Data protection information

Name and contact details of the controller​

This data protection information applies to data processing by the following company (controller):

J.P. Morgan Mobility Payments Systems GmbH
Leopoldstrasse 244
80807 Munich
E-Mail: support@jpmmps.com

Processing of personal data when visiting our website​

At this point we would like to draw your attention to the following GDPR-relevant aspects when visiting our website:

When you visit our website, the web browser on your device automatically sends information to our web server. This information is temporarily stored in a so-called log file. In principle, the following information is recorded without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer and the name of your access provider.

The above data is processed for the following purposes:

• Ensuring a smooth connection to the website,
• To ensure a comfortable use of our website,
• Evaluation of system security and stability and
• for other administrative purposes.

The aforementioned data is received and stored exclusively by our web hosting provider, where the website is hosted. We ourselves have no access to the data. Accordingly, we cannot draw any conclusions about your person based on this data.

The legal basis for data processing when accessing our website is Art. 6 para. 1 lit. f) GDPR. Accordingly, data may be processed if this is necessary to safeguard legitimate interests and provided that the interests of the data subject - in this case yours - do not prevail. Our legitimate interest within the meaning of the above provision arises from the purposes for data collection listed above. This interest prevails in the context of a balancing of interests with regard to processing for the above-mentioned purposes.

Processing of personal data when contacting our company​

If you contact us via one of the contact channels provided on our website (e.g. email), we will process your personal data in order to respond to your request. The legal basis for this is generally Art. 6 para. 1 lit. f) GDPR due to our overriding interest in carrying out the communication. If you contact us as part of an existing or prospective contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR.

Storage of the data​

Your personal data will only be stored for as long as it is required for its intended purpose. As soon as the data is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations, the data stored by us will be deleted. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted, i.e. the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax law reasons.

Forwarding of data​

At this point, we would like to point out that we also forward your data to third parties (e.g. processors) if this is necessary to achieve the purpose or if we are otherwise legally obliged to do so. All third parties who receive your personal data have - where legally required - previously undertaken to comply with the level of data protection stipulated by the GDPR as part of an order processing agreement.

Your personal data will only be passed on to third parties if there is a legal basis for doing so in accordance with Art. 6 GDPR. This may be the case in particular if:

• you have given your express consent to this in accordance with Art. 6 para. 1 lit. a) GDPR,
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b) GDPR.
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 lit. c) GDPR, and
• the disclosure pursuant to Art. 6 para. 1 lit. f) GDPR is necessary to achieve the listed data processing purposes and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

Rights of data subjects​

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if (a) the accuracy of the data is disputed by you, (b) the processing is unlawful, but you refuse to delete it and instead demand the restriction of the use of your personal data, (c) we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
• in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

The following supervisory authority is responsible for J.P. Morgan Mobility Payments Systems GmbH:

Bayerischer Landesbeauftragter für den Datenschutz (BayLfD)
Wagmüllerstrasse 18
80538 Munich

Phone: 089 212672-0
Fax: 089 212672-50
E-mail: poststelle@datenschutz-bayern.de

Right of objection​

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.

If you wish to exercise your right to object, please send your objection, for example, by e-mail to support@jpmmps.com.

In the event of an objection, further use of the website is no longer possible.

Data security​

To ensure data security, the transmission of the content of our website is encrypted in accordance with the state of the art. To secure the data, we and the commissioned service providers with whom corresponding contractual agreements have been made use suitable state-of-the-art measures, in particular to restrict access to the data, to protect it against changes and loss, and to ensure confidentiality.

Status and updating of this privacy policy​

This privacy policy is dated April 2024. We reserve the right to update the privacy policy in due course in order to improve and/or adapt data protection.