Privacy Policy
Controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Moritz Pilz
Your Data Subject Rights
You can exercise the following rights at any time using the contact details provided:
- Information about your data stored by us and its processing (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Erasure of your data stored by us (Art. 17 GDPR),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g., the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Processing Activities
Collection of General Information When Visiting Our Website
Nature and purpose of the processing
When you access our website, i.e., if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar data.
This data is processed for the following purposes in particular:
- to ensure the technically error-free presentation and optimization of the website.
We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
Legal basis and legitimate interest
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and detecting misuse.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Period
Data is stored in server log files in a form that allows the identification of data subjects for a maximum of 30 days, unless a security-relevant event occurs (e.g., a DDoS attack).
In the event of such an event, server log files are stored until the security-relevant event has been eliminated and fully clarified.
Provision required or necessary
The provision of the aforementioned personal data is not required by law or contract. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information about your right to object according to Art. 21 GDPR below.
Newsletter
Nature and purpose of the processing
On our website, you have the option to subscribe to our newsletter to receive regular information about the launch, new features, and valuable content related to the Whyzper app. For an effective registration, we require a valid email address. To verify that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email, and the receipt of your confirmation.
Legal basis
The processing of your data for sending the newsletter is based exclusively on your express consent (Art. 6 (1) (a) GDPR).
Recipients
For the technical processing of the dispatch, we use the service provider Mailjet SAS, 13-13 bis, Rue de l’Aubrac, 75012 Paris, France. Mailjet processes your email address on our behalf to deliver the newsletters and to measure their success (e.g., open rates). We have concluded a Data Processing Agreement (DPA) with Mailjet in accordance with Art. 28 GDPR, which ensures that your data is processed only according to our instructions and in compliance with the GDPR.
Transfer to third countries
Mailjet is part of the Sinch group of companies, which operates globally. It cannot be excluded that data may also be processed on servers outside the EU/EEA. For such cases, we ensure an adequate level of data protection by concluding EU Standard Contractual Clauses (SCCs).
Storage Period
Your email address will only be stored in our newsletter distribution list as long as your consent is given and you are actively subscribed to the newsletter.
Revocation of consent
You can revoke your consent to receive our newsletter at any time with effect for the future. You can declare the revocation by clicking on the unsubscribe link provided in every newsletter email or by sending a message to the contact details mentioned at the beginning of this privacy policy.
Provision required or necessary
The provision of your email address is voluntary. However, without your email address, we cannot send you our newsletter.
Analytics / Reach Measurement
Nature and purpose of the processing
Reach measurement is used to evaluate the flow of visitors to our online offering and can include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify at what time our online offering or its functions or content are most frequently used or invite reuse. We can also understand which areas need optimization.
Which tools we use for reach measurement can be found below.
Legal basis
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest. The measurement of reach and the resulting information are suitable for adapting the web offer.
Recipients
We use technical service providers for the operation and maintenance of our website, who act as our processors.
Storage Period
Information on the storage period can be found in the information provided below on the tools used.
Provision required or necessary
The provision of the data is not required by law or contract.
Objection
Please read the information about your right to object according to Art. 21 GDPR below.
Tools used for reach measurement
Use of Google Tag Manager
Nature and purpose of the processing
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform any independent analyses. It only serves to manage and deploy the tools embedded via it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.
Legal basis
The use of Google Tag Manager is based on your consent pursuant to Art. 6 (1) (a) GDPR. This consent is obtained via our cookie consent banner.
Recipients
The recipient of the data is Google Ireland Limited.
Transfer to third countries
Google LLC, based in California, USA, and, where applicable, US authorities may have access to the data stored by Google. The transfer of data to the USA is based on the EU Commission’s adequacy decision (EU-U.S. Data Privacy Framework).
Storage Period and Revocation of consent
The Tag Manager itself does not store personal data. The storage period of the tools managed by it depends on their individual privacy policies. You can revoke your consent at any time via our cookie consent banner.
Use of Google Analytics 4
Nature and purpose of the processing
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics 4 uses technologies that enable the recognition of the user across pages for the analysis of user behavior (e.g., cookies or device fingerprinting). We use Google Analytics 4 with IP anonymization enabled. This means your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted.
Legal basis
The processing of your data is based on your consent (Art. 6 (1) (a) GDPR), which you provide via our cookie consent banner.
Recipients
The recipient of the data is Google Ireland Limited, acting as a processor. We have concluded a Data Processing Agreement (DPA) with Google for this purpose.
Storage Period
The data sent by us and linked to cookies will be automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.
Use of Meta Pixel (Facebook)
Nature and purpose of the processing
We use the Meta Pixel on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Meta Pixel is a tool for analyzing user behavior for marketing purposes. With its help, we can track the actions of page visitors after they have seen or clicked on a Facebook or Instagram ad. This allows us to measure the effectiveness of our ads for statistical and market research purposes and to optimize future advertising measures (Remarketing).
Legal basis
The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you provide via our cookie consent banner in the “Marketing” category.
Recipients and Transfer to third countries
The data collected is, according to Meta, also transferred to the USA and other third countries. The transfer of data to the USA is based on the EU Commission’s adequacy decision (EU-U.S. Data Privacy Framework). You can find more information in Meta’s privacy policy: https://www.facebook.com/privacy/policy/.
Use of TikTok Pixel
Nature and purpose of the processing
We use the TikTok Pixel on our website. The provider for the European area is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The TikTok Pixel allows us to track user behavior after they have seen or clicked on a TikTok ad. This enables us to measure the effectiveness of our advertising campaigns and to show targeted advertising to users who have shown interest in our website.
Legal basis
The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR, which you provide via our cookie consent banner in the “Marketing” category.
Recipients and Transfer to third countries
According to TikTok, data may be processed in countries outside the EU, including the USA. The transfer of data to the USA is based on the EU Commission’s adequacy decision (EU-U.S. Data Privacy Framework). For more information, please refer to TikTok’s privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en.
Cookies
A cookie is a small data set that is created when a website is visited and is temporarily stored on the website visitor’s system. If the server of this website is called up again by the user of the website, the browser of the website user sends the previously received cookie back to the server. The server can evaluate the information obtained through this procedure. Cookies can, in particular, facilitate navigation on a website.
Detailed information on the subject of cookies, and which cookies are used on this website for what purpose, can be accessed at any time in the cookie settings.
Deleting Cookies
You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on the provider of your browser, you will find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Nature and purpose of the processing
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
Legal basis and legitimate interest
Data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent pursuant to Art. 6 (1) (f) GDPR and other applicable data protection and privacy regulations.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Period
Please refer to your cookie consent tool for the respective storage period of the cookies.
Provision required or necessary
The provision of the aforementioned personal data is not required by law or contract. Without this data, however, the service and functionality of our website are not guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information about your right to object according to Art. 21 GDPR below.
Information about your right to object according to Art. 21 GDPR
Right to object on a case-by-case basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an objection
Moritz Pilz – moritz@whyzper.com
Changes to our Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.
Questions about Data Protection
If you have any questions about data protection, please write us an email to the controller mentioned above.
Copyright Notice
This privacy policy was created with the help of the activeMind AG generator, the experts for external data protection officers (Version #2024-10-25).