection

If you send us a
If you send us an application, we will process your associated personal data (e.g.
Contact and communication data, application documents, notes in the context of
interviews, etc.), insofar as this is necessary for the decision on the justification of a
The legal basis for this is Section 26 BDSG according to
German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general
contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. The
Consent can be revoked at any time. Your personal data will be processed within our company
only passed on to persons who are involved in processing your application.

If the application is successful, the data you have submitted will be processed on the basis of Section 26
BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the
employment relationship in our data processing systems.

retention period of the data

If we cannot make you a job offer, you have a
If you reject a job offer or withdraw your application, we reserve the right to
transmitted data based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) up to 6
Months from the end of the application process (rejection or withdrawal of the application) for
We will then delete the data and the physical
Application documents will be destroyed. The retention serves in particular for the purposes of proof in the event of
legal dispute. If it is clear that the data will be required after the 6-month period has expired
(e.g. due to an impending or pending legal dispute), deletion will only take place
if the purpose for further storage no longer applies.

A longer
Storage can also take place if you have given your consent (Art. 6 para. 1 lit. a
DSGVO) or if statutory retention periods prevent deletion.