1. Controller and contact

The controller for the operation of this corporate website is JSP Beteiligungs GmbH, Schulweg 8/4, 4542 Nußbach, Austria. Email: johannes@jsp-group.com. Where a user enters a separate contractual relationship with JSP WEB3 Consulting GmbH, that entity may act as an independent controller for its own related processing and provide separate information as required.

2. Scope and categories of personal data

We process personal data when you access our website or submit an enquiry. Depending on the technical setup, this may include IP address, time of access, requested web pages, browser/device information, technical log records, and the information you enter into a contact form (such as name, email, company, message and any voluntary details). We do not operate a newsletter registration as part of the currently described website.

3. Website operation and security

Technical access data may be processed to deliver the website, maintain security, diagnose errors and prevent misuse. Where personal data is processed, the applicable legal basis is generally our legitimate interests in reliable and secure website operation under Article 6(1)(f) GDPR, subject to the actual processing circumstances. Hosting, logs and retention: [VERIFY BEFORE PUBLICATION - Squarespace service configuration, any CDN/security services, exact log categories and retention criteria; relevant recipients and processing locations].

4. Contact form and correspondence

If you contact us through the Squarespace contact form, we process the details you provide for handling the enquiry, replying to you and, where relevant, preparing a potential business relationship. Depending on the enquiry, the legal basis is Article 6(1)(b) GDPR (pre-contractual steps requested by you) or Article 6(1)(f) GDPR (our legitimate interest in responding to business enquiries). Contact form messages are intended to be forwarded to johannes@jsp-group.com. We may refer an enquiry to JSP WEB3 Consulting GmbH if it specifically concerns that company’s consulting services and this is necessary to respond. [VERIFY BEFORE PUBLICATION - whether submissions are also stored by Squarespace, notification/email provider, any automation service, recipients and retention periods.]

5. Videos and external content

The website includes a directly hosted video and a YouTube video embed. Directly hosted content may involve technical data processing by the hosting provider, as described under website operation. YouTube is a third-party service that may process IP addresses, device information and other usage data when an embedded player loads.
The YouTube player will be blocked by default and will load only after the required consent, using an appropriate consent-based embed or two-click solution. Visitors may decline and still use the website. [VERIFY BEFORE PUBLICATION - actual video URLs, YouTube embed configuration, provider identification, consent mechanism, third-country transfers and any related cookies.]

6. Cookies and similar technologies

Strictly necessary technologies may be used to provide the website or remember privacy choices. Optional analytics, advertising, embedded-media or similar technologies requiring consent are not activated until visitors have given valid consent. Visitors can subsequently change or withdraw their choice using the Cookie Settings control where optional technologies are in use. [VERIFY BEFORE PUBLICATION - cookie/storage inventory: name, operator, technical purpose, category, lifetime, whether it accesses the visitor’s device, and applicable consent requirements. Analytics is currently UNKNOWN. Do not claim "we do not use analytics" without checking the final site and Squarespace configuration.]

7. Service providers and data disclosures

The operation of our website and the handling of enquiries may involve service providers supporting thewebsite platform, hosting, security, email delivery and embedded video content. We engage processors under appropriate agreements where required and disclose information only to the extent necessary and lawful. [VERIFY BEFORE PUBLICATION - exact legal names of Squarespace and other recipients, relevant controller/processor roles, platform integrations, processing agreements and email provider.]

8. International data transfers

Where personal data is transferred outside the European Economic Area, we comply with applicable Chapter V GDPR requirements, including an adequacy decision or appropriate safeguards where necessary. [VERIFY BEFORE PUBLICATION - countries, individual recipients and safeguards for Squarespace, YouTube, email and any analytics provider; add precise information about how safeguards can be obtained.]

9. Storage periods

We keep personal data only for as long as necessary for the stated purposes or where required by applicable law. [VERIFY BEFORE PUBLICATION - concrete retention periods or criteria for website logs, contact form submissions, correspondence and any consent records.]

10. Your rights

Subject to the statutory conditions, you have the right to access, rectification, erasure, restriction, portability and objection to processing, as well as withdrawal of consent at any time without affecting processing carried out before withdrawal. To exercise your rights, email johannes@jsp-group.com. You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at.

11. Updates

We may revise this notice if our website or applicable legal requirements change. The current version is published on this website.