Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

WAV HLS GmbH Rheinstraße 221 76532 Baden-Baden Germany Phone: +49 151 55616731 Email: info@wav-hls.de

No data protection officer has been appointed.

2. Website delivery and server logs

When you access this website, our hosting provider Netlify, Inc. processes technical access data, which may include your IP address, access time, requested URL, referrer, browser, operating system and HTTP status code. Processing is necessary for delivery, stability, security and abuse prevention under Art. 6(1)(f) GDPR. Data is erased or anonymised when no longer required.

3. Hosting and Netlify

Netlify, Inc. acts as our hosting processor. Technical access data may be processed outside the EU, particularly in the United States. Netlify states that it uses appropriate safeguards, including the European Commission's Standard Contractual Clauses. Further information: https://www.netlify.com/privacy/

4. Contact forms and Bitrix24 CRM

Depending on the form, we process your name, telephone number, email address, message, requested service and property details. Required fields are necessary to handle the enquiry.

Form data is transferred server-side directly to our Bitrix24 CRM and stored there to assign, handle, document and follow up your enquiry. The provider for European customers is Alaio Cloud Limited, Frema House, Office 102, No. 9 Constantinou Paparigopoulou Street, 3106 Limassol, Cyprus. Alaio Cloud Limited acts as a processor under Art. 28 GDPR.

Processing is based on Art. 6(1)(b) GDPR where required for your enquiry or pre-contractual steps. Otherwise it is based on Art. 6(1)(f) GDPR; our legitimate interests are structured enquiry management, documentation, follow-up and abuse prevention.

According to Bitrix24, accounts in the bitrix24.de and bitrix24.eu domain zones are hosted in AWS data centres in Frankfurt am Main. Processing outside the EEA by Bitrix24 or subprocessors is based on an adequacy decision under Art. 45 GDPR or appropriate safeguards, especially Standard Contractual Clauses under Art. 46 GDPR. Further information: https://www.bitrix24.de/gdpr/ and https://www.bitrix24.eu/privacy/

The server-side transfer does not place additional cookies on your device and does not use analytics or marketing cookies. Enquiries are erased when no longer required and no statutory retention obligation or legitimate interest requires longer retention.

5. Contact by email or telephone

If you contact us by email or telephone, we process the details and content provided to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related contact and otherwise Art. 6(1)(f) GDPR. Data is erased after final handling unless retention obligations or legal claims require otherwise. Please do not provide special categories of personal data unless necessary.

6. CMS for authorised administrators

The /admin area is exclusively for authorised administrators. Netlify Identity and Decap CMS are used for login and website administration. Account and technical access data may be processed under Art. 6(1)(f) GDPR for secure website administration.

7. Cookies and tracking

This website currently uses no analytics or marketing tools, Google Maps, externally hosted Google Fonts or social-media pixels. No analytics or marketing cookies are used, so a consent banner is currently not required. If consent-based services are introduced, this policy will be updated and consent obtained before activation.

8. Your rights

Subject to statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection to processing based on Art. 6(1)(e) or (f) GDPR. Consent may be withdrawn at any time with future effect. Contact: info@wav-hls.de.

9. Right to complain

You may lodge a complaint with a supervisory authority. The authority responsible for WAV HLS GmbH is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Heilbronner Straße 35 70191 Stuttgart Email: poststelle@lfdi.bwl.de Website: https://www.baden-wuerttemberg.datenschutz.de/

10. Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Last updated

September 2026.