Privacy Policy
Last updated: 19 June 2026
Controller
The controller responsible for data processing on this website is:
Waya Collective GmbH
Jahnplatz 4
82166 Gräfelfing, Germany
Email: contact@wayacollective.com
Overview
We process personal data only where necessary to provide this website and to respond to enquiries you send us. We do not sell your data. The sections below explain what is processed, why, and on what legal basis.
Hosting and server logs
This site is hosted by Vercel Inc. When you visit, Vercel automatically processes technical data needed to deliver the site securely and reliably — such as your IP address, browser type, the pages requested, and the date and time of access.
Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6 (1)(f) GDPR). Vercel acts as our processor under a data processing agreement.
Contact form
When you submit the contact form, we process the name, email address and message you provide in order to read and respond to your enquiry. The message is delivered using the email service Resend and received in our mailbox on Google Workspace. Your email address is used as the reply-to so we can answer you.
Legal basis: steps taken at your request and our legitimate interest in responding (Art. 6 (1)(b) and (f) GDPR).
Fonts
Fonts are self-hosted and served from this site’s own domain. No font files are requested from third-party servers, so no data is shared with a font provider when you view the site.
Cookies and analytics
This website does not set its own cookies and does not use third-party advertising or analytics/tracking tools. Because no non-essential cookies are used, no cookie consent banner is required.
Recipients / processors
We use the following service providers to operate this site:
• Vercel Inc. — website hosting and delivery
• Resend, Inc. — sending contact-form emails (data processed in Ireland, EU)
• Google (Google Workspace) — receiving and storing contact emails (data processed in Ireland, EU)
Retention
We keep contact enquiries only as long as needed to handle your request and any follow-up, and delete them once they are no longer required — at the latest within 12 months — unless a statutory retention period requires us to keep them longer.
Your rights
Under the GDPR you have the right to access your personal data and to request its rectification, erasure or restriction, the right to data portability, and the right to object to processing based on legitimate interests. To exercise any of these, contact us at contact@wayacollective.com.
Changes to this policy
We may update this policy as the website or our processing changes. The current version is always available on this page.