Privacy Policy

Datenschutzerklärung · Last updated: October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

For all questions regarding data protection, please contact us at the email address above.

2. Overview and legal bases

Personal data is any information relating to an identified or identifiable natural person. We process personal data only to the extent necessary to provide a functional website, to answer your enquiries and — only with your consent — to analyse and market our services.

Depending on the purpose, we rely on the following legal bases:

• Art. 6(1)(a) GDPR — your consent (e.g. for analytics and marketing tools);
• Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures (e.g. answering a project enquiry);
• Art. 6(1)(c) GDPR — compliance with legal obligations;
• Art. 6(1)(f) GDPR — our legitimate interests (e.g. secure and stable operation of the website).

Where information is stored on, or read from, your device (e.g. cookies, pixels, local storage), this is done on the basis of § 25(1) TDDDG (your consent) or, where strictly necessary to provide the service you requested, § 25(2) TDDDG.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the website via a global content delivery network (CDN). When you visit the website, the hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically:

• IP address of the requesting device
• date and time of the request
• requested page or file, amount of data transferred and HTTP status code
• referrer URL (the page you came from)
• browser type and version, operating system

This data is processed to deliver the website, to ensure its stability and security and to detect and defend against misuse. The legal basis is Art. 6(1)(f) GDPR. The log files are stored by the hosting provider for a limited period only and are then deleted or anonymised, unless longer storage is required to investigate a specific security incident.

Netlify processes this data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Netlify, Inc. is certified under the EU-US Data Privacy Framework. Further information: Netlify privacy statement.

Our domain is registered with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which only provides the domain name system (DNS) and, where applicable, our email inbox.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar and the lock symbol. With encryption enabled, the data you transmit to us cannot be read by third parties.

5. Fonts

The fonts used on this website (Inter Tight and Instrument Serif) are hosted locally on our own server. No connection is made to servers of Google or any other font provider when you visit this website.

6. Contact form and email

If you contact us via the contact form or by email, we process the data you provide — name, email address and the content of your message — together with the date and time of your request, in order to handle your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a potential or existing contract, and otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries addressed to us.

Form submissions are received and stored by our hosting provider's form service (Netlify Forms, Netlify, Inc., see section 3) on our behalf and forwarded to our business email inbox as a notification. Netlify also checks submissions automatically for spam; the form additionally contains an invisible check field for this purpose. No form data is shared with third parties for advertising purposes. We delete submissions from the Netlify dashboard and our inbox once they are no longer needed.

We delete your data once your enquiry has been fully processed and no further communication is expected, unless statutory retention obligations (e.g. under commercial or tax law) require longer storage. Providing this data is voluntary; without it, however, we cannot answer your enquiry.

As our company is based in the United States, your enquiry will be processed by us in the US. This transfer is necessary to answer your enquiry and, where relevant, to carry out pre-contractual measures at your request (Art. 49(1)(b) GDPR); see also section 11.

7. Cookies and consent management

Cookies are small text files stored on your device. Similar technologies include pixels, tags and the browser's local storage. We distinguish between:

• Necessary: required for the website and its functions to work. These are used without consent on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR.
• Statistics: help us understand how visitors use the website. Used only with your consent.
• Marketing: used to measure the success of our advertising and to show relevant ads on other platforms. Used only with your consent.

Consent banner

When you first visit the website, a banner asks for your consent. No statistics or marketing tool is loaded before you actively consent. Your choice (consent categories and date) is stored in your browser's local storage under the key jps_consent so that the banner is not shown again on every page. This storage is strictly necessary to respect your decision (§ 25(2) TDDDG; Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR). It remains until you delete your browser data.

Necessary storage used

• jps_consent (local storage) — stores your consent choice. No other cookies are set without your consent.

Withdrawing or changing consent

You can withdraw or change your consent at any time with effect for the future by clicking Cookie settings (also at the bottom of every page). The lawfulness of processing carried out before withdrawal is not affected. You can also delete cookies at any time via your browser settings.

8. Analytics tools

The following tools are used only if you have consented to the “Statistics” category (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and only to the extent we have activated them on this website.

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics analyses how visitors use the website (e.g. pages viewed, time spent, device and browser information, approximate location derived from the shortened IP address, referral source). For this purpose, cookies (e.g. _ga, _ga_*, storage period up to 2 years) are set. IP addresses are not logged or stored in Google Analytics 4. We use Google's Consent Mode, so Google Analytics only stores cookies after your consent. Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: Google privacy policy.

Microsoft Clarity

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; parent company Microsoft Corporation, USA. Clarity records usage behaviour on the website (e.g. mouse movements, clicks, scrolling — so-called heatmaps and session recordings) in pseudonymised form to help us improve usability. Input fields are masked. Cookies such as _clck and _clsk (up to 1 year) are set. Data may be transferred to the USA; Microsoft is certified under the EU-US Data Privacy Framework. More information: Microsoft privacy statement.

9. Marketing and advertising tools

The following tools are used only if you have consented to the “Marketing” category (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and only to the extent we have activated them on this website. They help us measure the effectiveness of our advertising campaigns (conversion tracking, e.g. whether a form was submitted after clicking an ad) and show our ads to people who have visited this website or who are similar to them (remarketing / custom and lookalike audiences). The providers may link this data to your user account with them and use it for their own purposes; we have no influence on this.

Google Ads (conversion tracking and remarketing)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA. If you reach our website via a Google ad, a cookie is set that allows Google and us to recognise that the ad was clicked and that an action (e.g. a contact request) followed. Google may also use remarketing lists to show you our ads on other websites. Cookies used include _gcl_au (up to 90 days) and Google advertising cookies on Google domains. We use Google's Consent Mode. Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. You can manage personalised advertising at My Ad Center. More information: Google privacy policy, Google business data responsibility.

Google Tag Manager / gtag.js

To integrate Google Analytics and Google Ads, we use Google's tag library (gtag.js), provided by Google Ireland Limited. The library itself does not create user profiles, but establishes a connection to Google's servers and transmits your IP address. It is only loaded after your consent.

Meta Pixel (Facebook / Instagram)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; parent company Meta Platforms, Inc., USA. The Meta Pixel allows us to measure the effectiveness of our ads on Facebook and Instagram, to create custom and lookalike audiences and to show you our ads on Meta platforms. For this purpose, the pixel processes, among other things, your IP address, browser information, the pages visited and the actions performed (e.g. “Lead” after a form submission) and sets cookies such as _fbp (up to 90 days). For the collection and transmission of data to Meta, we and Meta are joint controllers pursuant to Art. 26 GDPR; the essential content of the agreement is available in Meta's Controller Addendum. Meta is responsible for the subsequent processing. Data may be transferred to the USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. More information and settings: Meta privacy policy, ad preferences.

TikTok Pixel

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, One London Wall, London, EC2Y 5EB, United Kingdom. The TikTok Pixel measures the effectiveness of our ads on TikTok and enables targeted advertising to website visitors. It processes, among other things, your IP address, device and browser information, pages visited and actions performed, and sets cookies such as _ttp (up to 13 months). For the collection and transmission of data, we and TikTok may be joint controllers pursuant to Art. 26 GDPR. Data may be transferred to third countries, including the USA, Singapore, Malaysia and China; TikTok relies on EU standard contractual clauses for these transfers. More information: TikTok privacy policy.

LinkedIn Insight Tag

Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; parent company LinkedIn Corporation, USA. The Insight Tag provides us with aggregated, pseudonymised reports on the performance of our LinkedIn ads and on website visitors (e.g. job title, industry, company size — without identifying individuals) and enables retargeting. It processes, among other things, your IP address, browser information, timestamp and pages visited, and sets cookies such as li_sugr, bcookie, lidc and UserMatchHistory (up to 2 years). Data may be transferred to the USA; LinkedIn Corporation is certified under the EU-US Data Privacy Framework. More information and opt-out: LinkedIn privacy policy, LinkedIn opt-out.

Microsoft Advertising (UET tag)

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; parent company Microsoft Corporation, USA. The Universal Event Tracking (UET) tag measures conversions from our ads on Bing and the Microsoft Advertising network and enables remarketing. Cookies such as _uetsid and _uetvid (up to 13 months) are set. Data may be transferred to the USA; Microsoft is certified under the EU-US Data Privacy Framework. More information and opt-out: Microsoft privacy statement, Microsoft ad settings.

Pinterest Tag

Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; parent company Pinterest, Inc., USA. The Pinterest Tag measures the effectiveness of our Pinterest ads and enables targeted advertising to website visitors. It processes, among other things, your IP address, browser information and actions on the website and sets cookies such as _pinterest_ct_ua and _derived_epik (up to 1 year). Data may be transferred to the USA; Pinterest, Inc. is certified under the EU-US Data Privacy Framework. More information: Pinterest privacy policy.

Snap Pixel

Provider: Snap B.V., Keizersgracht 165, 1016 DP Amsterdam, Netherlands; parent company Snap Inc., USA. The Snap Pixel measures the effectiveness of our ads on Snapchat and enables targeted advertising to website visitors. It processes, among other things, your IP address, device and browser information and actions on the website and sets cookies such as _scid (up to 13 months). Data may be transferred to the USA; Snap Inc. is certified under the EU-US Data Privacy Framework. More information: Snap privacy policy.

10. Social media profiles

We may maintain profiles on social networks and platforms (e.g. LinkedIn, Instagram, Facebook, TikTok, YouTube). This website does not embed social media plugins; links to our profiles are simple hyperlinks, and no data is transmitted to the platform until you click them. When you visit our profiles, the respective platform processes your data under its own privacy policy. For page insights on Facebook and Instagram, we are jointly responsible with Meta pursuant to Art. 26 GDPR (Page Insights Controller Addendum). If you contact us via a platform, we process your message to respond to you (Art. 6(1)(b) or (f) GDPR).

11. Transfers to third countries

JPS Media Group LLC is based in the United States. The European Commission has adopted an adequacy decision for the USA for companies certified under the EU-US Data Privacy Framework (DPF). Where the providers named above are certified under the DPF, transfers are based on this adequacy decision (Art. 45 GDPR); you can check certification at dataprivacyframework.gov. Otherwise, transfers are based on EU standard contractual clauses (Art. 46(2)(c) GDPR) or, for the processing of your enquiries by us, on Art. 49(1)(b) GDPR. Please note that in third countries without an adequate level of data protection, authorities may access data and the enforcement of your rights may be more difficult.

12. Storage period

Unless a specific storage period is stated in this policy, we keep your personal data only as long as necessary for the respective purpose. Data processed on the basis of your consent is deleted when you withdraw your consent, unless another legal basis applies. If statutory retention obligations apply (e.g. commercial or tax records), the data is restricted and deleted after these periods expire.

13. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence or place of work

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. Where data is processed for direct marketing, you may object at any time without giving reasons.

To exercise your rights, simply send an email to office@janphilippschmid.de.

14. Final provisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. We may update this privacy policy to reflect changes to our website, the tools we use or the legal situation. The version published on this page applies.