1. Who is responsible for your data
JAP Digital LLC is the controller of the personal data collected through this website.
- Controller
- JAP Digital LLC
- Business address
- 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, United States
- info@japdigitalllc.com
2. Our representative in the European Union
JAP Digital LLC is established outside the European Union. Because we offer services to businesses located in the Union, Article 27 of the General Data Protection Regulation (GDPR) requires us to designate a representative in the Union. That designation is in progress: we are appointing a representative established in Spain, and this section will name it, with its own postal address and email address, as soon as the appointment is in force.
Until then, every matter that would be addressed to the representative is handled directly by the controller, and reaches a monitored mailbox:
- Contact point
- info@japdigitalllc.com
Data subjects and supervisory authorities may use that address on all issues relating to the processing of personal data. Once the representative is appointed, you will be able to address it instead; either way, this does not prevent you from taking action directly against JAP Digital LLC as controller (Article 27(5) GDPR).
3. What we collect, why, and on what legal basis
We only collect personal data that you give us deliberately. We do not profile visitors, we do not run analytics, and we do not use advertising or tracking technologies.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, telephone number, project type and the content of your message, submitted through the contact form | To read your inquiry, answer it, and hold the conversation that follows | Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. Where your message is not aimed at a contract, Article 6(1)(f) — our legitimate interest in responding to business inquiries addressed to us | 12 months from our last contact with you. If the inquiry leads to a contract, for the duration of that contract and the statutory limitation periods that follow |
| Technical data recorded by our hosting provider when a page is served: IP address, timestamp, requested URL, user agent | To deliver the website and keep it secure and available | Article 6(1)(f) GDPR — our legitimate interest in operating a secure service | As set by the hosting provider's standard log retention |
Providing your name, email, project type and message is necessary for us to answer you; without them we cannot reply. The telephone number is optional.
Please do not send us special categories of personal data — information revealing health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, sex life or sexual orientation. Our contact form is not intended for such data, and we have no need for it in order to answer a business inquiry.
4. Who else processes your data
We keep this deliberately short. The contact form is not handled by any form service, any marketing platform or any mailing list: your message is delivered by email straight to our own mailbox. Submitting the form does not subscribe you to anything.
Two providers are involved in operating this website, each acting as a processor on our instructions:
| Provider | Role | Location |
|---|---|---|
| Hostinger International Ltd. | Provides our email mailboxes and DNS. Your message passes through our own mailbox on their mail servers | European Union |
| Vercel Inc. | Hosts and serves this website, and runs the function that receives the form | United States, with a global content delivery network. The function that handles the form is configured to run in the European Union |
We do not sell personal data, and we do not share it with third parties for their own marketing purposes. Once your message reaches our mailbox, the retention period stated in section 3 applies and is enforced by us deleting messages once they are no longer needed.
International transfers
Delivery of your message stays within the European Union: it travels from the website to our own mailbox, hosted in the EU. No message content is sent to a provider outside the Union.
Our website hosting provider, Vercel Inc., is established in the United States, and serving this website necessarily involves it processing technical data such as your IP address. Those transfers are covered by the Standard Contractual Clauses approved by the European Commission in Implementing Decision (EU) 2021/914, which Vercel incorporates into its Data Processing Addendum (Schedule 3, section 3). Vercel publishes its current sub-processors in its Trust Center.
5. Your rights
If you are in the European Economic Area or the United Kingdom, you have the right to:
- obtain confirmation of whether we process your data, and access it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased where the conditions for erasure are met;
- ask us to restrict processing in certain circumstances;
- receive the data you gave us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
- object to processing based on our legitimate interest, on grounds relating to your particular situation.
To exercise any of these rights, write to info@japdigitalllc.com, the contact point given in section 2. We may ask you for information to confirm your identity before acting on a request. We answer within one month, extendable by two further months where a request is complex, in which case we will tell you.
We do not make decisions about you based solely on automated processing, and we do not carry out profiling.
6. Complaints
If you believe we have handled your data unlawfully, you may lodge a complaint with the supervisory authority in the country where you live or work. In Spain this is the Agencia Española de Protección de Datos (aepd.es). We would appreciate the chance to resolve the matter with you first.
7. Security
This website is served over HTTPS. It has no login area, no database of its own and no administration panel. Contact form submissions travel over an encrypted connection to a function we operate ourselves, which delivers them by authenticated SMTP to our own mailbox; they are not stored on the website. We apply security headers at the edge and review the configuration as part of our own development method.
No system is immune to risk. If we become aware of a personal data breach likely to result in a risk to your rights and freedoms, we will act in accordance with Articles 33 and 34 GDPR.
8. Children
This website addresses businesses and professionals. It is not directed at children, and we do not knowingly collect their data.
9. Changes to this policy
If we change how we handle personal data, we will update this page and change the date shown at the top. Significant changes will be described here rather than made silently.