Privacy Policy

Name and Contact Details of the Controller

The controller (hereinafter 'Controller') within the meaning of Art. 4 No. 7 GDPR is:

Jacomeit.de
Stefan Jacomeit
Lohmannstr. 30
27568 Bremerhaven, Deutschland

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

Legal Basis for Processing Personal Data

Below we inform you about the legal bases for the processing of personal data:

1. Where we have obtained your consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis.
2. Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract at your request, Art. 6(1)(b) GDPR serves as the legal basis.
3. Where processing is necessary for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations), Art. 6(1)(c) GDPR serves as the legal basis.
4. Where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.
5. Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, and where such interests are not overridden by your interests or fundamental rights and freedoms, Art. 6(1)(f) GDPR serves as the legal basis.

Transfer of Personal Data to Third Parties and Data Processors

Without your consent, we do not generally disclose data to third parties. Where this does occur, such transfer is based on the aforementioned legal grounds, for example when transferring data to online payment providers for the performance of a contract, or pursuant to a court order, or due to a statutory obligation to disclose data for the purposes of prosecution, danger prevention, or enforcement of intellectual property rights.

We also engage data processors (external service providers, e.g. for web hosting our websites and databases) for the processing of your data. Where data is transferred to data processors under a data processing agreement, this always occurs in accordance with Art. 28 GDPR. We select our data processors with care, monitor them regularly, and have reserved the right to issue instructions with regard to the data. In addition, data processors must have implemented appropriate technical and organisational measures and must comply with data protection regulations under the BDSG and GDPR.

Transfer of Data to Third Countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Your data is therefore processed primarily by companies to which the GDPR applies. Should processing by third-party services take place outside the European Union or the European Economic Area, such services must fulfil the special requirements of Art. 44 et seq. GDPR. This means that processing takes place on the basis of special guarantees, such as the officially recognised determination by the EU Commission of a level of data protection equivalent to that of the EU, or compliance with officially recognised specific contractual obligations, the so-called 'standard contractual clauses'.

Deletion of Data and Retention Period

Unless expressly stated otherwise in this privacy policy, your personal data will be deleted or blocked as soon as the consent granted for processing is withdrawn by you, or the purpose for storage no longer applies or the data is no longer necessary for the purpose, unless further retention is required for evidentiary purposes or is precluded by statutory retention obligations. These include, for example, statutory retention obligations for business correspondence under § 257(1) HGB (6 years) and tax retention obligations under § 147(1) AO for receipts (10 years).

Existence of Automated Decision-Making

We do not use automated decision-making within the meaning of Art. 22 GDPR and no profiling. The AI chat assistant offered on this website answers questions but does not make decisions that produce legal effects concerning you or similarly significantly affect you.

Provision of our Website and Creation of Log Files

1. If you use our website purely for informational purposes, we only collect the personal data that your browser transmits to our server:

• IP address;
• Internet service provider of the user;
• Date and time of access;
• Browser type;
• Language and browser version;
• Content of the request;
• Time zone;
• Access status/HTTP status code;
• Data volume;
• Websites from which the request originates;
• Operating system.

This data is not stored together with any other personal data of yours.

2. This data serves the purpose of delivering our website to you in a user-friendly, functional, and secure manner, as well as for its optimisation and statistical evaluation.

3. The legal basis for this is our legitimate interest in data processing, which also lies in the aforementioned purposes, pursuant to Art. 6(1)(f) GDPR.

4. For security reasons, we store this data in server log files for a retention period of 90 days. After this period, they are automatically deleted, unless we require their retention as evidence in the event of attacks on the server infrastructure or other legal violations.

1. Description: We use cookies when you visit our website. Cookies are small text files that your internet browser stores on your computer. When you visit our website again, these cookies provide information to recognise you automatically. We inform you when you visit our website about the use of cookies and how you can object to them or prevent their storage ('opt-out').

The following types of cookies are distinguished:

• Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website in order to store certain functions of the website such as logins, shopping baskets, or user inputs, e.g. regarding the language of the website.
• Session cookies: Session cookies are required to recognise repeated use of an offering by the same user. When you close the browser or log out, the session cookies are deleted.
• Persistent cookies: These cookies remain stored even after closing the browser. They are used to store the login, for reach measurement and for marketing purposes. You can delete the cookies at any time in the security settings of your browser.
• Third-party cookies (in particular from advertisers): According to your preferences, you can configure your browser settings and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out, however, that you may then not be able to use all functions of this website.

2. Data categories: User data, cookie, user ID (in particular the pages visited, device information, access times, and IP addresses).

3. Purposes of processing: The information obtained in this way serves the purpose of technically and economically optimising our web offerings and enabling you to access our website more easily and securely.

4. Legal bases: Where we process your personal data using cookies on the basis of your consent ('opt-in'), Art. 6(1)(a) GDPR serves as the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, in which case Art. 6(1)(f) GDPR serves as the legal basis.

5. Retention period / Deletion: Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

Cookies are stored on your computer and transmitted from it to our site. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies.

Information on deleting cookies by browser:

• Chrome: https://support.google.com/chrome/answer/95647
• Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac
• Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
• Internet Explorer: https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies
• Microsoft Edge: https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies

6. Objection and 'Opt-Out': You can generally prevent the storage of cookies on your hard drive independently of any consent or statutory permission by selecting 'Do not accept cookies' in your browser settings. However, this may result in a restriction of the functions of our offerings.

Description and Scope of Data Processing

This site uses an integration of the professional liability seal of Exali AG. The graphical element of the seal is loaded from the servers of Exali AG. For this purpose, your IP address is processed in order to transmit the graphic to your browser.

When you click on this seal, you leave our site and are redirected to the servers of Exali AG.

More information: Privacy policy of Exali

1. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

2. Purpose: To provide proof of the legally required mandatory information regarding professional liability insurance pursuant to § 2(11) DL-InfoV in a visually appealing manner.

3. Legitimate interest: To offer an attractive online presence and to fulfil our information obligations in a visually appealing manner.

1. Data categories and description: Cookies, date and time of visit, device information, browser information, anonymised IP address, opt-in and opt-out data. This service enables us to obtain and document your consent to the storage of cookies.

2. Purposes of data processing: Compliance with legal obligations, consent storage.

3. Legal bases: Art. 6(1)(f) GDPR and Art. 6(1)(c) GDPR.

4. Retention period: Until you delete the cookie in your browser yourself or the purpose for data storage no longer applies. Records of a previously granted consent are retained for a period of three years.

1. Description of data processing: When contacting us via contact form, fax, post, or email, your details are processed for the purpose of handling the contact request.

2. Legal bases: Where you have given your consent, the legal basis for the processing of the data is Art. 6(1)(a) GDPR. The legal basis for the processing of data transmitted in the course of a contact request or email, letter, or fax is Art. 6(1)(f) GDPR. Where the contact aims at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

3. Storage in the CRM system: We may store your details and contact request in our Customer Relationship Management System ('CRM System') or a comparable system.

To assign incoming enquiries to the right customer and to follow up on business contacts, AI agents may automatically evaluate the details stored in the CRM system (first and last name, role, email address, telephone number, status, company data such as name, email address and telephone number, details of related projects, and the status of ongoing enquiries with stage, rating and date). For this purpose, these details are sent as a request to the AI language model operated by IONOS as our processor. Free-text notes are expressly excluded and are not passed on to the AI language model.

First and last name, email address, telephone number, company and LinkedIn profile of a business contact are additionally synchronised in both directions with our business address book on our own mail server so that the details are also available on our devices. Free-text notes, role and status are not transferred.

We store emails sent to mailboxes handled by our AI agents as a case, even if there is no business relationship yet, for example first enquiries or advertising. We store the sender's name and email address, the subject, the time of receipt, the message text (as plain text, at most 10,000 characters) and any attachments. An AI agent classifies the email and creates a summary, a suggestion for how to proceed and, where appropriate, a draft reply, which is only sent after a human has approved it. For this purpose, the message text, shortened to at most 3,500 characters, is sent to the AI language model operated by IONOS as our processor. Attachments are not passed on to the AI language model. Once a human has taken over a case, we match your email address against the stored cases so that your further emails are no longer handled by the AI agent and are not sent to the AI language model. The cases are kept on our own server in Germany and can only be viewed by authorised persons after signing in with a second factor.

4. Retention period / Deletion: Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For requests from users who have an account or contract with us, we retain the data for up to two years after termination of the contract. In the case of statutory archiving obligations, deletion takes place after their expiry: end of commercial (6 years) and tax (10 years) retention obligations.

Cases from the mailboxes handled by our AI agents are subject to fixed periods: the content of attachments is removed 90 days after the email was received, and the message text and draft replies 90 days after the case is closed. The sender's name and email address, the subject, file names, the summary and the suggestion are replaced with placeholders twelve months after closure. Cases with a reply that has not yet been sent remain unchanged until they are closed. In backups, the details remain until the retention period of those backups expires.

5. Withdrawal of consent: You have the right to withdraw your consent pursuant to Art. 6(1)(a) GDPR to the processing of personal data at any time.

1. Description: We have integrated the website analysis tool "Google Analytics" (Service provider: Google Ireland Limited, Reg. No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

2. Data categories and description of data processing: User ID, IP address (anonymised). When you visit our website, Google sets a cookie on your computer in order to analyse your use of our website. We have activated the IP anonymisation function 'anonymizeIP', which means that IP addresses are only processed in truncated form. Further information: Analytics Terms of Use, Analytics Privacy, Google's Privacy Policy.

3. Purpose of processing: Analysis, optimisation, and improvement of our website.

4. Legal bases: Art. 6(1)(a) GDPR (with consent) or Art. 6(1)(f) GDPR (legitimate interest).

5. Retention period: Data linked to cookies or user identifiers is automatically deleted after the configured retention period has elapsed (once a month).

6. Data transfer/recipient category: Google, Ireland and USA. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.

Opt-out options:

• You can prevent Google Analytics from collecting your data by downloading and installing the Google browser plug-in.
• You can deactivate cross-device user analysis in your Google account under 'My data > Personal data'.

1. Description: We use the bot protection service 'Turnstile' from Cloudflare on our website (Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA).

2. Data category and description of data processing: Usage data (IP address, browser and device information, and interaction signals). Turnstile checks whether an input originates from a human or a machine. On pages with a protected form — the contact form, the landing page enquiry forms, and sign-in to the customer portal — the verification component is already loaded when the page loads. For the chat assistant and the CV download, only once you actually use that feature. In doing so, your IP address and other data required for the check may be transferred to Cloudflare's servers.

3. Purpose of processing: Protection against automated access, spam, and abuse of our forms and login function.

4. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional service protected against abuse).

5. Data transfer/recipient category: Cloudflare, Inc. as a third-party provider based in the USA.

6. Retention period: According to Cloudflare, the data collected for verification purposes is stored only for as long as necessary for abuse protection. Information required for the check may in the process be stored on, or read from, your device for a short time.

7. Further information: https://www.cloudflare.com/products/turnstile/ and Cloudflare's Privacy Policy.

1. Description: We maintain profiles and fan pages on social media. When you use and access our profile in the respective network, the respective privacy notices and terms of use of the respective network apply.

2. Data categories and description of data processing: Usage data, contact data, content data, inventory data. Furthermore, data of users within social networks is generally processed for market research and advertising purposes.

3. Purpose of processing: Communication with users; information and advertising for our services; external presentation and image maintenance.

4. Legal bases: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) in conjunction with Art. 7 GDPR (with consent).

5. Data transfer/recipient category: Social network.

Privacy notices of the respective networks:

• Facebook – Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland; Privacy policy: https://www.facebook.com/about/privacy/
• Twitter – Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA – Privacy policy: https://twitter.com/de/privacy
• XING – Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland – Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
• LinkedIn – Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland – Privacy policy: https://www.linkedin.com/legal/privacy-policy

1. Right to Object or Withdraw Consent to the Processing of Your Data

Where processing is based on your consent pursuant to Art. 6(1)(a), Art. 7 GDPR, you have the right to withdraw your consent at any time. The lawfulness of processing carried out on the basis of consent prior to the withdrawal is not affected.

Where we base the processing of your personal data on the balancing of interests pursuant to Art. 6(1)(f) GDPR, you may object to the processing. When exercising such an objection, we ask you to explain the reasons. In the event of a justified objection, we will review the situation and will either cease or adjust the data processing, or demonstrate our compelling legitimate grounds.

You may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your advertising objection: Stefan Jacomeit, Lohmannstr. 30, 27568 Bremerhaven, Germany.

2. Right of Access You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right of access to your personal data stored with us pursuant to Art. 15 GDPR.

3. Right to Rectification You have the right to rectification of inaccurate data or to the completion of accurate data pursuant to Art. 16 GDPR.

4. Right to Erasure You have the right to the erasure of data stored with us pursuant to Art. 17 GDPR, unless statutory or contractual retention obligations preclude this.

5. Right to Restriction of Processing You have the right to request restriction of the processing of your personal data if one of the conditions in Art. 18(1)(a) to (d) GDPR is met.

6. Right to Data Portability You have the right to data portability pursuant to Art. 20 GDPR, which means that you can receive the personal data stored with us about you in a structured, commonly used, and machine-readable format, or request its transfer to another controller.

7. Right to Lodge a Complaint You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of the Member State of your habitual residence, place of work, or the place of the alleged infringement.

Based on your consent (Art. 6(1)(a) GDPR) we use cookies and third-party tools. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer. Strictly necessary cookies (including the cookie storing your consent decision) are exempt.

1. Google Analytics: Provider: Google Ireland Ltd. Purpose: statistical analysis of website usage. Processes e.g. a shortened IP address, device/browser data and usage behaviour. Activated only after consent (Marketing category).

2. Google Ads conversion tracking: Provider: Google Ireland Ltd. Purpose: measuring conversions from Google ads. Processes e.g. click identifiers (e.g. gclid) and usage data. Activated only after consent (Marketing category).

3. Cloudflare Web Analytics: Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Purpose: statistical analysis of website usage — records page views, the referring source, the approximate region of origin as well as browser, device and load-time information. According to Cloudflare, this analysis sets no cookies and does not build a cross-device user profile. Activated only after consent (Marketing category).

4. Processed data categories: Online identifiers (cookie/pixel IDs), device and browser data, shortened IP address, usage and event data, click identifiers (gclid/fbclid).

5. Third-country transfer: These tools may transfer personal data to the USA. Where no adequacy decision applies, we base the transfer on appropriate safeguards (standard contractual clauses, Art. 46 GDPR) or on your explicit consent (Art. 49(1)(a) GDPR). By consenting to the Marketing category you also consent to any such third-country transfer.

6. Withdrawal: You can withdraw consent at any time via "Cookie settings" in the footer. After withdrawal the corresponding scripts are no longer loaded. The lawfulness of processing prior to withdrawal remains unaffected.

On our website we offer an AI chat assistant that you can use to ask questions. The answers are generated automatically by an AI language model and may contain errors.

1. Data categories and description of data processing: The messages you enter in the chat and the assistant's replies, each with a timestamp and a randomly generated session identifier. The session is anonymous unless you enter personal information yourself in the chat — no names or accounts are collected.

2. Purpose of processing: Operation of the chat assistant as well as evaluation of the conversations in order to improve responses and content.

3. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Retention period: 90 days. After that, the sessions and their associated messages are automatically deleted.

5. Disclosure: To answer your request, it is forwarded to IONOS, where the AI language model is operated. The gateway that receives and forwards the request runs on a dedicated server.

In order to protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us and by our external service providers, we have implemented appropriate technical and organisational security measures. In particular, all data transmitted between your browser and our server is encrypted via a secure SSL connection.

As of: 15.10.2026
Source: GDPR Privacy Policy Template by Juraforum.de