← Back

Privacy Policy

Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. Detailed information on the subject can be found in the privacy policy set out below this text.

Data collection on this website

Who is responsible for the data collection on this website?

Data processing on this website is carried out by the website operator. You will find their contact details in the section “Information on the controller” in this privacy policy.

How do we collect your data?

Some data is collected because you provide it to us. This may, for example, be data you enter into the contact form or give us by email or telephone.

Other data is collected automatically by our IT systems when you visit the website. This is technical data (e.g. internet browser, operating system or the time the page was accessed), which the server records in log files. We do not use cookies for this.

What do we use your data for?

Part of the data is collected to ensure the website is provided without errors and securely. If you contact us through the form, by email or by telephone, we use your details to process your inquiry and to get in touch with you. If you have agreed to the newsletter, we additionally use your email address to send you news about JUST ADD AI.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the competent supervisory authority.

For this and for further questions on the subject of data protection, you can contact us at any time.

No cookies, no analytics tools

This website sets no cookies and stores no other information on your device either. We use no analytics, tracking or advertising services, your behaviour is not evaluated statistically and no user profile is created. Fonts, images and videos are also delivered from our own server, so no third-party content is loaded. That is why there is no cookie banner on this website: there is nothing we would need your consent for.

Hosting

We host the content of our website with the following provider:

Amazon Web Services

The provider is Amazon Web Services EMEA SARL, Luxembourg (hereinafter AWS). When you visit our website, AWS records various log files. These include your IP address, the date and time of access, information about your browser and operating system, the referrer URL and further server log data.

AWS is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in providing our website as reliably and securely as possible.

Order processing

A data processing agreement pursuant to Art. 28 GDPR is in place for the use of the service named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.

General information and mandatory disclosures

Data protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy. It explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller for data processing on this website is:

JUST ADD AI GmbH
Konsul-Smidt-Straße 8p
28217 Bremen
Germany
Phone: +49 (0) 421 4088790
Email: info@justadd.ai

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

Data protection officer

The controller has appointed a data protection officer. You can reach her at the following contact details:

datenschutz@jaai-group.com
+49 (0) 421 40887928

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds cease to apply.

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR. Consent can be withdrawn at any time. If your data is required for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, we process your data where it is required to fulfil a legal obligation, on the basis of Art. 6 (1) (c) GDPR. Data processing may also take place on the basis of our legitimate interest under Art. 6 (1) (f) GDPR. The legal bases applicable in each individual case are set out in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of our business activities we work with various external bodies and service providers. This sometimes requires personal data to be transferred to those external bodies. We only pass on personal data to external bodies where this is necessary in the context of performing a contract, where we are legally obliged to do so (e.g. passing data to tax authorities), where we have a legitimate interest in the transfer under Art. 6 (1) (f) GDPR, or where another legal basis permits the transfer. When using processors, we pass on personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.

The recipients of your data are, in detail: our hosting provider (Amazon Web Services), our CRM provider (HubSpot) and, if you apply to us, our recruiting portal (Personio). Further details are given in the respective sections below.

Access to your data is limited to those people who need it in order to deal with your request.

Transfer to third countries

Some of the services we use are based in the USA or access data from there. A transfer of your personal data to the USA can therefore not be ruled out. We ensure that the requirements of Art. 44 et seq. GDPR are met for these transfers — in particular through the European Commission's standard contractual clauses and, where the recipient is certified, through the EU-U.S. Data Privacy Framework. We point out that, despite these safeguards, the level of data protection in third countries does not correspond to the European level in every respect; in particular, access by state authorities is not excluded to the same extent.

Providing your data is voluntary

You are not obliged to provide us with personal data. The details in the contact form are required neither by law nor by contract. Without your email address and your request, however, we cannot answer your inquiry. You can reach us by email or telephone instead at any time. Consent to the newsletter is voluntary; it is not a condition for us dealing with your inquiry.

No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place on this website. Your inquiries are decided on by people.

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION UNDER ART. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The authority responsible for us is: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Arndtstraße 1, 27570 Bremerhaven, Germany
Phone: +49 (0) 421 361 2010
Email: office@datenschutz.bremen.de

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place in so far as it is technically feasible.

Information, correction and deletion

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or deletion of this data. For this and for further questions on the subject of personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this, you can contact us at any time. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data happened or happens unlawfully, you can request the restriction of data processing instead of its deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
  • If you have lodged an objection under Art. 21 (1) GDPR, a balancing of your interests and ours has to be carried out. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may — apart from being stored — only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a member state.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the padlock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data collection in detail

Cookies

This website sets no cookies — neither its own nor those of third parties. We also store no other information on your device and read none stored there, for instance to recognise your device again (device fingerprinting). There is therefore no access to your terminal equipment within the meaning of § 25 TDDDG, no consent is required for it, and so we show you no cookie banner either.

Our contact form also works without cookies: it is sent directly from our page to the interface of our CRM provider; we embed no embedding or tracking script from HubSpot. Should we use services in future that require cookies, we will obtain your consent beforehand and adapt this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data is not merged with other data sources.

It is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation, the security and the optimisation of its website — for this, the server log files have to be recorded.

Contact form

You can write us a message via the form on our contact page. Only two details are required:

  • your request (the text of your message)
  • your email address

We process these details solely in order to deal with your inquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR in so far as your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively dealing with the inquiries addressed to us (Art. 6 (1) (f) GDPR).

Technically, your message is transmitted directly to HubSpot's form interface and stored there as a contact in our CRM system (see the section “HubSpot as a CRM system”). No HubSpot script is embedded in our page, no cookies are set and no reach measurement takes place.

The data you enter in the form remains with us until you ask us to delete it or the purpose for storing it no longer applies (e.g. once your inquiry has been dealt with). Mandatory statutory provisions — in particular retention periods — remain unaffected.

Newsletter

In the contact form you can additionally consent, by ticking a box, to receiving news about JUST ADD AI by email. This consent is voluntary and independent of your inquiry being dealt with. For this we process your email address on the basis of your consent under Art. 6 (1) (a) GDPR.

As proof of consent, we log the wording of the checkbox and the time at which you ticked it. We send the newsletter via HubSpot.

You can withdraw your consent at any time, for example via the unsubscribe link in every email or via the contact details given above. The lawfulness of the processing carried out until the withdrawal remains unaffected. After the withdrawal we no longer use your email address for the newsletter.

HubSpot as a CRM system

For our customer management and for sending the newsletter we use HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA (HubSpot). When you get in touch with us, we create a contact there with your details — as a rule your email address, your message and, in so far as you give them to us, your name, telephone number and company. This keeps the course of our communication traceable and means inquiries do not get lost.

HubSpot is a recipient of your personal data and acts as a processor for us. The legal basis is Art. 6 (1) (b) GDPR in so far as the processing relates to the performance of a contract or to pre-contractual measures, and otherwise our legitimate interest in orderly customer management under Art. 6 (1) (f) GDPR. Sending the newsletter is based on your consent under Art. 6 (1) (a) GDPR.

The data in our HubSpot account is processed in data centres within the European Union. Access from the USA cannot be ruled out; HubSpot bases such transfers on the European Commission's standard contractual clauses (see the section “Transfer to third countries”).

Your data remains with us until you ask us to delete it or the purpose for storing it no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

Order processing

A data processing agreement pursuant to Art. 28 GDPR is in place for the CRM service provider named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our users only on our instructions and in compliance with the GDPR.

Inquiry by email or telephone

If you contact us by email or telephone, your inquiry including all personal data arising from it (name, inquiry) will be stored and processed by us for the purpose of dealing with your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR in so far as your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively dealing with the inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this was obtained; consent can be withdrawn at any time.

The data you send us via contact inquiries remains with us until you ask us to delete it, withdraw your consent to its storage or the purpose for storing it no longer applies (e.g. once your request has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

AI telephone assistant

If you call us, your call may be answered by an AI-assisted telephone assistant. At the start of the call we point out that the conversation is being recorded. What is stored is the audio recording of the conversation and the transcript created from it — so that the assistant understands your request and we can answer it or pass it on internally.

The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give by continuing the call after our announcement. You can withdraw your consent at any time; the lawfulness of the processing carried out until the withdrawal remains unaffected.

If you do not want your call to be recorded, you can reach us by another route at any time: by email to info@justadd.ai or via the contact form. We delete the recording and the transcript as soon as they are no longer needed to deal with your request.

Applications

Our open positions are listed on the jobs page; applications run through our recruiting portal Personio. The provider is Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. Personio is a recipient of your application data and acts as a processor for us; a data processing agreement pursuant to Art. 28 GDPR is in place. We process the data you give us in your application solely in order to carry out the application procedure. The legal basis is Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG.

If no employment relationship comes about, we generally delete your application documents six months after the procedure has been concluded; this period serves to defend against possible claims. If you would like us to keep your documents on file longer for future positions, we need your consent under Art. 6 (1) (a) GDPR, which you can withdraw at any time.

Version of this privacy policy: August 2026

JUST ADD AI GmbH
Konsul-Smidt-Straße 8p
28217 Bremen