Privacy Policy

1. Overview and scope

This privacy policy explains which personal data we process when you visit this website or contact us, for what purposes, on what legal basis and for how long. It also explains your rights.

"Personal data" means any information relating to an identified or identifiable person, for example a name, email address or IP address.

This privacy policy applies to the website kraftjustus.com. It does not apply to third-party websites we link to.

In short:

• We ourselves use no analytics or tracking tools, no advertising cookies, except the services Calendly loads after your consent (see section 10), and we do not send a newsletter. There is no contact form on this website.
• The booking calendar of Calendly is loaded only with your consent. Calendly then loads further services itself (see section 10).
• The website is hosted by Hetzner Online GmbH in Germany.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Justus Kraft LLC
7901 4th St. N, Ste. 300
St. Petersburg, FL 33702
United States of America

Represented by: Justus Kraft

Phone: +1 424-678-0686
Email: jk@kraftjustus.com

You can contact us at any time using these details with questions about data protection or to exercise your rights.

3. Overview: purposes, legal bases and storage periods

Where we rely on Art. 6(1)(f) GDPR, our legitimate interest is to operate the website securely and reliably and to respond efficiently to inquiries.

4. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner processes the data on our behalf (processor under Art. 28 GDPR).

Each time the website is accessed, the server automatically processes the following data in server log files:

• IP address of the requesting device
• date and time of access
• page or file requested (URL)
• referrer (the previously visited page, if your browser sends it)
• user agent (browser type and version, operating system)
• HTTP status code
• amount of data transferred

Purpose: delivering the website, ensuring security and stability, detecting and defending against attacks, and error analysis.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free and secure provision of the website.

Storage period: log files are kept for 7 days with the full IP address and then deleted automatically. They are not combined with other data sources or analysed for analytics or marketing purposes.

5. Name resolution (DNS) and email forwarding

So that your browser can find this website by its domain name, we use the DNS service of Spaceship (domain registrar). For a DNS lookup, the DNS provider usually receives only the request from your DNS resolver (typically your internet provider's) for the website's IP address, but no website content and no data you enter on the website.

Emails to our address at kraftjustus.com are received by Spaceship's email forwarding service and forwarded to our mailbox. Spaceship and our mailbox provider process the content and metadata of your email (e.g. sender, recipient, time) for this purpose.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the website and our email address being reachable); for emails also Art. 6(1)(b) GDPR. A transfer to the USA is possible (section 13).

6. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock icon in your browser's address bar. This prevents third parties from reading data you send to us.

7. Cookies and storage in your browser (Section 25 TDDDG)

Under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), storing information on your device (e.g. cookies or localStorage) and accessing it is generally only permitted with your consent. Storage that is strictly necessary to provide a service you have expressly requested is exempt (Section 25(2) no. 2 TDDDG).

What we do:

• We ourselves set no analytics, marketing or tracking cookies, except those of the services Calendly loads after your consent (see section 10).
• We store your choice in the cookie banner or the cookie settings (consent or refusal for Calendly, with date and version) in your browser's local storage (localStorage, key "ck_consent_v1") so that we do not have to ask you again on every page. This is strictly necessary (Section 25(2) no. 2 TDDDG). The entry remains until you change your choice or delete it in your browser.
• Calendly is loaded only after you have consented. Only then can Calendly and the services it loads store cookies or similar technologies on your device (e.g. the security cookies "__cf_bm" and "_cfuvid"). The legal basis is then your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). See section 10 for details.

You can change your choice at any time via the "Cookie settings" link at the bottom of every page. You can also view and delete cookies and site data at any time in your browser settings.

8. Fonts

This website does not load any web fonts from third-party servers (e.g. Google Fonts); text is displayed using the fonts installed on your device. All images and files of the website itself are delivered from our own server. Exception: after your consent, Calendly may load Google Fonts (see section 10).

9. Contact by email and phone

If you contact us by email or phone, we process the data you provide (e.g. name, email address, phone number, company and the content of your inquiry) to answer your inquiry and any follow-up questions. There is no contact form on this website.

Legal basis: Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for pre-contractual steps; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries effectively).

Storage period: we delete your data once your inquiry has been fully dealt with and no further communication is expected, unless statutory retention obligations apply or a contractual relationship arises.

10. Appointment booking with Calendly

For online appointment booking (e.g. a free demo call) we use the Calendly service of Calendly LLC, USA.

Loaded only with your consent: Calendly is loaded only after you have consented, either in the cookie banner shown on your first visit ("Accept all"), in the cookie settings or in the notice shown when you click a booking button. Only then is a connection to Calendly established. In particular your IP address, browser and device information and the page visited are sent to Calendly, and Calendly may store cookies or similar technologies on your device. Alternatively, you can open Calendly directly on calendly.com in a new tab; Calendly's privacy policy then applies.

Services loaded by Calendly: when the booking calendar opens, Calendly itself loads further services. In a test on 2 November 2026 these were the payment provider Stripe (js.stripe.com, m.stripe.com, m.stripe.network), Google (Google Analytics, Google Tag Manager, reCAPTCHA, Google sign-in, Google Fonts), Meta (Meta Pixel, connect.facebook.net), Segment, Sprig, Survicate, Braze (appboycdn.com), Airbrake and Amazon CloudFront. Technical data such as your IP address may be sent to these providers, and cookies or similar technologies may be set. This happens only after you have consented in the category "External media (Calendly)". Calendly decides which services it uses; you can find details in Calendly's privacy policy.

Meta Pixel via Calendly: through the conversion-tracking integration of our Calendly account, Calendly may load the Meta Pixel after your consent. The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. Data may also be transferred to Meta Platforms, Inc., USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR). The pixel is used to measure whether an appointment is booked after a visit to this page (conversion measurement), including for ads on Meta; Meta may link the data to your Meta account. We and Meta Platforms Ireland Ltd. are joint controllers for collecting and transmitting the data via the pixel (Art. 26 GDPR); Meta's Controller Addendum applies (https://www.facebook.com/legal/controller_addendum). Meta alone is responsible for any further processing (https://www.facebook.com/privacy/policy/). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future via "Cookie settings".

Legal bases:

• Loading Calendly (and the services it loads) and storing information on your device: your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw consent at any time with effect for the future via "Cookie settings" (section 17).
• Booking an appointment: when you book, we process the data you enter (e.g. name, email address, possibly phone number, company, chosen time slot, information about your request) to arrange and hold the appointment (Art. 6(1)(b) GDPR). Calendly processes this data as our processor.

Third country: Calendly is based in the USA; data is transferred to the USA (section 13).

Storage period: we keep booking data in Calendly as long as needed to hold and follow up on the appointment; it is then deleted unless statutory retention obligations apply. The respective providers give information on how long the cookies they set are stored.

11. No analytics, no tracking, no newsletter (exception: services loaded by Calendly, section 10)

We ourselves do not use analytics or audience measurement tools, tracking pixels or advertising tools on this website, except the services Calendly loads after your consent (including the Meta Pixel), see section 10. There are no social media plugins or embedded videos. We do not create user profiles. We do not offer a newsletter.

12. Recipients of personal data

We only share your data where necessary for the purposes stated, where there is a legal basis, or where you have consented. Recipients or categories of recipients are:

Beyond this, we only share data where we are legally required to (e.g. with authorities) or where necessary to establish, exercise or defend legal claims. We do not sell personal data.

13. Transfers to third countries

Some of the providers listed are based in the USA or may process data in the USA. Justus Kraft LLC itself is based in the USA, so your data is also processed by us in the USA.

For transfers to the USA we rely, where the recipient is certified under the EU-US Data Privacy Framework (DPF), on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). Where there is no certification, we use the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of these safeguards using the contact details in section 2.

For the Meta Pixel loaded via Calendly, data may be transferred to Meta Platforms, Inc., USA, which is certified under the DPF (section 10).

Hetzner Online GmbH processes data in Germany; no third-country transfer takes place there.

14. Storage period

Unless a specific storage period is stated in this policy, we keep personal data only as long as necessary for the respective purpose. We then delete it unless statutory retention obligations (e.g. commercial or tax retention periods) apply. In that case we restrict processing and delete the data when the period ends.

If you withdraw consent or validly object to processing, we delete the data concerned unless another legal basis for further storage applies.

15. Your rights

Under the GDPR you have the following rights:

• Access (Art. 15 GDPR): you can ask whether and which personal data we process about you and receive a copy.
• Rectification (Art. 16 GDPR): you can ask us to correct inaccurate data and complete incomplete data.
• Erasure (Art. 17 GDPR): you can ask us to delete your data unless legal grounds prevent this.
• Restriction of processing (Art. 18 GDPR): under certain conditions you can ask us to restrict the processing of your data.
• Data portability (Art. 20 GDPR): you can ask us to provide data you gave us, which we process automatically on the basis of your consent or a contract, in a structured, commonly used and machine-readable format, or, where technically feasible, to transmit it to another controller.
• Objection (Art. 21 GDPR): see section 16 below.
• Withdrawal of consent (Art. 7(3) GDPR): see section 17.
• Complaint to a supervisory authority (Art. 77 GDPR): see section 18.

To exercise your rights, an informal message to jk@kraftjustus.com or to the address in section 2 is sufficient.

16. Right to object (Art. 21 GDPR)

17. Withdrawing your consent (Art. 7(3) GDPR)

Where processing is based on your consent (loading Calendly), you can withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

How to withdraw: open "Cookie settings" at the bottom of any page and choose "Only necessary"; Calendly will then no longer be loaded. You can also delete the cookies already set by the providers in your browser, or tell us informally at jk@kraftjustus.com.

18. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right, without prejudice to any other remedy, to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

We would, however, appreciate the chance to address any questions or concerns directly first.

19. Whether you are required to provide data

You are under no legal or contractual obligation to provide us with personal data. You can use the website without giving personal details; processing the server log files (section 4) is, however, technically necessary for the website to be displayed.

If you want to contact us or book an appointment, we need the information required for that (e.g. your name and an email address or phone number). Without it, we cannot answer your inquiry or arrange an appointment with you.

20. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

21. Changes to this privacy policy

We update this privacy policy when the website, our service providers or the legal situation change. The current version published on this page applies.

Last updated: 2 November 2026