Privacy Policy
WayPoint
Last updated: May 2026
Who We Are
This privacy policy explains how WayPoint (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website.
WayPoint is the data controller for the personal data collected through this website. We are based in Austria and this policy is governed by the General Data Protection Regulation (GDPR) and applicable Austrian data protection law.
If you have any questions about this policy or how we handle your data, please contact us at: [insert contact email]
What Data We Collect
We collect only the data you provide directly to us and data collected automatically through standard website tools.
Data you provide to us
- Your name
- Your email address
This data is collected when you subscribe to our newsletter or submit a contact form.
Data collected automatically
- IP address
- Browser type and version
- Pages visited and time spent on the site
- Referring website or source
This data is collected through Google Analytics (see Section 5).
Why We Collect Your Data
We collect and process your data for the following purposes:
- To send you our newsletter and updates you have subscribed to — legal basis: your consent (Article 6(1)(a) GDPR)
- To respond to enquiries you send us — legal basis: legitimate interest (Article 6(1)(f) GDPR)
- To understand how visitors use our website and improve our content — legal basis: legitimate interest (Article 6(1)(f) GDPR)
We do not use your data for automated decision-making or profiling.
Newsletter and Email Marketing
If you subscribe to our newsletter, your name and email address will be processed by MailerLite (an email marketing platform operated by MailerLite UAB, based in Lithuania, European Union).
As MailerLite is headquartered within the EU, your data remains subject to GDPR protections. No international data transfer outside the EEA takes place in the ordinary course of processing.
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. Unsubscribing will not affect any other interaction you have had with us.
MailerLite’s privacy policy is available at: mailerlite.com/legal/privacy-policy
Google Analytics
We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous information about your visit, including which pages you viewed, how long you stayed, and how you arrived at the site.
This data is processed by Google LLC and may be transferred to servers in the United States. Google is certified under the EU-US Data Privacy Framework.
We have enabled IP anonymisation in Google Analytics, meaning your full IP address is never stored.
You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout or by adjusting your cookie preferences through our cookie banner.
Google’s privacy policy is available at: policies.google.com/privacy
Cookies
Our website uses cookies. Cookies are small text files stored on your device that help us understand how you use the site.
- Essential cookies — necessary for the website to function. These cannot be disabled.
- Analytics cookies — used by Google Analytics to collect anonymous usage data. These are only set with your consent.
When you first visit our website, you will be asked to accept or decline non-essential cookies. You can change your preferences at any time through your browser settings.
How Long We Keep Your Data
- Newsletter subscribers — we retain your name and email address for as long as you remain subscribed. Upon unsubscribing, your data is deleted within 30 days.
- Contact enquiries — we retain correspondence for up to 2 years, after which it is deleted.
- Analytics data — Google Analytics data is retained for 14 months by default.
Your Rights Under GDPR
As a resident of the European Union or European Economic Area, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your personal data in certain circumstances.
- Right to restrict processing — you can ask us to limit how we use your data.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
We will respond within 30 days.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data transmitted between your browser and our server.
However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data.
Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website after any changes constitutes your acceptance of the updated policy.