Privacy Policy

1. Controller

The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:Jack Rabbit GmbH Kirchenstraße 4481675 MünchenGermanyRepresented by the Managing Director: Markus StautnerContact: Phone: +49 173 3535656E-Mail: hallo@jack-rabbit.aiA Data Protection Officer has not been appointed as the legal requirements under Section 38 BDSG are not met. For any data protection inquiries, please contact us at the email address provided above.

2. Hosting and Server Log Files

Our website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). We have concluded a Data Processing Agreement (DPA) with IONOS in accordance with Art. 28 GDPR.When you visit our website, your device automatically transmits information to our host’s server, which is stored in so-called log files:IP address (shortened for anonymization)Date and time of accessName and URL of the retrieved fileWebsite from which access is made (Referrer URL)Browser type/version and the operating system of your computerPurpose: To ensure a smooth connection, system security, and for administrative purposes.Legal Basis: Art. 6 (1) (f) GDPR (Legitimate Interest).Retention Period: Data is automatically deleted after a maximum of 7 days.

3. Cookies and Consent Management

We use cookies and similar technologies (Local/Session Storage).

Strictly Necessary Technologies

These are essential for the operation of the website (e.g., shopping cart, login, security).Legal Basis: Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

Technologies Requiring Consent

Services for marketing or analysis (e.g., Google Analytics) are only activated after your active consent.Legal Basis: Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.Withdrawal: You can change or withdraw your settings at any time via the "Cookie Settings" link in the footer of our website.

4. Google Services (GTM, Analytics, Maps)

The provider of these services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.Google Tag Manager: Used to manage website tags. The tool itself does not store cookies but technically transmits your IP address to Google to enable tag management. Legal Basis: Art. 6 (1) (f) GDPR.Google Analytics 4: We use GA4 to analyze website usage. IP addresses are anonymized by default. Legal Basis: Art. 6 (1) (a) GDPR (Consent).Google Maps: For displaying maps. When the map is loaded, your IP address is transmitted to Google. Legal Basis: Art. 6 (1) (a) GDPR (Consent).Data Transfer to Third Countries: Data may be transferred to the USA. This is based on the EU-US Data Privacy Framework and supplemental Standard Contractual Clauses (SCCs).Details: Google Privacy Policy

5. Newsletter (Mailchimp)

We use Mailchimp (The Rocket Science Group LLC, USA) for sending newsletters. We process your email address and, if provided, your name. Mailchimp performs performance tracking (open rates, clicks).Legal Basis: Art. 6 (1) (a) GDPR.Retention Period: Until you withdraw your consent (unsubscribe). An unsubscribe link is provided at the end of every email.Data Transfer: Based on the EU-US Data Privacy Framework.

6. Weglot (Multilingualism)

To provide the website in different languages, we use Weglot (Weglot SAS, France). Weglot processes technical data (IP address, language settings) to display the correct language version.Legal Basis: Art. 6 (1) (f) GDPR (Legitimate interest in the international reach of our website).

7. Applications and Contact

Contact: If you contact us via email or form, we store your details to process the inquiry. Legal Basis: Art. 6 (1) (b) GDPR.Applications: We process your documents to conduct the application process. Legal Basis: Section 26 BDSG (German Federal Data Protection Act). In the event of a rejection, we delete your data no later than 6 months after the conclusion of the process, unless you have consented to longer storage.

8. Your Rights

You have the following rights regarding your personal data:Access (Art. 15 GDPR) regarding the data we have stored.Rectification (Art. 16 GDPR) of incorrect data.Erasure (Art. 17 GDPR), provided there is no longer a legal basis for storage.Objection (Art. 21 GDPR) against processing based on legitimate interests.Withdrawal of Consent (Art. 7 (3) GDPR) with effect for the future.Right to Lodge a Complaint: You have the right to complain to a data protection supervisory authority. The competent authority for us is:Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.

Last Updated: March 2026