Privacy Policy

1. Data Controller

Patrick Trepte and Justin Räker (operating jointly as "Railwise")
Stümpflingstr. 1
85598 Baldham
Germany

Email: patrick@railwise.eu

2. Overview of Data Processing

We only process personal data to the extent necessary to provide our website and services. Processing is carried out in accordance with the GDPR (General Data Protection Regulation).

3. Hosting

Our website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, technical data transmitted by your browser is automatically collected:

• IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL

This data is technically necessary to display the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable provision of the website).

Vercel is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses (SCCs) to safeguard data transfers.

More info: https://vercel.com/legal/privacy-policy

4. Web Analytics (Vercel Analytics)

We use Vercel Analytics, a privacy-friendly analytics service. This service operates without cookies and does not collect personal data. Only aggregated, anonymized usage statistics are collected.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage).

5. Waitlist (Email Storage)

When you sign up for our waitlist, we store your email address to inform you about the launch and news regarding Railwise.

The data is stored with Supabase Inc. The server location is AWS EU West 2 (London, United Kingdom). An adequacy decision by the EU Commission exists for the United Kingdom, ensuring an adequate level of data protection. Supabase Inc. is a US company certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent by entering your email address).

Storage duration: We store your email address until the launch of our app. After launch, you will have the opportunity to register as a user. If no registration occurs within 6 months after launch, your data will be deleted. You can request earlier deletion at any time.

Withdrawal: You can withdraw your consent at any time and request the deletion of your email address. To do so, write to us at patrick@railwise.eu.

More info: https://supabase.com/privacy

6. Bot Protection (Cloudflare Turnstile)

To protect against automated access and spam, we use Cloudflare Turnstile from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA).

Turnstile is a privacy-friendly alternative to traditional CAPTCHAs and does not set tracking cookies. However, technically necessary data may be stored in the browser to enable bot detection.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against misuse).

Cloudflare is certified under the EU-US Data Privacy Framework.

More info: https://www.cloudflare.com/privacypolicy/

7. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR): You can request information about your stored data.
• Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Erasure (Art. 17 GDPR): You can request the deletion of your data.
• Restriction (Art. 18 GDPR): You can request the restriction of processing.
• Data portability (Art. 20 GDPR): You can receive your data in a common format.
• Objection (Art. 21 GDPR): You can object to the processing.
• Withdrawal (Art. 7(3) GDPR): You can withdraw consent at any time.

To exercise your rights, write to us at patrick@railwise.eu.

You also have the right to lodge a complaint with a data protection supervisory authority.

8. Data Transfer to Third Countries

Some of our service providers are based in the USA. Data transfer is carried out on the basis of the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

9. Cookies

Our website does not use tracking cookies. Only technically necessary data is stored in the browser that is required for the website to function.

10. Changes

We reserve the right to adapt this privacy policy to comply with changed legal requirements or changes to our website.