1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
2. Overview
Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act, TDDDG). We would like to summarise the key points in advance:
- We use no tracking, no analytics tools and no advertising networks.
- We do not create any profiles of your behaviour.
- Fonts are served locally from our own server (self-hosted); no connection is made to external font services.
- The app's usage statistics (such as the number of prepared thumbnails) remain exclusively local on your device and are not transmitted to us.
3. Hosting and server log files
This website is operated on our own Virtual Private Server hosted with a German hosting provider:
dogado GmbH, Germany.
The provider processes data on our behalf on the basis of a data processing agreement pursuant to Article 28 GDPR. When you access our website, the server automatically collects information in what are known as server log files, which your browser transmits. These are:
- IP address
- date and time of access (timestamp)
- browser type and operating system used (user agent)
- the page or file requested
This data cannot be attributed to any specific person by us. It is not merged with other data sources. Processing takes place on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and security of our website. Transmission is encrypted throughout using TLS.
4. Cookies
We use only technically necessary cookies. We do not use any cookies for analytics, tracking or advertising. The following table lists in full all cookies that may be set:
| Name / type | Purpose | Storage period |
|---|---|---|
| jbl_lang_lock | Remembers your chosen language (German or English). Functional, HttpOnly. | 12 months |
| WordPress login cookies | Account area only: keeps you logged in after signing in. | Session to several days |
| WooCommerce session and cart cookies | Only when using the shop: stores your cart and checkout process. | Session up to 2 days |
| Paddle checkout cookies | Set only after you actively click the buy button for a software licence and the Paddle checkout loads. | Session |
Why there is no cookie banner: All of the cookies listed above are technically necessary to provide the functions you have expressly requested (language setting, login, shopping cart, checkout). Pursuant to Section 25 (2) no. 2 TDDDG, no consent is required for such strictly necessary cookies. Since we deliberately do without any non-essential cookies, analytics and advertising, we consequently also do without a cookie consent banner. The Paddle payment service is loaded only once you initiate the purchase yourself by clicking the corresponding button.
5. Contact form and contact by email
If you send us enquiries via the contact form or by email, we process the information you provide (such as your name, email address and your message) in order to handle the enquiry and in case of follow-up questions. The legal basis is Article 6 (1) (b) GDPR insofar as your enquiry relates to a contract, and otherwise our legitimate interest in answering your request pursuant to Article 6 (1) (f) GDPR.
We store the data from contact enquiries until processing is complete and no further questions are to be expected. After that, the data is deleted, unless statutory retention obligations prevent this.
6. Purchase and payment processing for software licences
All paid licences for JB Thumbnail Preloader are sold worldwide exclusively through Paddle acting as Merchant of Record. The seller and contractual partner for the purchase agreement is the Paddle entity responsible for your purchase location. For purchases from the United States, this is Paddle.com Inc., 3811 Ditmars Blvd. #1071, Astoria, New York, NY 11105-1803, USA. For purchases from Canada, this is Paddle.com (Canada) Ltd., 22 Adelaide Street West, Suite 3400, Toronto, Ontario, M5H 4E3, Canada. For purchases from all other countries, this is Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom. The entity responsible for your purchase is identified during checkout and in your order confirmation.
Paddle handles payment, taxes and refunds and issues your invoice. Paddle processes the order, contact, billing and payment data collected during checkout as an independent controller. For details, please refer to Paddle's privacy policy: https://www.paddle.com/legal/privacy. We receive from Paddle the order data that we need to provide the licence, manage the account, support the product and maintain our accounting records. The legal basis is Article 6 (1) (b) GDPR for performance of the contract. We retain data relevant to invoicing and accounting for up to 10 years pursuant to Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code. The legal basis for this retention is Article 6 (1) (c) GDPR.
7. Customer account and magic link sign-in
For the account area on our website, we offer passwordless sign-in. You enter your email address and receive a time-limited sign-in link (magic link) containing a one-time token. For this, we process your email address and the generated token. The legal basis is Article 6 (1) (b) GDPR for providing the account, as well as our legitimate interest in a secure, passwordless sign-in procedure pursuant to Article 6 (1) (f) GDPR. The sign-in link becomes invalid after a short time.
8. Licence activation and abuse prevention
The JB Thumbnail Preloader software uses a licence system. After purchase, you receive a licence key by email. During activation and the recurring validity check of your licence, we process the following data:
- licence key
- instance ID of the installation
- device name
- hardware identifier (HWID)
- IP address
- timestamp
This processing is necessary to provide you with the purchased licence on the permitted number of devices and to enforce the contractually agreed activation limit. The legal basis is Article 6 (1) (b) GDPR. In addition, we have a legitimate interest in preventing licence abuse pursuant to Article 6 (1) (f) GDPR.
For the free 14 day Studio trial, we process the account email address, magic link token, hardware identifier (HWID), IP address and the associated timestamps. The email account and hardware ID are checked independently on the server for previous trial use. This means that neither another account on the same hardware nor the same email address on different hardware can receive a second trial. The legal basis is Article 6 (1) (b) GDPR for providing the trial and our legitimate interest in preventing repeated use pursuant to Article 6 (1) (f) GDPR.
9. App update check
JB Thumbnail Preloader checks at regular intervals via a release interface (release API) whether a new version is available. In doing so, your IP address, the installed app version and, where applicable, your licence key are transmitted. This processing serves to provide you with current and secure program versions. The legal basis is Article 6 (1) (b) GDPR (provision and maintenance of the software) as well as our legitimate interest in secure, up-to-date installations pursuant to Article 6 (1) (f) GDPR.
10. Transactional emails
In connection with your purchase, your account or your licence, we send necessary transactional emails (such as order confirmation, licence key, sign-in link) from the sender address noreply@jonathanbesler.de. These messages are required to perform the contract and do not constitute advertising. The legal basis is Article 6 (1) (b) GDPR.
11. Storage period
We process and store your personal data only for as long as is necessary for the respective purposes. Where statutory retention obligations exist (in particular commercial and tax law periods of up to 10 years), we store the affected data for the duration of these periods. After that, the data is deleted, provided it is no longer needed to perform the contract or to safeguard legitimate interests.
12. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Access to the data stored about you (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure of your data (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
Right to object: Insofar as we process your data on the basis of legitimate interests (Article 6 (1) (f) GDPR), you have the right to object at any time to this processing on grounds relating to your particular situation (Article 21 GDPR). To exercise your rights, a message to hello@jonathanbesler.de is sufficient.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible for us is:
Promenade 18
91522 Ansbach
Germany
13. Data security
When you visit our website and use the app, we use the widely established TLS (Transport Layer Security) procedure in combination with the highest level of encryption supported by your browser or system. In addition, we protect our systems and processing against unauthorised access through further technical and organisational measures.
14. Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services, for example when introducing new features. The version in effect at the time will then apply to your renewed visit.