Privacy
Last updated: November 2026
1. Controller
Whitewerk
Haberstraße 15, 69126 Heidelberg, Germany
Represented by Managing Director Mikail Aslan
Phone: +49 151 2268 3564 · Email: kontakt@whitewerk.com
Whitewerk is a brand of Aslan Conversions UG (haftungsbeschränkt).
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Pages are delivered through Vercel’s global network. The website consists of static pages and individual server functions for form inquiries. Server functions run in the EU, in Frankfurt (fra1).
When you visit, Vercel processes technically necessary data on our behalf in server log files, particularly your IP address, access date and time, requested page, browser type and operating system. These data are needed to deliver the website and prevent attacks and are deleted as soon as no longer required for those purposes. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Our data processing agreement with Vercel includes the European Commission’s Standard Contractual Clauses.
3. Cookies and local storage
Fonts and symbols are served locally from our own server; no connections to Google servers are made for fonts. We use no advertising services. Without your consent we set no cookies and load no Google services.
Your browser’s localStorage stores your selected currency (EUR or USD) under ww-cur and your decision on Google Analytics under ww-consent-v1. The currency entry contains no personal data and remains until you change it or clear browser storage. Its sole purpose is to display prices in your chosen currency. We store your decision so that we can respect it and demonstrate it (Art. 6(1)(c) and (f) GDPR, Section 25(2) No. 2 of the German TDDDG).
You can change or withdraw your choice at any time through “Privacy settings” in the footer. Consent applies until you withdraw it or until we ask again because of a change. Withdrawal does not affect the lawfulness of processing up to that point.
Statistics with Google Analytics
With your consent we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). The purpose is statistics. We see which pages are viewed, how far they are read and which links and forms are used. We also see how many inquiries our server has accepted (event generate_lead). We send Google neither your name, contact details or website address nor the content of your inquiry. Page addresses reach Google without URL parameters, so a company name contained in a personal demo link is not transmitted.
Google processes in particular shortened location and device information, browser data, pages visited and a random identifier. A transfer to Google LLC in the USA is possible; it is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG. Google Analytics is not loaded before you consent. The cookies _ga and _ga_92P0Z97K23 expire after at most 2 years; Google keeps event data for at most 14 months. You can withdraw your consent at any time through “Privacy settings” in the footer; we then delete the cookies and no longer load Google Analytics. More information: policies.google.com/privacy
4. Contact
If you contact us by email, phone, WhatsApp or our inquiry form, we process the information you provide to handle your inquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the inquiry concerns a contract, otherwise our legitimate interest in answering your inquiry (Art. 6(1)(f) GDPR). Data are deleted as soon as no longer needed for this purpose, unless statutory retention obligations apply.
You are not obliged to provide data, but we cannot answer your inquiry without contact details.
Inquiry form
We process your name and email address and, where provided, agency, website, selected services and message. The language, page address and elapsed time since the page loaded are also transmitted. Name and email address are required. We use these details solely to handle your inquiry and follow-up questions on the legal bases stated above.
Vercel receives the form. We then send your details by email through Resend (Plus Five Five, Inc., USA), EU region (eu-west-1), to our mailbox kontakt@whitewerk.com. Resend processes these details on our behalf (Art. 28 GDPR). For transfers to third countries, the data processing agreements provide for the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).
To prevent automated submissions, the form includes a hidden field and a timing check. These use no cookies or additional services and store no additional data, apart from temporary IP-based rate limiting. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We delete your details as soon as no longer required for their purpose, unless statutory retention obligations apply.
If you contact us through WhatsApp, WhatsApp (WhatsApp Ireland Limited, Ireland) processes your phone number, communication data and message contents under its own privacy policy. Visiting our website alone does not transmit data from us to WhatsApp.
We handle your message to answer your inquiry under Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for other matters. The retention periods in section 4 also apply. You may contact us by phone or email instead.
Business contact details from public sources
We process business contact details from the imprint or contact page of your website to offer you our services. The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR). The controller is Aslan Conversions UG (haftungsbeschränkt), address above. After an objection only the entry on our block list remains.
You can object at any time (Art. 21 GDPR) at no cost other than basic-rate transmission costs. A short reply to our email is enough.
Part of our business directory comes from OpenStreetMap: © OpenStreetMap contributors, available under the Open Database License (ODbL). Source: openstreetmap.org/copyright
5. Links to other websites
When you follow external links, the respective operator’s privacy policy applies. We do not transmit data to these operators before you click a link.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Withdrawal does not affect the lawfulness of processing before withdrawal. Contact the address above or reply to our email to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
Right to object under Art. 21 GDPR
Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. Where we process data for advertising, you may object at any time without giving reasons; we will then stop processing your data for those purposes.