Privacy

In short

• —Google Analytics runs only after you click Accept in the banner. Until then your browser opens no connection to Google.
• —Without consent the only cookie is the one that stores your choice.
• —No tag manager, no advertising network, no data for advertising purposes.
• —Fonts and images are served from our own server, with or without consent.
• —You can change your choice at any time through Cookie settings at the foot of every page.
• —Personal data arises when you submit a form. Otherwise only the technical logs that every server writes.

Controller

The controller for this processing is MESKRU GmbH, Alfredstraße 81, 45130 Essen, Germany.

Phone

+49 201 89076419

Email

hello@meskru.com

Represented by

Alexander Kruse, Manuel Mesmer

Data protection officer

We have appointed a data protection officer: Alexander Kruse, reachable at hello@meskru.com or at the address above.

Server logs

When you open a page, your browser sends technical data that our hosting provider records: IP address, time, the address requested, the amount of data transferred, browser type and operating system. These logs are needed to deliver the website, detect faults and defend against attacks.

The legal basis is our legitimate interest in secure and functioning operation, Article 6(1)(f) GDPR. We do not combine these logs with other data and we do not analyse them to identify individuals.

Content and images

The text and images on this website are held in a content management system. They are fetched by our server, not by your browser. Images are delivered from our own address. The provider of the content system therefore learns nothing about your visit.

Fonts are on our server too. They are downloaded when the site is built and shipped with it. No connection to a font service is made.

Your consent choice

On your first visit a banner asks whether we may use Google Analytics. Accept and Reject carry the same weight, and closing the banner without a choice loads nothing.

Your choice is stored in a cookie named cc_cookie, set by regulit.app and kept for six months. It contains the categories you accepted and the date, nothing that identifies you. Without it the banner would return on every page.

Storing this cookie is strictly necessary to provide the service you asked for, Section 25(2) No. 2 TDDDG. The legal basis for the processing is our legal obligation to be able to show your consent, Article 6(1)(c) in conjunction with Article 7(1) GDPR.

Google Analytics

If you accept, we use Google Analytics 4 to see which pages people read and how they move through the site. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics records:

• —Pages viewed, time and duration of the visit, the page you came from
• —Scrolling, clicks on links to other websites, file downloads, use of the site search, video and form interactions
• —Device type, operating system, browser, screen size and language
• —Approximate location at country and city level, derived from your IP address

Google Analytics 4 does not log or store IP addresses from the European Union. The address is used to derive the approximate location and then discarded.

Google sets two cookies on regulit.app: _ga distinguishes visitors, _ga_2D3L1TYFBP keeps the state of the session. Both are kept for up to two years. In Google Analytics, event data such as page views is kept for two months. Data tied to the visitor identifier is kept for 14 months, and that period starts again with every new visit. Google then deletes it.

We have not linked Google Analytics to Google Ads or Google signals and use the data for no advertising purposes. We see aggregated reports, not individual visitors.

The legal basis for storing and reading the cookies is your consent, Section 25(1) TDDDG, and for the processing Article 6(1)(a) GDPR. You can withdraw consent at any time through Cookie settings at the foot of every page. We then delete the Google Analytics cookies in your browser and reload the page, after which Google Analytics no longer runs. Withdrawal does not affect the lawfulness of processing carried out before it.

Forms

You can write to us on the demo and contact pages. We collect:

• —First and last name
• —Email address
• —Company
• —Role
• —Number of Jira users
• —Topic and message
• —Newsletter opt-in, voluntary

We use these details to answer your enquiry and arrange a meeting. The legal basis is Article 6(1)(b) GDPR where a contract is being prepared, otherwise our legitimate interest in answering enquiries, Article 6(1)(f) GDPR.

The enquiry is sent to our mailbox by email and also stored in our contact management. You receive a confirmation at the address you entered, with the details you sent us. We delete the data once the enquiry is closed and no statutory retention obligation applies, at the latest 24 months after the last contact.

Newsletter

The form lets you opt in to product news. Without that tick we send you no marketing. The legal basis is your consent, Article 6(1)(a) GDPR.

You can withdraw consent at any time, through the unsubscribe link in every email or with a message to hello@meskru.com. Withdrawal takes effect for the future and does not affect the lawfulness of processing already carried out.

Editorial preview

People who maintain content can view unpublished drafts. For that we set a strictly necessary cookie that does nothing but switch on this preview mode. Visitors to the website do not receive it.

Processors

We work with service providers that process data on our behalf and on our instructions. Agreements under Article 28 GDPR are in place with all of them.

The website is delivered through European data centres and the content is held in Frankfurt. The hosting provider is established in the USA and can access data there. We base that transfer on the European Commission's standard contractual clauses.

Google Ireland Limited may pass Google Analytics data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Article 45 GDPR. In addition, Google relies on the standard contractual clauses.

Your rights

• —Access to the data we process about you, Article 15 GDPR
• —Rectification of inaccurate data, Article 16 GDPR
• —Erasure, Article 17 GDPR
• —Restriction of processing, Article 18 GDPR
• —Portability of the data to you or to a third party, Article 20 GDPR
• —Objection to processing based on a legitimate interest, Article 21 GDPR
• —Withdrawal of consent, at any time and for the future, Article 7(3) GDPR

A message to hello@meskru.com is enough for any of these. We reply within the statutory period.

Complaints

You can lodge a complaint with a data protection supervisory authority. Ours is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf, Germany. You may also contact the authority where you live.

Changes

If we change the website or the services it uses, we update this notice. The date above names the version in force.