Legal · Privacy

Privacy Policy

How Joyint processes personal data on the website, in the app, and when you use our online services.

Privacy Policy for our online services

The protection and security of your data is a top priority for us at Joyint, and we take it into account in all our business processes. In this Privacy Policy, we would therefore like to provide you with an overview of the privacy-related aspects of our online services. Below, we explain:

What data we collect when you use Joyint's online services.
For what purposes this data is processed by companies affiliated with Joyint and third-party companies.
What rights and choices you have regarding the processing of your data.
How you can contact us regarding data protection.

When does this Privacy Policy apply?

This Privacy Policy applies to Joyint's online services available at the domain https://joyint.com/ (hereinafter referred to as the "Website") as well as the Joyint app.

1. Responsibility and Data Protection Officer

The controller, as defined by the EU General Data Protection Regulation (hereinafter "GDPR"), for data processing in connection with the online service is the

Joydev GmbH
Konrad-Zuse-Platz 8
81829 München

When this Privacy Policy refers to "we," "us," or "Joyint," it refers exclusively to Joydev GmbH.

You can contact Joyint's Data Protection Officer at datenschutz@joyint.com or by mail::

Joydev GmbH

z.Hd. Datenschutzbeauftragter
Konrad-Zuse-Platz 8
81829 München

2. Data processing when you visit our website

2.1. Automatically logged access data

You can visit our website without providing any personal information.

2.2. Your messages, notifications, and use of interactive features

We collect all information and data that you provide to us via our website or through our associated email addresses. For example, in various sections of our website, you have the option to send us messages – and in some cases, files (such as PDF documents) – using features like the "Contact Form" or email addresses. Any required information necessary for these features will be clearly marked.

We will use your information only to process your request. We will delete the data collected in this process once it is no longer necessary to store it, or restrict its processing if there are legal retention requirements.

Your message will only be shared with another Joyint-affiliated company or with external third parties to the extent necessary to process your inquiry (for example, we will forward your message to another Joyint-affiliated company if that company is responsible for your inquiry). If you do not want your message to be shared with another company or third parties, you can let us know directly in your message including, of course, as a preventive measure. We will then process your message without any information that could be used to identify you (e.g., your name, customer numbers, or contact information). Any processing of your personal data in connection with messages and communications that goes beyond the description above may also take place after we have obtained your consent or for the purposes of initiating, fulfilling, or processing a contract.

The legal basis for the data processing described above in connection with the initiation, performance, or fulfillment of a contract is Art. 6 Para. 1 lit. b) GDPR. If you contact us for general purposes and have consented to the disclosure or processing of the data you have provided, the legal basis is Art. 6 Para. 1 lit. a) GDPR.

2.3. Cookies

We use cookies to improve the presentation and content of our website. A cookie is a standardized text file that is stored by your browser for a specified period of time. Cookies enable the processing of access data transmitted to us by your browser. This includes, for example, your online identifiers (shortened IP address), information about the web browser and operating system you are using, the website from which you accessed our website (if applicable i.e., if you accessed our website via a link), device type, the names of the requested files (i.e., which texts, videos, images, etc. you viewed on our website), the region from which you accessed the site, error reports (if necessary) as well as the times of individual visits. In addition, cookies enable us to statistically record and analyze general usage patterns when you visit our website.

Access data is also stored temporarily in internal log files to generate statistical information about the use of our website. This enables us to continuously optimize and further develop our website in light of our users' usage habits and technical capabilities, as well as to eliminate malfunctions and security risks. The information stored in the log files does not allow for any direct identification of you in particular, we store IP addresses only in a shortened, anonymized form.

The cookies used are optional cookies for analytical purposes. We use these only if you have given your consent via our cookie banner to the processing of data in accordance with Art. 6 Para. 1 lit. a) GDPR and to the storage of information or access to existing information on your device in accordance with § 25 Para 1 TDDDG.

Our website uses the Matomo Consent Manager to collect and manage consent and any objections. If you give your consent to the use of cookies, we will store your consent for up to 13 months. However, you can manually delete cookies at any time through your browser. Alternatively, you can withdraw your consent at any time or adjust your cookie settings by clicking the button to disable them:

We process the documentation of consent pursuant to Art. 6 Para. 1 lit. f) GDPR. Since these are strictly necessary cookies, the storage of information or access to existing information on your device in these cases is carried out in accordance with § 25 Para. 2 No. 2 TDDDG.

If you delete the cookies stored on your device, we will ask for your consent again the next time you visit the site.

3. Online meetings and video conferences

We use Meet by mailbox.org to organize online meetings, telephone or video conferences, and/or webinars (hereinafter collectively referred to as "Meetings"). Meet is software provided by Heinlein Hosting GmbH, Schwedter Straße 8/9a, 10119 Berlin (hereinafter "mailbox.org"), which is available as a desktop, web, and mobile app.

During a meeting, for example, information about the participant (such as display name, first name, last name, phone number, email address, encrypted password, or your profile picture), metadata (such as the meeting topic and description, IP address, your phone number, device type/operating system, number of chat messages, duration of audio, video, and screen sharing, microphone recording data, video camera recording data, start and end times, and, if applicable, additional connection data such as the device's IP address) may be processed.

In advance of a meeting, we will typically send you an email containing a link to join the meeting and a calendar invitation. To participate in a meeting, you must provide at least your name and - if using a phone -your phone number. You can disable your microphone and camera at any time by adjusting the relevant settings. We will only record meetings or take text notes with your consent and after notifying you in advance.

mailbox.org may become aware of the above-mentioned data in the course of processing the order in order to process it. All data traffic is encrypted (currently TLS or SRTP), and the data is stored on servers in Germany.

For more information, please refer to the privacy policy of mailbox.org, available at: https://mailbox.org/de/datenschutz/

The legal basis for data processing in connection with organizing meetings via Meet is our legitimate interest in the effective conduct of meetings pursuant to Art. 6 Para. 1 lit. f) GDPR. To the extent that the meetings are held as part of pre-contractual measures or to fulfill existing contractual relationships with you, the legal basis is Art. 6 Para. 1 lit. b) GDPR. The legal basis for storing information or accessing existing information on your device is § 25 Para. 2 TDDDG.

4. Data processing when signing a contract

When you purchase a paid subscription, we process your data (specifically your name, address, payment information, and, if applicable, your email address and company name) as well as communication data in order to fulfill our contractual and legal obligations. This includes, in particular, providing information about updates related to your subscription and generating invoices. The legal basis for this is Art. 6 Para. 1 lit. b) and c) GDPR.

5. Disclosure and transfer of data

5.1. Principal

As a matter of principle, we will only disclose your data if:

You have provided your explicit consent pursuant to Art. 6 Para. 1 lit. a) GDPR,
the disclosure is permitted by law and is necessary, in accordance with Art. 6 Para. 1 lit. b), for the purpose of fulfilling contractual obligations with you or for taking precontractual measures in response to your request,
we are legally required to disclose the information under Art. 6 Para. 1 lit. c) GDPR, or
the disclosure is necessary under Art. 6 Para. 1 lit. f) GDPR to exercise, assert, or defend legal claims by Joyint or an affiliate of Joyint, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data.

5.2. Disclosure to Joyint's external service providers

Some of the data processing described in this Privacy Policy may be carried out on our behalf by external service providers. In addition to the service providers listed in this Privacy Policy, these may include, in particular, data centers that host our website and databases, IT service providers, and consulting firms.

If we share data with our service providers, they may use the data solely for the purpose of fulfilling their duties. We have carefully selected and engaged these service providers. To the extent required by law, the service providers are contractually bound to follow our instructions (so-called "data processing on behalf of the controller"). In any case, the service providers we use have appropriate technical and organizational measures in place to protect the rights of data subjects and are regularly monitored by us.

We do not transfer any personal data to third countries. However, your personal data may be processed in third countries if you visit our social media pages. The platform operators are responsible for this processing, and we have no influence over it.

6. Newsletter

If you would like to subscribe to our newsletter (e.g., tech and product updates), we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter (double opt-in process). No other data is collected, or is collected only on a voluntary basis. We use this data exclusively to send the requested information and do not share it with third parties.

The processing of the data provided in the newsletter sign-up form is based strictly on your consent (Art. 6 Para. 1 lit. a) GDPR in conjunction with § 7 Para. 3 UWG). You may withdraw your consent to the storage of your data and email address, as well as to their use for sending the newsletter, at any time for example, by clicking the "Unsubscribe" link in the newsletter. The lawfulness of any data processing that has already taken place remains unaffected by this withdrawal.

We will store the data you have provided to us for the purpose of subscribing to the newsletter until you unsubscribe, at which point it will be deleted following your unsubscription or the revocation of your consent to receive the newsletter.

7. Data processing in connection with our app

7.1. Data processing when downloading and installing the app

To download and install our app from an app store (e.g., Google Play Store or Apple App Store), you may need to register with the app store provider using a user account and enter into a corresponding user agreement. We have no control over this, in particular, we are not a party to such a user agreement. When you download and install the app, the necessary information is transmitted to the relevant app store, including, in particular, your username, your email address, and, if applicable, your account number, the time of the download, and your device's unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data only to the extent necessary for downloading and installing the app on your mobile device (e.g., smartphone, tablet).

If the data processing is part of a contractual obligation, the legal basis for the processing of the mentioned data is Art. 6 Para. 1 lit. b) GDPR. If you have consented to the data processing, the legal basis is Art. 6 Para.1 lit. a) GDPR.

7.2. Data processing when using the app

When you use our app, various technical details are sent to our servers. These include, for example, your device's IP address, installation data (such as the app version and installation date and time), information about the content and features you use and the duration of your use, as well as information about your device (such as the device model and operating system).

We use this data to enable you to use our app and to provide you with the features you want, to ensure technical security in particular, to defend against attacks and fraud attempts and to analyse errors.

7.3. Push-Notifications (iOS)

As an iOS user, the app can send you notifications (e.g., new chat messages) via push notifications, even if you are not currently using the app in the foreground. These notifications can take the form of sounds, messages (e.g., screen banners), and/or icon badges (an image or number on the app icon). To prevent this, you can disable push notifications at any time through your device settings. To do so, open the "Settings" app on iOS and select the "Notifications" menu item. In the menu that follows, you'll find a list of all apps installed on your device that support push notifications. Select our app. Here, you can enable or disable push notifications. The legal basis for the aforementioned data processing is Art. 6 Para. 1 lit. a) GDPR, based on your consent to receive push notifications.

7.4. Permissions

To use all of the app's features, it needs to access certain functions on your device. Depending on which operating system you use, this may require your explicit permission in some cases. You can adjust the permission settings in your device's system settings at any time. Below, we explain which permissions the app requests and why they are necessary if you are using the iOS operating system:

"Background Refresh": This permission is required so that the app can automatically refresh in the background. This eliminates long loading times when you reopen an app after a long period of inactivity. If you do not grant this permission, this feature will not be available to you.

Please find below an explanation of the permissions the app requests and why they are necessary if you are using the Android operating system:

"Storage": This permission is required to allow the app to store data in the device's storage or, if applicable, on any external storage connected to your device, or to retrieve data from there. If you do not grant access, this feature will not be available to you.

The legal basis for the processing of the mentioned data is Art. 6 Para. 1 lit. a) GDPR. Consent that has been given may be withdrawn at any time in the settings of your device.

8. Storage period

Unless otherwise stated in this Privacy Policy, we store and process your data only as long as necessary to fulfill our contractual or legal obligations or for the purposes for which the data was collected.

After that, we will delete the data immediately, unless we still need the data to prove civil claims or to comply with legal retention requirements until the expiration of the statute of limitations. Even after that, we may still need to store your data for accounting purposes. We are required to do so due to legally required documentation obligations, which may arise in particular from the German Commercial Code and the German Fiscal Code. The retention periods specified therein range from two to ten years. If your data is stored solely to comply with our legal obligations, the processing of the data will be restricted so that it is no longer processed for any other purposes.

The legal basis for this data processing, for the purpose of complying with the legal requirements for documentation and retention, is Art. 6 Para. 1 lit. c) GDPR. If we store your data to ensure legitimate interests, the legal basis is Art. 6 Para. 1 lit. f) GDPR.

9. Data subject rights

To exercise your statutory data protection rights described below, you may contact our Data Protection Officer (see Section 1) at any time:

You have the right at any time to request information, in accordance with Art. 15 GDPR, regarding our processing of your personal data. As part of providing this information, we will explain the data processing and provide you with an overview of the data we have stored about you.
If any data we have stored is incorrect or no longer up to date, you have the right to have that data corrected (in accordance with Art. 16 GDPR).
You may also request that your data be deleted. If, in exceptional cases, deletion is not possible due to other legal provisions, the processing of the data will be restricted so that it is available only for that specific legal purpose (in accordance with Art. 17 GDPR).
You may also request that the processing of your data be restricted, for example, if you believe that the data we have stored is incorrect (in accordance with Art.18 GDPR).
You have the right to data portability, which means that, upon request, we will provide you with a digital copy of the personal data you have provided (in accordance with Art. 20 GDPR).

You also have the right to file a complaint with the data protection supervisory authority responsible for Joyint. You may also contact the supervisory authority responsible for your place of residence at any time, that authority may forward your request to the supervisory authority responsible for us.

10. Right of withdrawal and right to object

You have the right, pursuant to Art. 7 Para. 3 GDPR, to withdraw your consent – which was previously given under Art. 6 Para. 1 lit. a) GDPR – at any time. As a result, we will no longer continue the data processing that was based on this consent in the future.

Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. To the extent that we process your data based on legitimate interests, you have the right to object to the processing of your data at any time pursuant to Art. 21 GDPR for reasons arising from your particular situation. If the objection concerns data processing for direct marketing purposes, you have a general right to object, which we will comply with even without you providing a reason.

If you wish to exercise your right to withdraw or object as described below, an informal notification sent to the contact information listed in Section 1 is required.

11. Data security

We maintain reasonable technical measures for our online services to ensure data security, in particular to protect your data from risks associated with data transmission and from unauthorized access by third parties. These measures are updated as needed to reflect the current state of the art. To secure the personal data you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

12. Updates to our Privacy Policy

We update this Privacy Policy from time to time, for example, when we make changes to our website or when legal or regulatory requirements change.

Last updated: 20 September 2026