Privacy Policy
Last updated: October 26, 2026
1. Who we are / controller
This privacy policy describes how personal data is processed when you visit justrocket.de, submit an engineering inquiry, or communicate with us about our services.
Controller for the processing described here:
JUSTROCKET CLJ SRL
Str. Emil Racoviță 25
400165 Cluj-Napoca
Romania
Email: info@justrocket.de
No separate data protection officer has been appointed. Privacy questions and requests can be sent to info@justrocket.de.
No separate JUSTROCKET entity currently acts as a joint controller for the website services described in this policy.
2. What data we process
Depending on your interaction with us, we process: (a) technical access data such as date/time of access, IP address, device/browser information and basic server logs; (b) data you enter into our inquiry form, including name, email, company and any voluntary engineering requirements or message; (c) business contact and correspondence data created as we respond to the inquiry; and (d) limited source/attribution details such as the referring page and campaign parameters, where actually collected.
Please do not submit sensitive personal information in the free-text inquiry field unless specifically requested and necessary.
3. Website delivery and security logs
When you access the website, technical information may be processed to deliver the website, maintain its stability, prevent abuse and investigate security incidents. The applicable legal basis is generally Article 6(1)(f) GDPR, reflecting our legitimate interest in operating a reliable and secure website, unless another basis applies.
Technical data is retained only for as long as necessary to deliver the website, maintain security, investigate incidents and meet legal obligations. Website infrastructure and form-processing services include Supabase; the website may also load the Claydar script identified on the site.
4. Engineering inquiries, contact forms and CRM
If you complete our engineering inquiry form or contact us by email, we use the information you provide to understand your requirements, respond to your inquiry, arrange follow-up discussions and, where appropriate, prepare a service proposal. The standard form requests your full name, email address and company name; information about required engineering roles and additional comments is optional.
We use an internal customer relationship management (CRM) system to record and manage business inquiries and ongoing interactions. An inquiry may be recorded as a sales opportunity, linked to a company and contact profile, and assigned to a JUSTROCKET team member for individual follow-up. We may match incoming information to existing CRM records using reliable identifiers to avoid duplication. We do not use this form to subscribe you automatically to unrelated marketing communications.
The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract; for business contacts and on behalf of an organization, Article 6(1)(f) GDPR may apply, reflecting our legitimate interests in responding to business inquiries, developing relevant customer relationships and maintaining accurate business records, subject to the required balancing assessment.
Providing the fields identified as mandatory is necessary to submit an inquiry via this form. Providing additional information is voluntary. If mandatory details are not provided, we may be unable to process the inquiry through the form.
Information submitted through our contact forms is processed through our CRM system for responding to inquiries, managing potential business relationships and following up on relevant opportunities.
Personal data is retained for as long as necessary for these purposes, subject to applicable legal requirements and our data retention procedures.
5. Business correspondence and meetings
When you communicate with us, we may store relevant business correspondence, meeting details, notes and agreed next steps to respond to you and manage the prospective or existing business relationship. We use the legal basis applicable to the underlying communication, typically Article 6(1)(b) or Article 6(1)(f) GDPR as appropriate.
Relevant business correspondence and meeting information may be stored in our CRM system to manage communications and business relationships. Access is restricted to authorized JUSTROCKET team members.
6. Cookies and similar technologies
The website may use technologies necessary to operate requested functions, such as session handling or security measures. Where non-essential technologies are used for analytics, advertising or comparable purposes, they will be described in the relevant notice and activated only when legally permitted, including with prior consent where required.
The website uses its favicon, local browser storage only where required by a requested function, and the Claydar script currently included in the site. The Claydar script may process technical access information for the purpose configured by its provider, such as website functionality and analytics-related processing. Where the script processes personal data for purposes requiring consent, it is loaded only after consent has been given through the available controls and can be withdrawn at any time. For specifics about what the script collects and its exact purpose, please contact info@justrocket.de.
No separate advertising cookie system is configured in the application. If non-essential tracking is introduced, it will be disclosed and consent will be requested where required; consent can then be withdrawn through the available controls.
7. Newsletter and marketing messages
Where we offer an email newsletter or other marketing messages, we explain the relevant subscription mechanism and lawful basis at the point of signup. When marketing is based on consent, consent can be withdrawn at any time without affecting the lawfulness of prior processing; messages provide an appropriate unsubscribe method. We do not treat the submission of an engineering inquiry as newsletter consent.
The current website does not offer a newsletter or marketing subscription and does not use a mailing provider, double opt-in, open tracking or click tracking. Submitting a form does not subscribe you to marketing communications.
8. Service providers and data recipients
We use service providers to operate our website and support business communications and CRM processes. Depending on the service, recipients may include providers of website hosting, cloud infrastructure, CRM systems, email delivery, security and support. Access is limited to what is necessary for the relevant purpose and subject to appropriate legal and technical safeguards.
Our website and business processes use external service providers, including Supabase for database and backend services, Cloudflare Turnstile for spam protection, and Claydar for website-related functionality.
We also use hosting and communication providers to operate our website and manage business inquiries. Personal data is shared with these providers only where necessary and permitted by applicable law. Appropriate data processing agreements are maintained where required.
Cloudflare Turnstile is used to protect forms from automated abuse and spam. When you interact with a protected form, Turnstile may process technical data such as browser and device characteristics, interaction signals and an IP address to assess whether the request comes from a real user. This processing serves our legitimate interest in maintaining the security and integrity of our forms; the legal basis is Article 6(1)(f) GDPR. Further information is available in Cloudflare's privacy policy.
9. International data transfers
Where personal data is transferred outside the European Economic Area, we assess the relevant destination, recipients and transfer arrangements. Where required, we rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, and additional measures where necessary.
Supabase, Cloudflare and Claydar may use infrastructure or support personnel outside the European Economic Area. Where a transfer occurs, we rely on an applicable adequacy decision or appropriate safeguards within the meaning of GDPR Articles 44 to 46, such as the European Commission's Standard Contractual Clauses, and additional technical and organizational measures where necessary. You may contact info@justrocket.de for further information about the safeguards relevant to a specific request.
10. Retention
We retain personal data only as long as reasonably necessary for its stated purposes, unless a longer period is required to comply with legal duties or establish, exercise or defend legal claims. Retention is determined by the category of data, the status of an inquiry or business relationship, relevant contractual obligations and applicable legal requirements.
Technical logs are retained for website operation, security and incident investigation.
Contact inquiries and CRM records are retained according to the status of the business relationship, the need for continued communication and applicable legal obligations.
Records are deleted when they are no longer required for these purposes, unless a longer retention period is legally necessary.
11. Your rights
Subject to the conditions established by applicable law, you may request access to your personal data, rectification, erasure, restriction of processing, data portability and information about processing. You may object to processing based on legitimate interests or direct marketing. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
You may lodge a complaint with a competent data protection supervisory authority, including the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement. Contact us using the details in Section 1 to exercise your rights.
12. Automated decisions
We do not make decisions producing legal effects or similarly significant effects about website visitors or form submitters solely through automated processing. The current website does not use automated scoring, rejection or profiling.
13. Security
We use appropriate technical and organizational measures intended to protect personal data, including access controls, secure connections and other measures proportionate to the risks. No internet transmission or storage system can be guaranteed to be risk-free.
14. Children
Our business-to-business services and inquiry form are intended for professional and business contacts rather than children. If we learn that we have collected information that should not have been collected from a child, we will assess and take appropriate steps under applicable law.
15. Changes and contact
We may update this Privacy Policy when our services, processing activities or applicable requirements change. The revised version will be published here with an updated date. For privacy questions or requests, contact info@justrocket.de.