1. Privacy at a glance
General information
The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the controller” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This can, for example, be data you enter in a contact form or provide when booking an appointment.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and tools provided by third parties
When you visit this website, your browsing behavior may be statistically evaluated. This is done primarily using so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.
2. Hosting and domain
This website was created with the plugnpl.ai Launchpad and is hosted as an Azure Static Web App on Microsoft Azure in the West Europe region (Amsterdam, Netherlands). The provider of the hosting infrastructure is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
When you access our website, only the technically required access data (in particular the IP address and technical connection data) necessary for the delivery and secure operation of the website is processed on Microsoft Azure's servers. Personal data collected through embedded third-party services (e.g. analytics, advertising, or social media services) is processed on the respective provider's servers; further details can be found in the relevant sections of this privacy policy.
Domain and DNS (IONOS)
The domain plugnpl.ai is registered with 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS exclusively manages the domain registration and DNS records (in particular the CNAME record pointing to the Azure infrastructure). IONOS does not host any content of this website and does not process any personal data of website visitors. A data processing agreement with IONOS is therefore not required for the operation of this website.
plugnpl.ai Launchpad (our own product)
The plugnpl.ai Launchpad is a product/brand of just experts GmbH. This website was created with this Launchpad and deployed to the Azure infrastructure through it. As this is our own product, no third-party data processing occurs in this respect; responsibility for the processing of personal data lies entirely with just experts GmbH. Technical provisioning and hosting are handled via Microsoft Azure (see above).
Legal basis and data processing agreement
Hosting is provided for the purpose of contract fulfillment towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
We have concluded a data processing agreement (DPA) with Microsoft pursuant to Art. 28 GDPR. This ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR. A corresponding DPA is or will be concluded with the provider of the plugnpl.ai Launchpad, insofar as it processes personal data on our behalf.
3. General information and mandatory notices
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various pieces of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmission over the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the controller
The controller responsible for data processing on this website is:
just experts GmbH
represented by the managing directors Daniel Stroh and Jan Manfred Hallen
Wallstraße 16
40213 Düsseldorf, Germany
Phone: +49 (0) 211 73060420
E-mail: kontakt@justexperts.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place once these reasons no longer apply.
General information on the legal basis for data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, insofar as special categories of data pursuant to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the performance of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, insofar as your data is required to fulfill a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.
Data Protection Officer
We have appointed an external data protection officer:
heyData GmbH
Schützenstraße 5
10117 Berlin, Germany
E-mail: datenschutz@heydata.eu
Web: www.heydata.eu
Data transfer to the USA and other third countries
Among other things, we use tools from companies based in the USA or other third countries that are not considered secure under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.
Where an adequacy decision by the European Commission exists (e.g. the EU-U.S. Data Privacy Framework), we base the data transfer on this decision. Otherwise, data transfer takes place on the basis of the standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR).
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.
Right to object (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Access, rectification, and erasure
Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You may contact us at any time regarding this and other questions on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.
If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to promotional emails
We hereby object to the use of contact data published as part of our legal notice obligation for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising material being sent, such as spam emails.
4. Data collection on this website
Cookies
Our websites use so-called “cookies.” Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third-party companies within websites (e.g. cookies for analyzing user behavior).
Cookies that are necessary for carrying out the electronic communication process, providing certain functions you have requested, or optimizing the website (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Consent with Cookiebot
This website uses Cookiebot's consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this consent in compliance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you enter our website, the following personal data is transmitted to Cookiebot:
- Your consent(s) or the revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your device
- Time of your visit to the website
Cookiebot also stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you request us to delete it, you delete the Cookiebot cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
Cookiebot is used to obtain the legally required consents for the use of certain technologies and to document them in a legally compliant manner. The legal basis for this is our legitimate interest in obtaining and managing consent in a legally compliant manner (Art. 6(1)(f) GDPR).
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Server log files
The host of this website (Microsoft Azure, see Section 2) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this purpose, the server log files must be collected. The data is generally deleted after 7 days, unless further retention is required for security purposes.
Contact form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you provide there (e.g. name, email address, company, company size, message), will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), insofar as this was requested; consent can be revoked at any time.
The data you enter in the contact form remains with us until you request that we delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions — in particular retention periods — remain unaffected.
Appointment booking via Microsoft Bookings
We use Microsoft Bookings for online appointment booking. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
If you arrange an appointment via our booking form, the data you enter (e.g. name, email address, requested date, message) is transmitted to and processed by Microsoft Bookings. Processing is carried out on the basis of Art. 6(1)(b) GDPR (pre-contractual measures or contract fulfillment) and Art. 6(1)(f) GDPR (legitimate interest in efficient appointment management).
The data is processed in the Microsoft Cloud within the EU. Details on data processing can be found in Microsoft's privacy policy: privacy.microsoft.com/en-us/privacystatement.
Data processing agreement
We have concluded a data processing agreement (DPA) with Microsoft that ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Inquiries by email, telephone, or fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), insofar as this was requested; consent can be revoked at any time.
Data you send us via contact inquiries remains with us until you request that we delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
5. Use of Artificial Intelligence (AI)
The content of this website (in particular text and, where applicable, images) was created with the plugnpl.ai Launchpad using artificial intelligence, or generated by AI technologies. We transparently disclose this use of AI and indicate the AI-assisted creation in a visible area of every page. This labeling is provided in particular with regard to the transparency obligations under Art. 50 of Regulation (EU) 2024/1689 (the AI Act).
AI serves as a tool for creating the content; editorial responsibility for the published content lies with just experts GmbH.
Insofar as personal data of users is processed by AI systems in the course of operating this website (e.g. through AI-assisted chatbots or form processing), this is done on the basis of Art. 6(1)(f) GDPR (legitimate interest in efficient communication) or — where consent has been requested — on the basis of Art. 6(1)(a) GDPR.
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning you or similarly significantly affects you, does not take place on this website.
6. Analysis tools and advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out its own analysis. It merely manages and triggers the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google's parent company in the USA.
The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the fast and straightforward integration and management of various tools on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent can be revoked at any time.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user's origin. Google may combine this data into a profile assigned to the respective user or their device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to and stored on a Google server in the USA.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, under which Google LLC is certified. Standard contractual clauses of the European Commission are additionally in place. Further information: policies.google.com/privacy.
IP anonymization
IP anonymization is enabled by default in Google Analytics 4. Your IP address is shortened within the EU/EEA before being transmitted to Google.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. Alternatively, you can revoke your consent at any time via our Cookiebot banner.
Data processing agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities regarding the use of Google Analytics.
LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing via LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze professional details (e.g. career level, company size, country, location, industry, and job title) of our website visitors, allowing us to better tailor our site to the respective target audiences. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our website make a purchase or perform another action (conversion measurement). Conversion measurement can also take place across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function, with the help of which we can display targeted advertising to visitors of our website outside of the website, whereby, according to LinkedIn, no identification of the advertising recipient takes place.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are shortened or, if they are used to reach LinkedIn members across devices, hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.
The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it as part of its own advertising measures. Details can be found in LinkedIn's privacy policy at linkedin.com/legal/privacy-policy.
Legal basis
Insofar as consent has been obtained, the use of the above-mentioned service is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 TDDDG. Consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the European Commission and the adequacy decision on the EU-U.S. Data Privacy Framework. Details: linkedin.com/legal/l/dpa and linkedin.com/legal/l/eu-sccs.
Objecting to the use of LinkedIn Insight Tag
You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: linkedin.com/psettings/guest-controls/retargeting-opt-out. LinkedIn members can also control the use of their personal data for advertising purposes in their account settings.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service, which ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
Leadinfo
We use the lead-generation service provided by Leadinfo B.V., Rotterdam, Netherlands. This service identifies visits from companies to our website based on IP addresses and shows us publicly available information about them, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to analyze user behavior on our website and processes domains from form submissions (e.g. “leadinfo.com”) to correlate IP addresses with companies and improve its services.
Further information can be found at www.leadinfo.com. You have an opt-out option on this page: www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.
Leadinfo is used on the basis of your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); consent can be revoked at any time.
Data processing agreement
We have concluded a data processing agreement (DPA) with Leadinfo that ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
7. Social media
Elements of the social network LinkedIn are integrated into this website. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
When you access a page of this website that contains LinkedIn elements, a connection is established to LinkedIn's servers. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account.
Use is based on Art. 6(1)(f) GDPR (legitimate interest in an appropriate presence for the company on social media) or — where consent has been requested — on Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the European Commission and the adequacy decision on the EU-U.S. Data Privacy Framework. Further information on data protection at LinkedIn: linkedin.com/legal/privacy-policy.
8. Audio and video conferencing
Data processing
We use online conferencing tools, among other things, to communicate with our customers. The tools we use are listed below. If you communicate with us via video or audio conference over the internet, your personal data is collected and processed by us and by the provider of the respective conferencing tool.
The conferencing tools collect all data you provide/use in order to use the tools (email address and/or your phone number). Furthermore, the conferencing tools process the duration of the conference, the start and end (time) of participation, the number of participants, and other “contextual information” relating to the communication process (metadata).
Furthermore, the provider of the tool processes all technical data required to carry out the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone, or speaker, as well as the type of connection.
Purpose and legal basis
The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Where consent has been requested, the relevant tools are used on the basis of this consent; consent can be revoked at any time with effect for the future.
Storage period
Data collected directly by us via the video and conferencing tools is deleted from our systems as soon as you request that we delete it, you revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in Microsoft's privacy policy: privacy.microsoft.com/en-us/privacystatement.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures that this provider processes personal data only in accordance with our instructions and in compliance with the GDPR.
9. Changes to this privacy policy
We will update this privacy policy as soon as data processing or the legal framework changes. The current version published on this website applies in each case.
The German version is legally binding.