Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data under this website is:

The data controller determines the purposes and means of the processing of personal data in accordance with Article 4(7) of the GDPR.

2. Data Protection Contact

For all enquiries relating to data protection, the processing of your personal data, or to exercise any of your rights under the GDPR or UK GDPR, please contact:

We aim to respond to all data protection enquiries and requests within 30 days of receipt. If you submit a data subject access request, we will confirm receipt and provide our response within the statutory time frame.

3. Information We Collect

We collect and process the following categories of personal data depending on how you interact with our website and services:

a) Personal Data You Provide

When you submit a project request, contact form, or otherwise communicate with us, we may collect:

• Full name
• Email address
• Phone number
• Business or company name
• Business website URL
• Business location or address

b) Project Details

Information you provide in relation to your project inquiry, including:

• Service requirements and specifications
• Budget range and timeline preferences
• Project descriptions and reference materials

c) Technical Data

When you visit our website, we automatically collect certain technical information, including:

• IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Screen resolution
• Referring website or source

d) Usage Data

We may collect data about how you interact with our website, including:

• Pages visited and navigation paths
• Time spent on individual pages
• Click interactions and scroll depth
• Date and time of visits

e) Cookie Data

We use cookies and similar technologies as described in Section 6 below. Cookie data may include session identifiers, language preferences, and analytics identifiers (with your consent).

4. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data only where we have a lawful basis to do so under Article 6(1) of the GDPR. The legal bases we rely on are:

a) Consent (Art. 6(1)(a) GDPR)

Where you have given explicit consent for a specific purpose. This applies to:

• Analytics cookies and tracking technologies
• Marketing communications and newsletters
• Optional data collection beyond what is strictly necessary

You may withdraw your consent at any time by contacting us at jjplatformstudio@gmail.com or by adjusting your cookie preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

b) Contractual Necessity (Art. 6(1)(b) GDPR)

Processing that is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract. This applies to:

• Contact information provided through project inquiry forms
• Project details required to prepare proposals and quotations
• Communication regarding ongoing projects and deliverables
• Payment processing and invoicing

c) Legitimate Interest (Art. 6(1)(f) GDPR)

Processing that is necessary for our legitimate interests, provided these are not overridden by your fundamental rights and freedoms. This applies to:

• Website security, fraud prevention, and abuse detection
• Improving our website functionality and user experience
• Technical data collection for website operation (essential cookies)
• Internal administration and record-keeping

d) Legal Obligation (Art. 6(1)(c) GDPR)

Processing that is necessary to comply with a legal obligation. This applies to:

• Retention of invoices and financial records under German tax law (Abgabenordnung, AO)
• Compliance with regulatory and law enforcement requests
• Record-keeping obligations under applicable commercial law (Handelsgesetzbuch, HGB)

5. How We Use Your Information

We use the personal data we collect for the following purposes:

• Responding to enquiries: To review, respond to, and process project requests and contact form submissions.
• Providing services: To deliver web development, design, and related services, including preparing proposals, managing projects, and communicating deliverables.
• Project updates: To send you updates regarding the status and progress of your project, including milestones, deliverables, and scheduling changes.
• Service improvement: To analyse usage patterns and feedback to improve our website, services, and user experience.
• Security: To protect our website, systems, and users from unauthorised access, fraud, and other malicious activity.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, including tax obligations and commercial record-keeping.

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significant effects.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies in accordance with the GDPR, the ePrivacy Directive (2002/58/EC), and the German Telecommunications Telemedia Data Protection Act (TDDDG). When you first visit our website, a cookie consent banner will appear allowing you to choose which categories of cookies you wish to accept.

a) Essential Cookies

These cookies are strictly necessary for the operation of our website and cannot be disabled. They are set in response to actions you take, such as setting your language preference or logging in. No consent is required for essential cookies under Article 5(3) of the ePrivacy Directive.

• Session management cookies
• Language and locale preference cookies
• Security and CSRF protection cookies
• Cookie consent preference cookie

b) Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting anonymised usage data. Analytics cookies are only set with your explicit consent.

• Visitor count and traffic source tracking
• Page view and navigation path analysis
• Session duration and engagement metrics

c) Functional Cookies

These cookies enable enhanced functionality and personalisation, such as remembering your language preference across visits. They may be set by us or by third-party providers whose services we have integrated.

• Language and regional preference storage
• User interface personalisation settings

Managing Your Cookie Preferences

You can manage your cookie preferences at any time through the cookie settings accessible via the cookie consent banner or your browser settings. Please note that disabling certain cookies may affect the functionality of our website. You may also delete cookies already stored on your device through your browser settings.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to any third party.

We may share your personal data with the following categories of third-party service providers, solely for the purposes described in this policy and under appropriate data processing agreements (Auftragsverarbeitungsverträge) in accordance with Article 28 of the GDPR:

• Hosting providers: Our website is hosted on Vercel, Inc., which processes technical data necessary for delivering the website. Vercel acts as a data processor on our behalf.
• Payment processors: If payment services are used, your payment data is processed by our payment service provider. We do not store full payment card details on our systems.
• Email service providers: We may use third-party email services for sending transactional and project-related communications.

All third-party processors are contractually obligated to process your data only on our instructions, to maintain confidentiality, and to implement appropriate technical and organisational security measures.

We may also disclose your personal data where required by law, regulation, court order, or governmental request.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) and the United Kingdom. This includes transfers to the United States (for example, where our hosting provider Vercel operates infrastructure).

Where we transfer personal data outside the EEA or UK, we ensure that appropriate safeguards are in place in accordance with Articles 44 to 49 of the GDPR and the UK GDPR, including:

• Adequacy decisions: Transfers to countries that the European Commission or UK Secretary of State has determined provide an adequate level of data protection (Art. 45 GDPR).
• Standard Contractual Clauses (SCCs): Where no adequacy decision exists, we rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) or the UK International Data Transfer Agreement / Addendum, as appropriate, to ensure your data is protected.

You may request a copy of the safeguards we have put in place by contacting us at jjplatformstudio@gmail.com.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods are as follows:

Once the applicable retention period expires, your personal data will be securely deleted or anonymised. If deletion is not possible (for example, because the data is stored in backup archives), we will securely isolate it from any further processing until deletion is feasible.

10. Your Rights Under the GDPR (Art. 15–22)

Under the EU GDPR and UK GDPR, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to conditions and exemptions under applicable law.

• Right of access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and, if so, to request a copy of that data along with information about the processing.
• Right to rectification (Art. 16): You have the right to request the correction of inaccurate personal data and to have incomplete data completed.
• Right to erasure (Art. 17): You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing, for example where you withdraw consent or the data is no longer necessary for the original purpose.
• Right to restriction of processing (Art. 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of the data or assess an objection.
• Right to data portability (Art. 20): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
• Rights relating to automated decision-making (Art. 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. We do not currently engage in such automated decision-making.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please submit a request by email to jjplatformstudio@gmail.com. We may need to verify your identity before processing your request. We will respond to your request within 30 days. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay within the initial 30-day period.

There is no fee for exercising your rights. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request, in accordance with Article 12(5) of the GDPR.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority under Article 77 of the GDPR.

United Kingdom

Germany

We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority. Please contact us first at jjplatformstudio@gmail.com.

12. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect or process personal data from children under 16 years of age. The age threshold of 16 reflects the requirements of Article 8 of the GDPR and Section 8 of the German BDSG.

If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that data as promptly as possible. If you believe that we may have collected personal data from a child under 16, please contact us immediately at jjplatformstudio@gmail.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make changes, we will update the “Last updated” date at the top of this page.

For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify you directly, for example by sending an email to the address we have on file (where applicable) or by displaying a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: