The controller for personal data processed through this website is JM-In UG (haftungsbeschränkt), Hansteinhof 12, 37079 Göttingen, Germany, email [email protected]. Full details are in our legal notice. Because we are established in Germany and offer this site to users in the United Kingdom, both the UK GDPR and the EU GDPR can apply to this processing.
The site is delivered through Cloudflare, Inc. When you open a page, your IP address, the page requested, the time, the referring page and your browser's user agent are processed so that the page can be delivered and the service kept secure and available. The legal basis is our legitimate interest in operating a secure website, Article 6(1)(f) UK GDPR. We do not use advertising cookies, tracking pixels or analytics that identify you, and there is no cookie banner because there is nothing to consent to.
If you send us a message through the form on the provider page, we process the details you enter, which are your name, your email address, the company you name and the content of your message. We use them to answer you and, where your message concerns a listing, to check and correct the entry. The legal basis is Article 6(1)(b) UK GDPR where you are asking about a listing or a contract, and otherwise Article 6(1)(f), our legitimate interest in responding to enquiries.
The form is delivered by FormSubmit (a service of Ambitious Digital LLC), which forwards the message to our mailbox. Your message therefore passes through that service and through our email provider before it reaches us. Do not send confidential or special category information through the form.
We publish the business contact details of software providers, such as a company name, a registered address and a general company email address, where those details are already public and relate to the provider as a business. Where a named individual appears, for example a managing director listed in a public register, the legal basis is Article 6(1)(f) UK GDPR, our legitimate interest and our readers' interest in an accurate and verifiable market overview. If you are named and object, write to us and we will review the entry.
We do not sell personal data and we do not pass it to advertisers. Data is handled on our behalf by Cloudflare, Inc. (hosting), Ambitious Digital LLC (the FormSubmit contact form) and our email provider. Cloudflare and Ambitious Digital are established in the United States, so using this site and the contact form involves a transfer of personal data there. Those transfers are made on the basis of the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with the supplementary measures those instruments require.
Paid provider profiles are billed through Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). If you follow a payment or customer portal link you leave this site for a page operated by Stripe. The data collected there, in particular your name, company name, billing address, email address, VAT number and payment details, is processed by Stripe under its own privacy policy at stripe.com/privacy. We receive from Stripe the information needed to perform the contract and to meet our accounting obligations, and we do not receive your full card number. The legal basis is Article 6(1)(b) UK GDPR for performance of the contract and Article 6(1)(c) for the statutory retention of accounting records.
Server log data is deleted after 30 days at the latest, or aggregated so that it can no longer be linked to a person. Individual entries are kept longer only where that is necessary to investigate a specific security incident, and only for as long as that takes. Enquiries that do not lead to a business relationship are deleted within twelve months. Where an enquiry does lead to a contract, the records are kept for the retention periods required by German commercial and tax law, which are six years for business correspondence and ten years for accounting records under sections 257 of the Commercial Code and 147 of the Fiscal Code.
You have the right to ask for access to your personal data, for it to be corrected or erased, for processing to be restricted, and to data portability where it applies. Where we rely on legitimate interests you have the right to object, and we will stop unless we can show compelling grounds that override your interests. Write to [email protected] to exercise any of these.
You also have the right to complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ico.org.uk); in Germany it is the data protection authority for Lower Saxony. We have no establishment in the United Kingdom, so the controller named above is the point of contact for any request or complaint, in English or in German.
If we change this notice we will update the version and date at the top of this page.