Privacy Policy

Controller

The controller for personal data on juratek.de and in the accounts of the Juratek platform is the provider named in the Imprint. Contact: kontakt@juratek.de.

Scope

This notice covers the website juratek.de, demo requests and the accounts of staff at the law firms that use Juratek.

For the data a law firm processes with Juratek, such as that of its clients, enquiries, appointments and documents, the law firm is the controller. Juratek processes it on the firm's behalf and on its instructions (Art. 28 GDPR). How a law firm handles this data is set out in its own privacy notice.

Website and server logs

When you visit juratek.de, the server records your IP address, the date and time, the address requested, the page you came from and your browser identifier. We need this information to run the site securely and reliably (Art. 6(1)(f) GDPR) and delete it after 14 days.

The website sets no cookies for analytics or advertising, uses no analytics tools and loads no content from other servers; the fonts are on our server too. Your browser may store the language you chose (Section 25(2) no. 2 TDDDG). The servers are run by IONOS SE in Germany.

Demo requests

Through the demo form we collect your name, the name of your law firm, your email address, your phone number and your message. We store the request in our database and also receive it by email, so that we can reply and arrange a demonstration (Art. 6(1)(b) GDPR). We do not pass the details on for advertising and delete them once they are no longer needed to handle the request.

Accounts in the Juratek platform

For staff of a law firm we store name, email address, role, the password as an irreversible hash, and sign-in sessions. To keep you signed in we set two technically necessary cookies that expire after 15 minutes and after 7 days; your browser also stores sign-in data and display settings (Section 25(2) no. 2 TDDDG). The legal basis is the contract with your law firm (Art. 6(1)(b) and (f) GDPR).

To bill the cost of AI per law firm, we count usage per firm and feature. We log how the AI assistant Juna is used, such as questions, approvals and errors, for 90 days in order to run and improve it (Art. 6(1)(f) GDPR).

Service providers

We use the following service providers to run the platform. They process the data of the law firms and their clients on our behalf:

• IONOS SE, Montabaur (Germany): servers, database and email delivery (notifications, appointment confirmations and reminders).
• Backblaze, Inc.: encrypted backups in a data centre in Amsterdam (Netherlands); Backblaze receives the data only in encrypted form.
• Microsoft Ireland Operations Limited, Dublin (Ireland), with the Azure OpenAI service in data centres in the EU: the AI assistant Juna, the chat assistant on law firm websites, turning dictations into text, and searching documents. Not passed on to OpenAI, not used for training.
• A service provider for the phone assistant (call handling, speech recognition, language model), processing in the EU.
• Daily.co: video appointments, on servers in Frankfurt am Main.

A law firm uses telephony (Twilio) and online payments (Stripe) through its own accounts with these providers.

Storage period

We delete server logs after 14 days and logs of Juna usage after 90 days. We keep account data while the account exists and the contract with the law firm runs, and billing records for up to ten years under tax and commercial law. Deleted data may remain in the encrypted backups for up to six months.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.