Privacy policy

Controller

Rami Almofleh, Neckarstr. 14, 41540 Dormagen, Deutschland.

Email: info@wichtellab.de

What data we process

We only process the data that is needed for Secret Santa:

• Organizer: name and email address plus details of the round (name, budget, deadlines).
• Participants: name and email address as entered by the organizer.
• Wishes: wishlist, links, notes, sizes, allergies and “please not” hints that participants enter voluntarily.
• The matches, i.e. who gives to whom. They are only visible to the person who gives. After the draw this person sees the name, email address and wishes of the person they give to, so they can get in touch with questions.
• Technical data: IP address and time of the request in server logs for security and troubleshooting.

Purpose and legal basis

We process the data to run the Secret Santa round, i.e. to send invitations and reminders, show wishes and draw names (Art. 6(1)(b) GDPR). Server logs and abuse protection serve our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Anyone who receives an invitation that is not meant for them can remove themselves via the “This is not me” link. The address is then blocked for further invitations. If someone declines, the organizer sees this and can invite the person again or remove them. The person’s wishes are deleted when they decline.

Anonymous usage figures

To see whether Wichtellab is used and working, we only count numbers per day: how many rounds were created and drawn, how many people took part and how many emails were sent. These counters contain no names, email addresses, round titles or wishes and cannot be linked to a person. We do not track visitor numbers of the website. The operator overview shows rounds only with an anonymous reference.

Emails from us

We send emails for confirmation, invitation, reminders and the draw. On request of the organizer we resend the links to their rounds. After the draw the organizer receives a single closing message with the state of the round and a voluntary hint about donating. We send no further promotional emails.

Recipients and processors

We use Contabo GmbH, Deutschland for hosting and Hetzner Online GmbH, Deutschland for sending emails. Data processing agreements are in place with these providers. We do not pass data on to other third parties.

Retention

The data of a round is deleted automatically 14 days after the exchange date. Without an exchange date this happens after 90 days. The organizer can delete the round at any time. Daily database backups are deleted after 14 days. Server logs are deleted after a short time.

Cookies and tracking

We use no cookies and no tracking or advertising services. In the browser we store your choice of light or dark design locally on your device.

If you create or open a round as organizer, your browser also remembers its name, your email address and the management link so you can find the round under “My rounds”. This stays on your device. It disappears when you delete the round, click “Forget” or clear your browser’s site data. On a shared device you should forget a round after using it.

Donations and external links

If you want to donate voluntarily we link to external providers. By clicking you leave our site. The terms of the respective provider apply to data processing there. Links in wishlists lead to pages entered by participants.

Your rights

You have the right to:

• Information about your stored data
• Rectification of incorrect data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing

Complaints

Feel free to write to us at info@wichtellab.de. You can also lodge a complaint with a data protection supervisory authority.