This privacy notice informs you according to Art. 13 and Art. 14 of the General Data Protection Regulation (GDPR) about the processing of personal data when using Wahl Match.
Wahl Match is privacy-by-design: there are no user accounts, no tracking, no cookies for marketing or analytics, and no sharing of personal data with advertising networks.
1. Controller
The controller within the meaning of the GDPR and other data protection regulations is the provider named in the imprint. You can contact us regarding data protection matters by email at wahlmatch@gmail.com.
2. Local storage of your answers
Your answers to the theses and stored results remain exclusively in your browser's local storage (LocalStorage). They are never transmitted to a server and are not visible to the provider. If you clear your browser storage or choose "Delete all data" in settings, this information is irrevocably removed.
Legal basis: This processing takes place exclusively locally on your device; no processing within the meaning of the GDPR by the provider takes place in this respect.
3. Server logfiles
When the website is accessed, the following connection data is processed by our hosting provider — for technical reasons:
- IP address of the requesting device
- Date and time of access
- Requested URL or file and HTTP status code
- Amount of data transferred
- Browser type, browser version, operating system
- Referrer URL (if transmitted by the browser)
This data is necessary to deliver the website, ensure functionality and defend against abuse or attacks. This data is not merged with other data sources or used for profiling.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable and secure operation of the website).
Retention: Logfiles are stored by the hosting provider for a short time (usually a maximum of 30 days) and then automatically deleted or anonymised, unless a specific security incident investigation requires longer storage.
4. Content and party positions (API)
To load the theses and party positions, the app calls our own public API. Only the technical connection data mentioned under section 3 is transmitted. Your answers or your result are not sent to the API.
5. Processors used
To provide the website we use the following processors under Art. 28 GDPR:
- Frontend hosting: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the data mentioned under section 3 to deliver the website. There is a data processing addendum as well as EU standard contractual clauses. Vercel is also certified under the EU-U.S. Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023). Privacy policy: vercel.com/legal/privacy-policy.
A transfer of the mentioned data to the USA may take place for technical reasons. The legal basis for the transfer is Art. 45 (1) GDPR in conjunction with the adequacy decision above, or — additionally — Art. 46 (2) (c) GDPR (EU standard contractual clauses).
6. Cookies and LocalStorage
We use no cookies for tracking, analytics or marketing purposes. To store your app settings (e.g. theme, tutorial status) and your answers we exclusively use the LocalStorage of your browser. This data does not leave your device.
Since no tracking takes place, no consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is required.
7. Tracking, analytics and advertising
No tracking, reach measurement, analytics, profiling or advertising takes place. No third-party scripts (Google Analytics, Meta Pixel, Tag Manager etc.) are embedded.
8. External links
On the detail pages of the parties we link to the parties' official manifestos and websites. By clicking such a link you leave this app. For data processing on the linked sites only their privacy policies apply; we have no influence on them.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the address bar in your browser ("https://") and the lock symbol.
10. Your rights as a data subject
If personal data is processed about you, you have the following rights vis-à-vis the controller:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
Since we do not actively process personal data beyond what is technically necessary, and in particular do not maintain user profiles, email lists or similar, we generally cannot provide information about specific individuals — we simply do not have any.
11. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. In particular the authority of the member state of your residence, place of work or the place of the alleged infringement is competent.
Supervisory authority responsible for the provider:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
www.lda.bayern.de
12. Currency and changes to this privacy notice
This privacy notice is currently valid. Due to further development of the website or changes in legal or regulatory requirements, it may become necessary to adapt this privacy notice. The current version can be viewed on this page at any time.