Privacy Policy for Wynd

1. Introduction

We appreciate your interest in Wynd, our platform for live wind data and information about kite, surf, and wing spots. The protection of your personal data is important to us. The processing of personal data always takes place in accordance with the General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations. This privacy policy informs you about the nature, scope, and purpose of the personal data we collect, use, and process, as well as your rights as a data subject.

2. Definitions

This privacy policy uses the terms of the GDPR, including:

• Personal data: All information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, use, disclosure, dissemination, or deletion.
• Data subject: Any identified or identifiable natural person whose personal data is processed.
• Controller: The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
• Processor: A natural or legal person who processes personal data on behalf of the controller.

3. Name and Contact Details of the Controller

wynd.live
Idearockers GmbH
Kanalstraße 62
23552 Lübeck
Germany
E-Mail: [email protected]
+49 038821890662
http://www.wynd.live

4. Collection and Processing of Personal Data

4.1 When Visiting Our Website/App

When visiting our website or using our app, we automatically collect and process:

• IP address (anonymized)
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer and the name of your access provider

This data is collected for system security purposes, to optimize our services, and for statistical purposes. It is not shared with third parties unless there is a legal obligation to do so.

4.2 Registration and User Account

For registration and use of a user account, we collect the following personal data:

• Required information: Email address, password
• Optional information: First name, last name, mobile number (for WhatsApp live updates)

Purpose: Creation and management of a user account, provision of our services, personalization of the user experience, communication with users.
Legal basis:

• For required information: Art. 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures)
• For optional information: Art. 6(1)(a) GDPR (consent)

Storage duration: The data is stored for the duration of the account use. After account deletion, the data will be completely deleted within 30 days, unless there are legal retention obligations.

4.3 Favorites and User Preferences

We store your settings and preferences, such as favorited wind stations, in your user profile.
Purpose: Personalization of the user experience, provision of tailored information.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Storage duration: For the duration of the account use; after account deletion, this data will be deleted within 14 days.

4.4 Processing of Wind Station Data

We process data on wind stations, wind speeds and directions, and spot information. This data is generally not personal, but may be linked to your user account if you create favorites or access specific spots.
Purpose: Provision of current wind information, display on maps, enabling personalized notifications.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) for registered users; Art. 6(1)(f) GDPR (legitimate interest) for non-registered users.
Storage duration: Wind station data is continuously updated. Historical data is stored anonymized for statistical purposes.

4.5 Geolocation Data

Our website/app offers a geolocation function to display wind spots near you. Location data is only collected with your explicit consent and is not permanently stored.
Purpose: Display of wind spots and wind stations near you.
Legal basis: Art. 6(1)(a) GDPR (consent).
Storage duration: Location data is only processed during active use and is not permanently stored.

4.6 Newsletter and WhatsApp Updates

When registering for our newsletter or WhatsApp live updates, we collect:

• Email address or mobile number
• Time of registration
• IP address at registration (for verification purposes)

Purpose: Sending information about Wynd, wind reports, and relevant topics.
Legal basis: Art. 6(1)(a) GDPR (consent).
Storage duration: Until withdrawal of consent or unsubscription from the newsletter or WhatsApp service.

You can unsubscribe from the newsletter or WhatsApp updates at any time. A corresponding link is included in each newsletter or an unsubscribe option in the WhatsApp messages.

Note on WhatsApp usage: When using WhatsApp for live updates, your data (especially your mobile number) is also processed by WhatsApp Ireland Limited or Meta Platforms Ireland Limited as an independent controller. We have no influence on their data processing practices. For more information, please refer to WhatsApp's privacy policy.

5. App Usage and App Stores

When you download and install our app from the Apple App Store or Google Play Store, personal data is also processed by Apple Inc. or Google LLC as independent controllers. This includes, in particular, information about your device, your user account in the respective app store, and your app downloads.
Purpose: Provision, download, and installation of the app.
Legal basis: The app store operators are responsible for their own processing. For processing within our app, this privacy policy applies.

More information: You can find the privacy policies of the app store operators at:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve the user experience and provide certain functions.

6.1 Types of Cookies

• Technically necessary cookies: Required for the operation and basic functions of the website (e.g., login status, language settings).
• Functional cookies: Enable the storage of user settings and preferences.
• Analytics cookies: Collect anonymized data about usage behavior to improve our services.

6.2 Specific Cookies We Use

6.3 Cookie Management

You can adjust your browser settings to reject cookies or to be informed about the setting of cookies. Disabling all cookies may result in some functions of our website no longer being fully usable.

7. Embedded External Content

7.1 Live Webcams (YouTube, Twitch, and Others)

On our platform, we embed live webcams and videos from external providers such as YouTube, Twitch, and other services to provide you with current impressions of kite, surf, and wing spots.

When using these embedded contents, data is transmitted to the respective providers. This only happens if you have consented to the use of cookies for external media or actively click on the content.

When using these services, the following data may be transmitted:

• IP address
• Device information
• Browser type and version
• Visited pages and time spent
• In some cases, cookies for user identification

Purpose: Display of live webcams and current impressions of spots, improvement of user experience.
Legal basis: Art. 6(1)(a) GDPR (your consent).
Storage duration: The data is stored and processed by the external providers according to their own privacy policies.

7.2 Privacy Notices of External Providers

The embedded content is provided by the following providers, whose privacy policies you can view here:

• YouTube (Google LLC): https://policies.google.com/privacyhttps://policies.google.com/privacy
• Twitch (Twitch Interactive, Inc.): https://www.twitch.tv/p/en/legal/privacy-notice/https://www.twitch.tv/p/en/legal/privacy-notice/
• Other webcam providers depending on location

7.3 Deactivation of External Content

You can deactivate the display of external content at any time via our cookie settings in the 'External Media' category. Without your consent, no data will be transmitted to the external providers, and a placeholder will be displayed instead, informing you about how it works.

8. Analysis Tools

8.1 PostHog Analytics

We use PostHog, a privacy-friendly analytics platform, to better understand how visitors use our website and to improve the user experience.

Service provider: PostHog Inc., USA (https://posthog.com). Data is hosted in the EU region (eu.i.posthog.com) in accordance with GDPR requirements.

Data collected: Page views, navigation behavior, click events (autocapture), device and browser information (anonymized).

Purpose: Understanding user behavior, improving user experience, optimizing website functionality.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our services while respecting user privacy).
Storage: PostHog uses cookies and local storage for anonymous user identification. The data is stored in the EU and is not shared with third parties.

Opt-out: PostHog respects the Do-Not-Track (DNT) browser setting. You can also disable PostHog by blocking cookies in your browser settings.

For more information, see PostHog's privacy policy: https://posthog.com/privacyhttps://posthog.com/privacy

9. Your Rights as a Data Subject

As a data subject, you have the following rights:

• Right to information (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, to receive information about this data.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your data if certain reasons exist, e.g., if the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your data, e.g., if you contest the accuracy of the data.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your data that is based on Art. 6(1)(e) or (f) GDPR.
• Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent given at any time with effect for the future.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

To exercise your rights, please contact us using the contact details provided above. We will process your request promptly, at the latest within one month.

10. Data Security

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk for your personal data. These include, among others:

• Encryption of data transmission using SSL/TLS
• Regular security updates of our systems
• Access restrictions and access controls
• Regular backups to prevent data loss
• Internal data protection policies and training for employees

Despite these measures, absolute security cannot be guaranteed. We therefore recommend that you also pay attention to the security of your data, for example by using secure passwords and regularly updating your devices and software.

11. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services or features. Your subsequent visit will be subject to the new privacy policy.

We will inform you about significant changes to this privacy policy, e.g., through a notice on our website or by email.