Privacy Policy

Last updated: 19 June 2026

Controller

The controller responsible for data processing on this website is:

Waya Collective GmbH
Jahnplatz 4
82166 Gräfelfing, Germany
Email: contact@wayacollective.com

Overview

We process personal data only where necessary to provide this website and to respond to enquiries you send us. We do not sell your data. The sections below explain what is processed, why, and on what legal basis.

Hosting and server logs

This site is hosted by Vercel Inc. When you visit, Vercel automatically processes technical data needed to deliver the site securely and reliably — such as your IP address, browser type, the pages requested, and the date and time of access.

Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6 (1)(f) GDPR). Vercel acts as our processor under a data processing agreement.

Contact form

When you submit the contact form, we process the name, email address and message you provide in order to read and respond to your enquiry. The message is delivered using the email service Resend and received in our mailbox on Google Workspace. Your email address is used as the reply-to so we can answer you.

Legal basis: steps taken at your request and our legitimate interest in responding (Art. 6 (1)(b) and (f) GDPR).

Fonts

Fonts are self-hosted and served from this site’s own domain. No font files are requested from third-party servers, so no data is shared with a font provider when you view the site.

Cookies and analytics

This website does not set its own cookies and does not use third-party advertising or analytics/tracking tools. Because no non-essential cookies are used, no cookie consent banner is required.

Recipients / processors

We use the following service providers to operate this site:

• Vercel Inc. — website hosting and delivery
• Resend, Inc. — sending contact-form emails (data processed in Ireland, EU)
• Google (Google Workspace) — receiving and storing contact emails (data processed in Ireland, EU)

Retention

We keep contact enquiries only as long as needed to handle your request and any follow-up, and delete them once they are no longer required — at the latest within 12 months — unless a statutory retention period requires us to keep them longer.

Your rights

Under the GDPR you have the right to access your personal data and to request its rectification, erasure or restriction, the right to data portability, and the right to object to processing based on legitimate interests. To exercise any of these, contact us at contact@wayacollective.com.

Changes to this policy

We may update this policy as the website or our processing changes. The current version is always available on this page.