Privacy Policy in accordance with the General Data Protection Regulation
(GDPR)
Status: February 2026
The protection of your personal data is very important to us. Below, and in accordance with Articles 12 et seq. of the General Data Protection Regulation (GDPR), we inform you about how we process personal data when you use our website.
1. Controller
The controller responsible for data processing within the meaning of the GDPR is:
ja-dialog Holding GmbH
Singerstraße 109
10179 Berlin
Phone: +49 (30) 814 892-0
E-Mail: info@ja-dialog.de
Website: www.ja-dialog.de
2. Data Protection Officer
You can contact our external Data Protection Officer at:
Schwarte Consulting
Eilenburger Straße 32
04317 Leipzig
E-Mail: datenschutzbeauftragter@ja-dialog.de
Website: www.schwarte-consulting.com
3. General Information on Data Processing
3.1 Scope of Processing
We process personal data only insofar as this is necessary to provide our website, respond to your inquiries, or offer our services.
In addition, we process your data only if you have expressly given your consent or if there is a legal obligation to do so.
Personal data is any information that can be used to personally identify you, such as your name, email address, or IP address.
3.2 Legal Bases for Processing
The processing of your personal data is carried out exclusively in accordance with the legal requirements of the GDPR.
Depending on the purpose, processing is based on the following legal bases:
• Consent (Art. 6(1)(a) GDPR), e.g. for contact forms
• Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), e.g. to process inquiries
• Legal obligation (Art. 6(1)(c) GDPR), e.g. statutory retention obligations
• Legitimate interest (Art. 6(1)(f) GDPR), e.g. for the secure and stable operation of the website
3.3 Storage Period
We store personal data only for as long as is necessary for the respective purpose.
Once the purpose no longer applies and there are no statutory retention obligations, the data will be deleted.
3.4 Automated Decision-Making
Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.
No decisions are made that are based solely on automated processing and that have legal effects on you.
4. Provision of the Website and Log Files
4.1 Data Processed
Each time our website is accessed, the following technical data is automatically collected and stored in so-called log files
•IP address
• Date and time of access
• Browser type and browser version
• Operating system used
• Referrer-URL
• Pages and files accessed
4.2 Purpose of Processing
The processing of this data is necessary in order to:
• technically provide the website,
• ensure the stability and security of the systems,
• detect and defend against attacks or misuse.
No analysis for marketing purposes or for the creation of user profiles takes place.
4.3 Legal Basis
Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website)
4.4 Storage Period
The log files are stored for a maximum of 7 days and are then deleted or anonymized.
4.5 Right to Object
As this data is strictly necessary for the technical operation of the website, there is no right to object.
5. Hosting
Our website is hosted by an external hosting provider.
The hosting provider supplies the technical infrastructure required to make our website available on the internet. In doing so, personal data is processed for technical reasons, in particular IP addresses and log files.
Rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO
Data processing agreement: A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider. The provider processes the data exclusively in accordance with our instructions and not for its own purposes.
Hosting provider:
IONOS SE Elgendorfer Str. 57 56410 Montabaur Deutschland
6. Cookies, Consent Management and Consents
6.1 General Information on Cookies
Our website uses cookies and comparable technologies. Cookies are small text files that are stored on your device.
Cookies:
• are technically necessary to operate the website securely and properly,
• store your cookie settings,
• may – subject to your consent – be used for website analysis, marketing purposes, or the integration of external content.
6.2 Consent-Management (Borlabs Cookie)
Our website uses the consent management tool Borlabs Cookie provided by: Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany
This tool allows you to decide for yourself whether and which consent-required cookies and services are activated. Your selection is stored.
Data processed:
• Consent status per category
• Date and time of consent
• Shortened IP address
• Browser and device information
Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR
6.3 Technically Necessary Cookies
These cookies are required to provide basic functions of the website, such as storing your cookie settings.
They cannot be deactivated.
Legal basis:Art. 6(1)(f) GDPR
6.4 Withdrawal of Consent
You can revoke or adjust your consent at any time with effect for the future via the cookie settings.
7. Web Analytics, Marketing and External Media
With your explicit consent, we use services to:
• analyze the use of our website,
• optimize marketing measures,
• provide external content such as videos.
In this context, personal data may be processed, in particular your IP address.
7.1 Google Analytics 4
We use Google Analytics 4, a web analytics service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google Analytics helps us understand how visitors use our website. We use the information obtained to technically and content-wise improve our website.
Data processed:
• Shortened IP address
• Usage and interaction data
• Device and browser information
A transfer of data to the USA cannot be ruled out. This transfer is carried out on the basis of the EU Commission’s Standard Contractual Clauses.
Legal Basis:Art. 6(1)(a) GDPR (consent)
Storage period: Maximum of 14 months
7.2 Google Ads / Google AdSense
We use Google Ads / Google AdSense, provided by Google Ireland Limited to measure the success of our advertising campaigns. Cookies may be set that collect information about visits to our website and assign them to a campaign.
Cookies may be set that collect information about visits to our website and assign them to a campaign.
Legal basis: Art. 6(1)(a) GDPR (consent)
7.3 YouTube
Videos from the YouTube platform are embedded on our website.
The provider is Google Ireland Limited.
When a video is played, personal data (e.g. IP address) may be transmitted to Google and cookies may be set.
Legal basis: Art. 6 Abs. 1 lit. a DSGVO (Einwilligung)
7.4 Widerruf der Einwilligung
You can revoke or adjust your consent at any time with effect for the future via the cookie settings.
8. Contact Requests, Quotation Requests and CRM Processing
8.1 Contact and Quotation Forms
If you contact us via contact or quotation forms, we process the data you provide (e.g. name, email address, phone number, content of the inquiry).
The inquiries are forwarded by email to the sales department. Storage in the CRM system only takes place if the inquiry constitutes a real and concrete lead.
Legal basis: Art. 6 Abs. 1 lit. b DSGVO oder Art. 6 Abs. 1 lit. f DSGVO
Requirement to provide data:
The provision of data is necessary in order to process your inquiry. Without this data, the inquiry cannot be processed.
Storage period: Löschung nach Abschluss der Anfrage, sofern keine gesetzlichen Aufbewahrungspflichten bestehen.
8.2 CRM-System Pipedrive
If an inquiry is classified as a qualified lead, processing takes place in the CRM system:
Pipedrive OÜ
Mustamäe tee 3a
10615 Tallinn
Estland
Data processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR. Transfers to third countries are carried out on the basis of Standard Contractual Clauses
9. Applications
If you apply to us by email, we process your personal data exclusively for the purpose of carrying out the application procedure.
In particular, the following data is processed:
• Name and contact details
• Content of your application letter
• CV, certificates, and other documents
Purpose: Review of your application, implementation of the selection process, and contacting you.
Legal basis: Art. 6(1)(b) GDPR
in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG)
Storage period:
• In case of rejection: deletion no later than 6 months after completion of the application process
• In case of employment: transfer to the personnel file in accordance with statutory requirements
Your application data will not be passed on to third parties.
10. Social Media Links
Our website contains pure links to our profiles on social networks, such as:
• Facebook / Instagram (Meta Platforms Ireland Ltd.)
• LinkedIn (LinkedIn Ireland Unlimited Company)
• XING (New Work SE)
When merely visiting our website, no personal data is transmitted to these providers
Only when you click on a link do you leave our website. From that point on, the respective provider is responsible for data processing.
11. Data Security
We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect your personal data against loss, misuse, and unauthorized access.
These measures include in particular:
• SSL/TLS encryption
• Access restrictions and authorization concepts
• Regular security updates
• Organizational protection measures
12. Rights of Data Subjects
If we process your personal data, you have the following rights:
• Right of access to your processed data
• Right to rectification of inaccurate data
• Right to erasure, provided no retention obligations apply
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw consent given
You also have the right to lodge a complaint with a data protection supervisory authority.
13. Right to Lodge a Complaint
The competent authority is, in particular:
Berlin Commissioner for Data Protection and Freedom of Information
14. Currency and Changes
We reserve the right to amend this privacy policy if necessary.
The current version shall apply in each case.