Privacy Policy

1. Data Controller

Wachswandel UG (haftungsbeschränkt), Drei-Eichen-Str. 4a, 53919 Weilerswist (OT Metternich), Germany

Managing Director: Janina Schäfer, Email: info@wachswandel.de, Phone: +49 155 60807100

2. General Data Processing

We only process personal data of our users insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data only takes place regularly with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

3. Legal Basis

Insofar as we obtain consent for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Insofar as processing of personal data is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis.

For processing necessary to protect a legitimate interest, Art. 6(1)(f) GDPR serves as the legal basis.

4. Visiting Our Website

4.1 Server Log Files

When visiting our website, the web server automatically collects general information (server log files). These include:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• IP address of the requesting computer (anonymised)
• Date and time of the request

This data does not allow conclusions about your person and is only used to ensure trouble-free operation and to improve our offering. Legal basis is Art. 6(1)(f) GDPR.

4.2 Hosting

Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes data on our behalf under a data processing agreement (DPA). Transfer to the USA is based on the EU-U.S. Data Privacy Framework.

5. Contact

When you contact us by email or via the contact form, the following data is processed:

• Name
• Email address
• Phone number (if provided)
• Content of your message

Email delivery is handled by SendGrid (Twilio Inc.), which stores data on servers in the EU/USA. Legal basis: Art. 6(1)(b) GDPR.

6. Cookies and Local Storage

Our website uses:

7. Location Data (Geolocation)

On the collection points page, you can optionally share your location to find the nearest collection point. The data is processed exclusively in the browser and is not stored or transmitted.

8. Partner Portal

For the partner portal, we store:

• Username and hashed password
• Role and permissions
• Access timestamps

Legal basis: Art. 6(1)(b) and (f) GDPR.

9. Data Recipients

Data is only passed on to third parties insofar as this is necessary:

• Vercel Inc. (Hosting)
• SendGrid/Twilio (Email delivery)
• No other third parties

We do not sell data and do not share it for advertising purposes.

10. Storage Duration

Personal data is deleted as soon as the purpose of storage no longer applies. Contact enquiries are deleted after completion of processing, unless legal retention obligations exist.

11. Your Rights

You have the right to:

• Information about stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Deletion of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, contact info@wachswandel.de.

12. Right to Complain

You have the right to lodge a complaint with a supervisory authority. Responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf

13. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy as needed to comply with changed legal requirements or when changes to our services occur.