Datenschutzerklärung

Scope

This Privacy Policy applies to all users of Wishpicker. The provider PWilli IT & Bild is based in Switzerland; the revised Swiss Federal Act on Data Protection (revFADP / nFADP) applies. For users habitually resident in the EU, the EU General Data Protection Regulation (GDPR) additionally applies — references to specific legal bases in this policy refer to Art. 6(1) GDPR and apply analogously to the revFADP.

Data Controller

The data controller for processing on Wishpicker is PWilli IT & Bild, sole proprietorship (owner: Pius Willi), Stutzweg 11, 8308 Illnau, Switzerland. Contact: [email protected].

Which data we process

When you create a wishlist we process the email address you provide (mandatory field) and the title of the wishlist. When you add wishes we store the entered product details (title, description, price, image URL, product link). When you invite participants we store their names and optionally their email addresses. When a wishlist is accessed, technical server logs (IP address, timestamp, user agent) are processed by our hosting provider Cloudflare.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) for wishlist and participant data; Art. 6(1)(f) GDPR (legitimate interest in delivery and security of the platform) for technical server logs.

Purpose of processing

The list creator's email address is used exclusively for delivering the admin link and any service emails (e.g. new reservations). The wishlist itself and the participant data are stored exclusively for operating the wishlist function. No transfer to third parties for advertising purposes takes place.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) — the processing is necessary to provide the wishlist service to the user.

Hosting (Cloudflare)

Wishpicker runs on the Cloudflare platform (Cloudflare Pages for the static website, Cloudflare Workers for the API, Cloudflare D1 for the database). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Data transfers to the USA are based on the EU Standard Contractual Clauses (Cloudflare DPA). Cloudflare automatically processes technical connection data to deliver the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable, performant hosting). Third-country transfer (USA) based on Art. 46(2)(c) GDPR (Standard Contractual Clauses, Cloudflare DPA).

Email delivery (Microsoft Azure Communication Services)

Transactional emails (admin link after wishlist creation, optional invitation emails to participants) are sent via Microsoft Azure Communication Services. Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) for delivery of the admin link; Art. 6(1)(f) GDPR (legitimate interest in effective invitation logistics) for invitation emails sent to participants at the user's request.

Affiliate links (Amazon Associates Programme)

When you click on an Amazon product link in a wishlist, you are redirected to amazon.de. The link contains a tracking parameter ( tag= ) that identifies our Wishpicker partner ID. Amazon thereby learns that you reached Amazon via Wishpicker. Which data Amazon processes during your visit to amazon.de is governed by Amazon's privacy policy. We ourselves receive no personal data from Amazon about your visit or purchase decisions.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in financing the free Wishpicker service through affiliate commissions).

Cookies / Local Storage

Wishpicker does not set tracking cookies. Locally in the browser, only technically necessary data (e.g. language preference, last-used participant link) is stored in LocalStorage.

Legal basis: § 25(2) No. 2 TTDSG and/or Art. 6(1)(f) GDPR (storage strictly necessary to provide the service requested by the user); no consent required.

Your rights

You have the right to access, rectification, erasure, restriction of processing, and the right to data portability of your personal data. Please contact us at the email address above. You can also delete your wishlist at any time yourself via the admin link.

Storage duration

Wishlists are kept until you delete them via the admin link. Server logs at Cloudflare are automatically deleted after a short time (typically 30 days) in accordance with Cloudflare's standard policies.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.