Privacy Notice

(Last updated: 03.09.2025) 

 

wespond UG (hereinafter: "we", "us") welcomes your visit to our website www.meetjamie.ai (hereinafter: "Website"), our web app app.meetjamie.ai (hereinafter: "Web App") and mobile application. Below you will find the privacy notice for our website. Following this, you will find the privacy notice for our web app and afterwards for the mobile application.

Our principle is to collect only what we need and to process this information solely to provide you with the service you expect.

  1. Controller

The controller for the processing of personal data on our website within the meaning of the General Data Protection Regulation (hereinafter: "GDPR") is:

 

wespond UG (limited liability) 

Alte Kölner Straße 25a 51503 Rösrath 

Email: privacy@meetjamie.ai 

  1. Data Protection Officer

Our appointed Data Protection Officer is:

 

Kertos GmbH 

Briennerstraße 41 

80333 Munich 

Germany 

Email: dsb@kertos.io 

  1. What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, or IP address. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, for example through the anonymization of information, is not personal data. The processing of personal data (e.g., collection, querying, use, storage or transmission) always requires a legal basis, such as your consent.

  1. Data processing on our website

Provision and use of the website

Scope and purpose of the data processing

We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services or information.

When you access and use our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

 

The following information is collected without your intervention and stored until its automatic deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring the comfortable use of our website
  • For IT security purposes

Legal basis

Article 6(1)(f) GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a website and to enable secure and comfortable use, thus serving to protect a legitimate interest of our company.

Storage duration and data deletion

As soon as the aforementioned data is no longer required for the display of the website, it is deleted. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. The user therefore has no possibility to object. Further storage occurs in individual cases if required by law.

Third parties

Host

For hosting the website, we use an external service provider, Webflow, Inc, 398 11th St., Floor 2, San Francisco, CA 94103 (hereinafter: "Webflow"). Your personal data is transferred to Webflow to provide the services you request. Webflow's servers are located in the United States, therefore it is possible that the collected personal data is transferred to the United States. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-US Data Privacy Framework. "Webflow" is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR.

For more information on data protection at Webflow, please visit: https://webflow.com/legal/eu-privacy-policy.

Cloud Storage

The technical infrastructure for the display of the website is provided by cloud servers from Google Cloud, offered by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Through the use of Microsoft Azure, the following personal data is processed: 

  • Your IP address
  • Date and time of the request
  • Domain of the website
  • the type of browser used

The data processing is necessary to provide you with the requested website. The legal basis is Article 6(1)(f) GDPR, with our legitimate interest lying in the provision of the technical infrastructure, as otherwise it would not be possible to operate the website.

The service provider is based in the EU. A server location in Germany has also been chosen. However, it cannot be ruled out that data may also be transferred to the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR. For more information on data protection at Google Cloud, please visit: https://cloud.google.com/privacy?hl=de.

Fonts

To display the contents of our website, we use "Google Fonts," provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). 

To integrate Google Fonts, the fonts are loaded from a Google server. This typically involves the transmission of the following data: 

  • IP address 
  • Referrer URL
  • Operating system
  • Browser type
  • Screen resolution
  • Browser language setting

Your data is generally transferred to a Google server in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. "Google" is certified within this framework, which is why such transfers are based on the legal grounds of Article 45 GDPR. We would like to point out that Google may transfer this information to third parties if required by law or if third parties process these data on behalf of Google. 

More information about Google's privacy policy can be found at: https://policies.google.com/privacy.

  1. International Data Transfer

We mainly process your data within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers may be located outside the EEA in so-called "third countries." The General Data Protection Regulation imposes strict requirements on the transfer of personal data to third countries. All our data recipients must meet these requirements. Before we transfer your data to a service provider in a third country, each service provider is first reviewed for their level of data protection. A service provider is only selected if they can demonstrate an adequate level of data protection outside the EEA. Regardless of whether our service providers are located within the EEA or in third countries, each service provider must conclude a data processing agreement with us. Additional requirements must be met for service providers outside the EEA. According to Art. 44 ff. GDPR, personal data can be transferred to service providers who meet at least one of the following conditions: 

•The European Commission has determined that the third country ensures an adequate level of protection (e.g., USA and UK). 

•Standard contractual clauses have been included in our contract with the data recipient (including any additional measures if necessary). 

•Other appropriate safeguards are provided according to Art. 46 GDPR (e.g., Binding Corporate Rules). 

•In exceptional cases according to Art. 49 GDPR

  1. Recipients of Personal Data 

Within our company, only those individuals who need your personal data for the respective purposes have access to it. Your personal data will only be disclosed to external recipients if we are legally entitled to do so or if you have consented. Below is an overview of the respective recipients: 

 

  • Processors: Group companies or external service providers, e.g., in the areas of technical infrastructure and processing, maintenance, and payment processing, who are carefully selected and controlled. The processors may only use the data according to our instructions. 
  • Public Authorities: Authorities and state institutions, such as tax authorities, prosecutors, or courts, to whom we transmit personal data (must), e.g., to fulfill legal obligations or to safeguard legitimate interests 
  1. Tracking

Scope and Purpose of Data Processing

Various tracking technologies are used on our website. These include, among others, setting cookies, creating a recognizable value by combining various device and browser information (Device Fingerprinting), or using so-called "Universal IDs". In the following, the term "cookies" is used for any tracking technology.

Cookies are data sets that are stored on your computer when you visit our website and allow your browser to be reassigned. Cookies store information such as your language settings, for the duration of your visit to our website, or the inputs you make there.

There are different types of cookies. Session cookies are temporary cookies stored in the user's internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and stored in the user's browser for a predefined period. First-party cookies are set by the website the user visits. Only this website is authorized to read information from the cookies. Third-party cookies are set by organizations that do not operate the website the user visits.

Cookies can also be differentiated between technically necessary, functional, and advertising cookies. The former are necessary to ensure basic functions of the website (e.g., storing the language setting). Functional cookies collect information about the user's behavior and whether they receive error messages. Advertising cookies, on the other hand, are used to offer the user tailored advertising.

Legal Basis

The legal basis for processing personal data using technically necessary cookies is due to the described usage purposes, Article 6(1)(f) GDPR, as we have an interest in the user-friendly presentation of our website. If you have given us your consent to the use of functional and advertising cookies via a notice provided by us on the website ("cookie banner"), the legality of the use is also governed by Article 6(1)(a) GDPR.

Storage Duration and Data Deletion

As soon as the data transmitted to us via cookies is no longer required to fulfill the purposes described above, this information is deleted. Further storage occurs only in individual cases if required by law.

Configuration of Browser Settings

Most browsers are set to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. We would like to point out that you may no longer be able to use all the functions of our website if you disable cookies via your browser settings. You can also delete cookies already stored in your browser or display the storage duration via your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since different browsers may vary in their respective functions, we ask you to use the respective help menu of your browser for configuration options.


Consent Management

To manage consents for the use of cookies, we use the service Cookiebot by Usercentrics. Cookiebot helps us save and enforce your preferences regarding the use of cookies on our portal. Your consent data is transmitted to Usercentrics A/S, the operator of Cookiebot. The service provider is based in the EU and complies with the requirements of the GDPR. Further information on data protection at Cookiebot can be found at:https://www.cookiebot.com/de/privacy-policy/.

Data processing is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis is Article 6(1)(c) GDPR as well as Article 6(1)(f) GDPR, justified by our interest in fulfilling the legal requirements for consent management.


Cookieliste 

NAME 

Provider

Purpose

Duration

_ga

Google Analytics

Purpose is the storage of an ID for unique user identification for website usage analysis.

1 year 1 month

_gcl_au

Google Tag Manager

Purpose is the storage of an ID for essential website functions.

2 months 29 days

_gcl_ls

Google Tag Manager

Purpose is the storage of an ID for critical website functions without expiration date.

unlimited

UserMatchHistory

LinkedIn

Purpose is the storage of an ID to support functional services on LinkedIn.

30 days

bscookie

LinkedIn

Purpose is the storage of an ID to ensure functional improvements on the LinkedIn platform.

11 months 31 days

AnalyticsSyncHistory

LinkedIn Ads

Purpose is the storage of an ID to provide targeted advertising via LinkedIn.

30 days

__cf_bm

LinkedIn Ads

Purpose is the storage of an ID for efficient delivery of advertising on LinkedIn.

30 minutes

ar_debug

LinkedIn Ads

Purpose is the storage of an ID to support debugging of ad delivery mechanisms on LinkedIn.

1 month 10 hours

bcookie

LinkedIn Ads

Purpose is the storage of an ID to improve analysis of advertising performance on LinkedIn.

11 months 31 days

li_sugr

LinkedIn Ads

Purpose is the storage of an ID to support personalized advertising on LinkedIn.

2 months 29 days

lidc

LinkedIn Ads

Purpose is the storage of an ID to manage active advertising sessions on LinkedIn.

1 day

SRM_B

Microsoft Advertising

Purpose is the storage of an ID to facilitate ad audience targeting and measurement.

1 year 25 days

ANONCHK

Microsoft Clarity

Purpose is the storage of an ID for statistical analysis of website usage behavior.

10 minutes

CLID

Microsoft Clarity

Purpose is the recording and analysis of user behavior to improve website performance.

11 months 31 days

MR

Microsoft Clarity

Purpose is the analysis of user behavior to understand visitor traffic over short periods.

7 days

MUID

Microsoft Clarity

Purpose is the storage of an ID for long-term analysis and reporting.

1 year 25 days

Priority

Microsoft Clarity

Purpose is the management of session data for real-time analysis of user interaction.

session

SM

Microsoft Clarity

Purpose is the collection of session data for immediate analysis of user interaction.

session

_clck

Microsoft Clarity

Purpose is the storage of persistent data for consistent user session analysis across visits.

11 months 31 days

_clsk

Microsoft Clarity

Purpose is the consolidation of page views within a session for regular overview.

1 day

_cltk

Microsoft Clarity

Purpose is the management of session data for immediate tracking and analysis.

Session

  1. Analysis

We use tracking and analysis tools to ensure continuous optimization and needs-based design of our website. Tracking measures also allow us to statistically record the use of our website by visitors and use the insights gained to further develop our online offer for you. If you have given us your consent to use cookies by means of a notice provided by us on the website (“cookie banner”), the lawfulness of the use is also determined according to Article 6 (1) sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.


Clarity

This website uses Microsoft Clarity, a web analysis service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter: “Microsoft”). Clarity uses “cookies” and similar tracking technologies to analyze user behavior on our website and provide visual heatmaps and session recordings.

The information stored in these cookies, including the IP address, device model, browser type, and interaction data (e.g., clicks, scrolling behavior, dwell time), is usually transferred to a Microsoft server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Microsoft is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with Microsoft.

When using Microsoft Clarity, it cannot be ruled out that Microsoft collects additional personal data besides the IP address. We point out that Microsoft may transfer this information to third parties if required by law or where third parties process this data on behalf of Microsoft.

Microsoft uses the information generated by the cookies to provide analyses of website usage, improve user experience, and identify technical errors.

You can prevent the storage of cookies in your browser settings. However, we point out that in this case, you may not be able to use all the functions of this website to their full extent.

Processing is based on your consent. You can revoke your consent to processing at any time. However, this does not affect the lawfulness of the processing carried out up to that point.

For more information on data protection at Microsoft Clarity, please visit: https://privacy.microsoft.com/de-de/privacystatement.


Google Tag Manager

This website uses Google Tag Manager, provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Tag Manager enables the management of website tags. When you visit the website, an HTTP request is sent to Google. This transfers device information (such as your IP address) to Google and within a Google server in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis of Article 45 GDPR.

When using Google Tag Manager, it cannot be ruled out that the data collected by Google also includes other personal data. We inform you that Google may transfer this information to third parties if legally required or where third parties process this data on behalf of Google.

Processing is carried out exclusively after your explicit consent. You can revoke your consent to processing and transmission to third countries at any time in the consent tool “cookiebot”. This does not affect the lawfulness of the previous processing.

More information on data protection at Google can be found at:https://policies.google.com/privacy.


Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Analytics uses “cookies” and similar tracking methods such as device fingerprinting.

The information stored in these cookies, e.g., about the time, place, and frequency of your use of our website, is usually forwarded to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, so-called standard contractual clauses (SCC) have been concluded with “Google”. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics also collect other personal data besides the IP address. We inform you that Google may transfer this information to third parties if legally required or where third parties process this data on behalf of Google.

Google will use the information generated by the cookie on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google, according to Google.

You can generally prevent the storage of cookies by setting your browser software accordingly. However, we inform you that in this case, you may not be able to fully use all functions of this website.

You can revoke your consent to processing and transmission to third countries at any time in the consent tool “cookiebot”. This does not affect the lawfulness of the previous processing.

More information on data protection at Google can be found at:https://policies.google.com/privacy.


Facebook Pixel

This website uses the so-called Facebook Pixel, an analysis tool by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta"). This tool helps measure the effectiveness of advertisements on Facebook (conversion tracking) and display targeted advertising to interested users.

When visiting our website, a direct connection to Meta's servers is established via the Facebook Pixel. This allows Meta to recognize that you have visited our website and link this behavior to your Facebook profile, provided you have one. The Facebook Pixel collects your IP address, browser information, visited pages, and other device-related data. Meta may use this information for its own advertising purposes. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Meta is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. In addition, standard contractual clauses (SCC) have been agreed with Meta. When using the Facebook Pixel, it cannot be ruled out that other personal data may also be collected. We inform you that Meta may potentially transfer this information to third parties, if required by law or if third parties process this data on behalf of Google.

You can revoke your consent to processing and transfer to third countries at any time in the consent tool "cookiebot". The legality of previous processing remains unaffected.

Further information on the processing of your data by Meta can be found in Meta's privacy policy: https://www.facebook.com/about/privacy.


LinkedIn Conversion

This website uses conversion tracking provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (hereinafter: "LinkedIn"). LinkedIn uses "cookies" and similar tracking methods like device fingerprinting.

The information stored in these cookies, such as the time, location, and frequency of your use of our website, is generally transmitted to a LinkedIn server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. LinkedIn is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with LinkedIn.

When using LinkedIn, it cannot be ruled out that the cookies set by LinkedIn may collect other personal data in addition to the IP address. We inform you that LinkedIn may potentially transfer this information to third parties, if required by law or if third parties process this data on behalf of LinkedIn.

LinkedIn will use the information generated by the cookie about this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.

You can generally prevent the storage of cookies by setting your browser software accordingly. However, we inform you that if you do so, you may not be able to use all the functions of this website to their full extent.

The processing is based on your consent. You can revoke your consent to processing at any time. However, this does not affect the legality of previous processing.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy


Microsoft Ads

This website uses Microsoft Ads, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (hereinafter: "Microsoft"), to display targeted advertisements and analyze the effectiveness of advertising.

The following personal data is processed as part of the use of Microsoft Ads:

  • Your IP address
  • Date and time of the request
  • Pages visited on our website
  • Interactions with the advertisements
  • Click behavior and conversion data

The data processing is carried out to display relevant advertisements to you that may be of interest to you and to measure the effectiveness of these advertising measures. The legal basis for this is Article 6(1)(f) GDPR, where our legitimate interest lies in carrying out marketing measures and measuring advertising effectiveness.

Microsoft Ads uses cookies to enable the collection of data. These cookies can also be used to make the ads more relevant to you and to track your interactions with the ads.

Microsoft stores the collected data on servers in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Microsoft is certified within this framework, which is why such transfers are based on the legal basis under Article 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with Microsoft.

You can prevent data collection by Microsoft Ads by disabling cookies in your browser settings or using Microsoft's opt-out tool.

Further information on data protection at Microsoft Ads can be found at: https://privacy.microsoft.com/de-de/privacystatement

  1. Data Security and Security Measures

We are committed to treating your personal data confidentially. To prevent manipulation, loss, or misuse of your data stored with us, we take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress.

However, we inform you that due to the structure of the Internet, it is possible that data protection regulations and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data - for example, when transmitted by email - can be viewed by third parties. We have no technical influence on this. It is your responsibility as a user to protect the data you provide against misuse by encryption or other means.

  1. Data Storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires unless further storage of the data is necessary for the conclusion or fulfillment of a contract.


Web App

Data Processing on our Web App

Provision and Use of the Web App

Scope and Purpose of Data Processing

We collect and use personal data of our users only to the extent technically necessary to provide a functional Web App and our content and services or information.

When you access and use our Web App, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.


The following information is collected without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Web App from which access is made (Referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the Web App
  • Ensuring comfortable use of our Web App
  • For IT security purposes

Legal Basis

Article 6(1)(f) GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a Web App and to enable secure and comfortable use, thus serving the legitimate interest of our company.


No Use of Workspace APIs for AI/ML Training

In connection with the use of Google Workspace and the associated APIs, we clarify that we do not use personal data or other user data to develop, improve, or train artificial intelligence (AI) or machine learning (ML) models. In particular, no storage, analysis, or other processing of content provided via Workspace services (e.g. Gmail, Google Drive, Google Cloud) is carried out for these purposes.


Storage Duration and Data Deletion

Once the aforementioned data is no longer required for the display of the Web App, it is deleted. The collection of data for the provision of the Web App and the storage of data in log files is imperative for the operation of the Web App. Therefore, the user has no possibility to object. Further storage occurs in individual cases if required by law.

Third Parties

Cloudflare

To provide this website, the technical infrastructure is operated using servers from Cloudflare, offered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (hereinafter referred to as "Cloudflare").

In the context of using Cloudflare, the following personal data is processed:

  • IP address
  •  Date and time of the request
  • Domain of the website
  • The browser type and operating system used

The data processing is based on Article 6(1)(f) GDPR, where our legitimate interest lies in the provision and optimization of our website, its security, and performance improvement. 

Cloudflare is headquartered in the USA. Data transfers to the USA cannot be ruled out. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Cloudflare is certified within this framework, which is why such transfers are based on Article 45 GDPR. 

Further information about data protection at Cloudflare can be found at: https://www.cloudflare.com/de-de/privacypolicy/

Modal

To provide this website, we use the technical infrastructure of the cloud computing system from Modal.

In the context of using Modal, the following personal data is processed:

  • Your IP address
  • Date and time of the request
  • Domain of the website
  • The type of browser and operating system used

The data processing is necessary to provide you with the requested website. The legal basis for this is Article 6(1)(f) GDPR, where our legitimate interest lies in providing the technical infrastructure, as it would otherwise be impossible to operate the website.

Modal stores data on servers whose location is not explicitly stated. Therefore, data transfers to third countries cannot be ruled out. We ensure that appropriate safeguards are in place in accordance with Article 46 GDPR to ensure an adequate level of data protection.

Further information on data protection at Modal can be found at: https://modal.com/legal/privacy.

Content-Delivery-Network

On our website, we use the service "Vercel," provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, as a Content Delivery Network (CDN). When using the service, the following data is transmitted to Vercel Inc.:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL (the previously visited page)
  • Access time

The purpose of "Vercel" is to accelerate and optimize the delivery of our website's content. The service supports the efficient provision of our web content worldwide and helps us reduce loading times and improve the availability of our website. The information is generally transmitted to a Vercel server in the USA and stored there.

The data is deleted after transmission as soon as it is no longer required for the purpose of its collection.

The use of Vercel is based on Article 6(1)(f) GDPR. We have a legitimate interest in the most reliable and fast presentation of our website.


AI-Functions

Anthropic and OpenAI

To provide AI services, AI development, and research, we collaborate with OpenAI, L.L.C. (3180 18th St, San Francisco, CA 94110, USA) and Anthropic, PBC (164 Townsend Street, San Francisco, CA 94107, USA). In the context of this collaboration, various types of data are processed, including input data such as text entries and prompts, user-generated content such as chat histories and generated texts, usage data such as frequency of interaction and session duration, as well as feedback data such as ratings and suggestions for improvement. The processing of this data is carried out, depending on the specific use case, based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, for the performance of a contract or to take steps prior to entering into a contract in accordance with Art. 6 para. 1 lit. b GDPR, or on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Your data will be stored for a maximum of 12 months, unless a longer retention is required for research or development purposes. As both companies are based in the USA, a data transfer to a third country takes place. This transfer is carried out on the basis of the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR in order to ensure an adequate level of data protection. Further information on data processing can be found in the privacy policies of OpenAI and Anthropic.

Eleven Labs

As part of our services, we use Eleven Labs Inc., 54 W 21st St, New York, NY 10010, USA, for the creation of synthetic voices and speech output. The following data may be processed to provide the desired speech synthesis functions:

  • Audio data (e.g., voice recordings and samples)
  • Text data (e.g., texts to be synthesized)
  • User settings (e.g., selected voice or speech model) 
  • Metadata (e.g., creation date and project name) 

The processing of this data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR or for the performance of a contract in accordance with Art. 6 para. 1 lit. b GDPR, depending on the specific context of use. Your data will be stored for the duration of your use of our service and deleted 30 days after the end of your use, unless legal retention obligations exist. Since Eleven Labs is based in the USA, a data transfer to a third country may occur. This transfer is carried out based on standard contractual clauses according to Art. 46 para. 2 lit. c GDPR to ensure an adequate level of data protection. Further information on data processing by Eleven Labs can be found in their privacy policy. 

Upstash

As part of our audio and summarization pipeline, we utilize cloud services from Upstash, Inc., 2261 Market Street #4667, San Francisco, CA 94114, USA. Two specific tools are used: Redis for temporary storage, caching, and rapid data retrieval, and QStash for communication and queue management. Redis processes interim data such as audio metadata, processing status, temporary audio files, and intermediate results. QStash processes messages including processing tasks, status information, and metadata like timestamps and task priorities. Data is processed to fulfill contractual obligations (Art. 6(1)(b) GDPR) or based on our legitimate interests (Art. 6(1)(f) GDPR). Data retention varies by tool: Redis data is stored for up to 24 hours or until processing is complete; QStash data is retained for up to 7 days after task completion. As Upstash is located in the United States, data is transferred to a third country under Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure adequate data protection.

Log Management 

BetterStack 

We use BetterStack, a service of Better Stack, Inc., 2261 Market Street #5181, San Francisco, CA 94114, USA, for monitoring and analyzing server and application logs. This is used for error analysis, performance optimization, and security monitoring. 

Within the scope of using BetterStack, the following personal data are processed: 

  • User's IP address 
  • Timestamp of server requests 
  • Browser type and operating system 
  • Error messages and application logs 

The processing of these data is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR to ensure the security and stability of our platform. 

BetterStack can transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. BetterStack is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. 

More information on data protection at BetterStack can be found at: https://betterstack.com/privacy.  


Functional

For error and performance monitoring of our applications, we use Sentry (Functional Software, Inc., 1501 Mariposa St #408, San Francisco, CA 94107, USA). Sentry processes data such as:

  • error reports (including stack traces and error codes)
  • performance metrics (e.g., load and response times)
  • device information (browser type and operating system)
  • context data (affected URL and timestamp) 

Processing is based on our legitimate interests in accordance with Art. 6(1)(f) GDPR. Error data is retained for 90 days, and performance data for 30 days. As Sentry is based in the USA, data may be transferred to a third country under Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure adequate data protection. 


Vercel Logs 

We use Vercel Logs, a service of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, for collecting and analyzing server and application logs. This enables us to identify performance issues and ensure the stability of the platform. 

Within the scope of using Vercel Logs, the following personal data are processed: 

  • User's IP address 
  • Timestamps and URLs of requests 
  • HTTP header data (e.g., browser type, referrer information) 
  • Error messages and server responses 

The processing of these data is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR to ensure the reliability and security of our app. 

Vercel can transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Vercel is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. 

More information on data protection at Vercel can be found at: https://vercel.com/legal/privacy-policy

      

Notification

We use Loops, a service of Loops Technologies, Inc., 2261 Market Street #5181, San Francisco, CA 94114, USA, to send notifications via email or other channels to our users. This includes transactional messages (e.g., confirmations or reminders) as well as optional updates on new features or important changes. 

Within the scope of using Loops, the following personal data are processed: 

  • Email address 
  • User ID or other identifiers 
  • Time and content of sent messages 
  • Interaction data (e.g., open rates, clicks on links in emails) 

The processing of these data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR or, if they are essential system messages, on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR for efficient user communication. 

Loops can transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Loops is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. 

More information on data protection at Loops can be found at: https://loops.so/privacy


Resend

We use the services of Resend, Inc., 548 Market St PMB 95451, San Francisco, CA 94104-5401, USA, for email marketing and the delivery of transactional emails. In this context, various types of data are processed to ensure effective and personalized email communication. The processed data includes: 

  • Email addresses and names
  • Individual preferences
  • Interaction data (such as open rates and click behavior)
  • Metadata (e.g., sending times and IP addresses)

The legal basis for processing depends on the nature of the email: for marketing communications, processing is based on your consent (Art. 6(1)(a) GDPR); for transactional messages, on our legitimate interests (Art. 6(1)(f) GDPR). Data is retained for the duration of our business relationship and deleted 30 days after service termination, unless statutory retention requirements apply. As Resend is located in the USA, your data may be transferred to a third country. Such transfers are protected by Standard Contractual Clauses (Art. 46(2)(c) GDPR) to ensure adequate data protection. Further information regarding data processing by Resend can be found in their privacy policy.


 

Performance Monitoring 

PostHog 

We use PostHog, a service of PostHog Inc., 169 11th Street, Suite 400, San Francisco, CA 94103, USA, for monitoring and analyzing the performance of our platform. PostHog enables us to collect real-time data on user interaction and platform performance to identify bottlenecks and improve the user experience. 

Within the scope of using PostHog, the following personal data are processed: 

  • User's IP address 
  • Interaction data (e.g., clicks, scroll behavior, loading times) 
  • User behavior (e.g., session duration, visited pages) 

The processing is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR to improve technical performance and user experience and identify platform errors. 

PostHog can transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. PostHog is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. 

More information on data protection at PostHog can be found at: https://posthog.com/privacy

 

Vercel 

We use Vercel, a service provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, to monitor the performance of our app and to collect usage and performance data. Vercel assists us in tracking loading times and other performance metrics to make optimizations and enhance the user experience. 

In the course of using Vercel, the following personal data is processed: 

  • User's IP address 
  • Data on loading times and response speeds 
  • Interaction data (e.g., navigation, clicks) 

The processing is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR to monitor the technical performance of our app and make optimizations that lead to a better user experience. 

Vercel may transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework. Vercel is certified within this framework, which is why such transfers are based on the legal foundation of Art. 45 GDPR. 

Further information on data protection at Vercel can be found at: https://vercel.com/legal/privacy-policy

 

Helpdesk 

Plain 

We use Plain, a helpdesk service provided by Plain Inc., 1234 Helpdesk Lane, San Francisco, CA 94105, USA, to handle queries and provide customer support. Plain assists us in managing support requests and offering efficient communication to our users. 

In the course of using Plain, the following personal data is processed: 

  • User's IP address 
  • Name and email address (if provided by the user) 
  • Content of support requests and conversations 

The processing is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR to ensure the quality of our customer service and optimize the handling of requests. 

Plain may transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework. Plain is certified within this framework, which is why such transfers are based on the legal foundation of Art. 45 GDPR.  

Further information on data protection at Plain can be found at: https://plain.com/privacy

 

Linear 

We use Linear, a helpdesk service provided by Linear Inc., 2345 Support Ave, San Francisco, CA 94104, USA, to manage support requests and provide effective customer service. Linear assists us in tracking support tickets and responding efficiently to user inquiries. 

In the course of using Linear, the following personal data is processed: 

  • User's IP address 
  • Name and email address (if provided by the user) 
  • Content of support tickets and conversations 

The processing is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR to manage support efficiently and improve user satisfaction through prompt handling of requests. 

Linear may transfer personal data to the USA or other third countries. For data transfers to the USA, there is an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework. Linear is certified within this framework, which is why such transfers are based on the legal foundation of Art. 45 GDPR. 

Further information on data protection at Linear can be found at: https://linear.app/privacy

Tracking

Scope and Purpose of Data Processing

Various tracking technologies are used on our web app. These include, among others, the setting of cookies, the creation of a recognizable value by combining various device and browser information (device fingerprinting), or the use of so-called "universal IDs." In the following, the term "cookies" is used for any tracking technology.

Cookies are data records stored on your computer when you visit our web app, allowing your browser to be reassigned. Cookies store information such as your language settings for the duration of your visit to our web app or the inputs you make there.

There are different types of cookies. Session cookies are temporary cookies stored in the user's internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and stored in the user's browser for a predefined period. First-party cookies are set by the web app the user visits. Only this web app is authorized to read information from the cookies. Third-party cookies are set by organizations that do not operate the web app the user visits.

It is also possible to differentiate between technically necessary, functional, and advertising cookies. The former are necessary to ensure basic functions of the web app (e.g., storing the language setting). Functional cookies collect information about the user's behavior and whether they receive error messages. Advertising cookies, on the other hand, are used to offer the user tailored advertising.

Legal Basis

The legal basis for the processing of personal data using technically necessary cookies is due to the described purposes of use Art. 6 para. 1 lit. f GDPR, as we have an interest in the user-friendly presentation of our web app. If you have given us your consent to the use of functional and advertising cookies via a notice provided by us on the web app ("cookie banner"), the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Storage Duration and Data Deletion

Once the data transmitted to us via cookies is no longer required to fulfill the purposes described above, this information is deleted. Further storage takes place in individual cases if legally required.

Configuration of Browser Settings

Most browsers are configured to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our web app if you disable cookies via your browser settings on our web app. You can also delete cookies already stored in your browser via your browser settings or view the storage duration. It is also possible to set your browser to notify you before cookies are stored. Since different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for configuration options.


Consent Management System

To manage consents for the use of cookies, we use the service Cookiebot by Usercentrics. Cookiebot helps us to store and enforce your preferences regarding the use of cookies on our portal. Your consent data is transmitted to Usercentrics A/S, the operator of Cookiebot. The service provider is based in the EU and complies with the requirements of the GDPR. For more information on data protection at Cookiebot, see:https://www.cookiebot.com/de/privacy-policy/.

Data processing is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR, justified by our interest in fulfilling the legal requirements for consent management.

Cookieliste 

NAME 

Provider 

Purpose

Duration

__cf_bm

CloudFlare

Purpose is the storage of an ID for unique user identification through web security monitoring.

30 minutes

__clerk_environment

Clerk

Purpose is the storage of an ID for unique user identification through environmental configuration.

unlimited

__client

JamieAI

Purpose is the storage of an ID for unique user identification through session management.

1 year 1 month

__client_uat

JamieAI

Purpose is the storage of an ID for unique user identification through usage evaluation.

1 year 1 month

__client_uat_[ID]

JamieAI

Purpose is the storage of an ID for unique user identification through specific user actions.

1 year 1 month

_cfuvid

CloudFlare

Purpose is the storage of an ID for unique user identification through connection management.

Session

Analysis

We use tracking and analysis tools to ensure continuous optimization and user-oriented design of our web app. With the help of tracking measures, we are also able to statistically record the use of our web app by visitors and further develop our online offering for you based on the insights gained. If you have given us your consent to the use of cookies via a notice provided by us on the web app ("cookie banner"), the legality of the use is also determined by Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data. 


PostHog

This website uses the analysis tool PostHog, provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (hereinafter: "PostHog"). PostHog allows us to analyze user behavior on our website to improve its user-friendliness and functionality. 

 

PostHog uses cookies and similar tracking methods such as device fingerprinting. The data collected through these technologies, such as the time, place, and frequency of your use of our website, may be transmitted to and stored on a PostHog server in the USA. 

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. PostHog is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, standard contractual clauses (SCC) have been concluded with PostHog. 

When using PostHog, it cannot be ruled out that in addition to the IP address, other personal data may be collected. PostHog may pass this information on to third parties if required by law or if third parties process the data on behalf of PostHog. 

PostHog evaluates the collected information, creates reports on website activities, and offers additional services for analyzing website and internet usage. 

Processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent to processing at any time. However, this does not affect the legality of the data processing carried out up to that point. 

For more information on data protection at PostHog, please visit: https://posthog.com/privacy 


Facebook Pixel

This website uses the so-called Facebook Pixel, an analysis tool of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Meta"). This tool helps to measure the effectiveness of advertisements on Facebook (conversion tracking) and to display targeted advertising to interested users.

When visiting our website, a direct connection to the Meta servers is established via the Facebook Pixel. This allows Meta to recognize that you have visited our website and to link this behavior with your Facebook profile, if you have one. The Facebook Pixel captures your IP address, browser information, visited pages, and other device-related data. This information may be used by Meta for its own advertising purposes. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Meta is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, so-called standard contractual clauses (SCC) have been concluded with Meta. When using the Facebook Pixel, it cannot be ruled out that other personal data may also be collected. We point out that Meta may transfer this information to third parties if required by law or if third parties process this data on behalf of Meta. 

You can revoke your consent to processing and transfer to third countries at any time. The legality of the previous processing remains unaffected. 

For more information on the processing of your data by Meta, please refer to Meta's data protection policy: https://www.facebook.com/about/privacy.


Segment

On our website, we use the service "Segment for Analytics," provided by Segment Inc., 100 California St., Suite 700, San Francisco, CA 94111, USA. When using the service, the following data is transmitted to Segment Inc.:

  • IP address
  • Device information (Operating system, Browser type)
  • Usage data (Visited pages, Duration of stay)
  • Interaction data (Clicks, Scrolling behavior)

The purpose of "Segment for Analytics" is to collect user data from various sources, unify it, and forward it to analysis services. The service supports the analysis of user behavior on our website and helps us to improve user comfort and optimize our offerings. The information is generally forwarded to a Segment server in the USA and stored there. As part of the EU-U.S. Data Privacy Framework, Segment Inc. is certified, and such transmissions are based on the legal basis of Art. 45 GDPR.

The data is deleted after transmission.

  1. The legal basis for processing your data is your consent according to Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future.

More information on data protection at Segment Inc. can be found at: https://www.twilio.com/en-us/legal/privacy


Data Processing within the App

  1. Provision and use of the App

When downloading the app, the necessary information is transmitted to the app store, in particular your username, email address, customer account number, download time, payment information, and unique device identifier. The app store also independently collects various data and provides analysis results. We have no influence on this data processing and are not responsible for it. We only process these data as far as it is necessary for downloading the mobile app to your device.

When using the mobile app, we process the following personal data to enable you to use the app’s features conveniently:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (visited page)
  • Access status/HTTP status code
  • Amount of data transmitted
  • Previously visited page
  • Browser
  • Operating system
  • Language and version of the browser software

For providing the app’s services, we also require the following personal data:

  • Device identification
  • Unique device number (IMEI = International Mobile Equipment Identity)
  • Unique subscriber number (IMSI = International Mobile Subscriber Identity)
  • Mobile phone number (MSISDN)
  • MAC address for Wi-Fi use
  • Name of your mobile device
  • Email address

We process this data based on Art. 6(1)(f) GDPR. If you wish to use our mobile app, we process this data, which is technically necessary for us to offer you the app’s functions and to ensure stability and security.

  1. Contact

If you contact us by email, we process the personal data you provide (e.g., name, email address, content of your message) solely to process and respond to your request. The legal basis is generally our legitimate interest in communication with you (Art. 6(1)(f) GDPR) or – if your inquiry relates to the initiation or fulfillment of a contract – the fulfillment of pre-contractual measures or contract performance (Art. 6(1)(b) GDPR). Your data will be retained only as long as necessary to process your request. Disclosure to third parties does not take place unless we are legally obliged or it is essential for processing your request.

  1. System Permissions

Certain features of our app require access to specific interfaces and data on your device. Depending on your operating system, this may require your explicit consent. Below, we explain which permissions our app may request (insofar as they are relevant for the processing of your data) and for what types of features these permissions are necessary. You can adjust permission settings at any time in your device’s system settings.

  • Notifications/push notifications: Authorization is required for the use of push services. For some devices, this is enabled by default for all apps.
  • Camera: Authorization is required for the app to use your device’s camera to scan QR codes. The app will only access the camera when you select the corresponding function in the app.
  • Microphone: Authorization is required for the use of your device’s microphone to enable audio recording and processing. This access is only requested and used if you actively use recording functionality (e.g., when starting a meeting or audio note). The specific purpose is to allow high-quality audio capture, real-time audio monitoring, and background audio processing where supported by your device. Furthermore, to ensure uninterrupted recording and audio processing, the app may process audio data in the background while you are using other functions of your device. This background processing is technically necessary for a seamless user experience
  • Mobile data (iOS) or access to all networks and network connections (Android): These permissions are requested to enable the app to transfer data over your device’s internet connection. This permission may be necessary to transfer your inputs in the app, e.g., when performing a search to our servers.
  • Access to device storage: Our app may require permission to store or access files (such as audio recordings or meeting metadata) on your device. On both Android and iOS, the app can only access its own app-specific storage; access to unrelated files or general device storage is not possible.
  1. Expo Updates

Our app uses Expo Updates to provide secure over-the-air updates. This allows us to deliver new features and important security patches directly to your device. The processing is based on our legitimate interest in maintaining the security and up-to-date operation of the app (Art. 6(1)(f) GDPR), or, if technically necessary, for contract performance (Art. 6(1)(b) GDPR).

  1. Tracking and analysis

To improve our services and to analyze and optimize the use of our app, we employ various tracking and analytics technologies. Our app primarily uses mobile advertising IDs, such as the “Identifier for Advertisers” (IDFA) for Apple devices and the “Google Advertising ID” (GAID/AAID) for Android. These IDs are used to recognize your device for analytics and advertising purposes. In addition, we integrate third-party SDKs (e.g., for statistics, advertising, or error reporting) that may also collect device-specific information such as advertising ID, usage behavior, IP address, and, where applicable, location data. Where these technologies are not strictly necessary for technical reasons, their use is based solely on your prior consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time in the app’s privacy settings or in your device settings.

PostHog

Purpose: Analysis of user behavior, user journey analytics, feature usage tracking, and app performance insights

Recipient: PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (hosted on your configured EU server)

Types of Data Processed: 

  • Screen views
  • User authentication events
  • Onboarding progress
  • Recording start/stop events

Legal Basis: Consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (unless technically required)

Third-country transfer: Data is transferred to the USA on the basis of Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Further information: https://posthog.com/privacy  

Sentry

Purpose: Detection and analysis of errors, crashes, performance issues; collection of user feedback

Recipient: Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (EU hosting)

Types of Data Processed: 

  • Error and crash logs
  • Session data
  • Device and platform details
  • Session replays (when enabled)
  • Feedback
  • App version

Legal Basis: Consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (unless technically required)

Third-country transfer: Data is transferred to the USA on the basis of Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Further information: https://sentry.io/privacy/

  1. International Data Transfers

We process your data mainly within the EU and EEA. However, some service providers are located in so-called “third countries.” The GDPR sets high standards for data transfers to these countries. All recipients must meet these requirements. Before data is sent to a third-country service provider, we review its level of data protection and only select providers that can demonstrate adequate protection. Regardless of location, every service provider must have a data processing agreement with us. For providers outside the EEA, additional requirements apply. According to Art. 44 et seq. GDPR, data may be transferred to service providers if they meet at least one of the following conditions:

  • The EU Commission has decided that the third country offers an adequate level of protection.
  • Standard contractual clauses have been included in the contract with the recipient.
  • Other safeguards pursuant to Art. 46 GDPR are in place.
  • In exceptional cases, one of the derogations in Art. 49 GDPR applies.
  1. Recipients of personal data

Disclosure of the personal data we collect generally only takes place if:

  • You have given your explicit consent in accordance with Art. 6(1)(a) GDPR,
  • the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the protection of our legitimate interests or for the establishment, exercise or defense of legal claims, and there is no reason to assume that your interests or fundamental rights and freedoms which require the protection of personal data override,
  • we are legally obliged to disclose the data pursuant to Art. 6(1)(c) GDPR, or
  • this is legally permissible and necessary for the performance of a contract with you or for the implementation of pre-contractual measures taken at your request pursuant to Art. 6(1)(b) GDPR.

The following are potential recipients: 

  • Processors: Group companies or external service providers, e.g. in the areas of technical infrastructure and processing, maintenance, and payment processing, who are carefully selected and monitored. Processors may only use the data according to our instructions.
  • Public bodies: Authorities and government institutions, such as tax authorities, prosecutors, or courts, to whom we must transmit personal data (if required), e.g., to fulfill legal obligations or to protect legitimate interests.
  1. Data Security and Safeguards


We ensure that your personal data remain secure and confidential. To prevent data manipulation, loss, or misuse, we use technical and organizational security measures. These are regularly reviewed and updated to keep pace with technology.

All personal data stored locally on your device (including authentication tokens and user IDs) are encrypted and securely stored using Expo Secure Store in the app’s protected environment (keychain/keystore). This ensures compliance with high technical and organizational security standards and prevents unauthorized access by third parties. Regular updates and internal controls are in place to protect your data from loss, misuse, or unauthorized access.

Please note that other persons or institutions may disregard data protection rules on the internet. In particular, unencrypted data such as emails can be accessible to third parties. We have no influence over this. Please protect your data, such as by using encryption or other means, to avoid misuse.

  1. Data Storage

Personal data are deleted or blocked once the reason for their storage ceases to apply. Storage may continue if it is required by European or national law. Data will also be blocked or deleted when a statutory retention period expires, unless the data are still needed for contract fulfillment.

Rights of the data subject

With regard to your personal data, you have the following legal rights towards us:

Right of access 

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and further information, such as the processing purposes, the recipients, and the planned duration of storage or the criteria for determining the duration.

Right to rectification 

You have the right to request the rectification of inaccurate data without undue delay. Considering the purposes of the processing, you have the right to request the completion of incomplete data.

Right to erasure ("Right to be forgotten") 

You have the right to request erasure if the processing is not necessary. This is the case, for example, if your data is no longer needed for the original purposes, if you have withdrawn your consent under data protection law, or if the data has been processed unlawfully.

Right to restriction of processing 

You have the right to request the restriction of processing, for example, if you believe that the personal data is inaccurate.

Right to data portability 

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to object 

You have the right to object, on grounds relating to your particular situation, at any time to the processing of certain personal data concerning you. In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

Right to withdraw your consent under data protection law 

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out up to the withdrawal.

 

Notwithstanding these rights, you have the right to lodge a complaint with a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.

Version history

Date  

Version  

Reason 

20.03.2025

1.0 

First version of the revised data protection notice in the new format

27.05.2025

1.1

Updating the DSE with the processing of the web application

03.09.2025

1.2

Updating the DSE with the new processing of the web application

Download Jamie

Get Jamie for iPhone