Privacy

Short and honest: this website sets no cookies and uses no tracking or ad tools. Fonts and videos are served from our own server; nothing is loaded from third-party servers. Whether you dismissed the notice at the bottom of the screen is stored only in your browser (local storage, strictly necessary); none of it reaches us.

Controller

JRG GmbH, Jörgerstraße 50/3, 1170 Vienna, Austria, office@johnrossgroup.com, phone +43 1 4023808.

Hosting and server logs

The site is hosted by easyname GmbH in Vienna as our processor. When you visit, the server logs technically necessary data: IP address, date and time, page requested, browser and operating system. This keeps the site secure (legitimate interest, Art. 6(1)(f) GDPR). easyname keeps these logs only as long as needed for security and troubleshooting and then deletes them automatically. We do not analyse them or combine them with other data.

Requests and email

When you request JRG ARC or a desk, or write to us, we process what you enter: for ARC name, role, email, phone, company, industry, size, billing address, VAT ID and your message; for a desk name, email, phone, what you do, when and how often you’d come and your message. We need it to answer, confirm the offer, invoice and unlock ARC (contract and pre-contractual steps, Art. 6(1)(b) GDPR). The form emails the data to us and a confirmation to you; nothing is stored on the web server. Recipients are only us, our host easyname (server and email, in Austria) and, for invoices, our tax advisers. This request data does not leave the EU.

We delete data once it is no longer needed. Invoices and related records are kept for seven years as Austrian tax law requires (§ 132 BAO).

Answers inside ARC

Only you and your JRG guide see your answers in ARC (plus, without your company name, the AI during analysis). They never end up in a presentation or a case study.

Every person gets their own link. The app stores your answers, the person label (e.g. “Person 2”) and timestamps on our server at easyname in Austria, encrypted. We don’t pass them on, with one exception: the AI-assisted analysis, see below. The app sets no cookie; your access key sits only in your browser’s storage (localStorage). The legal basis is the contract (Art. 6(1)(b) GDPR). After the project we delete the answers, at the latest twelve months after access ends, unless you want otherwise. The app itself currently uses no AI. If the prompter joins, we will name the provider and server location here first.

An AI helps us with the analysis: Claude by Anthropic PBC (USA). We pass your answers to Claude without your company name and without saying who answered what. The AI sorts and summarises but decides nothing; the reading and the memo come from people at JRG. Anthropic processes the data as our processor and does not use it to train its models. The transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). The legal basis is our legitimate interest in a thorough and efficient analysis (Art. 6(1)(f) GDPR). If you’d rather not, tell us beforehand and we analyse without AI.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Write to office@johnrossgroup.com. You can complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Last updated: November 2026. The German version prevails.