WD Agentur

Legal

Privacy Policy

Last updated: March 2026

This Privacy Policy explains how WD Agentur (“we”, “us”) processes personal data when you use our website and when you contact us. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable German law (including the BDSG, where relevant).

1. Data controller

The controller under the GDPR is:

WD Agentur / Ivan Marcetic
Blumenheckstr. 54A
75177 Pforzheim
Germany
Email: info@wdagentur.com

2. General information on processing

We process personal data only to the extent permitted by law and necessary for the purposes described below.

  • Purposes: providing the website, communication, pre-contractual steps and performance of contracts.
  • Legal bases: Art. 6(1)(a), (b), (c) and (f) GDPR, depending on the specific processing activity.
  • We process data only where required for the purpose and lawful under applicable law.

3. Hosting and server log files

When you access the website, technical connection data is processed in server log files.

  • Data: IP address, date and time, requested resource, browser and device information as transmitted.
  • Purposes: technical stability, error analysis and IT security.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure operation).

4. Contact

If you contact us via form or email, we process the information you provide to handle your request.

  • Data: name, email, company details if provided, project information and message content.
  • Purposes: responding to your request, pre-contractual communication and proposals.
  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR where applicable.

5. Cookies and tracking

We use cookies that are technically necessary for core functionality and security, and—where required—optional cookies subject to your consent (e.g. analytics or marketing).

  • Essential cookies: required for core features and security.
  • Optional cookies: analytics or marketing only after consent, where used.
  • Legal bases: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR for essential purposes.

You can manage preferences at any time: Cookie settings.

6. Analytics (where applicable)

If you have given consent, we may use analytics tools to understand usage patterns and improve the website.

  • Example: web analytics via a third-party script.
  • Purposes: reach, usage and performance measurement.
  • Legal basis: Art. 6(1)(a) GDPR (consent).

7. Third-party services

We may use external providers for specific technical functions. Examples include:

  • Form protection: Google reCAPTCHA.
  • Database / backend infrastructure: Supabase.
  • Transactional email: Resend.

Where required, processing is based on Art. 28 GDPR (data processing agreements) and Art. 6(1)(a), (b) or (f) GDPR as applicable.

8. Storage duration

We store personal data only as long as necessary for the respective purposes or where statutory retention obligations apply.

  • Inquiries: until your request is completed and any follow-up communication has ended.
  • Contract and billing data: in line with commercial and tax retention periods where applicable.
  • Log data: only for the period required for technical and security purposes.

9. Your rights

Subject to the GDPR, you have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdraw consent at any time, where processing is based on consent

To exercise your rights, contact info@wdagentur.com.

10. Right to object

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to processing on grounds relating to your particular situation.

If you object and we do not demonstrate compelling legitimate grounds, we will no longer process the relevant data.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you believe processing infringes data protection law. The authority of your habitual residence, place of work or the place of the alleged infringement may be competent.