Last updated: [DATE]
This policy explains what personal data [COMPANY NAME] ("we") processes when you visit
[DOMAIN], why we process it, and what you can ask us to do with it.
Who is responsible
[COMPANY NAME]
[STREET ADDRESS]
[POSTCODE, CITY, COUNTRY]
E-mail: [CONTACT EMAIL]
What we collect
The contact form. When you send a request we store the name, e-mail address, company
name, selected plan and message you type, plus the IP address the request came from, the
browser user agent, the language version you used and the time of submission.
Server logs. Our hosting provider records requests to the site, including IP address,
time, requested URL and user agent.
Language preference. If you choose a language we store that choice in a cookie named
`lang` for one year. If your first visit is redirected by country, a cookie named `geo`
records that it already happened so you are not redirected again.
Session cookie. A cookie named `jerskit_sess` keeps a form session alive and protects
the contact form against cross-site request forgery. It expires when you close the browser.
Country lookup. To send a first-time visitor to the right language version we determine
the country your IP address belongs to. Where the site runs behind Cloudflare this comes
from a request header. Otherwise the IP address is sent to ip-api.com, whose result we cache
for 30 days. [ANALYTICS: DELETE THIS PARAGRAPH IF THE COUNTRY REDIRECT IS DISABLED.]
Why, and on what legal basis
- To answer your request — performance of pre-contractual measures at your request and our
legitimate interest in replying to enquiries (GDPR Art. 6(1)(b) and (f)).
- To keep the site secure and working — legitimate interest in preventing abuse, spam and
attacks (Art. 6(1)(f)).
- To show the site in a sensible language — legitimate interest in a usable service
(Art. 6(1)(f)). The choice you make yourself is stored on the basis of that choice.
- [If analytics are enabled: to understand how the site is used — your consent, Art. 6(1)(a),
withdrawable at any time.]
How long we keep it
- Contact requests: [RETENTION PERIOD, e.g. 24 months] after the last exchange, unless a
business relationship makes a longer statutory retention period apply.
- Server logs: as long as our hosting provider retains them, typically [LOG RETENTION].
- Country lookups: 30 days.
- Cookies: as described above.
Who else sees it
- Hosting. The site is hosted by [HOSTING PROVIDER, ADDRESS], acting as our processor.
- E-mail. Notifications about your request are delivered through [MAIL PROVIDER].
- ip-api.com. Receives your IP address for the country lookup described above.
- Analytics and other third parties. [LIST ANY THIRD PARTY THE SITE LOADS, OR
DELETE THIS LINE.]
We do not sell your data and we do not use it for advertising.
Transfers outside your country
Where a provider listed above processes data outside the EEA, that transfer is covered by
the European Commission's standard contractual clauses or an adequacy decision. Ask us and
we will tell you which applies to which provider.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use
it, or object to our use of it. Where processing rests on consent you can withdraw that
consent at any time, without affecting what we did before. Write to [CONTACT EMAIL].
You may also complain to a supervisory authority — in Germany the data protection authority
of your federal state, in Turkey the KVKK, and in other countries the equivalent body.
Changes
If this policy changes we publish the new version on this page and update the date at the top.