Privacy Policy
We are committed to respecting your privacy and protecting your personal information.
Last updated: February 24, 2026
Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is We Build Products GmbH, Kolonnenstraße 8, 10827 Berlin, Germany. You can reach us at hello@webuildproducts.dev or +49 30 220 77621. For full company details, see our Imprint.
Data Protection Officer
You can reach our data protection officer at We Build Products GmbH, Kolonnenstraße 8, 10827 Berlin, Germany — hello@webuildproducts.dev.
Your Rights Under the GDPR
You have the following rights regarding your personal data. To exercise any of them, contact us using the details above.
- Access (Art. 15) — obtain a copy of your personal data
- Rectification (Art. 16) — correct inaccurate or incomplete data
- Erasure (Art. 17) — request deletion of your data
- Restriction (Art. 18) — restrict processing under certain circumstances
- Portability (Art. 20) — receive your data in a machine-readable format
- Objection (Art. 21) — object to processing based on legitimate interests
- Withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting prior processing
- Lodge a complaint (Art. 77) — file a complaint with the Berlin Commissioner for Data Protection and Freedom of Information
Server Log Files
Our hosting provider automatically collects browser type, operating system, referring URL, hostname, request time, and IP address in server log files. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in error-free operation) and is deleted after 30 days.
Contact Forms & Job Applications
When you submit a contact form or job application, we process your name, email, message, and any attachments to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). For job applications, Art. 88 GDPR in conjunction with § 26 BDSG also applies. Application data is deleted after six months unless you consent to longer storage.
Cookies
Our website uses cookies — small text files stored on your device. When you first visit, a consent banner appears. Only strictly necessary cookies (e.g. the consent preference itself) are set without consent, based on Art. 6(1)(f) GDPR. Analytics and marketing cookies are only activated after your explicit consent per Art. 6(1)(a) GDPR. You can change your preferences at any time via “Cookie Settings” in the footer.
- Strictly necessary — essential for the website to function; cannot be disabled
- Analytics — Google Analytics cookies (_ga, _gid) to understand how visitors use the site; IP anonymization is enabled
- Marketing — cookies from Google Ads (_gcl_*) and Meta (_fbp) to measure ad campaigns and deliver relevant content
Google Tag Manager
We use Google Tag Manager (Google Ireland Limited) to manage tracking tags. It does not set cookies or collect personal data itself. We use Google Consent Mode v2 to ensure analytics and marketing tags only fire after you grant consent.
Third-Party Services
- Hosting — Amazon Web Services (AWS Amplify) processes server log data on our behalf. AWS is certified under the EU–U.S. Data Privacy Framework. See the AWS Privacy Notice.
- Email (SendGrid) — Twilio SendGrid delivers transactional emails (contact confirmations, application receipts). Legal basis: Art. 6(1)(b) GDPR. Twilio is certified under the EU–U.S. Data Privacy Framework.
- Google Fonts — Fonts are loaded locally from our server. No data is transmitted to Google.
Data Transfers Outside the EU
Some third-party services are based in the United States. Transfers are safeguarded by the EU–U.S. Data Privacy Framework (Art. 45 GDPR). Where no adequacy decision applies, we rely on Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Data Security
This website uses TLS/SSL encryption to protect the transmission of personal data. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or applicable law. The date at the top indicates when it was last updated.