Privacy Policy

Prewave GmbH (“Prewave”, “us” or “we”) takes the protection of your data very seriously and we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, you are free to transfer personal data to us via alternative means, e.g. by telephone.

This policy, and any other agreement between you and us, outlines how Prewave processes data we collect from you or data that you provide to us in relation to our products, website or services (collectively, “Services”).

If you have any questions please don’t hesitate in contacting us at privacy@prewave.ai

 

Cookies

We use cookies on our internet pages to monitor, analyse and improve the service we offer to you. Cookies are text files that are stored in a computer system via an Internet browser and allow visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, we can provide you with more user-friendly services that would not be possible without the cookie setting, because cookies allow us to customise your experience and recognise when you return to our Website. You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

Information We Collect

We may collect and process the following information about you:

  • Information that you provide to us at https://www.prewave.ai (the “Website”) including, but not limited to, filling in forms, registering or subscribing. This includes, but is not limited to, your name, company, position and email address
  • If you contact us we may keep a record of the correspondence to improve our system
  • Details of your visit to the Website (such as the the date and time of your access)
  • Links. We may collect data on how you interact with links across the Website. We do this to refine the Website and improve the user experience
  • IP addresses. We may collect data about your computer such as your IP address, operating system, browser type. This helps us improve our user experience

We hold the information as long as necessary to provide you with an effective service, manage any issues that may arise in relation to the service or any legal or regulatory requirement.

Registration on our website

You have the ability to register on our website by providing some personal data, which enables us to offer you contents or services that may only be offered to registered users due to the nature of the matter in question. Which personal data is transmitted to us is determined by the respective input mask used for the registration. The personal data you enter is collected and stored exclusively for internal use by us. By registering on our website, the IP address—assigned by the Internet service provider (ISP) and used by the data subject—date, and time of the registration are also stored. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. This data is not passed on to third parties unless there is a statutory obligation to pass on the data, or if the transfer serves the aim of criminal prosecution.

How We Use Information

The information you provide to us will be used to:

  • Create your account
  • Contact you for administrative reasons such as sending emails outlining products, services, processes and policies
  • Respond to questions, problems or request feedback
  • Customise and improve our Service and Website
  • Market our Services
  • Investigate, prevent and report unlawful activity that in any way threatens the Website, Prewave or you

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

Third-Party Websites

Although we do not include or offer third-party products or services on our website, we may link to or connect with other third party websites to enhance and improve your use of our Service. To help us understand your use of our Services, we may use Google Analytics and other third-party services to help us with the administration and efficiency of our Services, such as sending emails. These third-party providers may be given or may have access to your information but agree to receive and use this information only to provide services to us, on our behalf. We never share, sell, rent or trade any information with third parties for their promotional purpose.

We may release information when said release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.

Emails and Newsletters

The emails and newslettes we send contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. This personal data will not be passed on to third parties. You are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by us. We automatically regard a withdrawal from the receipt of the newsletter as a revocation.

Your Rights

As a user of Prewave, you can make choices regarding what information we collect from you, how we use that information and how we communicate with you. It is simple and straightforward to:

  • View and modify preferences, including the way we communicate with you
  • Opt out of the collection of certain personal information
  • Opt out of Emails and Newsletters
  • Review and control information that Prewave collects from you

As a user of Prewave, you benefit from all rights granted to you by the European GDPR, including (1) Right of confirmation, (2) Right of access, (3) Right of rectification, (4) Right to be forgotten, (5) Right of restriction of processing, (6) Right to data portability, (7) Right to object and (8) Right to withdraw data protection consent.

If you wish to exercise your rights, please contact us at privacy@prewave.ai

You may unsubscribe at any point at the bottom of any email we send you, or direct with us at privacy@prewave.ai. Our users may receive communications related to our Services (including notices required by law) by providing their email address. We may also send you information regarding our Services, such as marketing materials and newsletters.

Data Retention

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Protecting Information

Prewave has administrative, technical and physical safeguards in place that will act to protect any personal information that you give us. These safeguards protect you against accidental, unlawful or unauthorized loss, modification, access disclosure or use.

That being said, it is important that you take steps to protect your personal information like:

  • Using a strong password with numbers, letters and special characters
  • Not sharing your password with anyone, ever
  • Remembering to close the browser after using our Website

Use of Slaask

We use the services provided by Slaask, Inc. (“Slaask”) to help us manage our customer support communications. To accomplish this, we provide a limited amount of your information (such as your username) to Slaask. Slaask also uses Cookies to track your interaction with the Website and browser-related information such as your IP address and number of visits. If your are not logged in, you will remain anonymous to Slaask. For more information about Slaask, their practices with respect to your personal information and how they use Cookies, please see their privacy policy located here: https://get.slaask.com/privacy-policy/

Use of Matomo

Our website uses functions of the web analytics service Matomo. Cookies are used for this purpose, which enable an analysis of your use of the website. The information generated in this way is only transferred to our own servers and is not transferred to any third-party. You can prevent this by setting up your browser so that no cookies are saved.

Use of Hubspot

Our website uses Hubspot Analytics for website analytics and to provide core functionality such as forms and chat. Cookies are used for this purpose, which enable an analysis of your use of the website. The information generated in this way is transferred to Hubspot servers and is not transferred to any third-party. You can prevent this by setting up your browser so that no cookies are saved.

Use of LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag for conversion tracking of our advertising campaigns. A cookie is stored for the purpose of identifying clicks and conversion measurement from our LinkedIn advertising. The information is transferred to LinkedIn servers and not sold on to any third parties. You can prevent this by setting up your browser so that no cookies are saved.

Use of Weglot

Our website uses the Weglot cookie for translation of texts and content. A cookie is stored for the purpose of identifying language preferences. 

Use of Google Analytics

Our website uses functions of the web analytics service Google Analytics. Cookies are used for this purpose, which enable the anonymized analysis of your use of the website. We use a tool called “Google Analytics” to collect information about use of this site. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve this site. Google Analytics collects only the IP address assigned to you on the date you visit this site, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this site, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use (as amended for government websites) and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser.

Changes To The Policy

Any changes we make to our privacy policy will take effect immediately and will be posted on this page and, where necessary, notified to you via email.

If you would like to access, amend, correct or delete any information we hold about you, that is your right and you have full control. All questions, queries and doubts can be contacted to Prewave at privacy@prewave.ai and we will endeavour to respond to you as fast as possible. You may also contact us at:

Prewave GmbH

Rothschildplatz 4 / Austria Campus 4

1020 Vienna

Austria

Phone: +43 1 30 50 743

Email: privacy@prewave.ai

Last edited on 01.02.2024

Privacy Policy

Prewave GmbH (“Prewave”, “us” or “we” or referred to by “our”) takes the protection of your data very seriously and has implemented numerous technical and organizational measures to ensure the most complete protection of personal data. Prewave’s Privacy Policy outlines our practices regarding the collection, use and protection of your personal information when you visit or interact with our website and/or the Prewave Platform (hereinafter referred to together as the “Webpages”), in accordance with the provisions of applicable data protection laws, including those of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy is intended to outline Prewave’s commitment and responsibility to the protection of personal data. By accessing or using our Webpages, you agree to the collection of your data for the purposes described herein, and to the terms outlined in this Privacy Policy.

Our website can be accessed by everyone. For accessing and using the Prewave Platform, the professional entity on behalf of which you act has either (i) entered into a contract with Prewave for a “Free Basic Account” as governed by the Terms of Service, thus being a “User”, or (ii) entered into a contract with Prewave to purchase services, thus being a “Customer”. If and to the extent that Prewave acts as the processor for the User or Customer being the controller, an additional Data Processing Agreement is concluded (i) with the Customer as part of the contractual framework of the agreement governing the respective business relation, and (ii) with the User as incorporated in the Terms of Service by reference and concluded by accepting the Terms of Service.

For the avoidance of doubt, “Webpages” does not encompass Prewave’s E-learning Platform or its related services and the Whistleblower System, for which separate privacy policies are in place.

The attributed meaning and definitions herein shall be the same as those established in the text of the GDPR.

I. Controller and contact details

The controller within the meaning of Art. 4 (7) GDPR for processing activities is:

Prewave GmbH

FN 474673 z

Rothschildplatz 4, Austria Campus 4, 3rd Floor

1020 Vienna, Austria

Phone: +43 1 30 50 743

E-mail: privacy@prewave.ai

Website: www.prewave.com

II. General information on processing of personal data

  1. Processing of personal data

In general, we only process personal data to the extent necessary to provide functional Webpages and to allow communication with Prewave. The processing of personal data generally only takes place subject to your consent. An exception applies in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

  1. Description of the processing of data

Personal data received, gathered or otherwise obtained through our Webpages are only processed to the extent necessary in order to operate and make available the Webpages or to improve your experience.

  • Personal information: When you use our Webpages, we may collect personal information such as your name, email address, phone number, and other contact details as may be provided by you. We collect this information when you voluntarily provide it, such as when you subscribe to newsletters or contact us via the available means and process it to the extent necessary to provide the service requested by you.
  • Automated information: We use technologies such as cookies, plugins, pixels, and similar tracking tools to collect information about your device, browsing actions, and patterns, including date and time of access, interactions with external links, and language settings in order to analyze and improve the usage of our Webpages.
  • We do not collect or process sensitive personal data, or personal data defined in Art. 9 and Art. 10 GDPR as being “special categories of personal data”, unless otherwise agreed upon.

  1. Legal basis for processing

We process your personal information based on the legal grounds provided by Art. 6 GDPR:

Where we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing activities that are necessary to execute pre-contractual measures.

To the extent that the processing of personal data is necessary for compliance with a legal obligation to which Prewave is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In the event that the protection of vital interests of the data subject or another natural person requires the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

  1. How we use your information (purposes of data processing)

We use your personal information for various purposes:

  • Providing services: We use your personal information to provide and improve the services we provide through our Webpages and to guarantee functionality and security.
  • Analytics: We use cookies and similar technologies to collect anonymous data about your Webpages usage, such as page views, click-through rates, and session duration, to analyze trends and performance metrics. We may analyze your interactions with our Webpages to personalize and improve your experience.
  • Advertising: We may use your browsing behavior to personalize the advertising and promotional messages you see on our Webpages or through third party platforms.
  • Functionality, preferences: We use cookies to remember selected preferences and settings to improve (overall) usability and convenience.
  • Communications: We use your contact information to send you transactional emails, updates, newsletters, promotional materials, and other communications as requested by you.
  • Contract management: We use information in order to manage the (pre-)contractual relations with Users and Customers and to comply with the legal requirements for retaining data and documents. This may include your personal data if you are acting or using the service on behalf of the User or Customer.

  1. Duration of storage

The personal data of the data subject will be deleted, blocked or anonymized as soon as the purpose is fulfilled or the purpose of storage no longer applies. Data may also be stored if the European or national legislator has stipulated this in EU regulations, laws or other provisions to which Prewave is subject. The data will also be deleted, blocked or anonymized if a storage period prescribed by the aforementioned provisions expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

In case the personal data collected is subject to a contractual agreement between a Customer or User and Prewave, which requires (extended) storage and processing, the separate Data Processing Agreement will govern the processing as laid down above.

  1. Transfer of data and third party services

Prewave utilizes third parties services in connection with its Webpages’ collection of information as described herein. Your personal information will be exclusively shared with carefully selected service providers and partner companies under contractual obligations. Moreover, we will only disclose your data to entities situated within the European Economic Area, thereby subject to EU data protection laws, or to those mandated to adhere to an equivalent level of protection, as determined by an adequacy decision from the European Commission. In cases where we engage service providers in non-European countries, we implement additional measures in line with Art. 44 et seq. GDPR. These measures are designed to ensure a sufficient level of data protection during the transfer of personal information. This guarantees that the transfer is generally permissible and meets the specific requirements for transfers to non-European countries. Examples of such measures include entering into EU standard contractual clauses and implementing additional technical and organizational safeguards.

The third party providers Prewave operates with are listed in Appendix 1 to this Privacy Policy, if not already listed within this Privacy Policy.

  1. Third party links

Our Webpages may contain links to third party websites. These external websites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of these third party websites directly. Unless explicitly stated, Prewave has no affiliation, commercial or other relation with the third party to whom those websites belong.

  1. Security measures

No method of transmission over the internet or electronic storage is entirely secure, thus we cannot guarantee absolute security. However, we implement appropriate and reasonable security measures to protect your personal information to the highest extent possible. Prewave has administrative, technical and physical safeguards in place that will act to protect any personal information that you give us. These safeguards protect you against accidental, unlawful or unauthorized loss, modification, access disclosure or use.

That being said, it is important that you also take steps to protect your personal information like:

  • Using a strong password with numbers, letters and special characters;
  • Not sharing your password with anyone, ever;
  • Remembering to close the browser after using our Webpages.

III. Webpages

  1. Description of the processing of data

Upon accessing our Webpages, certain data and information is automatically collected from your computer system in order to display and provide the Webpages to you. The data that is collected is:

  • Browser type information;
  • User’s IP address;
  • Date and time of access;
  • Websites from which the user accesses our Webpages;
  • Websites that are accessed by the user via our Webpages.

The data is also stored in the log files of our system. This data is not stored together with any of your other personal data.

  1. Legal basis

The legal basis for the temporary storage of these data and log files is Art. 6 (1) lit. f GDPR.

  1. Purpose of processing

Temporary storage of the IP address by the system is necessary to enable delivery of the Webpages to your computer. For this purpose, your IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the Webpages. We also use the data to optimize the Webpages and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) lit. f GDPR.

  1. Duration of storage

The data is deleted as soon as it is no longer required for achieving the purpose for which it was collected.

  1. Right to objection

The collection of data for the provision of the Webpages and the storage of data in log files is absolutely necessary for the operation of the Webpages. Consequently, you have no option to object.

IV. Cookies

  1. Description of the processing of data

We use cookies on our Webpages to monitor, analyze and improve the Webpages and services we offer to you. Cookies are text files that are stored in a computer system via an internet browser or by the internet browser on your computer system. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again and to differentiate the individual browser of the data subject from other internet browsers.

We use different cookies, some which are technically necessary to operate the Webpages and guarantee the functioning and some, which improve the usability of our Webpages for the users and are optional.

The following data is stored and transmitted in the technically necessary cookies for the functioning of the Webpages:

  • IP address;
  • Language settings;
  • Login information.

The following data is stored and transmitted in the optional cookies to improve the usability of the Webpages and conduct analyses:

  • Browser type/version information;
  • Operating system;
  • Internet service provider;
  • IP address;
  • Date and time of access;
  • Websites from which the visitor accesses our Webpages;
  • Websites that are accessed by the visitor via our Webpages;
  • Entered search terms;
  • Page views, number of visits, duration of visits;
  • Interaction with features on the Webpages.
    When accessing our Webpages, you are informed about the use of optional cookies for optimizing and analysis purposes and your consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this Privacy Policy.

  1. Legal basis

The legal basis for the usage of technically necessary cookies is Art. 6 (1) lit. f GDPR.

The legal basis for the usage of optional cookies is Art. 6 (1) lit. a GDPR if you have given consent.

  1. Purpose of processing

a. Technically necessary cookies

The purpose of using technically necessary cookies is to enable the use and secure functioning of the Webpages. Some functions of our Webpages cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized even after a page change.

We use technically necessary cookies for the following purposes:

    • Supporting the security of the Webpages;
    • Enabling real-time content implementation and changes on the Webpages;
    • Caching translated content.

The data collected by technically necessary cookies is not used to create profiles of the data subjects.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6 (1) lit. f GDPR.

b. Optional cookies

The purpose of using optional cookies is to improve the quality of our Webpages and its content. Through the optional cookies, we learn how the Webpages are used and can thus constantly optimize our services.

    • Analytics cookies

These cookies track information about visits to the Webpages so that we can make improvements and report our performance, for example, analyze your behavior as to provide more relevant content or suggest certain activities. They collect information about how you use the Webpages, which site you came from, the number of your visits and how long you stay on the Webpages. We might also use analytics cookies to test new ads, pages, or features to see how visitors react to them.

    • Advertising cookies

These cookies are predominantly placed by third party advertising platforms or networks in order to deliver ads and track ad performance, enable advertising networks to deliver ads that may be relevant to you based upon your activities on the Webpages. For example, these cookies remember which browsers have visited the Webpages.

    • Functionality or preference cookies

During your visit to the Webpages, cookies are used to remember information you have entered or choices you make (such as your username, language or your region) on the Webpages.

List of cookies used

Cookie Source Description Purpose
Elementor Used to implement or change the website's content in real-time Necessary
Cloudflare, Hubspot Set by Cloudflare, used for bot protection and to distinguish individual users who share the same IP address Necessary
Weglot Weglot Used for caching translated content Necessary Necessary
cookieconsent_status Used to save cookie preferences Necessary
Prewave Used to keep you signed in Necessary
Google Tag Manager Insights into our marketing effort Analytics
Segment Used to analyze how well our Webpages and services perform Analytics
LinkedIn Marketing attribution, insights into our marketing effort Analytics/Advertisement
Hubspot Marketing attribution, insights into our marketing effort Analytics/Advertisement
Facebook Marketing attribution, insights into our marketing effort Analytics/Advertisement
Leadfeeder Marketing attribution Advertisement
Slaask Used to support our chatbot Functionality/Preference
LinkedIn Used to facilitate data center selection Functionality/Preference
LinkedIn Used to store visitor's consent regarding using cookies for non-essential purposes Functionality/Preference
LinkedIn Used to uniquely identify devices accessing LinkedIn to detect abuse on the platform and diagnostic purposes Functionality/Preference/Security
LinkedIn Used for remembering that a logged in user is verified by two factor authentication and has previously logged in Security

Please note that we do not have control over third party cookies, which are cookies set by domains other than the one being visited by you. These third party cookies may be used by external services embedded within our Webpages for purposes such as analytics, advertising, and social media integration. We encourage you to review the cookie policies of these third party providers for more information on how they use cookies and how you can manage them.

4. Duration of storage and right to objection

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.

If cookies are deactivated for our Webpages, it may no longer be possible to use all functions of the Webpages to their full extent.

 

Some functions of our Webpages cannot be offered without the use of cookies. You, therefore, cannot object to the usage of necessary cookies when using our Webpages.

V. Communication

  1. Description of the processing of data through the contact form or email contact

There is a contact form on our website that can be used to contact us electronically. If you make use of this option, the data entered in the input mask will be transmitted to us and stored. The following data are required:

  • First name;
  • Last name;
  • Company;
  • Email address.

 

The following data are optional:

  • Phone;
  • Title/Position;

 

The following data are also stored at the time the message is sent:

  • Your IP address;
  • Date and time of communication.

 

There is a contact form on our website in order to book a demo, for which the following data are required:

  • Email address.

 

Your consent is obtained for the processing of the data as part of the sending process and reference is made to this Privacy Policy.

 

Alternatively, it is possible to contact us via any email address provided. In this case, your personal data transmitted with the email will be stored.

 

  1. Legal basis

The legal basis for the processing of the data is Art. 6 (1) lit. a if you have given your consent.

 

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR.

 

  1. Purpose of processing

The purpose of processing the concerned data is to facilitate your communication with Prewave, to reply to communication requests, initiate contractual relations, documentation of communication related to contractual and pre-contractual relations and to operate communication management tools.

 

  1. Duration of storage

The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected.

 

  1. Right to objection

You have the option to revoke to your consent, which results in ending the communication with Prewave.

 

If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

 

  1. Description of the processing of data through the newsletter

We offer the possibility to register on our website for receiving newsletters with tips, announcements of new features, events and other marketing information concerning Prewave. This is based on your consent, and the data collected is that which you provide to us via the registration system:

  • First name;
  • Last name;
  • Email address;
  • Company name.

 

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this Privacy Policy.

 

If you register for an account for accessing the Prewave Platform, the email address associated with your account will subsequently be used for sending you newsletters with tips, announcements of new features, events and other marketing information concerning Prewave. The following data is processed for the newsletter:

 

  • First name;
  • Last name;
  • Email address.

 

These data are used exclusively for sending the newsletter.

 

  1. Legal basis

Where you subscribe to a newsletter, the legal basis for the processing is Art. 6 (1) lit. a GDPR as you have given consent.

 

Where you create an account to use and access the Prewave Platform, the legal basis for the processing is your consent to receive communication from Prewave in compliance with § 174 (1), (3) Telecommunications Act (TKG 2021).

 

  1. Purpose of processing

The purpose of processing the concerned data is to deliver the newsletter to you.

 

  1. Duration of storage

The personal data in this context is only kept as long as the subscription to the newsletter is active, or until you manually unsubscribe from the communication or request to be removed from the communications.

 

  1. Right to objection

You can unsubscribe from the newsletter at any time and can also withdraw consent from the storage of the processed data for the purposes of delivering the newsletter at any time.

 

  1. Description of the processing of data through the helpdesk/chatbot

We offer the possibility to communicate with us/our helpdesk through our chatbot. This is based on your consent as you initiate the communication. The following data are collected if you are logged in:

  • First name;
  • Last name;
  • Email address;
  • Company name;
  • Information on browser type and version;
  • Date, time and approximate location from which the communication was initiated;
  • Additional information that is provided by you.

 

  1. Legal basis

When you initiate the communication through our chatbot the legal basis for the processing is Art. 6 (1) lit. a GDPR as you have given consent.

 

  1. Purpose of processing

The purpose of processing the concerned data is to reply to your request and provide you with the necessary information or support.

 

  1. Duration of storage

The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected.

 

  1. Right to objection

You have the option to revoke to your consent, which results in ending the communication with Prewave.

VI. Customer/User relationship management and contract management

  1. Description of the processing of data

Prewave processes information in the course of managing the pre-contractual and contractual relations with Users or Customers. The following data are processed:

  • Master data of the User/Customer and of the individuals acting on its behalf (first and last name, title, position, etc.);
  • Contact data of the User/Customer and of the individuals acting on its behalf (company, telephone, email, physical business address);
  • Correspondences with the User/Customer (logs, records, comments, offers, contracts, etc.);
  • Data of the User/Customer (contracts, offers, presentations, etc.).

 

  1. Legal basis

The legal basis for processing the data is Art. 6 (1) lit. c regarding legal retention obligations, and Art 6 (1) lit. f GDPR.

 

  1. Purpose of processing

The purpose of processing is to manage the (pre-)contractual relations with Users and Customers and to comply with the legal requirements for retaining data.

 

  1. Duration of storage

The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected or to comply with retention obligations.

 

  1. Right to objection

The processed data is absolutely necessary for our Customer/User information and relationship management, especially in order to perform our contracts, thus you have no option to object.

VII. Prewave internal communication

  1. Description of the processing of data

Prewave communicates internally to coordinate the initiation and fulfilling of contracts with Users/Customers. The following data is processed:

  • User/Customer (contracts, offers, presentations, etc.);
  • Individuals acting on behalf of the User/Customer (name, email, position).

 

  1. Legal basis

The legal basis for processing the data is Art 6 (1) lit. f GDPR.

 

  1. Purpose of processing

The purpose of processing is to conclude and perform the contracts with the User/Customer as well as to document relevant communication.

 

  1. Duration of storage

The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected.

 

  1. Right to objection

You have no option to reject, as we can only provide and operate our services based on internal communication.

VIII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards the controller (Prewave):

 

  1. Right to Access

You can request confirmation as to whether personal data concerning you is being processed by us and if so, to which extent.

 

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

 

  1. Right to rectification

You have a right to rectification and/or completion of your data towards the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the rectification without undue delay.

 

  1. Right to Restriction of Processing

You may request the restriction of the processing of your personal data pursuant to Art. 18 GDPR.

 

If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or one of its Member States.

If the processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

 

  1. Right to Erasure

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds of Art. 17 GDPR applies.

 

Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

 

The right to erasure does not apply if the processing falls within an exception pursuant to Art. 17 (3) GDPR.

 

  1. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right towards the controller to be informed about these recipients.

 

  1. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data or have it transmitted to another controller without hindrance from the controller to which the personal data has been provided.

 

  1. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) lit. e or f GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

  1. Right to withdraw Consent

You have the right to withdraw your declaration of consent law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

 

  1. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.



  1. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

IX. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices. The latest version will be posted on this page with the effective date.

X. Contact Us

In order to exercise any of the above-mentioned rights or if you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at privacy@prewave.ai.

Privacy Policy

Prewave GmbH, April 2024 (V 1)

Appendix 1: List of third party services

Purpose of Processing Processor/ Contracting Entity Categories of Personal Data Location of Processing Agreement/ Mechanism for Transfer outside EU (Concluded SCCs, DPF certified)
Customer/User information and relationship management (CRM) HubSpot Germany GmbH - User’s/Customer’s employee (name, position, etc.) - User’s/Customer’s employee or the professional entity itself (telephone, e-mail) - Correspondences (name, mail address, newsletters, logs, records, comments, offers, contracts, etc.) US Yes
Communication Slaask, Inc. - User’s/Customer’s employee contact data (name, mail address) if logged in - Browser type information - Date, time and potentially location from which a conversation is started - Correspondences US Yes
Google Mail - Google Cloud EMEA Limited - Correspondences US Yes
Prewave internal communication Slack Technologies Limited - User/Customer (contracts, offers, presentations, etc.) US Yes
Google Mail - Google Cloud EMEA Limited - User/Customer (contracts, offers, presentations, etc.) US Yes
Contract management Ironclad, Inc. - User’s/Customer’s employee or contact person master data (first and last name, title, position, employer, etc.) - User’s/Customer’s employee or contact person contact data (company, e-mail, phone, physical business address) - User/Customer (contracts, offers, presentations, etc.) EU //
CRM integration for customer contract management tool Matic, LLC - User’s/Customer’s employee or contact person master data (first and last name, title, position, employer, etc.) - User’s/Customer’s employee or contact person contact data (professional entity, e-mail, phone, physical business address) - User/Customer (contracts, offers, presentations, etc.) US Yes
Data transfer platform Segment (Twilio Inc.) - User’s/Customer’s employees (name, e-mail) - Data of the individual (name, e-mail) - Activities in Prewave Network of the individual (usage, features, logins, etc.) - Communication data (IP address, etc.) US Yes

Prewave is hosting its Services and data on the Google Cloud Platform (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland).