HomePrivacy Policy

Privacy Policy

1. Data Controller Information

The website www.wranglegeist.com (operating under the commercial brand name wranglegeist) is the primary Data Controller responsible for the collection, processing, and storage of personal data under this Privacy Policy, in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and applicable United States privacy regulations.

  • Data Controller Name: www.wranglegeist.com (wranglegeist)
  • Location: Germany
  • Official Contact Email: questionnaire@wranglegeist.com

2. Scope and Principles of Data Processing

We collect and process personal data strictly to fulfill our contractual obligations, respond to service enquiries, deliver customized form and questionnaire data cleaning solutions, and maintain commercial compliance.

We adhere to the principles of data minimization, purpose limitation, transparency, and statutory accountability. Personal data is never sold, leased, or rented to external parties.

3. Categories of Data Collected

We collect only data necessary for service communication, project execution, and payment settlement:

  • Identity & Contact Details: Full name, business email address, phone number, and commercial billing address submitted via enquiry forms or direct correspondence.
  • Service Submission Data: Dataset structures, sample questionnaire fields, and processing parameters provided by clients for evaluation or transformation.
  • Transaction & Billing Data: Invoices, payment records, order references, and tax documentation required for accounting and project verification.
  • Technical Information: IP addresses, browser types, basic access timestamps, and necessary session logs gathered automatically to ensure network stability and server operation.

4. Legal Basis for Processing

We process personal data under the following legal frameworks:

  • Performance of Contract (Article 6(1)(b) GDPR): Processing required to evaluate project scope, prepare custom commercial proposals, execute upfront deposits, and deliver finalized data processing services.
  • Legal Obligation (Article 6(1)(c) GDPR): Processing required to adhere to statutory commercial, tax, and accounting standards under German commercial law (HGB and AO) and relevant international regulations.
  • Legitimate Interests (Article 6(1)(f) GDPR): Processing essential to ensure website security, fraud prevention, and smooth operational management.

5. Payment Processing via Stripe

To execute billing and receive deposit or balance payments safely, www.wranglegeist.com uses the services of Stripe as an independent third-party payment processing provider.

  • Payment Execution: When clients make payments, payment card details, billing names, card verification codes, and associated transaction data are collected and processed directly by Stripe.
  • Data Security & Isolation: www.wranglegeist.com does not store, transmit, or retain full credit/debit card numbers or sensitive security codes on its own servers. Transaction data is processed via Stripe using encrypted transmission mechanisms.
  • Stripe Privacy Terms: The processing of transaction data by Stripe is governed by Stripe’s Privacy Policy. You may consult Stripe’s privacy documentation directly on their official website for details regarding their regulatory compliance and security practices.

6. Data Retention Period

Personal data processed by www.wranglegeist.com is retained only for as long as necessary to fulfill the purposes for which it was collected, or as mandated by mandatory statutory retention rules under European, German, and United States law:

  • Commercial & Tax Records: In accordance with Section 147 of the German Fiscal Code (Abgabenordnung – AO) and Section 257 of the German Commercial Code (Handelsgesetzbuch – HGB), transactional documentation, invoices, contracts, and relevant commercial correspondence are retained for up to 10 years.
  • Enquiry & Project Records: General correspondence, dataset specifications, and communication related to project proposals are retained for up to 3 years following the end of the calendar year in which the client relationship concluded, aligning with standard statutory limitation periods under the German Civil Code (BGB).
  • Technical Server Logs: Access and security logs collected for server maintenance and stability are retained for a brief period (typically up to 30 days) before automatic deletion or anonymisation, unless required for active security investigations.

7. International Data Transfers

When personal data is transferred across international boundaries—including between European jurisdictions and the United States—wranglegeist ensures appropriate safeguards are in place. Transfers to third-party infrastructure providers (such as hosting, server, or processing partners) rely on Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent adequacy decisions to maintain equivalent standards of data protection.

8. Data Security Measures

www.wranglegeist.com implements robust technical, organizational, and administrative controls designed to safeguard personal data against unauthorized access, loss, alteration, or disclosure. These measures include strict access controls, secure socket layer (SSL/TLS) encryption protocol across web channels, and restricted operational data permissions.

While we employ comprehensive industry-standard controls to preserve data integrity, please note that no method of electronic transmission over the internet or method of digital storage can be guaranteed as entirely immune from external interference.

9. Rights of Data Subjects

Clients and users located in the European Union or applicable United States jurisdictions hold specific statutory rights regarding their personal data:

  • Right of Access (Article 15 GDPR): The right to request confirmation as to whether your personal data is being processed and obtain a copy of that data.
  • Right to Rectification (Article 16 GDPR): The right to request correction of inaccurate or incomplete personal records.
  • Right to Erasure (Article 17 GDPR): The right to request deletion of personal data when it is no longer required for its original purpose or statutory retention obligations have expired.
  • Right to Restrict Processing (Article 18 GDPR): The right to request restricted handling of personal data under specific statutory conditions.
  • Right to Data Portability (Article 20 GDPR): The right to receive personal data in a structured, commonly used machine-readable format.
  • Right to Object (Article 21 GDPR): The right to object to data processing carried out under legitimate interest grounds.
  • Right to Lodge a Complaint: EU residents have the right to submit a complaint to their local Data Protection Supervisory Authority (Datenschutzbehörde in Germany) if they believe their data rights have been infringed.

To exercise any of these rights, please contact us directly at questionnaire@wranglegeist.com.

10. Updates to This Privacy Policy

wranglegeist reserves the right to modify this Privacy Policy as necessary to reflect operational updates, technological advancements, or changes in statutory legal requirements. The updated version will be made effective upon publication on www.wranglegeist.com.