Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is: Wrdiland UG (haftungsbeschränkt), Berliner Str. 35, 03046 Cottbus, Germany, Email: info@hwdirekt.de. Represented by its managing director.

2. General

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data on the platform hwdirekt.de (hereinafter: Platform). Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection regulations.

3. Data collected

Depending on how you use the platform, we process the following personal data:

• Email address and password hash upon registration
• Business name, address, and phone number (when registering a business listing)
• Uploaded images and descriptive texts
• IP address and technical usage data (server logs)
• Payment data (processed exclusively via Stripe, not stored with us)
• Location data (only where voluntarily provided for search or derived from a listing)

4. Purpose of processing

The data collected is processed for the following purposes:

• Operating and providing the platform
• Authentication and account management
• Creating and managing business listings
• Processing paid subscriptions via Stripe
• Abuse prevention and platform security
• Communication with users (e.g. confirmation emails, support)

5. Legal bases

We process personal data on the following legal bases: Art. 6(1)(a) GDPR (consent, e.g. for optional features), Art. 6(1)(b) GDPR (contract performance, e.g. account management and subscriptions), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interests, e.g. platform security and abuse prevention).

6. Third-party processors

We engage the following service providers acting as data processors within the meaning of Art. 28 GDPR: Supabase, Inc. (database hosting and authentication; data stored on EU servers), Stripe, Inc. (payment processing; certified to PCI DSS Level 1; Stripe processes payment data under its own responsibility in accordance with its privacy policy), and Vercel, Inc. (web hosting and content delivery). Where data is transferred to countries outside the European Economic Area, this is carried out on the basis of appropriate safeguards pursuant to Art. 46 GDPR.

7. Cookies & local storage

The platform uses only technically necessary cookies and session tokens for authentication and session management. These cookies are required for the operation of the platform and cannot be disabled without impairing its functionality. Tracking cookies or cookies for advertising purposes are not set without your express consent. Any consent given may be withdrawn at any time with effect for the future.

8. Server logs

Each access to the platform causes connection data to be automatically stored in server log files, including IP address, date and time of access, URL accessed, and HTTP status code. Processing is carried out on the basis of Art. 6(1)(f) GDPR to ensure the operation of the platform and to defend against attacks. Server logs are automatically deleted after no more than 30 days.

9. Your rights

As a data subject, you have the following rights against the controller:

• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Complaint to the competent supervisory authority (Art. 77 GDPR)

10. Data retention & deletion

Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations. Following cancellation or deletion of your account, your data will be erased unless statutory retention periods apply. Deletion of your account may be requested at any time by email to info@hwdirekt.de.

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in legal requirements or the services offered. The current version is always available at hwdirekt.de/datenschutz. Registered users will be notified by email of any material changes.

12. Contact & right to complain

For data protection enquiries, please contact: info@hwdirekt.de. You have the right to lodge a complaint with the competent data protection supervisory authority. The responsible authority for the state of Brandenburg is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow.