Privacy Policy

No statutory obligation to appoint a data protection officer currently exists.

This website is hosted on infrastructure provided by Lovable Labs Incorporated and its sub-processors (including Cloudflare, Inc.). When you access the site, technically required data is processed automatically: IP address, date and time, requested URL, referrer, browser and operating system. This is necessary to deliver the website securely and stably (Art. 6 (1)(f) GDPR). Log data is deleted after a short period unless retention is required for security investigations. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses.

Under § 25 TDDDG, storing or accessing information on your device requires your consent unless it is strictly necessary. We store your consent decision locally in your browser (key “jsc-cookie-consent-v1”) — this is strictly necessary (§ 25 (2) No. 2 TDDDG).

Analytics cookies are only set after you click “Accept analytics” (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG). You can withdraw consent at any time with effect for the future:

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (e.g. “_ga”, “_ga_*”, retention up to 14 months) to analyse how visitors use the website — pages visited, time on page, approximate location (country/city), device and browser information. IP addresses are truncated within the EU/EEA; Google Signals and advertising features are disabled.

Legal basis: your consent (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG). Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR). We have concluded a data processing agreement with Google. Data retention in Google Analytics is set to 14 months.

More information: policies.google.com/privacy.

We use Google Search Console to monitor the visibility of our website in Google Search. Search Console does not place cookies or tracking code on this website; we only receive aggregated, non-personal statistics from Google (e.g. search queries, impressions, clicks). Verification is performed through a meta tag. Legal basis: our legitimate interest in the findability of our website (Art. 6 (1)(f) GDPR).

This website loads web fonts from Google Fonts (Google Ireland Limited). When pages load, your browser connects to Google servers and transmits your IP address. Legal basis: our legitimate interest in a consistent presentation (Art. 6 (1)(f) GDPR).

When you contact us via the contact form or email, we process the information you provide (name, company, email, phone, message) to handle your enquiry and any subsequent contractual relationship (Art. 6 (1)(b) GDPR) or on the basis of our legitimate interest in answering business enquiries (Art. 6 (1)(f) GDPR). Data is stored in our secure backend and deleted once no longer needed, subject to statutory retention periods (§ 147 AO, § 257 HGB). Transactional emails are sent via our mail provider on the domain notify.jsc-offshore.com.

For existing clients we provide documents (quotations, order confirmations, timesheets, invoices) and online timesheet signatures. Processing is required to perform the contract (Art. 6 (1)(b) GDPR) and to meet statutory obligations (Art. 6 (1)(c) GDPR). Signature events (time, IP address, signer name) are logged as evidence.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6 (1)(f) GDPR (Art. 21). Consent can be withdrawn at any time (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.

We may update this policy when our services or legal requirements change. Status: October 2026.