Privacy Policy


I. Information on Data Processing Pursuant to Art. 13 GDPR

1. Controller and Data Protection Officer

The controller responsible for this website is:

Philipp Bellmann
WaveHaven
Hechtstr. 38
01097 Dresden
Germany
Phone: 01777594376
Email: support@wavehaven.de

No separate data protection officer has been appointed for this website. You can send questions about data protection to the controller using the contact details above.

2. Data Processed for Providing the Website and Creating Log Files

a. Which data is processed and for what purpose?

Each time content on this website is accessed, data is temporarily processed that may allow identification in individual cases. The following data may be collected:

The temporary processing of this data is necessary to deliver the website to your browser. Storage in log files may also take place in order to maintain the functionality of the website, improve stability, and ensure the security of the information technology systems. These purposes also constitute the legitimate interest in the processing.

b. What is the legal basis for this processing?

The data is processed on the basis of Art. 6(1)(f) GDPR.

c. Are there recipients of the personal data besides the controller?

The website is hosted by a service provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union. The hosting provider may receive the above-mentioned technical data as a processor.

A data processing agreement has been concluded with the provider. This agreement is intended to protect website visitor data and to prevent unauthorized disclosure to third parties.

d. How long is the data stored?

Data that is needed only to provide the website is no longer required when the respective session ends. Log file data is stored only for as long as it is necessary for the security, functionality, and stability purposes described above.

If there are concrete indications of unlawful use, server log files may be reviewed afterwards and retained for as long as this is necessary to clarify the incident or assert, exercise, or defend legal claims.

3. Additional Processing on This Website

a. SSL or TLS encryption

This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential content, such as inquiries sent to the controller. An encrypted connection can be recognized by "https://" and the lock symbol in the browser address bar.

b. Cookies

This website may use cookies. Cookies are small text files stored on your device by the browser. Some cookies are deleted automatically after the browser is closed. Others remain stored for a longer period and can be used to save settings or support website functions.

If personal data is processed through cookies, the legal basis depends on the purpose of the cookie. Processing may be based on consent under Art. 6(1)(a) GDPR, on Art. 6(1)(b) GDPR where processing is necessary for contract-related purposes, or on Art. 6(1)(f) GDPR where the legitimate interest is the secure, functional, and user-friendly operation of the website.

You can configure your browser to inform you before cookies are placed, to allow cookies only in individual cases, or to block cookies generally. If cookies are blocked, some website functions may be limited.

c. Contact by email or contact form

If you contact us by email or through a contact form, the personal data you provide is processed for the purpose of handling your request. Depending on the content of the inquiry, this may include your name, email address, message text, and any other information you voluntarily provide.

The legal basis is Art. 6(1)(f) GDPR, because there is a legitimate interest in responding to inquiries. If your request is aimed at entering into a contract or concerns an existing contractual relationship, Art. 6(1)(b) GDPR may additionally apply.

The data is deleted once the inquiry has been fully dealt with, unless statutory retention obligations or other legal grounds require further storage.

4. Rights of Data Subjects

a. Right of access

You may request information under Art. 15 GDPR about the personal data concerning you that is processed.

b. Right to object

You have a right to object on grounds relating to your particular situation. Further information is provided under Section II.

c. Right to rectification

If personal data concerning you is inaccurate, you may request correction under Art. 16 GDPR. If your data is incomplete, you may request completion.

d. Right to erasure

You may request the erasure of your personal data under Art. 17 GDPR.

e. Right to restriction of processing

You may request restriction of the processing of your personal data under Art. 18 GDPR.

f. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority of your choice.

g. Right to data portability

If the requirements of Art. 20(1) GDPR are met, you may request that data processed automatically on the basis of your consent or for the performance of a contract be provided to you or to a third party.

The collection of data for providing the website and the storage of log files are necessary for operating the website. They are not based on consent under Art. 6(1)(a) GDPR or on a contract under Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The requirements of Art. 20(1) GDPR are therefore generally not met in this respect.

II. Right to Object Under Art. 21(1) GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data that is carried out on the basis of Art. 6(1)(f) GDPR.

If you object, the personal data concerned will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.

The collection of data for providing the website and the storage of log files are necessary for operating the website.

If personal data is processed for direct marketing purposes, you may object to such processing at any time. In that case, the data concerned will no longer be processed for direct marketing.