Privacy Policy

Effective date: 20.03.2026
Version 2.0

1. Data Controller and Contact Details

The controller responsible for the processing of personal data on this website is:

Wavework, represented by: Dmitrii Vavilov
Address: Käthe-Niederkirchner Str. 1B, 14513 Teltow, Germany
Email: hi@wavework.cc
Phone: +49 15252 641 861
VAT ID: DE365798589
Website: www.wavework.cc
('WaveWork', 'we', 'us', or 'our' in this policy)

2. Scope of This Privacy Policy

This Privacy Policy explains what personal data we collect when you visit our website at www.wavework.cc ('Website'), use our contact forms, subscribe to our newsletter, or engage with our services. It also explains how we use, store, protect, and share that data, and what rights you have under the General Data Protection Regulation (GDPR) (EU) 2016/679 and the German Federal Data Protection Act (BDSG).

3. Personal Data We Collect and Process

When you use our contact form or send us an email, we collect:
‍
• Full name
• Email address
• Telephone number (if provided)
• Message content and any attachments you send
‍
When you subscribe to our newsletter, we collect:
‍
• Email address
• Date and time of subscription

When you visit our Website, our hosting provider and embedded tools may automatically collect technical data, including:

• IP address (anonymised or full, depending on configuration)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent on each page
• Date and time of access

This data is collected for security, load-balancing, and statistical purposes.

Our Website is built on Webflow (webflow.com), a US-based website builder and hosting platform. Webflow acts as a data processor on our behalf. When you visit our Website, Webflow may process technical data (such as server logs and IP addresses) on its infrastructure. Please refer to Webflow's Privacy Policy at https://webflow.com/legal/privacy for further details.

4. Legal Bases for Processing

We only process your personal data where we have a valid legal basis under Article 6 GDPR:

• Art. 6(1)(a) GDPR – Consent: When you subscribe to our newsletter or agree to optional cookies.
• Art. 6(1)(b) GDPR – Contract performance: When processing is necessary to respond to your service inquiry or to fulfil a contract you have entered into with us.
• Art. 6(1)(c) GDPR – Legal obligation: When processing is required under applicable law (e.g. tax and accounting requirements).
• Art. 6(1)(f) GDPR – Legitimate interests: For the operation of our Website, ensuring IT security, preventing fraud, and for direct marketing to existing customers where permitted.

5. Purposes of Processing

We use your personal data for the following purposes:

• Responding to your enquiries, consultation requests, or project proposals
• Providing our acoustic planning, sound system design, equipment supply, and laboratory services
• Sending the newsletter you have subscribed to (marketing communications)
• Improving and maintaining the functionality of our Website
• Complying with legal and regulatory obligations
• Protecting the security and integrity of our systems

6. Website Hosting and Data Storage by Webflow

Our Website is hosted by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Webflow acts as a data processor on our behalf and processes the following categories of personal data on its platform:

• Connection and server log data from every website visitor (including IP addresses)
• Contact form submissions - stored in Webflow's form submissions database
• Newsletter subscriptions - stored in Webflow's subscriber database

All of the above data is stored on Webflow's servers, which are located in the United States. Data transfer to the USA is safeguarded by EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. We have a Data Processing Agreement (DPA) in place with Webflow.

For more information, see: https://webflow.com/legal/privacy and https://webflow.com/legal/dpa

7. Newsletter

We offer a voluntary newsletter. If you subscribe, we process your email address to send you updates about our services, special offers, and announcements.

‍Storage
‍Your email address and subscription date are stored on Webflow's platform (USA). This transfer is covered by EU Standard Contractual Clauses as described in Section 6.

‍Legal Basis
‍Your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by clicking 'Unsubscribe' in any newsletter email or by contacting us at hi@wavework.cc. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

‍Retention
‍Your email address is stored for the duration of your subscription and deleted within 30 days of unsubscription.

8. Contact Forms and Email

When you submit our contact form, the data you provide (name, email address, phone number if given, and message content) is transmitted to and stored on Webflow's platform (USA) and subsequently forwarded to us by email. This transfer is covered by EU Standard Contractual Clauses as described in Section 6.

We will not share this data with any other third parties unless required to provide our services or by law.

Legal basis
Art. 6(1)(b) GDPR (where it relates to a pre-contractual or contractual enquiry) or Art. 6(1)(f) GDPR (legitimate interest in responding to correspondence).

9. Cookies and Tracking Technologies

Our Website may use cookies and similar technologies. Cookies are small text files stored on your device by your browser.

‍Essential / Technically Necessary Cookies
‍These cookies are required for the Website to function properly (e.g. session management by Webflow). They are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and do not require your consent.

‍Analytics and Optional Cookies
‍If we use optional analytics tools or third-party embeds in the future, we will obtain your prior consent via a cookie consent banner before setting any non-essential cookies (Art. 6(1)(a) GDPR). At present, we do not use third-party analytics services (e.g. Google Analytics) unless separately disclosed in an updated version of this policy.

You can control and delete cookies through your browser settings. Blocking cookies may affect certain Website functionality.

10. External Links and Social Media

Our Website contains links to external social media profiles (e.g. LinkedIn, Instagram). Following these links means you leave our Website. We have no control over the data processing on third-party websites and refer you to their respective privacy policies. No personal data is transmitted to these platforms solely by the presence of links on our Website.

11. International Data Transfers

Webflow, our hosting provider, is based in the United States. Transfer of data to Webflow in the USA is safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission in accordance with Art. 46(2)(c) GDPR.

We do not otherwise transfer your personal data to third countries (outside the EU/EEA) unless appropriate safeguards are in place or you have given explicit consent.

12. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law:

• Contact enquiries: up to 3 years from the date of last contact, unless a contractual relationship is established, in which case statutory retention periods apply (generally 6 or 10 years under German commercial law).
• Newsletter subscriptions: until you unsubscribe; deleted within 30 days of unsubscription.
• Server log files: typically 7 to 14 days; longer if required for security investigations.
• Invoicing and contract data: 10 years in accordance with § 147 AO (German Tax Code).

13. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): Obtain a copy of the personal data we hold about you.
Right to rectification (Art. 16 GDPR): Have inaccurate or incomplete data corrected.
Right to erasure (Art. 17 GDPR): Request deletion of your data ('right to be forgotten') where permitted.
Right to restriction of processing (Art. 18 GDPR): Request that we limit how we use your data.
Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent (Art. 7(3) GDPR): Withdraw any consent given at any time, without affecting the lawfulness of prior processing.
Right to lodge a complaint (Art. 77 GDPR): File a complaint with a supervisory authority (see Section 14).

To exercise any of these rights, please contact us at hi@wavework.cc. We will respond within one calendar month. If requests are complex or numerous, we may extend this by up to two further months and will notify you accordingly.

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority. WaveWork is based in Brandenburg, Germany. The responsible supervisory authority is:

‍Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg

‍Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
Phone: +49 (0)332 03-560
Email: Poststelle@LDA.Brandenburg.de
‍https://www.lda.brandenburg.de

‍You may also contact the supervisory authority of your EU Member State of habitual residence or place of work.

15. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Our Website uses encrypted HTTPS connections (TLS). Access to personal data is restricted to authorised personnel only.

Notwithstanding these measures, no internet transmission is completely secure. If you become aware of any security vulnerability related to our Website, please contact us immediately at hi@wavework.cc.

16. Children's Privacy

Our services are directed exclusively at businesses and adult professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us and we will delete it without delay.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will indicate the date of the latest revision at the top of this document. Where changes are material, we will take reasonable steps to notify you (e.g. by prominent notice on the Website).

We encourage you to review this policy periodically.

17. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our data processing practices, please contact us:

‍WaveWork — Dmitrii Vavilov
‍Email: hi@wavework.cc
Phone: +49 15252 641 861
Address: Käthe-Niederkirchner Str. 1B, 14513 Teltow, Germany

This Privacy Policy was last updated on 20 March 2026.