Privacy Policy

1. Responsible Party & Hosting

Wayliworld
Fabio Fahringer
Achenweg 42
6345 Kössen, Austria
Email: support@wayliworld.com

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement (DPA) according to Art. 28 GDPR ensures the protection of your data.

Our Wayli App is hosted by Hostinger International Ltd. More information about Hostinger can be found here: https://www.hostinger.com/legal/privacy-policy .

2. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR) – e.g., for marketing, push notifications, or cookies.
• Contract performance (Art. 6(1)(b) GDPR) – e.g., app usage, orders, or subscriptions.
• Legitimate interest (Art. 6(1)(f) GDPR) – e.g., IT security or statistics.
• Legal obligation (Art. 6(1)(c) GDPR) – e.g., tax retention requirements.

3. Purposes of Data Processing

• Registration and use of the Wayli App (e.g., Travel Feed, Groups, Bill Splitter, Memories).
• Processing purchases or subscriptions in the Wayli Shop.
• Sending push notifications (with consent).
• Technical administration, security, and maintenance.
• Statistical analyses to optimize our services.
• Customer service and communication regarding inquiries.

4. Collected Data & Retention Periods

• Registration data: First name, last name, email, password, date of birth, gender.
• App data: Groups, travel plans, shared content, payments.
• Shop data: Billing address, payment information (via PayPal or Stripe).
• Technical data: IP address, browser type, operating system, access time, log files.

Retention periods:

• Account and registration data: until account deletion.
• Shop and payment data: 7 years (legal retention).
• Log data: 3 months, then anonymized.
• Marketing and push data: until consent is revoked.

5. Sharing with Third Parties

Data is only shared if legally permitted or necessary for contract fulfillment.

• PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg – Privacy Policy
• Stripe, Inc., USA – Privacy Policy
• OneSignal, Inc., USA – Push notifications: Privacy Policy

Data transfer to third countries: Transfer to the USA may occur. Protection is ensured via Standard Contractual Clauses (SCCs) according to Art. 46 GDPR.

6. Cookies & Tracking

Our website and app use cookies to enhance usability. You can change your consent at any time via the cookie banner.

• Necessary cookies: login, shopping cart, security.
• Statistics cookies: anonymous usage analysis.
• Marketing cookies: personalized content (only with consent).

Cookie management: Cookiebot (Cybot A/S, Copenhagen).

7. Web Analytics with Google Analytics

We use Google Analytics (Google Ireland Ltd., Dublin). Your IP address is anonymized before storage. You can disable tracking via the cookie banner or browser add-on: Opt-Out Link.

8. Push Notifications

We use OneSignal for push notifications in the app. Activation only with consent. You can disable push notifications anytime in the app settings or device menu.

9. Your Rights under GDPR

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Objection (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

Complaints can be addressed to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

10. Data Security

We protect your data through:

• TLS encryption (HTTPS)
• Access restrictions & password protection
• Regular backups and security updates

Server location: Germany (IONOS SE, certified data centers).

11. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy to legal or technical changes. The current version is always available on our website or in the app. Significant changes will be communicated via email or in-app notification.

12. Contact

Wayliworld
Fabio Fahringer
Achenweg 42
6345 Kössen, Austria
Email: support@wayliworld.com

This Privacy Policy was last updated on October 21, 2025.