Privacy Policy

DE / EN

Translation notice

This English version is provided solely as a convenience translation. It does not replace the German original and does not constitute a separate privacy policy. In the event of any discrepancy or question of interpretation, the German version is authoritative.

Zur maßgeblichen deutschen Datenschutzerklärung

01

Controller

Personal data means any information relating to an identified or identifiable person. We process personal data only insofar as this is necessary to operate this website, keep it secure or handle your enquiry.

02

Hosting and technical access data

This website is provided via OpenAI Sites. When you access a page, the hosting infrastructure processes technically necessary access data. This may include, in particular, the IP address, date and time, the page requested, the volume of data transferred, referrer information, browser and device information, the operating system, and status and error data.

This processing serves the secure delivery of the website, its stability, error analysis and the prevention of abusive access. Unless a more specific legal basis applies, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, functional and economically efficient operation of our website.

OpenAI provides the hosting platform. The OpenAI entity acting in the specific contractual relationship and any additional recipients or subprocessors used are determined by the contractual and privacy documentation applicable to the Sites account used.

03

Automatic website statistics

OpenAI Sites automatically provides basic statistics for published websites. In particular, these show JJK-IT aggregate figures and trends over time for page views and unique visitors. JJK-IT uses this information to assess the website's reach, technical quality and clarity. We do not use it to create individual advertising profiles.

The publicly available Sites documentation currently does not explain in detail how unique visitors are technically determined, how long the underlying data is retained, or whether information on a user's device is accessed. Insofar as the statistics are generated exclusively on the server side and without access to terminal equipment that requires consent, we base their use on Article 6(1)(f) GDPR. Our legitimate interest lies in the basic performance monitoring and improvement of our website. If access to terminal equipment that is not technically necessary were to take place, prior consent would be required. JJK-IT has not configured any additional optional analytics and will adapt its consent management as soon as the technical implementation requires and permits this.

04

Local JJK-IT Direct Assistant

The JJK-IT Direct Assistant uses only predefined answers. Questions you enter there are processed temporarily in your browser. They are not transmitted to JJK-IT, OpenAI or any other AI service, are not stored permanently and are not used for training or learning.

Only when you select an email or telephone link yourself will the corresponding application open on your device. This does not automatically send a message or place a call.

05

Contact by email or telephone

This website does not contain a contact form. If you contact us by email or telephone, we process the data you provide and the content of your enquiry in order to respond and document the communication.

If your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in orderly communication pursuant to Article 6(1)(f) GDPR. Where consent has been granted, it may additionally provide a legal basis under Article 6(1)(a) GDPR and may be withdrawn at any time with effect for the future.

06

Recipients and third-country processing

Data is disclosed only to entities that require it for the purposes described. These may include hosting, email and telecommunications providers, commissioned IT service providers, and public authorities where disclosure is required by law. The specific data-protection role of each entity depends on the actual processing and the applicable agreements.

OpenAI Sites currently does not support fixed data residency for website code, operational data, logs or website statistics. Processing outside the European Union or the European Economic Area therefore cannot be excluded. The safeguards applicable to third-country transfers in the specific contractual relationship must be obtained from the provider's current contractual and privacy documentation.

07

Retention period

We retain personal data only for as long as necessary for the relevant purpose or as required by law. Enquiry data is deleted once communication has concluded, unless contractual, evidentiary or statutory retention obligations require otherwise. Technical operational and statistical data is additionally subject to the contractual and system-based retention periods of the platform used. JJK-IT cannot independently modify these platform retention periods.

08

Cookies, external content and marketing

JJK-IT has not configured advertising or social-media trackers, newsletter technology, externally embedded videos or maps, or any of its own optional marketing cookies on this website. Contact links merely open the email or telephone application configured on your device. Technically necessary storage or access operations by the hosting platform may take place independently of this.

The Sites address delivered via Cloudflare currently sets the cookie __cf_bm. According to Cloudflare, it is used to detect and prevent automated, abusive access, is encrypted and expires after approximately 30 minutes of inactivity. Access to terminal equipment for the purpose of providing and securing the digital service expressly requested by the user is based on Section 25(2) no. 2 TDDDG; any related processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is to protect the website against attacks and abusive traffic. Cloudflare states that cookie data may, by default, also be processed in the United States.

If additional forms, analytics, marketing or embedded services are added in the future, we will update this policy and, where required, the consent management before they are used.

09

Encryption and security

The connection to this website is encrypted using TLS. We take appropriate technical and organisational measures to protect data against loss, alteration or unauthorised access. Nevertheless, absolute protection during data transmission over the internet cannot be guaranteed.

10

Your data-protection rights

Subject to the applicable legal requirements, you have in particular the right to:

• access your personal data (Article 15 GDPR),
• rectification of inaccurate data (Article 16 GDPR),
• erasure or restriction of processing (Articles 17 and 18 GDPR),
• data portability (Article 20 GDPR),
• object to processing based on legitimate interests (Article 21 GDPR),
• withdraw consent with effect for the future (Article 7(3) GDPR).

To exercise your rights, simply contact Info@JJK-IT.de. You also have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for our registered office is, in particular:

11

No automated decision-making and current version

JJK-IT does not use this website to make decisions based solely on automated processing that produce legal or similarly significant effects, nor does it create individual advertising profiles.

We update this privacy policy whenever the website, the services used or legal requirements change. The version published on this page applies, subject to the translation notice above.