Privacy Policy

The controller responsible for the processing of personal data on werob.de within the meaning of the GDPR is:

CITO GmbH
Jungfrauenthal 8
20149 Hamburg
Germany

E-mail. info@werob.de

CITO GmbH is currently not legally required to appoint a data protection officer. Please direct any data protection enquiries to the e-mail address above.

When you access werob.de, our hosting provider (see Section 6) processes technical access data that your browser transmits automatically. In particular:

• IP address (shortened or deleted after a short period)
• Date and time of the request
• Requested URL and HTTP status code
• Referrer URL
• Browser type and operating system (user agent)

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing a stable and secure website). The data is generally deleted or anonymised within 24 hours.

If you contact us by e-mail at info@werob.de, we process your information (e-mail address, name, content of the message) exclusively for the purpose of handling your enquiry.

The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your enquiry). We delete your enquiries once they are no longer required, and at the latest upon expiry of statutory retention periods.

werob.de offers a multi-step onboarding form. Your entries are stored exclusively in your browser's local storage so that you can resume the form later if needed.

There is currently no automatic transmission to any server. The data stored in your browser does not leave your device unless you choose to send it to us yourself (for example by e-mail after the confirmation screen).

As soon as we activate backend transmission, we will update this privacy policy accordingly and, where required, obtain your consent.

We use browser local storage for two purposes:

• Theme preference. Key werob-theme. Stores your choice between the light and dark interface.
• Onboarding draft. Key werob.brief. Stores your onboarding entries so you can resume the form.

Both values are stored exclusively in your browser and are not transmitted to our servers or any third parties. You may delete both entries at any time using your browser's developer tools. The legal basis is § 25 (2) (2) TDDDG (strictly necessary for an explicitly requested service).

Your personal data is only disclosed to third parties where this is necessary to perform a contract, required by law, based on your consent, or transferred to a processor within the meaning of Section 6 of this statement.

As described in Section 6, data is transferred to Vercel Inc. (USA). Any transfers to third countries take place exclusively on the basis of appropriate safeguards under Art. 44 et seq. GDPR, in particular the EU-US Data Privacy Framework and the Standard Contractual Clauses.

We store personal data only for as long as is necessary for the purposes set out in this statement or as required by statutory retention periods (e.g. commercial and tax retention obligations of up to ten years under §§ 147 AO, 257 HGB).

You have the following rights vis-à-vis CITO GmbH:

• Access pursuant to Art. 15 GDPR
• Rectification pursuant to Art. 16 GDPR
• Erasure pursuant to Art. 17 GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability pursuant to Art. 20 GDPR
• Objection pursuant to Art. 21 GDPR
• Withdrawal of granted consent pursuant to Art. 7 (3) GDPR

To exercise these rights, please contact info@werob.de.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for CITO GmbH is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

We update this privacy policy when the legal framework or our processing activities change. You will always find the current version at werob.de/en/privacy.