Skip to main content
Part of the Waghubinger group

Privacy Policy

Last updated: June 25, 2026

We, Wapps GmbH (contact details see Imprint/Legal Notice), are pleased about your interest in our website https://wapps.studio. The protection of your personal data is very important to us. Below, we inform you in accordance with Art. 13 and 14 of the EU General Data Protection Regulation (GDPR) about the processing of your personal data when visiting and using our website.

1. Controller for Data Processing

The controller within the meaning of the GDPR and other national data protection laws as well as other data protection regulations is:

Wapps GmbH Kollingerfeld 9 4563 Micheldorf Austria Email: office@wapps.studio (For further details, please see our Imprint/Legal Notice)

A data protection officer has not been appointed as the legal requirements for this are not met.

2. General Principles of Data Processing

Personal data means any information relating to an identified or identifiable natural person. We process your personal data in compliance with the relevant data protection regulations, in particular the GDPR and the Austrian Data Protection Act (DSG).

3. Your Rights as a Data Subject

As a data subject affected by data processing, you have the following rights:

  • Right of access (Art. 15 GDPR): You can request information about your personal data processed by us.
  • Right to rectification (Art. 16 GDPR): You can request the correction of incorrect or completion of your personal data stored by us.
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): You can request the erasure of your personal data stored by us, provided there are no legal retention obligations or other legal reasons to the contrary.
  • Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): You can request to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request its transmission to another controller.
  • Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.
  • Right to withdraw consent (Art. 7(3) GDPR): If the data processing is based on your consent, you have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Email: dsb@dsb.gv.at, Website: https://www.dsb.gv.at.

To exercise your rights, please contact us using the contact details provided above.

4. Data Processing When Visiting Our Website

a) Hosting and Server Log Files

Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA ("Vercel"). Each time our website is accessed, Vercel's system automatically collects data and information from the computer system of the accessing computer. The following data may be collected (so-called server log files):

  • Browser type and browser version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Hostname of the accessing computer (IP address – Vercel usually anonymizes this or stores it only for a short period for error analysis)
  • Time of the server request
  • Accessed page/file and amount of data transferred
  • Status code (successful transfer, error, etc.)

This data is not merged with other data sources. The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a secure, stable, and high-performance website, as well as for error analysis and defense against attacks. Vercel is used on the basis of the data protection and data processing terms provided by Vercel to the extent they apply to our contract. As Vercel is a US-based company, data may be processed on servers in the USA. Vercel is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection for data transfers to the USA (adequacy decision of the EU Commission pursuant to Art. 45 GDPR). For more information on Vercel's privacy practices, please visit: https://vercel.com/legal/privacy-notice

b) Cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your end device and saved by your browser. They do not cause any damage. We exclusively use technically necessary (functional) cookies. These are required for the basic operation and functionality of the website (e.g., to ensure security or for language settings). The legal basis for processing personal data using technically necessary cookies is Section 165 (3) of the Telecommunications Act (TKG) 2021 or our legitimate interest (Art. 6(1)(f) GDPR) in providing a functional website. Your consent is not required for the use of these essential cookies. You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be restricted.

c) Web Analytics with Vercel Analytics

We use Vercel Analytics on our website, a web analytics service provided by Vercel Inc. (see above under Hosting). Vercel Analytics does not use third-party cookies to analyze user behavior. According to Vercel, visitors are identified by a hash created from the incoming request; this hash is time-limited and is not intended to recognize users across different websites.

Vercel Analytics may collect technical and aggregated usage data, including the accessed URL or route, referrer, filtered query parameters, timestamp, approximate location at country or region level, browser, operating system, device type, and analytics script version. We also collect selected interaction events, such as clicks on social media, app store, or contact buttons and contact form submissions. We do not transmit contact form contents or intentionally personal event payloads to Vercel.

The purpose of this processing is the statistical evaluation of the use of our website, the detection of technical issues, and the improvement of user guidance. The legal basis for the use of Vercel Analytics is our legitimate interest (Art. 6(1)(f) GDPR) in the analysis and improvement of our website. For more information on Vercel Analytics, please visit https://vercel.com/docs/analytics, https://vercel.com/docs/analytics/privacy-policy, and Vercel's privacy notice at https://vercel.com/legal/privacy-notice.

5. Contacting Us and Email Delivery

If you contact us by email or via our contact form, we process the data you transmit, in particular your name, email address, company, telephone number, project type, and the content of your inquiry. We use this data to process your inquiry, communicate with you, and handle follow-up questions.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or, if requested, on your consent (Art. 6(1)(a) GDPR).

For sending and delivering contact form emails, we use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA ("Resend"). In this context, email addresses, email metadata, and message content may be processed. Resend is used on the basis of the data protection and data processing terms provided by Resend. Resend also processes data in the USA and states that it uses appropriate safeguards, in particular Standard Contractual Clauses, where no adequacy decision applies. Further information is available at https://resend.com/legal/dpa, https://resend.com/security/gdpr, and https://resend.com/legal/subprocessors.

Your inquiry will be deleted as soon as it has been finally processed and no statutory retention obligations, legitimate documentation interests, or contractual record-keeping obligations require further retention.

6. Data Security

We take appropriate technical and organizational security measures (TOMs) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. For security reasons and to protect the transmission of confidential content, our website uses SSL/TLS encryption.

7. No Automated Decision-Making / Profiling

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. Specific Products and Services

This privacy policy applies to the website https://wapps.studio. Separate privacy policies and terms of use may apply to individual products or services offered by us (e.g., our mobile applications such as "Yammmi" or other software solutions). These will be made available to you transparently in the context of the respective product or service.

9. Actuality and Changes to this Privacy Policy

We reserve the right to adapt this privacy policy occasionally so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit. It is recommended to read this privacy policy regularly.