Privacy Notice for Wedding Duel

This Privacy Notice explains which personal data we process when you use "Wedding Duel" (the "Service"), why we do so, what rights you have and how you can exercise them. Privacy is very important to Jaysquared Till Henrik Jonathan Hillebrand ("Jaysquared", "we"). We process personal data only where there is a legal basis; where there is none, we ask for your consent. Processing always complies with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act and the German Telecommunications Digital Services Data Protection Act (TDDDG).

We run the website, the server logic and the database for the waitlist on Cloudflare (Cloudflare Workers and Cloudflare D1). When you open a page or submit the form, Cloudflare processes your IP address, the time, the requested page, the referring page and technical information about your browser in order to deliver the page, process the form and protect the website against abuse. Cloudflare processes this data on our behalf and keeps server logs only for a limited time. Legal basis: Art. 6(1)(f) GDPR (secure and reliable operation of the website). Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition.

After you sign up, we send you an email with a confirmation link. Your entry only becomes active once you click this link, so nobody can put someone else's email address on the waitlist. We store the times of your sign-up and confirmation as proof of your consent (Art. 7(1) GDPR in conjunction with Art. 6(1)(c) GDPR).

We send the confirmation emails and the launch notice via Resend. For this, Resend processes your email address and the content of the email on our behalf. Data is processed in the USA. Resend, Inc. is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition. The legal basis is the same as for the waitlist (Art. 6(1)(a) GDPR).

To protect the waitlist form against spam and automated sign-ups, we use Cloudflare Turnstile. Turnstile checks whether the form is being submitted by a human. For this, Cloudflare processes your IP address and technical information about your browser. Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in protecting the form against spam and abuse. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition.

We use Cloudflare Web Analytics to count visits to the website. It works without cookies, does not track you across websites and does not create personal profiles; we only see aggregated page views. Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in understanding how the website is used.

The website offers a button to share Wedding Duel via WhatsApp. It is a simple link: no data is sent to WhatsApp until you click it. When you click it, WhatsApp (Meta) opens with a prefilled message, and from then on WhatsApp's privacy policy applies.

We do not use cookies. Fonts are delivered from our own server. The only exception: if you hide the language suggestion, this choice is stored in your browser's local storage so that the suggestion does not appear again. This is technically necessary (Section 25(2) no. 2 TDDDG). You can delete this entry at any time in your browser settings.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future; the lawfulness of processing before withdrawal is unaffected.

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21 GDPR). We then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, https://datenschutz-hamburg.de. You may also contact the authority where you live.

Jaysquared will process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the EU legislator or other legislators in laws or regulations to which the controller is subject to. If the storage purpose is not applicable, or if a storage period prescribed by the EU legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

As the controller, Jaysquared has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this Service. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. Your data might be processed on servers worldwide. In case, your data is transferred outside of the EU, the respective data processor will apply Standard Contractual Clauses approved by the European Commission.

If you contact us by email, we process your email address and the content of your message to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the correspondence once it is no longer needed, at the latest after 12 months, unless statutory retention obligations apply.

If Jaysquared is involved in a merger, acquisition or sale of assets, your data may be transferred. We will inform you, where required by law, before your data is transferred and becomes subject to a different privacy notice.

For handling mail sent to us we use the services of IMPRESSUM-PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg. This provider offers a secure and reliable postal address for our project (imprint, privacy notice and other areas as applicable). This constitutes our legitimate interest under Art. 6(1)(f) GDPR. We have concluded a data processing agreement with Impressum-Privatschutz.
https://impressum-privatschutz.de/datenschutzerklaerung/

Jaysquared may update this Privacy Policy from time to time. Jaysquared will notify you of any changes by posting the new Privacy Policy at this location. If the changes are material and require new consent, you will be asked for your consent at your next use of the Service.