LEGAL / JCIM
Privacy
Legal information for JC Information Management GmbH.
General privacy information
We process personal data only where this is required to operate this website securely, provide a workspace you request, or where you expressly consent to analytics. Analytics remain fully disabled until you give consent.
Hosting and technically necessary information
When a page is requested, browser and operating-system information, IP address, requested address, referrer and access time may be processed temporarily in server logs. The purposes are delivery, stability, abuse prevention and error diagnosis. The legal basis is Article 6(1)(f) GDPR.
Route & Value Decision Workspace and private Decision Room
If you request a detailed workspace, we process your business email address, company, role and the project details you provide voluntarily to handle the request, send a single-use access link and provide the time-limited access. If you actively choose to carry over your public orientation, we also store those model assumptions for the workspace. In the private Decision Room, you can additionally store unknowns, categories, decision impact, owners, evidence requirements, target dates and the Mutual Action Plan. This content remains bound to the same protected workspace, is no longer accessible after the seven-day term, and is deleted during routine cleanup after expiry. The link expires after 15 minutes; the seven-day access period starts only once it is activated. We use Resend for technical email delivery. Your email address, access link and the technical delivery data required for this purpose are transmitted to Resend. JCIM receives an internal notification containing the requested contact and project details and — if actively carried over — the public model orientation so that the request can be handled; it contains no access link. Other request data is normally deleted 30 days after the workspace expires unless statutory retention duties apply. Email, company, Decision Room, free-text and financial inputs are not sent to PostHog. We only use your details for marketing contact when you make the separate optional selection.
Consent-based analytics with PostHog
If you select “Allow analytics”, we load PostHog Cloud EU. PostHog, Inc. acts as provider and processor. Processing is used to measure reach, improve content and user journeys, and understand contact and meeting intent. The EU Cloud processes data in Frankfurt; storage of raw client IP addresses is disabled by default for new EU projects.
Usage data we measure
We may capture page views, referrers and campaign parameters, language, country or region, device and browser, scroll depth, visible content sections, dwell time per section, navigation, clicks, exit points, and clicks on email, phone and Calendly links. Unnecessary URL parameters and properties such as name, email address and telephone number are removed from analytics events in the browser.
Heatmaps and session replays
After consent, mouse movements, click positions, scrolling and the visible page structure may be processed into heatmaps and privacy-protected session replays on selected content pages. All input fields are masked. Console logs, canvas content and network payloads are not recorded; specifically marked areas are additionally masked. Session replay is fully disabled in the public Route & Value Check and protected Decision Workspace. The five selection levels are measured only as coarse structured events; contact, free-text and financial values are not transmitted as analytics properties.
Legal basis and device access
The legal basis for analytics, heatmaps and session replays is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, the applicable national rules implementing Article 5(3) of the ePrivacy Directive. Consent is voluntary; the website remains fully usable if you decline.
Change or withdraw consent
Your choice is stored locally in your browser. You can change it at any time through “Analytics settings” in the footer. Withdrawal applies prospectively: further capture and session recording stop immediately.
Retention and recipients
Analytics events and session replays are retained only for as long as required for the stated purposes and in accordance with the retention periods configured in the PostHog project. Access is limited to authorised JCIM personnel and the contractually bound processor PostHog.
Your data-protection rights
Subject to statutory conditions, you have rights including access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and the right to lodge a complaint with a data-protection supervisory authority.