Last updated: 29 October 2026
This English version is provided for convenience. In case of doubt, the German version applies.
The controller responsible for data processing on this website (configento.app) and in the configento customer portal (service.configento.app) is:
justSelling GmbH
Am Lippeglacis 2
46483 Wesel
Germany
Phone: +49 2802 70795-0
Email: info@justselling.de
Represented by the managing directors Michael Schäfer and Thomas Mannsky.
We are not legally required to appoint a data protection officer. If you have any questions about data protection, please contact us at info@justselling.de.
You have the following rights with regard to the personal data concerning you:
To exercise your rights, a message to info@justselling.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
This website and our customer portal are operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Nuremberg. We have concluded a data processing agreement with Hetzner. When you visit the website, the server automatically processes information transmitted by your browser: IP address, date and time of access, page requested, referrer URL, browser type and operating system. This data is required for the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is deleted after 30 days unless it is needed for longer to investigate a security incident.
We use the consent management platform CookieFirst provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, Netherlands. CookieFirst stores your choice in a cookie and records it (consent status, anonymised IP address, browser and device information, time, URL, approximate location, a random identifier). The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to provide evidence). We have concluded a data processing agreement with CookieFirst.
We only use cookies and services that are not technically necessary with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can change or withdraw your choice at any time via the cookie settings. A complete, automatically updated list of all cookies can be found under Cookies.
We do not offer a contact form. You can reach us via the chat on our website (see section 10), by booking an appointment (see section 9) or by email. When you write to us, we process your details (in particular name, email address, company and the content of your message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once the enquiry has been dealt with conclusively and no statutory retention obligations apply.
For the free trial we collect your company, first and last name and email address, and, on a voluntary basis, your phone number, role and industry. The form is a configurator built with our own product configento.app; your browser loads it from our server cloud.configento.app when you open it. When you submit it, this server transmits your details to our customer portal service.configento.app, where we create your trial account and send you a confirmation email. You only set a password after confirming your email address in the customer portal; it is stored in encrypted form only. The legal basis is Art. 6(1)(b) GDPR (performance of pre-contractual measures and of the contract).
To protect against abusive and multiple sign-ups, our server also transmits your IP address and your browser identifier (user agent) to the customer portal. There we use them to limit the number of sign-ups per connection and to detect unusual patterns. We store the IP address and a hash of the browser identifier (not the identifier itself) with your sign-up and delete them as soon as they are no longer required for this purpose. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
To support you during the trial and for sales follow-up, we use:
We have concluded data processing agreements with all of the service providers mentioned. We delete data from ended trials as soon as it is no longer required and no statutory retention obligations apply.
We protect the free trial form with ALTCHA, a proof-of-work method that runs entirely on our own servers. When you open the form, your browser retrieves a computational task from our server and solves it itself; when you submit the form, the solution is sent along and checked by our server. No cookies are set, no third-party services are loaded and no data is transmitted to third parties. The legal basis is our legitimate interest in preventing automated sign-ups (Art. 6(1)(f) GDPR).
On the "Try it" page you can book a consultation or webinar appointment via a HubSpot calendar. The calendar is only loaded when you click "Load calendar"; before that, no data is transmitted to HubSpot. When it is loaded, technical connection data such as your IP address is transmitted to HubSpot and cookies are set. The legal basis for this is your consent given by the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you book an appointment, HubSpot also processes your name, email address and the chosen appointment; the legal basis for this is Art. 6(1)(b) GDPR (carrying out the requested appointment). If you have consented to the "Advertising" category, we report the successful booking to Google Ads as a conversion without your contact details (see section 12).
Our website includes the Intercom chat widget, which you can use to send us messages directly. Intercom processes the content of your messages, your contact details (if provided) and technical data such as IP address, browser and pages visited. The widget is only loaded once you have consented to the "Functional" category. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
With your consent, we use Google Analytics 4, integrated via Google Tag Manager (both provided by Google Ireland Limited). Google Analytics records how visitors use our website (pages viewed, time spent, approximate location, device and browser information, form events) and stores cookies in your browser for this purpose. Google Analytics 4 does not store IP addresses. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Event data is deleted after 2 months, and user data linked to cookies or identifiers after 14 months; this period restarts with renewed activity.
We use Google Ads (Google Ireland Limited) to draw attention to our offer. To measure whether our ads lead to a trial sign-up, an appointment booking, a contact request or a contract, we use Google Ads conversion tracking.
If you reach our website via a Google ad, the address contains a click identifier assigned by Google (GCLID). If you have consented to the "Advertising" category in our cookie banner, we load the Google tag and store this identifier for 90 days in a cookie in your browser (cfg_gclid; Google also sets its own cookies such as _gcl_aw). If you then sign up for a free trial, we transmit the identifier together with your sign-up to our customer portal and store it there with your customer account.
If you confirm your trial sign-up or later take out a paid subscription, we report this event to Google Ads together with the click identifier, the time and, where applicable, the monthly amount. We do not transmit your name, email address or other contact details. Google can only assign the report to the original ad click. We only receive aggregated statistics from Google and no information that could identify you personally.
Enhanced conversions: If you submit the free trial form after consenting to the "Advertising" category, we pass the email address you entered to the Google tag. The Google tag converts it into a hash value in your browser using a one-way method (SHA-256); only this hash value is transmitted to Google. Google matches it against Google accounts in order to attribute the conversion to an ad click, even if you have switched devices, for example, and deletes the hash value after matching. We do not receive any additional information about you.
Without your consent to the "Advertising" category, the Google tag is not loaded, and neither the click identifier nor your email address is stored or transmitted.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings; the cfg_gclid cookie is then deleted. In our customer portal, we delete the click identifier and the reported events no later than 120 days after sign-up.
With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel allows us to show advertising on Facebook and Instagram to visitors of our website and to measure the effectiveness of this advertising. It is only loaded once you have consented to the "Advertising" category in our cookie banner. Cookies are then set and information such as pages visited, device, browser and IP address is transmitted to Meta. We are jointly responsible with Meta for the collection and transmission (Art. 26 GDPR); the agreement can be found at https://www.facebook.com/legal/controller_addendum. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings.
Our website links to our profiles on Facebook and LinkedIn. These are simple links; data is only transmitted when you click a link and visit the respective platform.
Some of the service providers mentioned also process data in the USA or have parent companies there. Google LLC, Meta Platforms, Inc., HubSpot, Inc., Intercom, Inc. and Salesforce, Inc. (to which Slack belongs) are certified under the EU-U.S. Data Privacy Framework; an adequacy decision of the European Commission applies to them (Art. 45 GDPR). We base the transfer to Anthropic PBC, which is not certified, on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
Unless a specific period is stated in this policy, we only store personal data for as long as is necessary for the respective purpose. Data subject to commercial or tax retention obligations (e.g. invoices) is kept for the legally prescribed period of up to ten years.