The controller for personal data processed through this website is JM-In UG (haftungsbeschränkt), Hansteinhof 12, 37079 Göttingen, Germany, email [email protected]. Full details are in our legal notice. Because the controller is established in Germany, the EU General Data Protection Regulation (GDPR) applies to this processing.
The site is delivered through Cloudflare, Inc. When you open a page, your IP address, the page requested, the time, the referring page and your browser's user agent are processed so that the page can be delivered and the service kept secure. The legal basis is our legitimate interest in operating a secure website, Article 6(1)(f) GDPR. We do not use advertising cookies, tracking pixels or analytics that identify you, and there is no cookie banner because there is nothing to consent to.
If you send us a message through the form on the provider page, we process your name, email address, the company you name and your message, to answer you and, where it concerns a listing, to check and correct the entry. The legal basis is Article 6(1)(b) GDPR where you ask about a listing or a contract, and otherwise Article 6(1)(f), our legitimate interest in responding to enquiries. The form is delivered by FormSubmit (a service of Ambitious Digital LLC), which forwards the message to our mailbox. Do not send confidential or health information through the form.
Some links to providers can be affiliate links, labeled "Ad". If you follow one, the provider or its affiliate network may set cookies on its own site to attribute a purchase. That happens on their site and under their privacy policy. We receive commission reports, not your personal data.
We publish business information about providers, such as a company name, a registered address and statements from their public pages. We do not publish names of individual employees in the comparison.
We do not sell personal data, do not share it for targeted advertising and do not pass it to advertisers. Data is handled on our behalf by Cloudflare, Inc. (hosting), Ambitious Digital LLC (contact form) and our email provider. Transfers to the United States are based on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the EU Standard Contractual Clauses.
Paid provider profiles are billed through Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). If you follow a payment or customer portal link, you leave this site for a page operated by Stripe, which processes your billing and payment details under its own privacy policy at stripe.com/privacy. We receive the information needed to perform the contract and meet our accounting obligations, not your full card number. The legal basis is Article 6(1)(b) and (c) GDPR.
Server log data is deleted after 30 days at the latest, or aggregated so that it can no longer be linked to a person. Enquiries that do not lead to a business relationship are deleted within twelve months. Contract records are kept for the periods required by German commercial and tax law, six years for business correspondence and ten years for accounting records (section 257 of the Commercial Code, section 147 of the Fiscal Code).
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Write to [email protected]. You can also complain to a supervisory authority, for example the data protection authority of Lower Saxony, Germany.
If we change this notice, we update the version and date at the top of this page.