Privacy policy

The short version

• We do not use tracking, analytics or advertising cookies. That is why there is no cookie banner here.
• Only when you log in to your account do we set a technically necessary session cookie.
• Fonts are served from our own servers. Visiting this website does not connect you to Google or other third parties.
• Our platform runs on our own servers in Germany.

1. Controller

Managing director: Daniel Ehrhardt
Email: hallo@sitewunder.com
Phone: +49 7904 5203106

2. Hosting and server log files

We run this website and our platform (customer account, preview pages, interfaces) on our own servers at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Hetzner acts as our processor under a contract according to Art. 28 GDPR.

When you open a page, the server processes technically necessary data: IP address, date and time, requested address, amount of data transferred, referrer and browser identifier. This keeps the service secure and stable and helps us fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. We delete log data as soon as it is no longer needed for this purpose.

3. Cookies

Without logging in, this website sets no cookies. When you log in to your account, we store a session cookie with a random identifier so that you stay logged in. It becomes invalid when you log out or when the session expires. Legal basis: § 25 (2) no. 2 TDDDG and Art. 6 (1) (b) GDPR.

4. Requesting a free preview

When you request a preview, we process the details from the form: business name, town, email address and, if provided, website, industry, your name and your phone number. We use them to build your preview, send it to you and clarify questions. To do so, we also look at publicly available information about your business, such as your current website and your Google listing.

The legal basis is Art. 6 (1) (b) GDPR (steps taken at your request before entering into a contract). Without an email address we cannot send you the preview. If you do not take the preview over, we delete it and your request data as soon as they are no longer needed.

5. Customer account and contract

For your customer account and our services we process your contact details, the details for your imprint, the content of your website (texts, images, opening hours), your messages and change requests, and billing data. You log in through a link we send you by email. The legal basis is Art. 6 (1) (b) GDPR.

After the contract ends, we keep your website data for another 90 days so that you can get it back if needed, and delete it afterwards. Invoices and accounting records are kept as long as commercial and tax law requires (usually eight to ten years, Art. 6 (1) (c) GDPR).

6. Change requests by email and receiving email

We receive emails to addresses on our domain sitewunder.com, for example aenderung@sitewunder.com, through the Email Routing service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which forwards them to our platform. Sender, recipient, content and attachments of the email are processed. The legal basis is Art. 6 (1) (b) GDPR, for other enquiries Art. 6 (1) (f) GDPR.

7. Sending email

We send emails (for example login links, preview links and confirmations of changes) through Amazon Simple Email Service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, using servers in the Frankfurt region (eu-central-1). If this service fails, we send through Cloudflare, Inc. as a fallback. The legal basis is Art. 6 (1) (b) and (f) GDPR.

8. Payments

Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe processes your payment details (for example card or bank details), name, email address and billing address. We do not store payment details ourselves. For some processing, such as fraud prevention, Stripe is a controller in its own right. See Stripe’s privacy policy. The legal basis is Art. 6 (1) (b) GDPR.

9. Delivery of previews and customer websites

Previews and our customers’ websites are delivered through the network of Cloudflare, Inc. When you open a preview, Cloudflare processes technically necessary connection data such as your IP address. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is fast and secure delivery.

Messages that visitors send through contact forms on our customers’ websites are processed by us on behalf of the respective customer. The customer is the controller in that case; see their privacy policy.

10. Creating content

To write texts and carry out change requests, we also use software service providers that process text automatically. They only receive the content needed for the task at hand and act as processors under Art. 28 GDPR.

11. Transfers to third countries

Cloudflare, Inc. and the parent companies of Amazon Web Services and Stripe are based in the USA. We base transfers there on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which these providers are certified, and additionally on standard contractual clauses (Art. 46 (2) (c) GDPR).

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data based on legitimate interests, you can object (Art. 21). Just email us at hallo@sitewunder.com.

You can also lodge a complaint with a data protection authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

We do not use automated decision-making within the meaning of Art. 22 GDPR.