Privacy Policy

1. SCOPE OF APPLICATION

Coco & Jay Inc. („Coco & Jay“ or „we“) is particularly concerned about protecting your privacy and personal data. With this data protection declaration we would like to inform you comprehensively about how we handle your personal data.This data protection declaration applies to the handling of your personal data when you visit our Internet pages at www.cocoandjay.com, when you contact us by e-mail, post or telephone and we subsequently provide you with services.

2. WHO IS RESPONSIBLE AND TO WHOM CAN I TURN?

Coco & Jay Inc. is responsible for the processing of personal data described in this data protection declaration.

You can contact the following office with regard to all inquiries on data protection issues:

Coco & Jay

by Georg Schufft

Reichenberger Str. 103

10999 Berlin

E-mail: info@cocoandjay.com

We are not legally obliged to appoint a data protection officer. You are welcome to contact Emmanuele Nicollela or Georg Schufft as your contact person for data protection issues.

3. WHICH DATA WE PROCESS FROM YOU?

We collect and process various personal data from you, depending on the specific processing situations. Below you will find a list of the data relating to the respective processing situation:

3.1 WHICH DATA DO WE PROCESS WHEN YOU VISIT OUR WEBSITE?

When you visit our Internet pages, we process data from you among other things:Data on the use of the Internet pages provided (e.g. browser used, operating system used, referrer url, time of the server inquiry, contents called up, duration of use, type of use);

IP address; and

other technical data comparable with the previous ones.

We process these data in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in ensuring technical functionality.

3.2 WHICH DATA DO WE PROCESS WHEN YOU CONTACT US?

Depending on your request, you can contact us via our Internet pages by e-mail or in writing. When contacting us by e-mail or post, we regularly save and process only your e-mail address, telephone number, address and the information you have provided us with in the course of contacting us.

In this case, we process your data in accordance with Art. 6 Para. 1 lit. b DSGVO on the basis of contractual or quasi-contractual obligations or to establish a contract with you.

3.3 WHAT DATA DO WE PROCESS WHEN YOU REGISTER ON OUR WEBSITE?

You can register voluntarily on our website. In this case, we only process the data entered during the registration process.

In this case, we process your data in accordance with Art. 6 Para. 1 lit. b DSGVO on the basis of contractual or quasi-contractual obligations or to establish a contract with you.

3.4 WHAT DATA DO WE COLLECT WHEN YOU REGISTER FOR OUR NEWSLETTER?

You can receive our newsletter. To do so, you need to enter your e-mail address. In this case we will use your e-mail address exclusively for sending our newsletter. In order to verify your ownership of the e-mail address provided, we carry out the so-called „double-opt-in procedure“. After registering for the newsletter, we will first send you a confirmation email. Only after clicking on the link contained in the confirmation email will we add your email address to our newsletter distribution list.

In this case we process your data in accordance with Art. 6 Para. 1 lit. a DSGVO on the basis of your consent.

If you purchase products via our online shop and provide your e-mail address, we may use this data to inform you about similar products by means of a newsletter. The legal basis for this data processing is Art. 6 para. 1 lit. f DSGVO in conjunction with § 7 paragraph 3 of the law against unfair competition (UWG). Our legitimate interest is to provide you with current information about our products and services.

You can object to receiving the newsletter at any time by sending an e-mail to info@cocoandjay.com or via the link contained in the newsletter.

3.5 WHICH DATA DO WE PROCESS WHEN WE PERSONALIZE YOUR SERVICES?

If you decide to create a custom roadmap on our website using our special algorithm and do one of our questionnaires, you can provide various information about your business and your habits. The more data you share with us, the better we can adapt our service to your needs.

In this case we also use your data to improve our algorithm. This enables us to offer you and other customers even better services in the future. It is not necessary to process your name for this purpose. Nevertheless, it cannot be excluded that these data can be assigned to you.

In this case we process your data in accordance with Art. 6 Para. 1 lit. a DSGVO in conjunction with Art. 9 para. 2 lit. a DSGVO of your express consent. You can revoke this consent at any time with effect for the future without giving reasons.

4. WITH WHOM DO WE COLLECT YOUR PERSONAL DATA?

Personal data is mainly collected directly from you, for example by visiting our website or by using the services offered, such as the possibility to contact you by e-mail.

If you interact with us through a social media site or third-party service, for example, if you „link“, follow or share our content on Facebook or other websites, we may receive social network information, including your profile information, your picture, your user ID linked to your social media account, and any other information that you allow the social network to share with third parties.

5. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS?

We process your personal data exclusively in accordance with the provisions of the relevant data protection laws. In certain situations, we also process your personal data to fulfill other legal obligations or on the basis of your express consent.

5.1 TO FULFIL CONTRACTUAL OBLIGATIONS

We process your personal data to fulfill contractual or quasi-contractual obligations or to establish a contract, for example to provide our services or to sell the products we offer. In this case, the legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

5.2 TO FULFIL LEGAL OBLIGATIONS

Insofar as we are subject to legal obligations, the compliance of which requires the processing of your personal data, we process your personal data on the basis of these legal obligations. In this case, the legal basis for processing is Art. 6 para. 1 lit. c DSGVO.

5.3 BASED ON LEGITIMATE INTERESTS

We process your personal data also for the protection of our legitimate interests, unless your interests or fundamental rights and freedoms, which require the protection of your personal data, outweigh. Subject to a weighing decision to be made in individual cases, we regularly assume that our legitimate interests prevail in the following processing situations, which are not exhaustively listed:

  • Optimization of our offers and services;
  • Analysis of the use of our Internet pages;
  • Guaranteeing the confidentiality and integrity of our IT systems; and
  • Cooperation with state authorities.

The legal basis for the processing in this case is Art. 6 para. 1 lit. f DSGVO.5.4 Based on your consent

If you have given us separate consent for the processing of your personal data, we will process your personal data within and on the basis of this consent. Consent is required, for example, for the personalisation of your services. Consent may also relate, for example, to the transfer of data for targeted advertising measures or the sending of newsletters.

Consent is always voluntary and can be revoked at any time and without giving reasons with effect for the future.

The legal basis for processing in this case is Art. 6 Para. 1 lit. a DSGVO or Art. 6 Para. 1 lit. a DSGVO in conjunction with Art. 9 para. 2 lit. a DSGVO.

6. TO WHOM DO WE PASS ON YOUR DATA?

Within the company, those persons receive your data who absolutely need it to fulfill our contractual and legal obligations.We only pass on your personal data to external recipients if there is a legal justification for doing so or if you have consented to this. External recipients can be:

  • processors: service providers we use to provide services or who are entrusted with the maintenance of our IT systems.
  • Public bodies: Authorities and state institutions, such as public prosecutors, courts or financial authorities, to which we may need to transfer personal data in individual cases.
  • Private bodies: Private bodies to which we transmit your personal data, for example lawyers (disputes, debt collection, etc.), tax consultants, auditors.

7. DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?

As part of the processes described in this privacy policy, your personal data may be transferred to entities whose registered office or place of business is not located in a member state of the European Union or in another state that is a party to the Agreement on the European Economic Area. In doing so, we will ensure prior to the transfer that, except in exceptional cases permitted by law, the recipient either has an adequate level of data protection (e.g. by means of an adequacy finding by the European Commission, by means of suitable guarantees such as certification of the recipient in accordance with the EU-U.S. Privacy Shield or the agreement of so-called EU standard data protection clauses of the European Commission with the recipient) or your express consent has been obtained. You can obtain a copy of these guarantees from us. Please use the contact details under point 2.

8. HOW LONG DO WE STORE YOUR PERSONAL DATA?

We process and store your personal data only as long as it is necessary for our processing purposes.If we use your e-mail address for our e-mail newsletter, we generally store the data until you unsubscribe from our newsletter. This does not affect our legal option to store this data for other purposes, e.g. maintaining a blacklist to ensure that e-mail addresses are no longer used for marketing purposes after un-subscription.

We store purely technical information for a maximum of 400 days.

The data collected and stored in the context of the use and provision of our Internet pages will be deleted by us at any time on request, independently and regularly within a few days, unless we have a special interest in continued storage in individual cases, such as cyber attacks.

Insofar as a longer storage period is required due to legal storage and documentation obligations or to protect our legitimate interests, e.g. in the event of possible legal disputes, your personal data will continue to be stored and processed after the expiry of the above-mentioned period. Upon full implementation of a contract or a relationship similar to a contract, we will, as far as possible, immediately block your personal data for further processing.

In the context of a contact request, we will only store your data for the time necessary to answer your contact request. Data that we process on the basis of your consent will be stored until you revoke your consent.

A final deletion will take place after expiry of the periods resulting from the statutory storage and documentation obligations, which range between two and ten years and are based, among other things, on the German Fiscal Code or the German Commercial Code.

9. YOUR RIGHTS

Below you will find a summary of your rights regarding the processing of your personal data by us:

9.1 RIGHTS OF ACCESS, DELETION, CORRECTION, RESTRICTION OF PROCESSING 

According to Art. 15 DSGVO, you have the right to information, according to which you can request confirmation as to whether we process your personal data. If this is the case, you have the right to request comprehensive information on this personal data from us.

Under Art. 16 DSGVO, you can demand that incorrect data concerning you be corrected immediately.

According to Art. 17 DSGVO, you have the right to request the deletion of your personal data if they are either (i) no longer necessary for the purposes for which they were collected, (ii) you have withdrawn your consent to processing, (iii) you are entitled to request the deletion of your personal data according to Art. 21 para. 1 DPA and there are no overriding legitimate reasons for continuing the processing, (iv) your personal data have been processed unlawfully, (v) the deletion of the personal data is necessary to comply with a legal obligation under European Union law or the law of the Member States to which Coco & Jay is subject, or (vi) the personal data have been collected in relation to information society services offered in accordance with Article 8 (1) DPA.

According to Art. 18 DSGVO, you have the right to demand the restriction of processing under the following conditions. Such a right exists if (i) you have disputed the accuracy of your personal data, (ii) the processing is unlawful and you refuse to delete the personal data and instead demand the restriction of use, (iii) the data are no longer needed for the purposes of the processing but you need them for the assertion, exercise or defence of legal claims, or (iv) you have lodged an objection to the processing in accordance with Art. 21 Para. 1 DSGVO, as long as it is not yet clear whether we have legitimate reasons for processing that outweigh yours.

According to Art. 19 DSGVO, you have the right to request information about the recipients of data to whom a correction, deletion of your personal data or a restriction of processing has been communicated.

According to Art. 20 DSGVO, you have the right to receive personal data concerning you from us in a structured, common and machine-readable format and to transfer this data to another responsible party.

If the processing or transmission of your personal data is based on your declared consent, you can revoke this consent at any time with effect for the future.

You also have the right to appeal to the competent supervisory authority against the processing of your data or against a decision taken by Coco & Jay with regard to any of the rights you have exercised.

9.2 CONTACT

For the assertion of your rights listed under point 9.1, you can contact us informally by post or e-mail at the contact details listed under point 2.

9.3 RIGHT OF OBJECTION ACCORDING TO ART. 21 DSGVO

9.3.1 CONTRADICTION ON GROUNDS OF YOUR PARTICULAR SITUATION

BY TYPE. 21 ABS. 1 DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, IF SUCH PROCESSING IS CARRIED OUT FOR THE PURPOSE OF OUR LEGITIMATE INTERESTS, INCLUDING PROFILING BASED ON SUCH DATA (E.G. FOR CREDIT ASSESSMENT). FURTHER PROCESSING OF YOUR PERSONAL DATA WILL THEN NO LONGER BE CARRIED OUT UNLESS WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

9.3.2 REVOCE AGAINST DIRECT MARKETING

BY TYPE. 21 ABS. 2 DSGVO YOU HAVE THE RIGHT TO OBJECT TO THE USE OF YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING AT ANY TIME. THIS SHALL ALSO APPLY TO PROFILING, INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THESE PURPOSES.

9.3.3 CONTACT POSSIBILITY

YOU CAN INFORMALLY DECLARE YOUR OBJECTION BY MAIL OR E-MAIL, ADDRESSED TO:

Coco & Jay Inc.

#3 242 Parkside Ave

11226 Brooklyn NY, USA

Germany

E-Mail: info@cocoandjay.com

10. IS THERE AN OBLIGATION ON YOUR PART TO PROVIDE PERSONAL DATA?

For the use of our internet pages there is neither a contractual nor a legal obligation to provide us with your personal data. However, if you wish to contact us or purchase our services and products, certain information may be required in order for us to process your request.

11. IS THE PROCESSING BASED ON AUTOMATED DECISION MAKING OR PROFILING?

You have the right not to be subject to a decision based solely on automated processing, including profiling, where the decision is not necessary for the conclusion or performance of a contract, is not required by mandatory law or is not based on your explicit consent.

Coco & Jay does not use automated decision making procedures, including profiling, unless we have explicitly informed you of this.

12. WHAT KIND OF COOKIES AND TRACKING TECHNOLOGY DO WE USE?

For the provision, maintenance and analysis of our websites and their use, we use various third-party software tools and ourselves, which are regularly based on the use of cookies, Flash cookies (also called Flash Local Shared Objects), web beacons or similar technologies (collectively, „tracking technologies„). Tracking technologies can help us learn how you use our services (e.g., the pages you view or the links you click and other actions you take with the services), give us information about your browser and online usage patterns (e.g., IP address, log data, browser type, browser language, referring/exit pages and URLs, pages viewed, whether you opened an email, links clicked on, etc.), and information about the devices you use to access our services. Tracking technologies enable us to link the devices you use to access our services in such a way that we can recognize you on the various devices you use and contact you if necessary.

You can limit the use of tracking technology by changing your browser settings. You can determine which access you grant us to your devices and whether and for how long cookies can be stored on your device. Furthermore, you can delete already stored cookies at any time. Please note that the functionality of our Internet pages may be impaired after deactivating all cookies. Similar functions (such as Flash cookies), which are used by so-called browser add-ons, can be deactivated or deleted by changing the settings of the browser add-on or via the website of the manufacturer of the browser add-on.

12.1 WHAT ARE COOKIES?

A cookie is a small file that is transferred from the website’s host server during the use of a website and stored on the user’s device (desktop computer, laptop, tablet, smartphone, other Internet-enabled devices) by the browser used. Cookies are used to store information about the user and to be able to retrieve it when the website is called up again.

12.2 WHAT ARE COOKIES USED FOR?

Cookies help us understand how our Web sites are used, analyze trends, administer the site, track user’s movements around the site, gather demographic information about our user base as a whole, allow you to navigate efficiently between pages, remember your preferences and settings on our sites, and generally improve your browsing experience. We use tracking technologies to (i) remember information so that you do not have to re-enter it during your visit or a subsequent visit, (ii) recognize you across multiple devices, (iii) monitor the functionality and performance of our websites, (iv) to collect aggregate metrics regarding total number of visitors, total traffic, usage and demographic patterns on our websites, (v) to diagnose and resolve technical issues, and (vi) to implement other plans and improvements to our website.

Common Internet browsers offer the option of not accepting certain cookies. If you set these preferences, you may not be able to use all the features of our website without preferences.

12.3 WHAT TYPES OF COOKIES ARE USED ON OUR WEBSITE?

The cookies used on our website can generally be classified into one of the following categories: Mandatory cookies, analysis cookies and function-related cookies.

12.3.1 ESSENTIAL COOKIES

Essential cookies enable basic functions and are necessary for the proper function of the website.

We process essential cookies in accordance with Art. 6 Para. 1 lit. b DSGVO.

12.3.2 STATISTICS COOKIES

Statistics cookies collect information anonymously. This information helps us to understand how our visitors use our website.

We process statistics cookies in accordance with Art. 6 Para. 1 lit. a DSGVO on the basis of your consent.

12.3.3 PERSONALISATION COOKIES

Personalisation cookies are used by third-party advertisers or publishers to display personalised ads. They do this by tracking visitors across websites.

We process function-related cookies in accordance with Art. 6 para. 1 lit. a DSGVO.

12.4 HOW LONG ARE COOKIES STORED ON MY DEVICES?

The length of time the cookie is stored depends largely on whether it is a „permanent“ or „session-related“ cookie. Session-related cookies are deleted after you leave the website that set the cookie. Persistent cookies remain on your device even after you have finished surfing, until they are deleted or until they expire.

12.5 FURTHER INFORMATION ON COOKIES

For the provision of our website we use the services of the third party providers. These third party tools belong to the categories of cookies described above and help us to provide our services on our website or to advertise our products and services over the Internet.

You can find a full list of our cookies following this link: Cookie Preferences

13. TECHNICAL PROTECTION MEASURES

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Version: June 2020