Privacy notice

1. Controller

First name Last name, c/o Name of the business address service, Street and number, Postcode City, Germany. Email: Privacy email.

No data protection officer is appointed, because we are not required to appoint one. For any question about your data, contact us at the email address above.

2. Visiting the website

The website is delivered by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). On each visit, Cloudflare processes the data that is technically necessary: your IP address, the date and time, the page requested, your browser and operating system. The purpose is to deliver the website securely and reliably and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure operation. Cloudflare acts as our processor. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA rely on the European Commission's adequacy decision (Art. 45 GDPR). Cloudflare keeps this data log retention period per Cloudflare's data processing agreement.

We ourselves store no data when you visit, and we write no email addresses or names into logs.

3. Consent and web analytics

On your first visit, we ask whether we may use web analytics. Until you agree, the website sets no non-essential cookies, loads no analytics script and sends no analytics data. We store your choice in your browser so that we do not ask again on every page; this is strictly necessary and needs no consent (§ 25(2) no. 2 TDDDG).

If you agree, we use PostHog (PostHog Inc., PostHog's address per its data processing agreement), with data stored in the EU, to understand how the website is used: pages viewed, referrer, device type, browser and approximate location (country). Confirm at setup: IP addresses are not stored. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). PostHog acts as our processor. Basis for access from the USA per the agreement: Data Privacy Framework or standard contractual clauses.

You can withdraw your consent at any time through the "Cookie settings" link in the footer of every page. The withdrawal applies to the future.

4. Form protection (Cloudflare Turnstile)

We protect the waitlist and organisations forms from automated submissions with Cloudflare Turnstile. Turnstile evaluates characteristics of your browser and your IP address to do so, without asking you to solve image puzzles. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against abuse. Where information on your device is read, this is strictly necessary for the service you request (§ 25(2) no. 2 TDDDG). Section 2 applies to Cloudflare.

5. Waitlist

When you join the waitlist, we process your email address, the language of the page and the time of your sign-up and confirmation, to tell you about the launch of Jeddoo and news about it.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 7 UWG). We use double opt-in: after signing up you receive an email with a confirmation link, and you are only on the waitlist once you confirm. We store the time of sign-up and confirmation to be able to prove your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

Giving your email address is voluntary; without it we cannot notify you. The waitlist is for adults. Please do not give any data about children.

You can withdraw your consent at any time, through the unsubscribe link in every email or by emailing us. The withdrawal applies to the future.

Retention: if you do not confirm your sign-up, we delete your address once 30 days have passed. We keep a confirmed address until you unsubscribe, and at most 12 months after the general launch of Jeddoo. After you unsubscribe, you receive no more emails and we delete your address. Deletions run in a regular batch, at least once a month, so an address may be kept up to one month beyond the period stated.

6. Enquiries from organisations

When you use the form on the organisations page, we process your name, your work email address, your organisation and its type, the country, your role and your message, to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering business enquiries. We delete this data 24 months after our last contact with you, or earlier if you ask. We send you no marketing on this basis.

7. Email delivery and contact management (Brevo)

For the waitlist and enquiries we use Brevo (legal name and address per Brevo's data processing agreement), with data processed in the EU. Brevo stores the contacts, sends the confirmation and information emails and handles unsubscribes. Brevo acts as our processor under a contract pursuant to Art. 28 GDPR. We do not track whether you open our emails or click links in them.

8. Recipients

Only the service providers named in sections 2 to 7, acting on our behalf, receive your data. We do not sell data or pass it on for advertising. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State where you live. The authority competent for us is data protection authority of the Land of the address, with its address.

10. Changes

We update this notice when the website or the law changes. The version published here applies.

This notice is a translation; the German version is binding.

Last updated: date