Privacy Notice
How wakirlabs.com and the Wakir Labs newsletter
handle personal data, under GDPR Art. 13 and § 25 TDDDG. The
German version is the legally
binding text; this English page is a reading aid for
international visitors.
Controller
Controller within the meaning of GDPR Art. 4 (7):
Callandor GmbH
Falkenstr. 31
81541 München
Germany
Email: hello [at] wakirlabs [dot] com
Represented by: Fabian Kroll. Full provider information: Imprint.
Data we process when you visit this site
Server logs (Cloudflare Pages hosting)
This site is hosted on Cloudflare Pages. When you load a page, Cloudflare receives the following technical data, which is necessary to deliver the page to you:
- IP address
- Date and time of request
- Requested URL and HTTP status code
- User agent (browser and operating system)
- Referrer (if your browser sends one)
Legal basis: GDPR Art. 6 (1) (f) — legitimate interest in delivering and securing the website (defending against attacks, diagnostic logs).
Cloudflare acts as a processor under GDPR Art. 28. The data processing agreement we have entered into with Cloudflare is archived in our compliance file ( dpa-snapshots/MANIFEST.md ; Cloudflare DPA reference: cloudflare.com/cloudflare-customer-dpa ).
Local storage (theme preference)
When you toggle between dark and light mode, your choice is
stored in your browser's sessionStorage under the
key theme. No data leaves your browser. Legal basis
under § 25 (2) TDDDG: storage strictly necessary to provide the
function explicitly requested by you (the theme toggle).
We do not set advertising cookies. We do not load third-party analytics. There is no consent banner because there is nothing requiring consent.
Newsletter (Beehiiv)
If you subscribe to the Wakir Labs newsletter (Field Notes), we process the email address you submit and a confirmation timestamp.
- Purpose: sending the newsletter you subscribed to.
- Legal basis: GDPR Art. 6 (1) (a) — your explicit consent, given via double opt-in.
- Double opt-in: after submitting your address, you receive a confirmation email. Your subscription becomes active only when you confirm via the link.
- Retention: until you unsubscribe. Every newsletter contains a one-click unsubscribe link.
Newsletter delivery is handled by beehiiv, Inc. (US, New York) as a processor under GDPR Art. 28. The data processing addendum we have entered into with Beehiiv is archived in our compliance file ( dpa-snapshots/MANIFEST.md ; Beehiiv DPA reference: beehiiv.com/dpa ).
Transfers to the United States are covered by the EU-U.S. Data Privacy Framework where applicable, and otherwise by Standard Contractual Clauses (SCCs) included in the Beehiiv DPA, Schedule A.
Processors at a glance
| Processor | Purpose | Country | Reference |
|---|---|---|---|
| Cloudflare, Inc. | Pages hosting, DNS, edge delivery | USA | DPA |
| beehiiv, Inc. | Newsletter sending and subscriber management | USA | DPA |
The complete, time-stamped compliance file is at projects/legal/dpa-snapshots/MANIFEST.md .
Your rights under GDPR
You have the right to:
- Access your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure ("right to be forgotten", Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7 (3))
To exercise any of these rights, write to hello [at] wakirlabs [dot] com.
You also have the right to lodge a complaint with a supervisory authority (Art. 77). The competent authority depends on the controller's seat (Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, https://www.lda.bayern.de/).
No automated decision-making
We do not run automated individual decision-making, including profiling, within the meaning of GDPR Art. 22.
Changes to this notice
Material changes to this privacy notice are reflected in the site's commit history (verifiable). The currently published version is always the version in effect.