Privacy | Wavect

Controller

Wavect GmbH, Häusern 6a, 6070 Ampass, Austria. Contact: [email protected]. Privacy contact: Kevin Riedl, [email protected]. These notices cover Wavect’s vibecoding-agentur.at and ki-entwicklung.at websites.

Your choices

Analytics, ad measurement, personalized Google ads and AI chat are separate optional purposes. Their services stay off without consent. New permissions activate only after evidence is stored successfully. Withdraw consent at any time through Privacy settings in the footer. The enquiry form remains usable if you reject optional services. The basis for optional processing is Article 6(1)(a) GDPR and Section 165(3) Austrian TKG 2021. Necessary operations rely on Article 6(1)(f); consent evidence supports Article 7(1) and Article 6(1)(c).

Hosting and consent evidence

Cloudflare Pages delivers and protects this website, processing technical data such as IP address, requested URL, time and browser details. Our fonts and images are self-hosted. Consent evidence uses Cloudflare D1 with EU jurisdiction: a random choice reference, server timestamp, site, language, version and chosen purposes. No form content or IP address is stored in that consent record. The necessary domain-specific cookie wv_campaign_consent_v1 remembers your choices for up to 180 days. When new records are written, evidence older than 24 months is deleted. Cloudflare privacy, Cloudflare DPA.

Enquiries and spam protection

Your name, email, project description and optional phone number are delivered to Wavect through Web3Forms. The requested information lets us respond; providing a phone number is optional. This does not subscribe you to a newsletter. The basis is Article 6(1)(b) GDPR for pre-contractual enquiries, or Article 6(1)(f) for other enquiries. Web3Forms and hCaptcha by Intuition Machines, Inc. load only when you interact with the form. They process technical browser and connection data and may use browser storage for spam protection. Please do not send credentials or confidential customer data. Email, telephone and booking alternatives remain available without JavaScript or if the challenge is blocked. Web3Forms privacy, hCaptcha privacy.

Optional project guidance

The four project-guidance questions are evaluated locally in your browser. Answers and results are not persistently stored in the browser or sent to analytics or advertising services. The guidance uses your answers and is not a technical assessment. Only when you explicitly choose to enquire with these details and submit the contact form does Web3Forms send the selected details with your enquiry to Wavect. You can also enquire directly without the quiz. With analytics consent we measure fixed quiz interactions and step numbers, never answers or results.

Website analytics

After your analytics choice, we load Umami Cloud and PostHog through v.wavect.io. Our integration measures visits, page paths, language, site and predefined interactions. It does not send arbitrary query parameters, form content or contact details. PostHog autocapture and session recording are disabled; our integration does not create identified profiles. We honor Do Not Track and Global Privacy Control. Umami privacy, PostHog privacy. With analytics consent we also store the optional domain-specific cookie wv_campaign_analytics_v1 for at most 30 days. It contains a random analytics ID, test assignments and a bounded ad source (Google/OpenAI and bounded campaign, ad group and ad IDs), with no contact details or click identifiers. This lets us compare variants and returning visits. Random text variants may appear without storage; measurement and recognition start only after analytics consent. A random enquiry reference links an accepted enquiry to reporting. With consent, the variant and bounded ad source also accompany the enquiry sent to Wavect. Test previews are excluded from measurement. For ads linked to a predefined project situation, analytics consent also permits reporting a fixed category (customer pilot, internal tool or first customer release). We attach it to experiment reporting and enquiries only after the tested headline has been visibly displayed. We do not use free-text URL values for this purpose.

Google Ads and OpenAI measurement

Google Ads and the OpenAI Measurement Pixel load only with ad-measurement consent. A lead event is sent only after the form provider confirms acceptance, with a random enquiry event reference. A visit, CTA click, telephone link or booking link is not itself a lead. Google may use gclid, gbraid or wbraid, and OpenAI may use oppref, for attribution. Providers may set cookies. Provider-enabled advanced matching may normalize and hash contact details in the browser. We do not pass names, email addresses or messages in our event payloads. Our OpenAI events set opt_out: true for possible future user-level personalization. Google privacy, OpenAI privacy.

Personalized Google ads

This separate choice allows Google to use visits to public offer pages for advertising audiences and remarketing. A confirmed enquiry may support audience exclusion. This is advertising profiling; Wavect does not use it for automated decisions with legal or similarly significant effects. It does not enable OpenAI personalization and is separate from analytics. Google ad settings.

LeadWin AI chat

LeadWin by Feedbax loads only after chat consent. Messages and technical context may be processed by Feedbax and its AI providers, including outside the EEA. AI may make mistakes; do not share sensitive or confidential information. The provider names UmbHost/Hetzner in Germany, OpenAI in the USA and Web Cats UAB in Lithuania among its providers; see its current DPA for details. Our integration sets the chat provider’s additional analytics permission to denied. Chat is not confirmation of a submitted enquiry. LeadWin privacy, DPA and subprocessors.

Email, phone and booking

Email and telephone links open your own app. The booking link takes you to Zeeg GmbH, Germany; no Zeeg widget is embedded here. You enter booking data such as name, email and time only on Zeeg. Zeeg privacy.

Transfers, retention and rights

Providers may process data outside the EEA under their DPAs, Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Under Wavect’s existing policy, enquiries are kept for up to 24 months and booking data for the collaboration and applicable obligations. Analytics and advertising data follow the relevant account and provider settings. Statutory retention obligations remain unaffected. Subject to applicable requirements, you may request access, rectification, erasure, restriction, portability and object to processing, or withdraw consent for future processing. Contact [email protected]. You may complain to the Austrian Data Protection Authority. Updated 7 November 2026.