Privacy statement

JustAppz is the brand used on this website for websites, business apps, automation and integrations. The Netherlands-based legal entity or sole trader operating under this brand will be the controller for personal data processed for its own business purposes.

JustAppz, established in Amsterdam, The Netherlands (KvK 97657905, VAT identification number NL005280210B35), operated by Janvier Jessurun, is the controller for personal data processed for its own business purposes. Privacy contact: info@justappz.nl · www.justappz.nl. The legal form and full registered address should be confirmed during legal review.

This statement concerns this website and our own business administration. Processing client-controlled data within a delivered application requires separate arrangements, including a data processing agreement where applicable.

The enquiry form and interactive examples are simulations. No enquiry is delivered to us. Form entries are held in the page’s temporary memory, not saved in an enquiry database or deliberately sent by the form to an email, messaging or AI service. Reloading or leaving the page clears that temporary state.

Please use fictional details. Do not enter confidential business information, identification documents, health information or other sensitive personal data. This limitation concerns the form itself; ordinary website delivery can still involve technical data as described below.

When you visit a website, its hosting and delivery services receive information such as an IP address, browser details, requested pages and the time of requests. Security and error diagnostics may also process technical information. The exact providers, logging configuration, retention periods and processing locations for this site still need to be checked and documented.

The website currently loads Inter from Google Fonts. Your browser makes requests to Google’s font services, which exposes technical request data, including your IP address. Google acts under its own privacy arrangements for that service; see Google’s privacy policy. Whether to self-host the fonts and whether additional transfer safeguards are required must be reviewed before finalising this statement.

Necessary delivery and proportionate security processing may rely on legitimate interests: operating and protecting the website. This requires a necessity and balancing assessment; it is not permission for advertising or unrestricted tracking.

The following describes the intended scope, not an active enquiry service. Before enabling a real form, this notice must identify the actual recipients, tools, retention periods and any international transfers.

• Contact and enquiry details: name, business email, project type, challenge, description and optional scope, used to respond and assess a potential project.
• Contract and administration details: business contact information, agreed deliverables, correspondence and invoicing information, used to deliver services and meet legal duties.
• Legal bases: steps requested before entering a contract or performance of a contract where applicable; legitimate interests for business contact persons and necessary administration; legal obligations for required accounting records.
• Marketing is separate from responding to an enquiry. Any consent-based marketing must have a genuine opt-in and an easy withdrawal route. This demo does not subscribe you to a mailing list.

No automated decision-making with legal or similarly significant effects is part of the current demo. Any future AI processing of enquiry or client data needs its own assessment and an updated notice.

The enquiry and demonstration code does not save its entries in cookies or browser storage, and the website code does not intentionally add advertising trackers. Hosting, platform features or other external services may have their own behaviour; a full check of the published website is still required.

Non-essential tracking or similar technologies that require consent under Dutch rules must remain disabled until valid consent is given. Refusing or withdrawing consent must be as easy as accepting it. Strictly necessary technologies may be exempt; privacy-friendly analytics require a separate assessment rather than a blanket exemption.

This statement does not assert that the published website is cookie-free. Any technologies actually used must be documented by purpose, provider and lifespan before the final notice is issued.

Service providers may be needed for hosting, security, business email, accounting or project delivery. Only providers actually used should be named in the final statement, with their roles and processing arrangements verified. Appropriate processor agreements must be in place where a provider acts on our behalf. Disclosure to authorities may be necessary where required by law.

Processing outside the European Economic Area must have a lawful transfer mechanism, such as an applicable adequacy decision or standard contractual clauses with any necessary supplementary measures. The destination countries, applicable safeguards and how to obtain information about them remain to be confirmed. We do not claim all data stays in the Netherlands or the EU.

Demo entries disappear when the page is left or reloaded. Technical-log retention is not yet confirmed. For a future live service, a documented schedule must set retention for unsuccessful enquiries, client correspondence, project records and backups, based on necessity and applicable obligations.

Dutch basic tax-administration records generally need to be retained for seven years; some categories have different statutory periods. This is not a reason to keep every enquiry or all project data for seven years.

Security measures should be proportionate to the data and risks, including appropriate access controls, secure transport, supplier checks and incident handling. No system can guarantee absolute security. Specific operational measures must be verified before they are promised.

Depending on the circumstances, you can request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Some records may need to be retained to comply with a legal obligation.

Requests can be sent to info@justappz.nl. We may ask for proportionate information to verify identity; do not send a full identity-document copy unsolicited. Under the GDPR, requests normally receive a response within one month. A permitted extension of up to two further months requires an explanation within the first month.

You can complain to the Dutch Autoriteit Persoonsgegevens, or the competent supervisory authority where you live or work. You do not have to contact us first to exercise that right.

This is a draft dated 14 October 2026. It must be updated when real enquiry delivery, analytics, payments, AI services or other processing is introduced. The final version must reflect the actual setup, not just intended practices.

Reference framework: the General Data Protection Regulation and applicable Dutch privacy and telecommunications rules.