WONDA

Privacy Policy of WONDA c/o We Make Them Wonder GmbH  

​

I. General Information

This privacy policy applies to all of our website

​

1. Responsible Body

Below we explain to you which personal data is collected and processed by us when using our services and offers.

​

We Make Them Wonder GmbH
Tegernseer Landstraße 62
81541 Munich

eMail: hello@wemakethemwonder.com
Phone: +49 089 411 434 51

​

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.

​

2. Legal Basis

As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.

We collect and process personal data based on the following statutory regulations:

• Consent according to Article 6 paragraph 1  (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.

• Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.

• Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.

• Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.

 

3. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

• Right of access by the data subject to Art. 15 GDPR

• Right to rectification according to Art. 16 GDPR

• Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR

• Right to restriction of processing according to Art. 18 GDPR

• Right to data portability according to Art. 20 GDPR

• Right to object according to Art. 21 GDPR

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.

​

4. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

es.

​

​

II. Actual data processing

 

1. Visiting the Website

(a) Scope of Data Collection

When visiting our website, the following data is collected and stored by our web server:

• Information about the browser type and version used

• The operating system of the user

• The IP address of the user

• Date and time of access

The data is stored in the log files of of our hosting provider. This data is not stored or processed together with other personal data of the user. Our hosting provider is Wix.com Ltd. based in Israel.

 

(b) Legal basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.

The legal basis for the transfer of data to Wix.com Ltd. is Article 28 para. 3 and Article 45 para. 3 GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

 

(c) Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

​

(d) Duration of storage

The logfiles will be deleted after sixty days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.

​

(e) Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.

​

2. Embedded Vimeo videos

(a) Scope of data collection

Our website uses Vimeo, a video streaming platform operated bei Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA, in video content on our website. By doing so the IP address of each visitor is transferred to Vimeo in order to provide the video content. When you initiate the video stream further data will be collected. Vimeo uses Cookies, small text files containing information, in order to collect information about your visit of our website. If you are logged into Vimeo’s services when using out website, Vimeo is able to identify you and allocate your visit to our website to your Vimeo user account. According to Vimeo they collect the following data using cookies:

• IP address

• browsertype

• language

• access time

• other cookies‘ content, including marketing IDs

• visited websites

Vimeo uses the data to deliver the requested videos, to produce statistical data and to offer each user individual content based on their preferences. Further information is provided on Vimeo’s website: https://vimeo.com/privacy.

​

(b) Legal Basis

Legal basis for the data transfer to Vimeo as an independent controller is Art. 6 para- 1 (f) GDPR.

The legitimate interest is the customer orientated design of the website and the opportunity to present videos without leaving the website.

​

(c) Purpose of data processing

The purpose is to enable the visitors to view videos directly on our website.

​

(d) Duration of storage

We do not store any data but only integrate a script that transfers information to Vimeo directly. For information on the duration of storage by Vimeo please visit their privacy policy: (https://vimeo.com/privacy).

​

(e) Objection and removal possibility

We can not offer any objection method for collecting the IP address by Vimeo due to technical restrictions. Should you wish to view the video without Vimeo collecting data from Cookies, you can prevent your browser to store cookies by applying the respecting configuration to your browser. Also you can log out of Vimeo services in order to prevent Vimeo to connect information with your Vimeo account.

​

3. Google Analytics

(a) Scope of data processing

The websites use Google Analytics, a web analytics service provided by Google Inc. ("Google"). This software collects information about how you use the website and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website, the frequency of the page request. This data is collected together with your IP address. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.

Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.

​

(b) Legal basis

The legal basis for the processing of data when using the website is Article 6 para. 1 (f) GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is a customer-oriented design of the website, which meets the requirements of the users and takes their user preferences into account.

The legal basis for the transfer of data to Google are Article 28 para. 3, and Article 45 para. 3 GDPR. The service provider is certified under the Privacy Shield Framework and is therefore subject to the EU Commission's decision on adequacy (Implementing Decision 2016/1250), this means that the data protection level of the service provider is recognized as being equivalent to the GDPR, although it is based in the USA.

​

(c) Purpose of data processing

The purpose of the processing is to analyze this website and the usage behavior of its visitors.

 

(d) Duration of storage

The data is already anonymized directly after the survey. Personal data is therefore collected only in the context of the transfer and not permanently stored.

 

 (e) Objection and removal possibility

You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.

You can prevent the collection of the data generated by the cookie and your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install:

[Http://tools.google.com/dlpage/gaoptout?hl=de].

​

​