privacy policy

1. Controller

The controller responsible for data processing on this website is:

Jill Stäbe
js marketing
Eversbuschstr. 165B
80999 Munich
Germany

Email: jill@js-marketing.info
Phone: +49 176 329 150 31

A data protection officer is not legally required.

2. General information on data processing

I only process personal data of the users of this website to the extent necessary to provide a functioning website along with my content and services, or where you have given your consent.

Personal data is any data that can be used to personally identify you (e.g. name, email address, IP address).

The legal bases for processing are, depending on the case:

• Art. 6(1)(a) GDPR – your consent
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – compliance with a legal obligation
• Art. 6(1)(f) GDPR – protection of my legitimate interests

Your data will be deleted as soon as the purpose of storage no longer applies, unless statutory retention periods (in particular under commercial and tax law, generally 6 to 10 years) prevent this.

3. Hosting

This website is hosted by the following provider:

Lovable Labs Incorporated
EU representative: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden
Data protection officer: dpo@lovable.dev
Privacy policy: https://lovable.dev/privacy

The provider processes data generated when this website is visited (in particular server log files, see section 4). The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in a secure, stable and efficient provision of my online offering.

Several of the sub-processors used by the provider are based in the United States. An up-to-date overview stating location and processing purpose is available at https://trust.lovable.dev/subprocessors. In addition, this website is delivered via a worldwide content delivery network. Processing of page views is therefore not limited to the European Union, and personal data, in particular your IP address, may be transferred to third countries as a result.

There is currently neither an adequacy decision by the European Commission nor a separate safeguard within the meaning of Art. 46 GDPR for these transfers.

To the extent the provider processes technical usage and log data for its own purposes (in particular security, billing, analysis and product development), this is done under the provider's own data protection responsibility. Please refer to its privacy policy for further information.

In addition to hosting, I use backend services from the same provider to store the data submitted via the contact form and to deliver a notification to me. Further details can be found under section 7.

4. Server log files

When this website is accessed, the host automatically collects information transmitted by your browser:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Date and time of the server request
• IP address (shortened or anonymized where technically possible)
• Amount of data transferred and access status

This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR. I have a legitimate interest in the technically error-free presentation and security of my website.

According to the hosting provider, log data is stored for up to 90 days and then deleted, unless there is a statutory retention obligation or the data is required to investigate a specific security incident.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://". When encryption is active, the data you transmit to me cannot be read by third parties.

6. Contact by email or phone

If you contact me by email or phone, your details, including the contact data you provide, will be stored by me in order to process your inquiry and in case of follow-up questions.

The legal basis is Art. 6(1)(b) GDPR, provided your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective handling of inquiries addressed to me (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

Your data remains with me until you ask me to delete it, you revoke your consent, or the purpose for storing it no longer applies. Mandatory statutory retention periods remain unaffected.

7. Contact form

Via the contact form on this website you can send me a message. The following details are collected in the process:

• Name
• Company or website
• Description of your request
• Email address

Which of these fields are mandatory is indicated in the form.

I use the details exclusively to process your inquiry and in case of follow-up questions. Your data is not passed on to third parties for advertising purposes.

The legal basis is Art. 6(1)(b) GDPR, insofar as your inquiry is aimed at the conclusion of a contract or serves the implementation of pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective handling of inquiries addressed to me (Art. 6(1)(f) GDPR).

When the form is submitted, technically necessary connection data is additionally processed, in particular your IP address and the time of submission. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in preventing misuse.

The data submitted via the form is stored in a database that I operate via the backend services of the provider named in section 3. Storage technically takes place on Supabase's infrastructure, which the provider uses as a sub-processor for this purpose. The storage location is a data center in the Frankfurt am Main region (eu-central-1) within the European Union. This also applies to the related backups. However, the transmission of your input to the server takes place via the content delivery network named in section 3, so processing outside the European Union cannot be ruled out in this respect.

After submission, a notification containing the details you provided is additionally sent to my email address. This is sent via the email service of the provider named in section 3.

According to its own statements, the provider processes the data submitted via the form exclusively on my instructions. It states that it does not use this data for its own analysis purposes, for its own product development, or for training AI models.

An up-to-date overview of the sub-processors used is available at https://trust.lovable.dev.

Your details remain stored until you ask me to delete them or the purpose of storage no longer applies, generally three years after the last contact, provided no business relationship has resulted from it. Mandatory statutory retention periods remain unaffected.

8. Appointment booking via Calendly

On this website I link to the Calendly service, through which you can arrange an appointment with me. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA.

Calendly is not embedded in this website. No content, scripts, widgets or cookies from Calendly are loaded on this website. Only when you click the link do you leave my online offering and are redirected to Calendly's pages. From that point on, Calendly is responsible for the data processing; in particular, the data you enter there (name, email address, desired appointment, time zone) as well as technical access data are processed there.

Setting the link is based on Art. 6(1)(f) GDPR; my legitimate interest lies in offering a simple way to schedule appointments.

Further information: https://calendly.com/de/privacy

9. Video content and YouTube links

The video playable on this website (showreel) is delivered as a local video file directly from my hosting. No connection to third-party servers is made in the process.

In addition, I link to individual videos on the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube videos are not embedded in this website; no content, scripts or cookies from YouTube are loaded on this website. Only when you click such a link do you leave my online offering and a connection to Google's/YouTube's servers is established. The provider alone is responsible for the data processing that takes place there.

Setting the links is based on Art. 6(1)(f) GDPR; my legitimate interest lies in presenting my work.

Further information: https://policies.google.com/privacy?hl=de

10. Embedding of external content and links

This website contains links to external platforms (among others LinkedIn, YouTube, Calendly and Google Drive). By clicking these links you leave my online offering. The respective provider alone is responsible for the data processing on the linked pages. Please refer to their privacy notices for further information.

11. Fonts

For consistent display of fonts, this website exclusively uses fonts stored locally on the server. No connection to third-party servers, in particular Google Fonts, takes place in this process.

12. Cookies and consent management

This website exclusively uses technically necessary cookies or comparable storage technologies that are required to operate the site and to store your settings. The legal basis is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act, German: Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) in conjunction with Art. 6(1)(f) GDPR.

Cookies for analysis, marketing or tracking purposes are not used. Third-party content (such as Calendly or YouTube) is not embedded but merely linked; no third-party cookies are therefore set via this website. You can view and adjust your choices at any time via the cookie settings.

13. Your rights as a data subject

You have the following rights vis-à-vis me regarding personal data concerning you:

• Right to information (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to jill@js-marketing.info is sufficient.

Right to object pursuant to Art. 21 GDPR

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right, at any time and for reasons arising from your particular situation, to object to the processing of your personal data. I will then no longer process the data concerned unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

14. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

The supervisory authority responsible for me is:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision, BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de

15. Currency of this privacy policy

This privacy policy is currently valid and has the status of August 2026. Due to the further development of my website or changes in statutory or regulatory requirements, it may become necessary to amend this privacy policy.