Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our full Privacy Policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the “Controller” section of this Privacy Policy.

How do we collect your data?
Your data is collected in part when you provide it to us — for example, by contacting us by e-mail. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?
The automatically collected technical data is used solely to ensure the error-free and secure delivery of the website. This website uses no cookies and no analytics or tracking tools.

What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the origin, recipient and purpose of your stored personal data. You also have the right to request rectification or erasure of this data. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

2. Hosting and Domain

This website was built with the plugnpl.ai Launchpad and is hosted as an Azure Static Web App on Microsoft Azure in the West Europe region (Amsterdam, Netherlands). The hosting infrastructure is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When you access our website, only the technically necessary access data (in particular the IP address and technical connection data) required for the delivery and secure operation of the website are processed on Microsoft Azure servers.

Domain and DNS (IONOS)

The domain justidm.app is registered with 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS solely manages the domain registration and DNS records (in particular the CNAME record pointing to the Azure infrastructure). IONOS does not host any content of this website and does not process any personal data of website visitors. A data processing agreement with IONOS is therefore not required for the operation of this website.

plugnpl.ai Launchpad (own product)

The plugnpl.ai Launchpad is a product and brand of just experts GmbH. This website was built using this Launchpad and deployed to the Azure infrastructure via it. Since it is a proprietary product of the controller, no data processing by a third party takes place in this regard; the processing of personal data is entirely the responsibility of just experts GmbH. Technical provision and hosting are carried out via Microsoft Azure (see above).

Legal Basis and Data Processing Agreement

Hosting is carried out for the purpose of performing contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

We have concluded a Data Processing Agreement (DPA) with Microsoft pursuant to Art. 28 GDPR. This ensures that the personal data of our website visitors is processed only on our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:
just experts GmbH
represented by Managing Directors Daniel Stroh and Jan Manfred Hallen
Wallstraße 16
40213 Düsseldorf
Germany

Phone: +49 (0) 211 73060420
E-mail: kontakt@justexperts.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Retention Period

Unless a more specific retention period has been stated in this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, erasure will take place after those reasons no longer apply.

General Information on the Legal Bases for Data Processing

If you have given consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data within the meaning of Art. 9(1) GDPR are processed. Where data processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, where data processing is necessary for compliance with a legal obligation, we process your data on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are set out in the following sections of this Privacy Policy.

Data Protection Officer

We have appointed an external Data Protection Officer:
heyData GmbH
Schützenstraße 5
10117 Berlin
Germany

E-mail: datenschutz@heydata.eu
Web: www.heydata.eu

Data Transfers to the United States and Other Third Countries

Our hosting provider Microsoft is a company headquartered in the United States. Where personal data is transferred to the United States or other third countries, we note that these countries may not guarantee a level of data protection equivalent to that within the EU. Where an adequacy decision of the European Commission exists (e.g. the EU–U.S. Data Privacy Framework), we base the data transfer on that decision. Otherwise, the transfer is carried out on the basis of the Standard Contractual Clauses adopted by the EU Commission (Art. 46(2)(c) GDPR).

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.

Right to Object (Art. 21 GDPR)

Where data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions. The respective legal basis on which processing is based is set out in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will only be done where technically feasible.

Access, Rectification and Erasure

Within the framework of applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to rectification or erasure of this data. For this and any further questions on personal data, please contact us at any time.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data. Please contact us at any time for this purpose. The right to restriction of processing applies in the following cases:

• If you contest the accuracy of the personal data stored with us, we generally need time to verify this. For the duration of the review you have the right to request restriction of processing of your personal data.
• If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.
• If we no longer need your personal data but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of erasure.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing of your personal data.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content — such as enquiries you send to us as the website operator — this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock icon in your browser bar.

Objection to Advertising E-mails

The use of contact data published as part of the mandatory legal notice obligation for the purpose of sending unsolicited advertising and informational materials is hereby expressly prohibited. The operators of these pages reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. Data Collection on This Website

No Cookies, No Analytics Tools

This website uses no cookies and no analytics, tracking or advertising tools. No user behaviour is evaluated and no data is transmitted to analytics or advertising service providers. For this reason, no cookie consent banner is required.

Server Log Files

The host of this website (Microsoft Azure, see Section 2) automatically collects and stores information in so-called server log files, which your browser transmits automatically. These include:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimisation of its website — for this purpose, server log files must be recorded. The data is generally deleted after 7 days, unless further retention is required for security purposes.

Enquiries by E-mail or Telephone

If you contact us by e-mail or telephone (e.g. via the “Request a demo” link on this website), your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.

The data you send to us by way of contact enquiries will remain with us until you ask us to erase it, withdraw your consent to storage, or the purpose for which the data was stored no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

5. Use of Artificial Intelligence (AI)

The content of this website (in particular texts and, where applicable, images) was created with the plugnpl.ai Launchpad using artificial intelligence, or generated by AI technologies. We hereby disclose this use of AI transparently, in particular with regard to the transparency obligations under Art. 50 of Regulation (EU) 2024/1689 (the EU AI Act).

AI serves as a tool for content creation; editorial responsibility for the published content rests with just experts GmbH.

No automated individual decision-making including profiling within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you takes place on this website.

6. Video and Audio Conferencing

Data Processing

For communication with our clients we use, amongst other tools, online conferencing tools. If you communicate with us via video or audio conference over the internet, your personal data will be collected and processed by us and the provider of the respective conferencing tool. The conferencing tools collect all data that you provide or use for the tools (e-mail address and/or your telephone number). Furthermore, the conferencing tools process the duration of the conference, the start and end time of participation, the number of participants and other “contextual information” related to the communication process (metadata).

Purpose and Legal Bases

The conferencing tools are used to communicate with prospective or existing contractual partners or to provide certain services to our clients (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR).

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to Microsoft’s privacy statement: privacy.microsoft.com/en-us/privacystatement. We have concluded a Data Processing Agreement (DPA) for the use of this service.

7. Changes to This Privacy Policy

We will update this Privacy Policy whenever data processing practices or the applicable legal framework changes. The current version published on this website shall apply at all times.

The German version of this Privacy Policy shall prevail.