Last updated: March 2026

1. Controller

WOLOHO GmbH, Managing Director: Reza Memari, Rückerstr. 5, 10119 Berlin. Email: hello@woloho.com, Phone: +49 176 11144789.
The appointment of a data protection officer is not required pursuant to Art. 37 Abs. 4 DSGVO in conjunction with § 38 Abs. 1 BDSG.

2. Collection and Processing of Personal Data

a) Visiting the Website

When you access www.woloho.com, your browser automatically collects and transmits the following data to our server: IP address, date and time of access, requested URL, referrer URL, browser type, operating system, and access provider. This data is temporarily stored in server log files and serves to ensure a smooth connection, comfortable use, system security, and administrative purposes. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. We do not use this data to draw conclusions about your identity.

b) Newsletter (Workletter, Loveletter, Homeletter, Special Promotions)

If you have given your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO, we use your email address to send our newsletters. In addition to the Workletter, Loveletter, and Homeletter, you may also subscribe to an optional mailing for special promotions, discounts, and news, which are sent at irregular intervals. To subscribe, only your email address and the selection of your desired Letter are required. Registration follows a double opt-in procedure. Upon registration, your IP address, timestamp, and user agent are stored in a local GDPR log in order to document your consent. This log entry is automatically anonymised after 3 years.

Delivery via Mailjet:
Newsletters are sent via Mailjet (Mailjet SAS, 13-13bis rue de l’Aubrac, 75012 Paris, France, Sinch Group). Mailjet stores email addresses and other data and uses them to send and analyse newsletters on our behalf. The emails sent contain a tracking pixel and links that enable us to measure open and click rates. We have concluded a DPA with Mailjet pursuant to Art. 28 DSGVO. If you do not wish to be tracked, you must unsubscribe from the newsletter. You may do so at any time via the “Unsubscribe from all Letters” link at the bottom of each newsletter or by emailing hello@woloho.com. Upon unsubscription, your contact is completely deleted from Mailjet. Further information: mailjet.com/de/rechtliches/sicherheit-datenschutz/

c) Creating a Listing

On our website, you can create listings in the various Letters. Your name and a valid email address are required. Depending on the Letter and category, additional information may be necessary (e.g., location details for events, apartment details). Optionally, a logo, phone number, and website may be provided and published.

For paid listings, a billing address and contact details of a contact person are additionally required. This data is not published and is used exclusively for confirmation emails and internal enquiries.

The legal basis for free listings is Art. 6 Abs. 1 lit. a DSGVO (consent); for paid listings, it is Art. 6 Abs. 1 lit. b DSGVO (performance of a contract).

Listings are not automatically deleted after the booked duration expires. Individual listings can be deleted at any time via your customer account or by requesting deletion by email to hello@woloho.com. For information on what happens to your data when you delete your account, please refer to section 2d.

d) Customer Account for Advertisers

For paid listings, we offer a customer account on our website. This account stores company data, account balance, and active and past listings. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (performance of a contract).

Upon deletion of the account, all personal data is anonymised: listings older than 3 months are anonymised immediately; more recent listings are anonymised retroactively via an automated daily process. Orders are retained due to statutory retention obligations; however, personal billing data is cleared. The account balance is set to 0, the newsletter contact at Mailjet is completely deleted, and all account metadata is removed.

e) Contact by Email

If you contact us by email, we process the transmitted data to handle your enquiry. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest) or Art. 6 Abs. 1 lit. b DSGVO for pre-contractual measures. The data is deleted once the enquiry has been resolved.

3. Hosting

Our website is hosted by WL Artworld Solutions GmbH, Weydingerstraße 6, 10178 Berlin. The hosting provider processes the data collected during website visits (see section 2a) on our behalf and handles maintenance and backups. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. We have concluded a DPA pursuant to Art. 28 DSGVO.

4. Cookies

Our website uses only technically necessary cookies. A cookie banner or consent is not required for these. The legal basis is § 25 Abs. 2 TDDDG in conjunction with Art. 6 Abs. 1 lit. f DSGVO.

The following cookies are set:

• Session cookie (PHPSESSID): Session management, deleted at the end of the session
• WooCommerce session cookie: Shopping cart and checkout functionality
• WPML language cookie: Storage of your language preference

No analytics, marketing, or third-party cookies are used.

5. Web Analytics with Matomo

We use the open-source software Matomo for statistical analysis of website usage. Matomo is operated on our own server (self-hosted), so all data remains with us and is not transmitted to third parties.

Matomo operates without cookies and with full IP anonymisation. Since no access to your device takes place, consent pursuant to § 25 Abs. 1 TDDDG is not required. The legal basis for processing is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in analysing website usage to improve our services).

6. Payments

a) WooCommerce

We use the open-source plugin WooCommerce to process orders. All order and customer data is processed exclusively on our own server. No order or payment data is transmitted to Automattic or any other third parties.

b) Stripe

For payments by credit card, Apple Pay, and Google Pay, we use Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you select this payment method, your name, address, email address, IP address, and payment data are automatically transmitted to Stripe. This transmission serves the purposes of identity verification, payment administration, and fraud prevention. Stripe may share data with affiliated companies and subcontractors insofar as this is necessary for the performance of the contract. Privacy policy: stripe.com/de/privacy

c) PayPal

For PayPal payments, we use the services of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. When you select PayPal, your name, address, email address, IP address, and payment data are transmitted to PayPal. PayPal may transmit this data to credit reporting agencies for identity and credit checks. Privacy policy: paypal.com/de/webapps/mpp/ua/privacy-full

With both Stripe and PayPal, you may revoke your consent to the processing of personal data at any time by contacting the respective provider. A revocation does not affect data that must necessarily be processed for the contractual handling of payments.

d) Invoicing (FastBill)

We generate invoices via FastBill (FastBill GmbH, Wildunger Str. 6, 60487 Frankfurt am Main). We transmit contact data for this purpose and have concluded a DPA with FastBill. Privacy policy: fastbill.com/datenschutz

7. External Accounting

For accounting and tax processing, we transmit invoice data (name, address, invoice items) to Merle Gaydoff + partner, Rechtsanwälte und Steuerberater PartG mbB, Charlottenstraße 65, 10117 Berlin. The legal basis is Art. 6 Abs. 1 lit. c DSGVO (statutory tax retention obligations) as well as Art. 6 Abs. 1 lit. f DSGVO (proper bookkeeping). We have concluded a DPA pursuant to Art. 28 DSGVO.

8. Disclosure of Data

Your data will not be transmitted to third parties for purposes other than those stated herein. We only share your data if you have given your consent (Art. 6 Abs. 1 lit. a DSGVO), the disclosure is necessary for the establishment, exercise, or defence of legal claims (Art. 6 Abs. 1 lit. f DSGVO), a statutory obligation exists (Art. 6 Abs. 1 lit. c DSGVO), or it is necessary for the performance of contractual relationships (Art. 6 Abs. 1 lit. b DSGVO).

9. Data Subject Rights

Under the DSGVO, you have the following rights:

• Right of access to your stored data (Art. 15)
• Right to rectification of inaccurate data (Art. 16)
• Right to erasure of your data (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to withdraw consent with effect for the future (Art. 7 Abs. 3)
• Right to lodge a complaint with a supervisory authority (Art. 77)

10. Right to Object

Where your data is processed on the basis of legitimate interests (Art. 6 Abs. 1 lit. f DSGVO), you may object pursuant to Art. 21 DSGVO. If the objection is directed against direct marketing, we will comply immediately without requiring further justification. An email to hello@woloho.com is sufficient.

11. Data Security

We use TLS encryption for the transmission of data on our website and employ appropriate technical and organisational measures to protect your data against loss, destruction, or unauthorised access. Our security measures are continuously improved.

12. Currency of this Privacy Policy

This privacy policy is current as of March 2026. Due to the ongoing development of our website or changes in statutory requirements, amendments may become necessary. The most current version is always available on our website.