Privacy Policy

Your trust matters. We explain how we protect your data and respect your privacy.

Last Updated: February 12, 2026

Effective Date: February 12, 2026

1. Introduction

JumpStand ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or contact us through our services.

This policy complies with the General Data Protection Regulation (GDPR) and Austrian data protection laws (Datenschutzgesetz - DSG).

2. Data Controller

Company Name: JumpStand

Location: Austria

Contact Email: el@jumpstand.eu

For any questions regarding this Privacy Policy or your personal data, please contact us at the above email address.

3. Personal Data We Collect

3.1 Information You Provide Directly

When you use our contact form or communicate with us, we collect:

- Name: To address you personally

- Email address: To respond to your inquiries

- Phone number: To contact you if necessary

- Message content: To understand and respond to your requests

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information through analytics services:

- IP address: For security and analytics purposes

- Browser type and version: To optimize website performance

- Operating system: To ensure compatibility

- Pages visited and time spent: To understand user behavior

- Referring website: To improve our marketing

- Device information: To optimize mobile experience

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

- Consent (Art. 6(1)(a) GDPR): When you submit the contact form, you provide explicit consent for us to process your data

- Legitimate interests (Art. 6(1)(f) GDPR): For analytics and website optimization to improve our services

- Legal obligation (Art. 6(1)(c) GDPR): When required to comply with Austrian or EU law

5. How We Use Your Data

We use your personal data for the following purposes:

- Communication: To respond to your inquiries and provide requested information

- Service improvement: To analyze website usage and improve user experience

- Security: To protect our website from fraud and abuse

- Legal compliance: To fulfill our legal obligations under Austrian and EU law

We do not use your data for automated decision-making or profiling.

6. Third-Party Services

We use the following third-party services that may process your data:

6.1 Google Analytics

We use Google Analytics to analyze website traffic and user behavior. Google Analytics uses cookies and may collect:

- IP addresses (anonymized)

- Browser and device information

- Pages visited and interaction patterns

Google Analytics data is processed in accordance with Google's privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Data transfer: Google may transfer data to the United States. We have implemented appropriate safeguards through Google's EU-US Data Privacy Framework certification and Standard Contractual Clauses.

For more information, visit Google's Privacy Policy.

6.2 Resend

Email delivery from the contact form. Processes name/email/phone for sending responses.

- GDPR compliant with DPA: https://resend.com/legal/dpa

- Data transferred to the US via EU SCCs + Data Privacy Framework (DPF)

- Their Privacy Policy: https://resend.com/legal/privacy-policy

7. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

7.1 Types of Cookies We Use

- Strictly necessary cookies: Required for basic website functionality

- Analytics cookies: Used to understand how visitors interact with our website (Google Analytics)

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling cookies may affect website functionality.

8. Data Retention

We retain your personal data only for as long as necessary:

- Contact form data: Retained for 3 years after your last contact, unless you request earlier deletion

- Analytics data: Retained for 26 months in Google Analytics, then automatically deleted

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

9.1 Right of Access (Art. 15 GDPR)

You have the right to request confirmation of whether we process your personal data and access to that data.

9.2 Right to Rectification (Art. 16 GDPR)

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (Art. 17 GDPR)

You can request deletion of your personal data ("right to be forgotten") when:

- The data is no longer necessary

- You withdraw consent

- You object to processing

- The data was unlawfully processed

9.4 Right to Restriction (Art. 18 GDPR)

You can request limitation of processing under certain circumstances.

9.5 Right to Data Portability (Art. 20 GDPR)

You can request your data in a structured, commonly used format for transfer to another controller.

9.6 Right to Object (Art. 21 GDPR)

You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

You can withdraw consent at any time without affecting the lawfulness of prior processing.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde):

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna, Austria

Phone: +43 1 52 152-0

Email: dsb@dsb.gv.at

Website: https://www.dsb.gv.at

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

- Unauthorized access

- Accidental loss

- Destruction or damage

- Unlawful processing

Our security measures include:

- Encrypted data transmission (SSL/TLS)

- Regular security assessments

- Access controls and authentication

- Secure data storage

11. International Data Transfers

Some of our third-party service providers (e.g., Google Analytics) may transfer data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

- EU-US Data Privacy Framework certification

- Standard Contractual Clauses (SCCs) approved by the European Commission

- Adequacy decisions by the European Commission

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised.

We encourage you to review this policy regularly. Material changes will be communicated through our website or direct notification.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: el@jumpstand.eu

Address: Gumpendorferstrasse 132/1/2, Vienna, Austria, 1060

We will respond to your request within 30 days as required by GDPR.

15. Additional Information for Austrian Users

15.1 Austrian Data Protection Authority

As mentioned in Section 9.8, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

15.2 Austrian Legal Framework

This Privacy Policy complies with:

- Regulation (EU) 2016/679 (GDPR)

- Austrian Data Protection Act (Datenschutzgesetz - DSG)

- Austrian Telecommunications Act (Telekommunikationsgesetz - TKG 2003) regarding cookies

15.3 Language

This Privacy Policy is provided in English. In case of any discrepancy between different language versions, the English version shall prevail unless otherwise required by Austrian law.