Privacy statement
Responsible for data processing on this website:
WeDeSo - Web & Design Solutions
Sole proprietorship, represented by the owner Sarah Böhm
Address: Bergstraße 8a
84163 Marklkofen
Phone: +49 (0) 174 2548227
Email: info@wedeso.de
Website: www.wedeso.de
General Information
Protecting your personal data is of particular importance to WeDeSo. Your personal data is treated confidentially and in accordance with the applicable data protection laws as well as this Privacy Policy.
This Privacy Policy explains which data is collected, how it is used, and what rights you have regarding your data. Legal jargon and unnecessary references to statutory provisions have deliberately been omitted in order to clearly explain to all readers what happens to their data and why it is processed.
SSL/TLS Encryption
This website uses SSL or TLS encryption to protect transmitted data against unauthorized access. You can recognize an encrypted connection by the "https://" displayed in your browser's address bar.
1. Collection and Storage of Personal Data as well as the Nature and Purpose of Its Processing
Visiting the Website
Whenever you access this website, the web server automatically collects information transmitted by your browser. This information is stored in so-called server log files. The following data is collected:
- Anonymized IP address of the requesting device
- Date and time of access
- Name and URL of the requested file
- Website from which access originated (referrer URL)
- Browser used and, if applicable, your device's operating system
- Name of your internet service provider
Purpose:
The collection of this data is technically necessary to provide the website and ensure system security. It is also used for error analysis and to optimize the website. This data is not merged with other data sources nor evaluated for marketing purposes.
IP addresses are stored by the hosting provider Mittwald only in anonymized form. The final digits of the IP address are removed so that it can no longer be traced back to an individual. Log files are stored for a maximum of 60 days and are then automatically deleted unless longer retention is required for evidentiary purposes. In such cases, deletion takes place after the matter has been conclusively resolved. (Source: Mittwald)
Legal basis for data processing: Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free presentation and optimization of the website).
Use of the Contact Form
If you have any questions, you may contact us using the contact form provided on the website. The following personal data is collected:
- Salutation (optional)
- First and last name
- Email address
- Inquiry (message)
Purpose:
Providing a valid email address, your name, and your inquiry is necessary so that we can respond to your request. Additional information may be provided voluntarily. The data submitted through the contact form is stored only as long as necessary to process your inquiry. Once your request has been fully answered, the data will be deleted no later than 6 months, unless statutory retention obligations apply or further storage is necessary for the establishment, exercise, or defense of legal claims.
Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures).
Email Communication (Direct Contact)
If you contact WeDeSo directly by email, the data you provide (e.g., your name, email address, and the content of your message) will be processed.
Purpose: Processing your inquiry.
Legal basis: Art. 6 (1) lit. b GDPR.
Retention period: In accordance with statutory retention periods or until your inquiry has been fully processed.
2. Disclosure of Data
Your data is disclosed to the hosting provider (see Section 5) within the framework of a data processing agreement pursuant to Art. 28 GDPR.
Your personal data will not be transferred to third parties for purposes other than those listed below.
Personal data will only be disclosed to third parties if:
- you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
- the disclosure is necessary pursuant to Art. 6 (1) sentence 1 lit. f GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
- there is a legal obligation for disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, or
- disclosure is legally permissible and necessary pursuant to Art. 6 (1) sentence 1 lit. b GDPR for the performance of contractual relationships with you.
3. Cookies
The website uses Wacon's cookie consent tool to manage your consent regarding the use of various cookies. No data is transferred to third parties. The following data is processed:
- Acceptance or rejection of cookies: The tool stores which cookie categories the user has accepted or rejected.
- Date and time of the selection: Every decision is stored with a timestamp.
- Anonymous user ID: A randomly generated ID is used to assign the settings to a user without storing personal data.
Technically Necessary Cookies:
- wacon_cookie_consent – Stores the user's cookie settings (retention period: 1 year).
- PHPSESSID or comparable session cookies – Required for the technical operation of the website and deleted when the browser session ends.
- csrf_token (if used) – Ensures security and prevents Cross-Site Request Forgery attacks.
- Mittwald technical cookies – Required for server performance and security; they do not contain any personal data.
The technically necessary cookies listed above are essential for the operation of the website and cannot be disabled. No tracking or marketing cookies are used.
Legal basis: The legal basis for processing is Art. 6 (1) lit. c GDPR (compliance with legal obligations).
4. Google Search Console
WeDeSo uses Google Search Console, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Search Console only provides anonymized technical data. Google itself does not process any personal data on behalf of this website.
Purpose
Google Search Console is used to monitor and analyze the technical performance of our website in Google Search results. Only technical data related to the crawling and indexing of the website is collected.
No personal data of website visitors is collected, stored, or processed. Furthermore, Google Search Console does not place any cookies on users' devices. This service is used on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to ensure and improve the functionality and visibility of our website in Google Search.
For more information about Google's data processing practices, please refer to Google's Privacy Policy: https://policies.google.com/privacy.
5. Website Hosting
This website is hosted by:
Mittwald CM Service GmbH & Co. KG,
Königsberger Straße 4-6,
32339 Espelkamp,
Germany
All data collected through the use of this website and the forms provided is processed on Mittwald's servers.
Purpose & Legal Basis
Processing is carried out for the purpose of providing and securing the website (Art. 6 (1) lit. f GDPR). Our legitimate interest lies in the secure, efficient, and technically reliable operation of the website.
Hosting Agreement and Data Processing Agreement
A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with Mittwald, ensuring that personal data is processed exclusively in accordance with the applicable data protection regulations.
Location of Data Processing
Data is processed exclusively on servers located in Germany. Mittwald is obligated to comply with the provisions of the GDPR. The server locations are certified according to ISO/IEC 27001.
Further Information
More information about data processing by Mittwald can be found in Mittwald's Privacy Policy at:
https://www.mittwald.de/datenschutz
6. Social Media Links
This website contains links to WeDeSo's social media profiles on Facebook, Instagram, Google Business, and WhatsApp. These links are simple references to the external websites of the respective providers. If you click on one of these links, you will leave this website and your data may be processed by the respective provider.
When visiting the social media pages (Facebook, Instagram, WhatsApp), personal data may be transferred by Meta or WhatsApp to the United States. This may involve risks to users' rights (e.g., access by U.S. authorities).
Please note that WeDeSo has no influence over the data processing carried out by these third-party providers. Information on how your data is processed by the respective services can be found in their privacy policies:
- Meta Platforms Ireland Limited (Facebook & Instagram)
Facebook Privacy Policy: https://www.facebook.com/privacy/policy
Instagram Privacy Policy: https://privacycenter.instagram.com/policy - Google Ireland Limited (Google Business)
Google Privacy Policy: https://policies.google.com/privacy - WhatsApp Ireland Limited
WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea
Please review the privacy policies of these providers to understand which data is collected and processed when using their services.
Joint Controllership (Facebook & Instagram)
For our Facebook and Instagram pages, joint controllership pursuant to Art. 26 GDPR exists between:
- WeDeSo – Web & Design Solutions, and
- Meta Platforms Ireland Limited
Meta provides the corresponding Joint Controller Addendum here: https://www.facebook.com/legal/terms/page_controller_addendum
WeDeSo receives only anonymized statistical data ("Insights") from Meta. The primary processing of personal data is carried out by Meta in accordance with its privacy policy.
7. External Links
This website contains links to external third-party websites. Please note that we cannot accept any responsibility for their content or for the way they handle your personal data. Please read the respective providers' privacy policies before using their services.
8. Data Subject Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data processed through this website:
Right of Access (Art. 15 GDPR):
You have the right to request information about the personal data processed concerning you. This includes information about the purposes of processing, the categories of personal data, the recipients (or categories of recipients) to whom your data has been or will be disclosed, the planned retention period, and your additional rights as a data subject.
Right to Rectification (Art. 16 GDPR):
You have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure (Art. 17 GDPR):
You have the right to request the deletion of your personal data unless a legal obligation or a legitimate interest prevents its deletion—for example, for exercising the right to freedom of expression and information, complying with legal obligations, or establishing, exercising, or defending legal claims.
Right to Restriction of Processing (Art. 18 GDPR):
You have the right to request the restriction of the processing of your personal data if:
- you contest the accuracy of the data,
- the processing is unlawful, but you do not wish the data to be deleted,
- the website no longer requires the data, but you need it for the establishment, exercise, or defense of legal claims,
- you have objected to the processing (Art. 21 GDPR).
Right to Data Portability (Art. 20 GDPR):
You have the right to receive the personal data you have provided to the website in a structured, commonly used, and machine-readable format or—where technically feasible—to request that it be transmitted to another controller.
Right to Object (Art. 21 GDPR):
You may withdraw any consent previously given for data processing at any time. This applies to all processing based on a "legitimate interest." Withdrawal only affects future processing; any processing carried out before the withdrawal remains lawful. This right does not apply where mandatory legal provisions require the processing.
Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR):
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. You may contact the authority responsible for your place of residence, your place of work, or the registered office of the website operator.
9. Currency and Amendments to this Privacy Policy
WeDeSo reserves the right to amend this Privacy Policy whenever necessary, for example due to legal changes or the introduction of new website features. The current version is always available on this page.
This Privacy Policy is currently valid and was last updated in 07/2026.