Privacy notice

1. Controller

JackIn
Joel Acheampong
Seestr. 2
45359 Essen
Deutschland

Email: info@jackin-ap.com
Phone: +49 163 4633474

This notice explains how personal data is processed when you visit jackin-ap.com or contact JackIn.

2. Website, hosting and security

The website is delivered through Cloudflare Workers and Cloudflare’s network. Technical data is processed, including your IP address, requested URL, time, browser and device information, and connection and status data. This enables content delivery, troubleshooting and protection against abuse and denial-of-service attacks. Website connections are redirected to HTTPS.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure and reliably available business website. The recipient is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, together with the service providers involved in delivering the service.

Cloudflare also processes data outside the EU and EEA, particularly in the United States. Cloudflare’s data processing terms provide safeguards such as EU Standard Contractual Clauses for relevant transfers. See the Cloudflare Data Processing Addendum and Cloudflare privacy policy for the terms and further information.

Security analytics and retention

Cloudflare uses measures including DDoS protection and Browser Integrity Check. The Free website plan in use provides up to 24 hours of sampled Security Events and seven days of Security Analytics history. These periods concern the respective datasets and are not a general deletion deadline for all technical data.

No single fixed retention period has been established for other technical logs. Cloudflare determines retention according to the processing purpose, operational and security needs, and legal duties. For data processed on our behalf, its data processing terms refer to processing no longer being necessary to deliver the service or the contract ending. The stated 24 hours or seven days therefore do not imply that all data is completely deleted at that point. Details: Cloudflare Security Events and Security Analytics.

Network error reports

Network Error Logging (NEL) allows supporting browsers to report technical connection failures to Cloudflare. Reports may contain the requested URL, error type, protocol, status and connection duration. They support troubleshooting and reliable availability on the basis of Article 6(1)(f) GDPR. The current policy does not request reports of successful requests.

Cloudflare states that the client IP is held only in volatile memory during processing and then discarded, without being logged in the NEL pipeline. The browser policy lasts seven days. This is not the reports’ retention period. No fixed deletion period is specified for the remaining report data; the purpose- and obligation-based criteria described above apply. Further information: Cloudflare Network Error Logging.

3. Email and telephone enquiries

When you contact us, we process your contact details, the content of your enquiry and any attachments to respond to your request. Article 6(1)(b) GDPR applies to contractual enquiries. For other business enquiries, Article 6(1)(f) GDPR applies based on our legitimate interest in responding.

The address info@jackin-ap.com uses Apple iCloud Mail. According to the current domain configuration, incoming email is delivered directly to Apple. Cloudflare Email Routing is not enabled. The provider for users in Germany is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple and its service providers may process message and connection data during delivery, storage and handling.

Apple may process data outside the EEA, particularly in the United States. Apple describes the use of EU Standard Contractual Clauses for international transfers from the EEA. Information and contact details to request a copy of the clauses are available in Apple’s privacy policy; see also the iCloud terms applicable in Germany.

We retain enquiries for as long as needed to handle them and any follow-up questions. They are then deleted unless statutory retention duties or the establishment, exercise or defence of legal claims require further storage. For business correspondence subject to retention duties, the period depends on the document type and applicable law. Apple describes its own retention criteria in its privacy policy.

4. Cookies, analytics and external content

The website code sets no cookies, stores no language preference in your browser and uses no tracking pixels. German and English versions are reached through links. The Manrope font and other design assets are served directly by this website. Videos, maps, social feeds and external font services are not embedded.

Cloudflare Web Analytics is not configured in the account in use. No analytics or advertising service is embedded in the website code. This does not affect the technical security analytics and network error reporting described in section 2.

When a security check is necessary, Cloudflare may set a technically necessary cookie such as cf_clearance to recognise a completed check. The configured recognition period is 30 minutes; Cloudflare describes additional technical tolerances. This supports secure delivery of the requested service, not advertising. Where accessing your device is strictly necessary for this purpose, the basis is section 25(2)(2) TDDDG; subsequent processing of personal data relies on Article 6(1)(f) GDPR. Details: Cloudflare cookies and challenge passage.

5. Your rights

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may withdraw any consent at any time for the future without affecting the lawfulness of processing before withdrawal.

Right to object under Article 21 GDPR: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop the processing unless overriding compelling legitimate grounds exist or the processing is needed to establish, exercise or defend legal claims. Please use the contact details above.

Under Article 77 GDPR, you may complain to a data protection authority, particularly in your habitual place of residence, workplace or the place of the alleged infringement. The authority responsible for our location is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

6. Providing data and decision-making

Contacting us is voluntary. Without the details needed to handle your enquiry, we may be unable to respond. Technical data transmitted when accessing the site is required to deliver and secure it. We do not make solely automated decisions, including profiling, with legal or similarly significant effects within the meaning of Article 22 GDPR.

Last updated: 13 September 2026