// Last updated: 15 May 2026
Privacy
Plain-English summary: We collect the minimum we need to do business with you, store it securely, and never sell it. The full details follow.
1. Data controller
WriteCodeWeb GmbH, Arkenstraße 75, 56575 Weißenthurm, Germany.
Email: hello@writecodeweb.com · Phone: +49 2637 2546.
2. What data we collect
When you visit the site
Our hosting provider records standard server logs (IP address, user agent, requested URL, referrer, timestamp) for the purpose of operating the site securely. These logs are retained for 14 days, then deleted automatically. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operating a secure web service).
When you fill in the contact form
We process the name, email, phone (optional), company (optional), and message you provide. We use this only to reply to your enquiry. Legal basis: Art. 6 (1)(b) GDPR (steps prior to entering a contract) and Art. 6 (1)(a) GDPR (consent). Retention: 24 months from the last reply, or until you ask for deletion.
When you place an order
We process your billing details (name, address, country, email, phone, optional VAT number) to issue an invoice and fulfil the contract. Payment data (card number, CVV, etc.) is entered directly on Stripe and never reaches our servers. Legal basis: Art. 6 (1)(b) GDPR (contract). Retention: 10 years for invoices (German tax law, § 147 AO).
3. Cookies
We use only strictly-necessary cookies: a session cookie (PHP session, lifetime: browser session) and a language-preference cookie (`wcw_locale`, lifetime: 1 year). No analytics cookies, no advertising cookies, no third-party cookies. The cookie banner records your acknowledgement in browser localStorage — no cookie is set for that.
4. Processors
We use the following processors (Auftragsverarbeiter), each under a written agreement (DPA) compliant with Art. 28 GDPR:
- Hetzner Online GmbH (DE) — hosting and email.
- Stripe Payments Europe, Ltd. (IE) — payment processing. Stripe is also an independent controller for fraud prevention. See stripe.com/privacy.
- Google Fonts — web font delivery via fonts.googleapis.com. Your IP is sent to Google when fonts load.
5. Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). You may also lodge a complaint with the LfDI Rheinland-Pfalz, the supervisory authority for our state.
6. How to exercise your rights
Email hello@writecodeweb.com with the words "Data subject request" in the subject. We respond within 30 days.