An opportunity exists to review and correct the data input by you before your purchase order is submitted. You submit a binding declaration of agreement when your purchase order is sent. The receipt of the purchase order will be immediately confirmed after your purchase order is received with no technical problems.

A binding agreement will come about when we accept your purchase order. Our acceptance can be provided in the following ways:

You will be bound by your order for at most 7 days - subject to a statutory right of cancellation.

We will store the text of the agreement, but it will not be capable of being directly retrieved by you for security reasons. We offer password-protected, direct access ("My Account") for every customer. With an appropriate registration, you can manage your data and see ordering information here.

Furthermore, you can also get in contact with us via a contact form there to change your address, for instance, or your payment type when there are open orders. For your security, this takes place, as well as everything else in the login area, via an encrypted connection (SSL). The currently effective version of these general business terms and conditions can also be found on our website.

Right of withdrawal for the Sale of Goods

You will be provided with cautionary information below on the prerequisites and consequences of the statutory right of withdrawal for consumers in the case of mail orders for the purchase of goods. A contractual grant of rights going beyond the law is not associated with the reproduction of the cautionary information. In particular, commercial resellers are not entitled to the statutory right of withdrawal.

Exceptions from the right of withdrawal in the Sale of Goods

Statutory exceptions exist to the right of withdrawal (§ 312g BGB [German Civil Code]); we reserve the right to invoke the following regulations in relation to you:

A right of withdrawal does not exist for agreements to deliver goods that are not prefabricated and that require an individual selection or determination by the consumer for their production or that are clearly custom-made for the personal requirements of the consumer.

It can expire prematurely in the case of agreements to deliver goods if they were inseparably mixed with other goods after the delivery because of their nature and in the case of agreements to deliver audio or video recordings or computer software in sealed packaging if the seal was removed after the delivery.

Model withdrawal form

The "model withdrawal form" mentioned in III. No. 1 of the above-cited cautionary information regarding cancellation can be found below. Its use is not mandatory.

You have the possibility of paying as follows:

A claim to payment via SEPA direct debit or a purchase on account does not exist. Please understand that we do risk assessments prior to the conclusion of an agreement when advance performance is involved. In case of doubt, we reserve the right to offer you the payment form of cash in advance.

An opportunity exists to review and correct the data input by you before your purchase order is submitted. You submit a binding declaration of agreement when your purchase order is sent. The receipt of the purchase order will be immediately confirmed after your purchase order is received with no technical problems.

A binding agreement will come about when we accept your purchase order. Our acceptance can be provided in the following ways:

You will remain bound to your purchase order for at most 7 days.

We will store the text of the agreement, but it will not be capable of being directly retrieved by you for security reasons. We offer password-protected, direct access ("My Account") for every customer. With an appropriate registration, you can manage your data and see ordering information here.

Furthermore, you can also get in contact with us via a contact form there to change your address, for instance, or your payment type when there are open orders. For your security, this takes place, as well as everything else in the login area, via an encrypted connection (SSL). The currently effective version of these general business terms and conditions can also be found on our website.

Applicability

The following provisions regarding the right of withdrawal will solely apply to agreements with a consumer with a usual place of residence in one of the states of the European Union (EU). (In Germany, according to the statutory provisions of § 13 BGB [German Civil Code], consumers are natural persons for whom the purchase cannot predominantly be ascribed to a commercial or independent professional activity. The term can also include certain legal entities worthy of protection in foreign countries.) You will be provided with cautionary information below on the prerequisites and consequences of the statutory right of withdrawal for consumers in the case of mail orders for the purchase of goods. A contractual grant of rights going beyond the law is not associated with the reproduction of the cautionary information. In particular, commercial resellers are not entitled to the statutory right of cancellation.

A right of withdrawal for customers with a usual place of residence outside of the status of the EU is not being contractually granted. As far as that is concerned, the law of the country of residence will apply for a statutory right of cancellation. If a cancellation of a customer with a usual place of residence outside of the states of the EU is nevertheless accepted by jpc in an isolated case out of good will, the customer will pay the direct costs of the return shipment if the goods that were delivered correspond to those that were ordered. Turn to the contact information provided in the cautionary information on withdrawal for clarification.

Exceptions from the right of withdrawal in the Sale of Goods

Statutory exceptions exist to the right of withdrawal (§ 312g BGB [German Civil Code]); we reserve the right to invoke the following regulations in relation to you:

A right of withdrawal does not exist for agreements to deliver goods that are not prefabricated and that require an individual selection or determination by the consumer for their production or that are clearly custom-made for the personal requirements of the consumer.

It can expire prematurely in the case of agreements to deliver goods if they were inseparably mixed with other goods after the delivery because of their nature and in the case of agreements to deliver audio or video recordings or computer software in sealed packaging if the seal was removed after the delivery.

Model withdrawal form

The "model withdrawal form" mentioned in III. No. 1 of the above-cited cautionary information regarding cancellation can be found below. Its use is not mandatory.

You have the possibility of paying as follows:

What are personal data?

Personal data are all information concerning an identified or identifiable natural person (hereinafter referred to as the »data subject«). Identifiability does not necessarily involve the indication of a name. It is also sufficient to indirectly identify a person, e.g. through association with an identification number, location data, an online identifier or one or more specific features. It is therefore all about your identity. This information includes not only your name but also your phone number, address, as well as other data that you provide to us.

A lot of the legal principles applied when we process your data can be found in the EU General Data Protection Regulation (GDPR). The full text, along with the relevant recitals, can be found e.g. here. In the notices that follow, we will refer you to the relevant provisions that form the legal basis for our processing of data.

. Use of data when managing contracts

Whenever you raise an inquiry or conclude a contract with us, we require and process certain data, such as details of the envisaged or actual order, your postal address, e-mail address and payment processing data for the purpose of running a pre-contract check, for managing contracts and, where applicable, handling guarantee and warranty issues (see point (b) of Art. 6(1) GDPR). As part of the ordering and payment processes, the service providers engaged by us (e.g. logistics companies, payment facilitators) receive data about you and/or the order as needed. We also conduct credit checks (see also Point IV). Unless we have the appropriate, relevant details, we will not be able to accept an order or your requested payment options.

We are also obliged, under commercial and tax law, to archive data from concluded business transactions for as long as the statutory retention periods prescribe. The legal basis for the corresponding use of data is point (c) of Art. 6(1) GDPR.

Processing within the business organisation

Within the bounds of our business organisation. we process your data in our IT systems and - to the extent necessary - transfer data relating to customers, potential customers, suppliers and personnel to government agencies in compliance with the statutory regulations, such as fiscal authorities and consultants/advisors (tax consultants, lawyers, chartered accountants) in keeping with our interest in lawful and commercial corporate governance.

Legal basis: points (c) and (f) of Art. 6(1) GDPR

In this connection, we analyse data on every corporate and business process for the purpose of corporate management and market research. Unless the specific purpose requires us to do so, the data evaluated will largely be anonymised or at least pseudonymised and, at most, disclosed to third parties in summarised form and unidentifiable with individual persons. Legal basis: points (c) and (f) of Art. 6(1) GDPR.

Outsourced IT and hosting

We deploy IT, software and hosting services from service providers in providing services and meeting your needs and requests as well as our contractual obligations based on our interest in achieving efficient and secure corporate and contractual management. In doing so, your data on your interests, concerns, orders and visits and/or perception of the services we offer will be processed, including with the help of the aforementioned service providers.

To the extent permissible by law and, at every event, safeguarded by regulations governing professional confidentiality, we have - in cases involving order processing, concluded contracts to secure our access and the secure as well as confidential handling of your data.

Legal basis: point (f) of Art. 6(1) GDPR and, where applicable, in connection with Art. 28 GDPR (conclusion of contracts with processors).

Cooperation services

There may be instances where you can take advantage of benefits and perks, which we may, occasionally or for certain periods of time, be able to provide through collaborations with certain cooperation partners. Please note that it is only possible to grant such benefits if you identify yourself as required as a way of proving that you are a customer entitled to receive such benefits (e.g. card number/membership number). Should you wish to take advantage of such benefits and provide the corresponding details as a means of identifying yourself, we will forward your address and such data pertaining to your purchase to the cooperation partner that are required to allow you to enjoy the benefits offered by the cooperation partner in question. As a rule, this relates to the turnover you have generated under your identification number and the identification itself. The cooperation partner will again store and use these data in compliance with the terms and conditions concluded with you.

Data storage, login, registration

Your specific order data will be stored by us. You can register with us (e-mail address and password). On registering, you will, among other things, be given access to data stored by us concerning you personally as well as your orders, and can manage eCourier, to the extent that you procure this, as well as any forms of consent you have provided.

Should you have provided consent in individual cases, we will also link your user data to your customer access in order to furnish you with content of personal interest to you when you visit our website.

Should you wish to wish to cancel your access, please contact us using one of the contact options listed below.

Please note that, after cancellation, your data will still be stored by us for the specified purposes (e.g. order handling, but also for advertising information).

Contact

Should you use our contact options (e.g. e-mail or the contact form) to contact us, we will store your name and contact details as well as the reason for contacting us. These data are used to process the matter in question and to communicate with you. We will use your e-mail address to respond to you by e-mail (legal basis: points (a) and (b) of Art. 6(1) GDPR). If you have questions relating to specific orders or if we are asked to do something for you personally, we will require your correct name. For all other queries, you may also use a pseudonym. Once your matter has been fully addressed and provided that there are no other obligations to retain the data in question, your data will be erased.

Use of data for advertising and market research

It is in our interest to maintain customer relations with you, acquire new customers, reactivate former customers and provide our customers with information and offers. To exercise these legitimate interests, we process your data on the basis of point (f) of Art. 6(1) GDPR (including with the assistance of service providers) in order to send you information and offers as well as to improve our information and offers.

Where our advertising measures are concerned, our interest lies in protecting you to the best extent possible from receiving advertising that is unsolicited or of no interest to you personally. In taking your interests into consideration, we only include data in our selection of information which you know that we are aware of. This may include, e.g. previous orders. Wherever this is technically and commercially meaningful for pursuing the purposes, we will, in safeguarding your interests, isolate the corresponding data from your personal identity, pseudonymise them and, before conducting any evaluations, form groups (clusters) into which individual information is merged.

Postal advertising

We use your first and last name, postal address and – to the extent that we have received further details from you – your title, academic qualifications and your job title, industry or business descriptions to send you offers and information concerning our enterprise, products and services by post, in the shape of e.g. our »jpc-courier«, a new edition of which is published every month, provided that, based on an evaluation of the data stated at the beginning of this paragraph, we anticipate that this information is of interest to you.

E-mail advertising for similar offers from our company

Should we receive your e-mail address in connection with the sale of merchandise, we will use your e-mail address to advertise similar products from our company. You can, at any time, object to this being used for advertising purposes without incurring any other data costs than those stated in the basic rates of your provider. For commercial customers, we will also use the phone number given on the assumption that consent has been provided for advertising.

We will only carry out the following uses after we have asked for your consent in addition to this declaration. Our company applies Point (a) of Art. 6(1) GDPR as the legal basis for processing procedures through which we obtain your consent for a specific processing purpose.

(Acceptance of these notices does not constitute your consent to our using your data for advertising purposes!)

E-mail advertising with specific consent

If you have specifically subscribed to our newsletter, your e-mail address and, where applicable, other personal data, which you have voluntarily submitted when registering (e.g. your name to enable us to address you personally), will be used for advertising purposes and, where applicable, offers in the newsletter that come from our advertising partners.

Use of data for newsletters and other e-mail advertising

If you use our newsletter, e.g. »eCourier«, or other e-mail advertising, we will run statistical evaluations without relating these to a specific person as to when such an e-mail is retrieved and, where applicable, what information that is offered attracts interest and to what extent (e.g. by virtue of the links that you click on). The purpose of such evaluations is to improve the times of dispatch and to optimise our offers and advertising information (legal basis: point (f) of Art. 6(1) GDPR).

If you have given us your specific consent to do so, we will use the aforementioned personal data to provide you with customised information that could be of interest to you and thus to further personalise our advertising. Please also see the information provided by us further below. (Legal basis: point (a) of Art. 6(1) GDPR).

Use of your order data for personalised marketing

If you have given use your specific consent to do so, jpc will send information and offers by e-mail which have been especially tailored to your interests and wishes. Studies have shown us that information that has been especially tailored to your wishes and interests meets with greater interest among Internet users than information that has no such personalisation. The sole purpose of doing so is to adapt our offers to customer needs and wishes as far as possible. To do so, we use data which we have collected and evaluated from your visits to our offers, your voluntarily provided information on your interests, your requests for information and your orders to provide you with the desired information and interesting offers.

By going to Manage eCourier under »My account« at jpc.de you can manage and amend your information interests yourself and, if so desired, view what consent you have given us (legal basis: point (a) of Art. 6(1) GDPR).

Unless you give us your specific consent, the data, after being anonymised to avoid the data being associated with you personally, will only be used for statistical purposes so that, as part of our market research and advertising, we can improve our information and offers as well as their presentation.

. Erasure and blocking

Your personal data will be stored until the specified purposes have been accomplished or for as long as we have a legitimate interest in the data being stored.

Following this, the data will be erased unless an agreement is reached with you to the contrary or obligations exist under law to retain the data (e.g. under commercial or tax laws). Should the data need to be retained by law, they will be made unavailable for any other purposes. These documents will, upon expiration of the statutory retention periods, be erased and destroyed in compliance with the data protection regulations in the course of routinely conducted activities.

If you have consented to your data being collected, processed and used, we will erase your data upon receipt of your objection or upon the purpose for which you have granted your consent ceasing to exist. Following this, your consent and the processed data will be archived until the statutory period lapses (usually three years) in which legal claims may need to be defended (legal basis: point (e) of Art. 17(3) GDPR).

Should you no longer wish to receive advertising, we will use your name, address and, if available, your e-mail address to make your data unavailable in the corresponding lists which we use to coordinate our advertising activities so that you no longer receive advertising from us. Erasure within the definition intended here initially means making your data unavailable in our system in particular for advertising or for marketing activities. The data will – to the extent required – continue to be processed for purposes other than advertising, for example to process contracts and, where applicable, for warranties as well as for documentation required under commercial and tax law.

Product reviews

We offer our users the opportunity to leave their personal comments on our products or on comments left by other users. If this feature is used, we will save the data at the time they are entered and post these together with the username that might have been selected (which may also be a pseudonym) as well as the comments and the date on which they are left.

We will also collect the IP address to enable associations to be made to the individual leaving the comments in the event that our systems are compromised or third-party rights are infringed. The data in question will be forwarded – in keeping with our obligations under law – to government agencies or – by order of the court – to individuals who may perceive that their rights have been infringed. The data will be collected for 7 days at the most. We will retain an encrypted and non-traceable version of the IP address for no more than 30 days to enable us to guard against any abuse of the review feature.

By accepting the terms of use, you are giving your consent to the data being used (legal basis: points (a) and (b) of Art. 6(1) GDPR).

Collection and use of data when visiting our web pages / Cookies

You can visit our website without providing any details about yourself. However, when you visit our websites, even, for example, if this occurs via a link in a newsletter or an advertisement, certain data will be collected and stored in so-called log files. The data that are collected – including when you visit our websites via online links in a newsletter or advertisements – solely refer to your access of the site and have no direct association to a specific person. Such data includes

No association with you personally can be made on the basis of such data, nor is such an association performed or intended without your specific consent. In those areas where we can read the date, which could theoretically lead us to establish an association with you, such as the IP address, we have ensured through corresponding truncations that any association with you is impeded.

Should we incorporate third-party content on our web pages (e.g. embedded video clips or other information), only your IP address is provided to such third parties as it will otherwise not be possible to deliver the content to your browser. Any IP addresses that are collected are erased no later than 7 days afterwards.

Cookies

If you have given us your consent, we use cookies on our website. You can check whether you have given your consent and, if so, which consent you have given, and also edit it here. You can also revoke any consent you have given there with effect for the future.

Cookies that ensure the use of features without which you could not use this website as intended are only used by us and their content is not made accessible to third parties. We use such strictly necessary cookies on the basis of point (f) of Art. 6(1) GDPR even without your consent.

Profiling user profiles

The legal term for creating automated data pools on an individual is profiling. Under Art. 4(4) GDPR, profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

We create anonymised user profiles – i.e. user profiles without personal identifiers – of a statistical nature to enable us, through an evaluation of the statistics, to draw conclusions as to the levels of interest in our content and offers and to tailor the corresponding information and offers to user interests. We also use the information to improve data security, to ward off attacks on our systems and, where applicable, to assist law enforcement authorities in the event of attacks on our systems or other criminal acts.

To analyse user behaviour, we run corresponding web analytics tools. Further information on this can be found below under »Details on web analytics and web advertising«.

You have the right to object to the profiling of personal data as well as to profile data being additionally used for advertising purposes and to withdraw any consent that you may already have given.

General safeguards

The law requires that companies establish an appropriate level of data protection. In doing so, the corresponding risk must be squared with the probability of occurrence, best available technology and the costs. We have provided for the corresponding technical and organisational measures in order to realise the security of your data and their processing in accordance with the statutory regulations. Should you have any security concerns when entering data, or have any other questions or comments, simply contact our customer service or our data protection officer. Other means of contacting us can be found again at the end of these notices.

Your personal data are encrypted when you place orders and log in to your personal account so as to ensure the data are transmitted securely. To this end, we use the SSL (Secure Socket Layer) encryption system. We implement technical and organisational measurers to safeguard our website and other systems against the loss, destruction, modification and dissemination of your data by unauthorised persons. You should always keep your access data confidential and close the browser window once you have ended your communication with us, especially when you share the computer with others.

Protecting your payment data

- Protecting card data

The payment form where our customers enter their card details is hosted at a secure data processing centre provided by our payment facilitator Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, D-96050 Bamberg, Germany. This not only ensures that none of our employees has access to your card data but also that the data protection standards of the card organisation are observed. Computop undergoes regular security checks. At the same time, Computop fulfils the so-called Payment Card Industry Data Security Standard – a security standard supported by every major credit card organisation – to ensure that you can securely pay online.

- Protected data transfer

The TLS encryption system is used to transfer data contained in the payment form (card number, expiration date, card validation code, etc.) in encrypted form to the payment service provider.

- Access to your card number

The card number is stored with our payment service provider only as an encrypted string. As a rule, the card number is never displayed or made accessible in unencrypted form. The card number is only shown in its decoded form within the network of international card organisations. The card number is used, among other things, for authorisations, bookings and crediting.

- Other payment data

When you enter your bank details, we save these data on our servers. Your card number or IBAN is not generally shown in its entirety but truncated in order to enable you to identify your bank account.

BWhen paying through PayPal, we do not receive your account or credit card data. These data have been saved by you with PayPal. We only receive the PayPal e-mail address. In all other respects, data are entered at PayPal in compliance with their security regulations.

When using the Sofortüberweisung payment facility, your data are transferred via an SSL-encrypted connection. Using your PIN and TAN, you authorise your payment transfer, which is then carried out by your bank. Neither the PIN nor the TAN are stored by us. Your bank statement data are not stored with us either but transmitted from the money transfer form to your bank directly and in encrypted form by the provider.

Internal checks

Should we provide services up-front (e.g. payment against invoice), we check –on account of our interest in ensuring that we are covered against payment defaults and our customers against identity theft – your current and previous payment history on the basis of our data and, where applicable, unusual order patterns (e.g. orders placed through different customer accounts within a short space of time but sent to the same address). The credit history data taken into consideration include outstanding payments, dunning procedures, insolvency information, debt advice, deferral of payment agreements due to payment defaults. On the basis of these data, we decide whether we can offer the requested form of payment.

Identity and credit checks through external credit agencies

Also based on the interests described above, we obtain creditworthiness information from Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany (Further information on data protection: https://www.boniversum.de/eu-dsgvo/informationen-nach-eu-dsgvo-fuer-verbraucher), providing your address data and date of birth, and receive creditworthiness information calculated based on recognised mathematical-statistical methods. The legal basis is Art. 6 para. 1 lit. f DSGVO.

We use the statistical probability values we receive about a possible payment default, which also include your address data and the results of our internal audit, for the automated decision on the desired payment and delivery options, which we restrict if necessary.

You can request that we manually review the automated decision, for example, to reject the desired payment method, and explain your own point of view and exercise your right of objection (see below for contact details).

In the event of payment problems, we reserve the right, within the framework of the legal requirements and possibilities, to transmit data on behavior not in accordance with the contract (e.g. non-payment) to the credit agency and, if necessary, to commission this or other debt collection service providers with debt collection.

The credit agencies use the data for creditworthiness information in justified cases. Transmissions may only take place if and to the extent that this is necessary to protect the legitimate interests of our company or third parties and the interests of the fundamental rights and freedoms of the persons concerned, which require the protection of personal data, do not prevail.

Legal basis

The legal basis for our running of the aforementioned checks is founded on point (b) of Art. 6(1) GDPR with regard to our ability to check your requested form of payment and point (f) of Art. 6(1) GDPR in terms of our aforementioned interests. The transfer of data may only occur if and to the extent that this is required in order to exercise the legitimate interests of our company or third parties and that these are not overridden by the interests of fundamental rights and freedoms of the data subjects which require protection of personal data.

Your rights in this regard can be found in the notices contained in Section V below.

Right to confirmation and information

Under Art. 15 GDPR, you have the right to obtain from us confirmation as to whether your personal data are being processed. Should we process such data, you have the right to free-of-charge access to your stored personal data. The right to access covers the following information:

Right to rectification

You have the right to obtain from the controller the rectification of inaccurate personal data or to have incomplete personal data completed. The controller must rectify the inaccurate data without undue delay.

Right to object

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you on the basis of a balancing of interests in accordance with point (f) of Article 6(1) GDPR; this also applies to profiling based on these provisions (cf. e.g. term II. item 2). In this case, we will no longer process your personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

You have the right to object at any time to the processing of your personal data for direct marketing purposes, with the consequence that the data will no longer be processed for these purposes.

Consent granted may be revoked with effect for the future. (See below for contact details.) No special costs arise for you (except transmission costs according to the basic rates of your provider).

Right to erasure (right to be forgotten)

a) Prerequisites for erasure

You have the right to obtain from the controller the erasure of your personal data. Please note that the right to erasure without undue delay (Art. 17 GDPR) (»Right to be forgotten«) only applies where one of the following grounds applies:

b) Extended right to be forgotten

Where we have made the personal data public and we are obliged pursuant to Article 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions to the right to erasure

Please note that, in addition to the aforementioned prerequisites, the following exceptions can justify your request for erasure being rejected:

The right to erasure does not apply to the extent that processing is necessary:

Right to restriction of processing

You have the right to the restriction of processing if the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data; or if the processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead. You also have the aforesaid right if we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims. Finally, you can exercise this right if you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your legitimate ground.

Where processing has been restricted, such personal data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. The possibility of continued storage is not affected. If the restriction of processing has been restricted pursuant to the aforementioned prerequisites, we will notify you before the restriction is lifted.

Right to data portability

You furthermore have the right to receive your personal data – in a »structured, commonly used and machine-readable format« – which you have made available to us, which we have processed based on your valid consent, or the processing of which was necessary in order to enter into and/or fulfil a valid contract. You also have the right to have the personal data transmitted directly to another controller, where technically feasible.

This right only applies if the rights and freedoms of other people are not adversely affected.

. Establishing your rights

If you have any questions or want to establish your rights, please contact our customer service (see below for contact details).

You can also contact our data protection officer, who is also responsible if you have any complaints. You can reach our data protection officer via the following e-mail address: datenschutz@jpc.de. If you feel that you have been unfairly treated or have other concerns (notwithstanding any other rights of recourse pursuant to administrative law or judicial remedies), you also have the right to lodge a complaint with the incumbent supervisory authority, especially in the Member State of your habitual residence, place of work or place of the alleged infringement.