Privacy policy

For the start page justyourcards.de and justyourcards.com with the waitlist. The app at app.justyourcards.com has its own privacy policy. This is an English translation; the German version is the binding one.

In short

Controller

Ole Blohm, Just Your Cards
Richterstraße 1, 22085 Hamburg, Germany
Email: hello@justyourcards.com

For any privacy question, just write to this address. We are not required to appoint a data protection officer.

Hosting and server logs

The site is hosted on a server of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have a data processing agreement with STRATO (Art. 28 GDPR).

When you open the site, the server processes technically necessary data: IP address, date and time, the address requested, browser identifier and the amount of data transferred. This is needed to deliver the site and protect it from attacks. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). These logs are deleted after 7 days.

When you join the waitlist, the server keeps your IP address in memory for one hour so that nobody can sign up addresses in bulk. It is not stored permanently.

Waitlist and newsletter

If you enter your email address and agree, we send you a confirmation email. Only when you click the link in it are you on the list (double opt-in). After that we let you know when Just Your Cards launches and send the odd update.

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time, with the unsubscribe link in every email or by writing to us. The withdrawal applies from then on; what happened before remains lawful.

We store your email address, the language of the page and the time of sign-up and confirmation. This lets us prove that you agreed. If you sign up but never confirm, you are not added to the list and receive no further emails. After you unsubscribe you receive no more emails; your address stays on a suppression list at Brevo so that we do not write to you again by mistake, and we keep the proof of your consent for up to three years. After that everything is deleted.

We send emails with Brevo, a service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (parent company Brevo SAS, Paris). The data is stored in the EU. We have a data processing agreement with Brevo. Brevo only counts anonymously how often our emails are opened and links in them clicked overall, with no link to you or your address. So we cannot see whether you opened a particular email. See also Brevo's privacy policy.

You do not have to give us any data. Without an email address, though, we cannot put you on the waitlist.

Contact by email

If you write to us, we store your email with your address to answer your request. The mailbox is hosted by STRATO in Germany. The legal basis is answering your request (Art. 6 (1) (b) GDPR where a contract is concerned, otherwise Art. 6 (1) (f) GDPR). We delete requests once they are settled, after one year at the latest, unless a statutory retention duty requires otherwise.

Light or dark

If you switch between light and dark at the top, your browser remembers your choice on your device (localStorage, entry "theme"). This is needed so the setting stays on your next visit (§ 25 (2) no. 2 of the German TDDDG). Nothing is sent to us. If you never switch, the site follows your device and nothing is stored.

Instagram

This site contains a plain link to our Instagram account. Only when you click it do you reach Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). No data is sent to Meta before that. Instagram is covered by Meta's privacy policy.

Recipients and third countries

Your data goes only to the service providers named here, STRATO and Brevo, both as processors in Germany. No data is transferred to countries outside the EU. There is no automated decision-making and no profiling.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time (Art. 7 (3)). Just send us an email.

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest, such as the server logs, you can object at any time on grounds relating to your particular situation. We will then stop processing the data unless there are compelling legitimate grounds that override your interests. You can object to marketing emails at any time without giving reasons. Just write to hello@justyourcards.com.

You can also complain to a data protection authority. The one responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.

Encryption

The site is delivered exclusively over encrypted HTTPS.

Changes

If anything changes, for example a new service provider, we update this policy. The version on this page always applies.

Last updated: 10 November 2026