Privacy Policy

01 Data Controller

The data controller within the meaning of Art. 4 No. 7 DSGVO (GDPR) is:

02 Sign-up & Issuance of the API Key

When you sign up for free access, we process the following data:

• E-mail address – for verification (double opt-in) and issuance of the API key.
• Time of sign-up and confirmation as well as the confirmation IP address – as proof of consent.
• Generated API key – to authenticate requests to the MCP server.

Purpose: provision of the service, verification of the e-mail address and abuse prevention.

Legal basis: contract performance or pre-contractual measures (Art. 6 (1) lit. b DSGVO / GDPR) as well as consent given as part of the double opt-in (Art. 6 (1) lit. a DSGVO / GDPR). Consent can be withdrawn at any time with effect for the future.

03 Cloudflare Turnstile

To protect the sign-up form against automated requests (spam/bots), we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile checks whether an entry comes from a human without using classic captcha puzzles; in doing so, technical information (e.g. IP address, browser characteristics) is processed. Cloudflare states that it does not set tracking cookies for advertising purposes in this context.

Legal basis: legitimate interest in secure, abuse-free operation (Art. 6 (1) lit. f DSGVO / GDPR). To the extent that data is transferred to third countries, such transfers are based on Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework. Details: Cloudflare privacy notice.

04 Server Logs & Hosting

The website is hosted with Microsoft Azure (Static Web Apps / Functions, Germany West Central region, EU). When the site is accessed, technically necessary data is automatically processed in server log files: IP address (truncated where possible), date and time, requested resource, referrer, browser and operating system identifier.

Purpose: delivery of the website, stability and security. Legal basis: legitimate interest (Art. 6 (1) lit. f DSGVO / GDPR). A data processing agreement pursuant to Art. 28 DSGVO (GDPR) is in place with the hosting provider.

05 Fonts

This website loads fonts via the Google Fonts CDN (Google Ireland Ltd.). The visitor's IP address is transmitted to Google in the process. Legal basis: legitimate interest in a consistent, performant presentation (Art. 6 (1) lit. f DSGVO / GDPR).

06 Cookies

We use no tracking or marketing cookies and no web analytics tool. We merely store – if the browser permits – a technically necessary piece of information in local storage (localStorage) in order not to display the one-time cookie notice again. This information remains on the respective device and is not transmitted to us.

07 Recipients & Processors

Data is only passed on to service providers that support us in providing the service, to the extent necessary and on the basis of data processing agreements:

• Hosting / infrastructure provider: Microsoft Ireland Operations Ltd. (Azure, EU region)
• E-mail delivery (confirmation / transactional e-mails): Microsoft (Azure Communication Services)
• Bot protection: Cloudflare, Inc. (Turnstile)

The Firmenbuch data retrieved via the MCP server is not transferred to third parties for advertising purposes.

08 Retention Period

We store personal data only for as long as it is necessary for the stated purposes or as long as statutory retention obligations exist. Sign-up and API key data are deleted as soon as the account or key is revoked or deletion is requested, and no later than after 12 months of inactivity.

09 Data Subject Rights

Under the GDPR, you have the following rights:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17)
• Restriction of processing (Art. 18) and data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent given, with effect for the future (Art. 7 (3))

To exercise these rights, a message to office@jngb.online is sufficient. You also have the right to lodge a complaint with the supervisory authority – in Austria, the Austrian Data Protection Authority (www.dsb.gv.at).

10 Changes to This Notice

We adapt this Privacy Policy when the service or the legal situation changes. The version published on this page applies at any given time.