Privacy policy

This policy covers ansamble.de for visitors who are not signed in: the home page with the early-access waitlist, this page and the Impressum. The Google account and connection disclosures in section 12 also apply when you use Google with the Ansamble product. Other product services are outside the scope of this website policy.

1. Data controller

We are not required to appoint a data protection officer under § 38 BDSG. For every privacy question or request, write to info@justback.de.

2. Data we process and why

Visiting the page. Fonts, images and the film are served from ansamble.de itself. To count visits we store the time, referring host, headline version and whether the visit looked automated. These counts contain no visitor identifier. Headline selection uses your IP address and browser type on each request without storing them in the visit record.

Optional Google Analytics. If you choose "Allow analytics", Google Analytics 4 measures page visits, traffic sources, clicks, scrolling, visible sections, time on screen, video playback and successful waitlist submissions. It processes a pseudonymous cookie identifier, browser and device information and the IP address needed to receive requests. We do not send your email or form contents, and do not enable advertising personalization, Google signals or session recording. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can decline without losing access to the website or withdraw consent through "Analytics settings" at any time.

Delivering the page and preventing abuse. Our server and our hosting provider process your IP address to deliver the page and to limit abuse of the form. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a working and secure website.

The early-access waitlist. When you join, we store your email address, the time, what you said you want to start with, the headline version you saw, and whether the request looked automated. We use your address only to send you your invitation to Ansamble and the information that belongs to it. Legal basis: your consent, Art. 6(1)(a) GDPR.

3. Obligation to provide data

You do not have to give us any data to read this page. Joining the waitlist needs an email address; without it we cannot send an invitation.

4. Recipients and processors

We do not sell your data. The site runs on servers of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in Germany.

With your consent, analytics data is also processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its subprocessors under Google's data processing terms. See how Google uses data from partner sites.

5. Retention

Visit counts contain no personal data. Your waitlist entry is deleted when you withdraw your consent, once you have accepted your invitation and created an account, or at the latest 24 months after you joined.

6. Your rights

• Access (Art. 15 GDPR), rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18) and data portability (Art. 20);
• objection to processing based on legitimate interests (Art. 21);
• withdrawal of consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

To exercise any of these rights, write to info@justback.de. We answer within one month.

7. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).

8. Cookies and local storage

We store your analytics choice in local storage for 180 days to respect it across visits. Only after consent, Google sets first-party _ga cookies to distinguish visits. We limit their lifetime to 180 days. You can change your choice through "Analytics settings" in the footer. Withdrawal stops collection and removes these analytics cookies from this site. User-level and event-level analytics retention is two months; aggregate reports may be retained longer.

9. International transfers

With analytics consent, Google may process data outside the EU or EEA, including in the United States. Google describes its applicable transfer safeguards, including the EU–US Data Privacy Framework and standard contractual clauses, in its international data transfer information.

10. Supervisory authority

You have the right to lodge a complaint with a data protection authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You may also contact the authority in the EU member state where you live or work.

11. Changes to this policy

We update this policy when the site changes. The current version is always published here.

12. Google sign-in and optional Google connections

Signing in. If you choose Google sign-in, Google sends us your Google account identifier and verified email address. We use them to create or authenticate your Ansamble account and keep the account identifier linked to it. Sign-in alone does not give Ansamble access to your documents, email or analytics. We set a secure session cookie and a short-lived cookie to protect the sign-in flow. You can also sign in by email or passkey.

Connecting data. A team owner may separately connect Google services and choose the permissions on Google's consent screen. Depending on the feature selected, these permissions allow reading Google Docs and Drive files for import, reading Gmail messages and metadata for the mailbox, sending email through Gmail, or reading Google Analytics and Search Console reports. Each connection serves the team in which it is made. Imported material and reports may be available to authorised members of that team.

Use, storage and sharing. We use Google data to provide the features you request. Connection credentials are encrypted on the server. Content you import can be processed by the AI provider used for the work you request; review the selected provider before using sensitive material. We do not sell Google user data, use it for advertising or use it to train general-purpose AI models. Ansamble's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Control and deletion. You can disconnect Google in Settings, Connections, or revoke access in your Google Account connections. Revoking access stops future authorised access; it does not delete copies already imported into your team. Delete imported content in Ansamble or use the team's Export and delete controls. For account deletion or questions about retained Google data, contact info@justback.de. Account identity data is kept while your account exists; connection credentials are kept while connected, and imported content is kept until you delete it or the team is deleted.