1. Overview of Data Protection

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Responsible Party” in this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us—for example, data you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This includes technical data (e.g., browser type, operating system, or time of page access). This data is collected automatically as soon as you access this website.

Why do we use your data?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze user behavior. If contracts are concluded or initiated through the website, your data may also be processed for contract offers, orders, or inquiries.

What rights do you have regarding your data?

You have the right to receive information, free of charge, at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time. Under certain conditions, you also have the right to restrict the processing of your personal data. Additionally, you have the right to lodge a complaint with the appropriate supervisory authority.

For any questions about data protection, you can contact us at any time.

2. Hosting

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated through the website.

External hosting is carried out to fulfill contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing a secure, fast, and efficient online offering (Art. 6(1)(f) GDPR). If consent has been obtained, processing is carried out exclusively based on Art. 6(1)(a) GDPR and § 25(1) TDDDG (e.g., cookie storage, device fingerprinting). Consent may be revoked at any time.

Our hosting provider will process your data only to the extent necessary to fulfill its obligations and follow our instructions.

We use the following host:

Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands

3. General Notes and Mandatory Information

Data Protection

We take the protection of your personal data seriously. We handle your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When using this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g., email communication) may have security gaps. Complete protection of data against third-party access is not possible.

Information on the Responsible Party

Responsible party (controller) for data processing on this website:

Christian Kastner Digital Solutions
Christian Kastner
Königsturmstraße 33
73525 Schwäbisch Gmünd
Germany
info@wafy.agency
+4915129527634

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses).

Data Retention

Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless legal retention requirements (e.g., tax or commercial obligations) prevent this.

Legal Bases for Data Processing

If you have consented, we process your personal data based on Art. 6(1)(a) GDPR or, for special data categories, Art. 9(2)(a) GDPR. Consent for transfers to third countries is based on Art. 49(1)(a) GDPR. If cookies or device access (e.g., fingerprinting) are involved, § 25(1) TDDDG also applies. Consent can be revoked at any time.

Other legal bases may include Art. 6(1)(b) for contract processing, Art. 6(1)(c) for legal obligations, or Art. 6(1)(f) for legitimate interests.

4. Your Rights

• Right to withdraw consent at any time.

• Right to object to processing (Art. 21 GDPR), especially for direct marketing.

• Right to file a complaint with a supervisory authority.

• Right to data portability (machine-readable format).

• Right to information, correction, and deletion of personal data.

• Right to restrict processing in specific cases.

5. Security

We use SSL or TLS encryption for secure transmission of sensitive content. You can recognize an encrypted connection by the address bar (“https://”) and the padlock icon in your browser.

6. Objection to Promotional Emails

We object to the use of published contact information for sending unsolicited advertising and reserve the right to take legal action in such cases (e.g., spam emails).

7. Newsletter

If you subscribe to our newsletter, we require your email address and confirmation that you are the owner of that address. Data is processed solely on the basis of your consent (Art. 6(1)(a) GDPR), and you can unsubscribe at any time via the link in the email.

Your data will be deleted upon unsubscribing, except where we retain your email in a blacklist to prevent future mailings. This is based on our legitimate interest and is not time-limited unless you object.