Privacy Policy

The following privacy policy applies to the online offering at www.wemalo.com. In this context, we collect personal data when you visit our website or use our customer portal.

Controller

4e digital GmbH
Bella-Spanier-Weg 6
20097 Hamburg, Germany
Phone: +49 (0)40 / 30 38 32 5-50
E-Mail: office@4elements-gruppe.de

Hereinafter referred to as “wemalo”, “we” or “us”.

Data Protection Officer

For questions and suggestions regarding data protection, please contact:
E-Mail: datenschutz@4elements-gruppe.de
Data Protection Officer: Dr. Stefanie Wegener
E-Mail: swegener@ra-wegener.de

Processing of Personal Data and Legal Bases

General Information

Personal data means any information relating to an identified or identifiable natural person (e.g. name, address, telephone number, e-mail address).
In principle, you can use our online offering without providing personal data. However, the use of certain services (e.g. contact form, appointment scheduling via Calendly, WhatsApp) may require the provision of personal data. Mandatory fields are usually marked with an *.

Purposes of Processing and Legal Bases

• Provision of the website
  Legal basis: Art. 6(1)(b) GDPR (performance of contract) or Art. 6(1)(f) GDPR (legitimate interest in presenting our company)
• Processing of contact inquiries
  Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance)
• Use of external tools such as WhatsApp or Calendly
  Legal basis: Art. 6(1)(a) GDPR (consent)
• Functionality, security and optimization of the website
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
• Analysis of user behavior and delivery of interest-based advertising (Google Analytics, Google Ads, Remarketing)
  Legal basis: Art. 6(1)(a) GDPR (consent)

Disclosure of Data to Third Parties

Your personal data will only be disclosed if:

• this is necessary for contract performance,
• a legitimate interest of ours or a third party exists,
• or a legal obligation applies.

Service Providers

We use service providers within the scope of commissioned data processing pursuant to Art. 28 GDPR (e.g. IT service providers, hosting providers). These service providers process data exclusively on our instructions.

Hosting

Our website is hosted by dogado GmbH, Dortmund. We have concluded a data processing agreement with this provider.

Data Transfers to Third Countries

Where personal data is transferred to countries outside the EEA, we ensure an adequate level of protection through appropriate safeguards (e.g. EU Standard Contractual Clauses), unless you have expressly consented to the transfer.

Storage Period

We store your personal data only for as long as necessary for the respective purposes or where statutory retention obligations apply. After expiry of these periods, the data will be deleted or blocked.

Log Files

When accessing our website, technical data (e.g. IP address, referrer URL, browser type, operating system, time of access) is automatically collected and stored in log files.
This data is used exclusively for security and diagnostic purposes and is deleted after 7–10 days, unless longer storage is required to investigate security incidents.

Use of External Services

WhatsApp Business

We offer contact via WhatsApp Business. When using it, personal data and metadata (communication time, device information) are transmitted to WhatsApp Ireland Limited and possibly to WhatsApp LLC (USA).
Further information: WhatsApp Privacy Policy.

Calendly

We use Calendly for appointment booking. Personal data is transmitted to Calendly LLC (USA).
Further information: Calendly Privacy Policy.

Google Analytics (via Site Kit by Google)

Our website uses Google Analytics (Google LLC). Pseudonymized usage profiles are created. IP addresses are stored in an anonymized form. Data may be transferred to the USA.
Further information: Google Privacy Policy.
Opt-out: You can prevent data collection by withdrawing consent via our cookie banner or by installing the browser plugin.

Google Ads (Conversion Tracking & Remarketing)

We use Google Ads, an online advertising service of Google Ireland Limited, Dublin.

• Conversion Tracking: Cookies analyze whether a user reached our website via a Google ad.
• Remarketing: Enables us to show targeted ads to users of our website within the Google network at a later stage.

Legal basis: Your consent (Art. 6(1)(a) GDPR).
Personal data may be transferred to servers of Google LLC in the USA. The EU Commission’s Standard Contractual Clauses apply.
Further information: Google Privacy Policy, Google Ads Settings.

Google Maps

We use Google Maps on our “About Us” page to display locations. Provider is Google Ireland Limited, Dublin.
When accessing the page with the embedded map, personal data (e.g. IP address, location data) is transmitted to Google.
Legal basis: Your consent (Art. 6(1)(a) GDPR).
Further information: Google Maps Terms of Service, Google Privacy Policy.

External Media (e.g. YouTube, Vimeo)

We may embed external content (e.g. videos). When loading this content, personal data (e.g. IP address) is transmitted to the respective providers.
Legal basis: Your consent.

Plugins and Tools

Borlabs Cookie

We use Borlabs Cookie, a tool for obtaining and managing consents. Provider is Borlabs GmbH, Hamburg.
Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
Further information: Borlabs Privacy.

Contact Form 7

We use Contact Form 7, a plugin for creating contact forms. Data entered into forms (e.g. name, e-mail address, message) is processed to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Flamingo

We use Flamingo to store and manage requests received via Contact Form 7. The data stored there is used exclusively for processing your inquiry and is stored on our server.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Updraft Plus

We use Updraft Plus to create backups. These backups may contain personal data. Depending on the selected storage location (e.g. Dropbox, Google Drive, Amazon S3, OneDrive), data is stored on the servers of the respective providers.
Legal basis: Art. 6(1)(f) GDPR.

WP Mail SMTP

We use WP Mail SMTP to ensure reliable email delivery (e.g. contact forms, system messages). Emails are sent via the mail server we use: Google Workspace.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Cookies and Consent Management

Our website uses cookies and similar technologies. These are categorized as follows:

• Essential cookies (technically necessary, no consent required)
• Statistics cookies (analysis of user behavior, only with consent)
• External media cookies (e.g. Google Maps, YouTube, only with consent)

We use Borlabs Cookie for this purpose. It stores your consents, which you may withdraw at any time via the consent banner.

Data Subject Rights

According to the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany