Legal
Privacy policy
This page explains which personal data is processed when you visit this website, what we use it for and what rights you have.
Controller
The controller responsible for processing personal data on this website is:
Freitas Rogge, Adrian und Glück, Felix GbR
Trading name: Weftery
Wiederholdstraße 17A
34132 Kassel
Germany
Represented by its partners Adrian Freitas Rogge and Felix Glück
Email: info@weftery.de
Further contact details are in the legal notice.
At a glance
- We do not use cookies or any analytics, tracking or advertising services.
- Fonts, images and scripts, including the 3D library Three.js, are served from our own site at Netlify. When you visit, your browser does not connect to Google, font providers or any other third party.
- Personal data is only processed when your browser requests pages (server log files at our hosting provider) and when you contact us (inquiry form, email or phone).
- So that the short intro only plays once per tab, the website stores a technical flag in your browser's session storage. It does not leave your device.
- We do not make automated decisions within the meaning of Art. 22 GDPR.
Hosting by Netlify
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the pages through a global server network and, on our behalf, processes the access data described in the next section. This is governed by a data processing agreement under Art. 28 GDPR, which is part of Netlify's terms of service.
- Legal basis
- Art. 6(1)(f) GDPR. Our legitimate interest is to provide the website securely, quickly and reliably.
- Transfer to the USA
- Netlify is certified under the EU-U.S. Data Privacy Framework. In its decision of July 10, 2023, the European Commission found that certified companies provide an adequate level of data protection (Art. 45 GDPR). According to Netlify, transfers are additionally based on the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914).
- Encryption
- Pages are only transmitted in encrypted form (HTTPS).
- More information
- Netlify privacy policy
Server log files
Each time a page is requested, your browser transmits technically necessary data. Netlify stores it in log files:
- IP address
- date and time of the request
- requested address and amount of data transferred
- status code of the response, for example whether the page was found
- the page you came from (referrer)
- browser and operating system (user agent)
- Purpose
- Delivering the website, security and stability, for example fending off attacks and fixing errors.
- Legal basis
- Art. 6(1)(f) GDPR, based on the legitimate interest stated above.
- Storage period
- According to Netlify, less than 30 days. Netlify then deletes the log files.
We do not analyze the log files for statistics or advertising and do not combine them with other data.
Inquiry form
On the page “Request an intro call”, we ask about your business and your request in four steps. We process the following information:
- about your business: industry and number of employees
- about your process: which processes cost you time and how often they come up per day
- about your tools: what you use today and when you would like to start
- about you: first name, last name, business, your role in the business and your email address
- if you provide them: your phone number and your message
Where the form offers a free text field, for example for another industry or further tools, we also process what you enter there.
We also receive the language of the form, the topic of the button you came from (for example “Request an Audit”) and a rough classification of your inquiry. For the email to us, your browser also sums up your answers in one line. The subject shows the classification, industry, size and the name of your business. Without JavaScript, there is no classification or summary.
The classification reads “passt” (fit), “prüfen” (to be checked) or “eher klein” (rather small). Your browser derives it from your answers when you send the form, for example from the number of employees, the process and the volume. We only use it to sort incoming inquiries and to prepare the call. We read and answer every inquiry that reaches us ourselves. We regularly review inquiries that the spam check has filtered out. The classification is not an automated decision within the meaning of Art. 22 GDPR.
The form is processed by Netlify Forms. Netlify stores your inquiry in our Netlify account and sends it to us by email. In doing so, Netlify automatically records your IP address, your browser identifier (user agent), the page you sent the form from, and the date and time. To block spam, Netlify checks every inquiry with the Akismet service of Automattic Inc., USA, a sub-processor of Netlify. In addition, a field that is invisible to people keeps out automated submissions. It contains no data about you.
- Purpose
- Processing and answering your inquiry, preparing the intro call and protecting the form against misuse.
- Legal basis
- Art. 6(1)(b) GDPR if you yourself want to become our contractual partner, for example as a sole proprietor. If you are inquiring on behalf of a business, the legal basis is Art. 6(1)(f) GDPR: our legitimate interest in answering inquiries from businesses and preparing calls. The technical data and the spam check are based on Art. 6(1)(f) GDPR. Our legitimate interest is protection against misuse.
- Recipients
- Netlify as our processor. For this, Netlify uses sub-processors in the USA, including Automattic Inc. (Akismet) for the spam check and SendGrid (Twilio Inc.) for sending the notification. The agreement with Netlify and the basis for the transfer to the USA are described under Hosting by Netlify. The notification arrives at our email provider (see Contact by email or phone).
- Storage period
- Once your inquiry has been dealt with, we delete it from Netlify and from our mailbox, at the latest six months after the last message. If it leads to an engagement, we keep the correspondence for as long as statutory retention obligations require.
- Required information
- You are not obliged to give us any data. Voluntary fields are marked “optional” in the form, for example phone number and message. Without the other information, we cannot answer your inquiry properly.
Contact by email or phone
If you send us an email at info@weftery.de or call us, we process your details, the content of your message and, for emails, their technical details in order to reply. Purpose, legal basis and storage period are the same as for the inquiry form. Notifications from the inquiry form also arrive in this mailbox.
Our mailbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO runs its servers in data centres in Germany (Berlin and Karlsruhe).
No cookies, no tracking
This website does not set cookies and does not use analytics, tracking or advertising services. There is no embedded content from other providers, such as videos, maps or social media buttons.
Technical flag for the intro
On your first visit to the home page, the website shows a short intro. So that it does not play again on every page change or reload, the website stores the entry “wf-loaded” with the value “1” in your browser's session storage (sessionStorage). It only means: the intro has already been shown in this tab. If “reduce motion” is enabled on your system, the website shows no intro and stores no flag.
The entry does not leave your device, is not transmitted to us or to third parties, and is deleted when you close the tab. The legal basis is § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG): storing it is strictly necessary for the website to work the way you requested it.
Fonts and scripts
The Space Mono and JetBrains Mono typefaces are stored on our own site at Netlify and loaded from there. The same applies to Three.js, the JavaScript library for the 3D graphics. Your browser does not connect to Google, font providers or any other third party for this. Your browser renders the 3D graphics on your device.
Your rights
You have the right to
- obtain information about the data we process about you (Art. 15 GDPR),
- have inaccurate data corrected (Art. 16 GDPR),
- have your data erased (Art. 17 GDPR) and its processing restricted (Art. 18 GDPR),
- receive your data in a portable format (Art. 20 GDPR).
An informal message to the contact details under Controller is sufficient.
Right to object under Art. 21 GDPR
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live or work. The authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden, Germany
datenschutz.hessen.de
Changes
If the website or the legal situation changes, we will update this privacy policy. The version published here applies.