Privacy Policy
Last updated: May 2026 Personal data (usually referred to just as „data“ below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there. Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control. Our privacy policy is structured as follows: I. Information about us as controllers of your data II. The rights of users and data subjects III. Information about the data processing
I. Information about us as controllers of your data
The party responsible for this website (the „controller“) for purposes of data protection law is: Jems GmbH i.G. Jan Herren, Erik Brendler, Max Hardtke Udo-Zempel-Straße 7 26935 Stadland Email: contact@jems-media.de
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR); • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR); • to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR; • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR); • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients. Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Contact
If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR. Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
Cloudflare Turnstile
To protect our contact form against spam and automated abuse, we use the service Cloudflare Turnstile. This is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter referred to as “Cloudflare”. The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in defending our contact form against spam and abusive, automated requests, as well as in the security of our website. If you access a page that contains our contact form, a script is loaded from Cloudflare's servers (challenges.cloudflare.com) and a verification challenge is run in your browser. Data transmitted to Cloudflare in this process includes – your IP address; – the page on our website you are accessing; – the type and version of internet browser you are using; – your operating system; – ephemeral signals from your browser environment used to distinguish humans from bots; and – the result of the verification. According to the provider, Cloudflare Turnstile does not use cookies and does not perform fingerprinting for advertising purposes. The data is used by Cloudflare solely to verify that the request originates from a human and to evaluate and improve the service. We do not store this data on our own systems. Cloudflare is based in the United States. Your data will therefore be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the basis for the data transfer is an adequacy decision of the European Commission pursuant to Art. 45 GDPR. If you do not agree to this processing, you can contact us directly via email at contact@jems-media.de instead. Cloudflare offers further information about its data protection practices and your rights at this link: https://www.cloudflare.com/privacypolicy/
Mailgun
To deliver messages sent through our contact form, we use the email delivery service Mailgun. The provider is Sinch Email Inc. (formerly Mailgun Technologies, Inc.), 112 East Pecan Street, Suite 1135, San Antonio, Texas 78205, USA, hereinafter referred to as “Mailgun”. The legal basis is Art. 6 Para. 1 lit. b) GDPR, as the processing is necessary to handle your request and, where applicable, to take steps prior to entering into a contract, supplemented by Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the reliable and secure delivery of your message to us. When you submit the contact form, the data you provide (name, company where applicable, email address, message) is transmitted to us as a transactional email through Mailgun's infrastructure. We use Mailgun's EU region, so the actual processing takes place on servers within the European Union (Frankfurt am Main). Mailgun processes the data on our behalf and solely for the purpose of email delivery; a data processing agreement pursuant to Art. 28 GDPR is in place with Mailgun. Insofar as a transfer of data to the USA occurs in the context of support or administration, this takes place on the basis of the adequacy decision of the European Commission pursuant to Art. 45 GDPR (EU-U.S. Data Privacy Framework) or on the basis of standard contractual clauses pursuant to Art. 46 Para. 2 lit. c) GDPR. Mailgun stores delivery metadata (e.g., delivery logs) for a limited period of typically up to 30 days for the purposes of delivery diagnostics and abuse prevention. Further information about data protection at Mailgun can be found at: https://www.mailgun.com/legal/privacy-policy/
Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site. The data thus collected will be temporarily stored, but not in association with any other of your data. The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
Cloudflare
To secure our website and to optimize loading times, we use the Cloudflare CDN (content delivery network). This is a service of Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter referred to as “Cloudflare”. The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the secure operation of our website and in its optimization. If you access our website, your queries are forwarded to Cloudflare servers. Statistical access data about your visit to our website is collected and Cloudflare stores a cookie on your terminal device via your browser. Access data includes – your IP address; – the page(s) on our site that you access; – type and version of internet browser you are using; – your operating system; – the website from which you came prior to visiting our website (referrer URL); – your length of stay on our site; and – the frequency with which our pages are accessed. The data is used by Cloudflare for statistical evaluations of the accesses as well as for the security and optimization of the offer. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cloudflare offers further information about its data collection and processing as well your rights and your options for protecting your privacy at this link: https://www.cloudflare.com/privacypolicy/
Model Data Protection Statement for Anwaltskanzlei Weiß & Partner