This Privacy Policy lets you know how we collect, use, share, and protect information about you. By interacting with Wavecare through our websites, mobile applications, social media, and any other Wavecare’s affiliate websites where you may interact with Wavecare, you consent to the practices described in this Privacy Policy. Any changes in our Privacy Policy will appear on this page so that you are aware of the data we collect and how we use it.

1. What is personal Data?

Personal data is any information relation to an person. Personal data includes e.g. name, email address or telephone number, information about hobbies, memberships or websites viewed. Personal data also includes location data, online identifier such as the IP-adress or other unique device identifier.

1. Who is the Controller of my Data? How is my data processed?

The controller (“we”, “us”, “our” or “Wavecare”) is

Wavecare ApS

Carl Jacobsensvej 20, 3

2500 Valby, Copenhagen

Denmark

Email:  contact@wavecare.com

Phone: +45 33 22 88 02

Other controllers processing your data may also be mentioned in this Privacy Policy.

We offer products on our website www.wavecare.dk (the “Website”). Your personal data collected by Wavecare might be used for the following purposes:

• To provide the functioning of Service,
• To implement the applicable Policies (Social Media & Website Privacy Policy) and carrying out our service,
• To identify and analyze your use of our website and improve it with our legitimate interests of marketing,
• To communicate with you, including via email (for example, for our newsletter or contact form),
• To conduct research and analytics on our user base, or
• As otherwise explained in our applicable Policies or by any communication by us.

Where you choose to contact us, we may need additional information to fulfill your request or to respond to your inquiry. We may provide you with additional data protection related information where the scope of the inquiry or request and personal information we may require fall outside the scope of this Privacy Policy.

III. How is my Data processed when visiting our Websites or Mobile Application, signing up for the newsletter and when you contact us?

Information We Collect

We want you to understand how information you provide to us is collected and used. When you interact with Wavecare, mobile application or use our services, we collect certain information about you and the services you use. An example of using our “services” would be when you visit one of our websites, and social media channels. We may collect and store information from you in the following situations:

Information you provide to us directly, including when you: 

• Participate in a contest, promotion, or survey;
• Correspond directly with us, such as through our websites, postal mail, customer service; or
• Post a review or comment on one of our websites, or post other user-generated content on one of our websites or mobile application.

Log Information

• This includes details of how you used our websites or mobile applications including clicks and page information such as the address (or URL) of the website or mobile application you came from before visiting our website or mobile application, which pages you visit on our website or mobile application, which browser you used to view our website or mobile application, and any search terms entered.
• Other information from your interaction with our websites, services, content and advertising, including computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information.

Information we collect when you use our services, including:

Device Information

• We may collect device-specific information when you visit our websites or use our mobile applications or services. This includes information such as Internet Protocol (IP) address, hardware model, operating system, unique device identifiers, mobile network information, location data such as zip code, the address of referring websites, the path you take through our websites, and other information about your session on our websites. We may also associate the information we collect from your different devices, which helps us provide consistent services across your devices.

How We Use Your Information

Our primary purpose in collecting information is to provide you with a safe, smooth, efficient, and customized experience. We may use your information in a variety of ways, including for the following purposes:

Product and Service Fulfillment

• We use your contact information to respond to your inquiries, fulfill your requests and improve your experience.

Our Marketing Purposes

• We use your information to deliver newsletters, emails, and social media notifications about our brand, products, events or other promotional purposes.
• We use your information for reporting and analysis purposes. We examine metrics such as how you are using our website, and on our mobile applications, the performance of our marketing efforts, and your response to those marketing efforts.
• We use your information to administer promotions and surveys.
• We use your information to enable Online Tracking and Interest Based Advertising as further described in this Privacy Policy.
• We use your information to improve your experiences when you interact with us.

Internal Operations

• We use your information to improve the effectiveness of our services, conduct research and analysis, or to perform other business activities as needed.

Visiting the Website

If you browse our Website we collect and store information automatically in so-called “server-log-files” that your browser transfers to us. These are:

type/version of the browser, system software used, referrer URL, hostname of the device, time of the server request, IP-address or other unique device identifier.

If you are using a mobile device the following data are collected additionally through the Website: country code, language, hostname of the device, name and version of the operational system.

We use this data only for statistical analysis for the purpose of operation, security, and optimization of our Website. This data processing is based on GDPR as we wish to achieve the legitimate interests of stabilizing and improving our Website,

Newsletter

With the newsletter we inform the user about the Website, our Service and us.

When registering for the newsletter, you must provide an email address. This email address will be transmitted to and stored by us (or a provider as specified below), based on your consent, see GDPR.

Where required by law, following the registration, you will receive an email to confirm the registration (known as the “double opt-in”). By clicking the registration link you confirm that you have given your consent to the processing of your personal data for receiving our newsletter. In case of your registration for the newsletter, we (or our provider as specified below) also store your IP address, the device name, the mail provider as well as the name and the date of registration. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

To receive our newsletter, you are only required to provide your e-mail address. After your confirmation (where required by applicable law), we store your e-mail address solely for providing you with the newsletter. The legal basis for the processing of your personal data for sending the newsletter is your consent, see GDPR.

Use of Mailchimp; Transfer of Data outside the EU

The mail provider “Mailchimp” by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA receives and processes on our behalf the data necessary for the newsletter, in particular email address, IP address, device name. This data is processed on servers in the USA. We entered into a so-called Data Processing Agreement (“DPA”) to comply with the requirements under Art. 28 GDPR with MailChimp that defines roles and responsibilities of us as the controller and data exporter and MailChimp as the processor and data importer with regards to the respective data processing. As part of the DPA, MailChimp agrees to abide by and process personal data that is subject to GDPR in compliance with the Standard Contractual Clauses for processors approved by the European Commission (“SCC”), which are incorporated by reference and form an integral part of the DPA.

Mailchimp is a service with which the dispatch of newsletters can be organized and analyzed. With the help of Mailchimp we can analyze our newsletter campaigns. When you open an e-mail sent with Mailchimp, a file contained in the e-mail (so-called web beacon) connects to the Mailchimp servers in the USA. This allows us to determine whether a newsletter message has been opened and which links have been clicked on.

Details on Mailchimp and its privacy policy can be found here: https://mailchimp.com/legal/privacy/

If you do not want Mailchimp to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a respective link in every newsletter. The data stored for the purpose of newsletter subscription will be stored by us and MailChimp until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data stored by us for other purposes remain unaffected.

You can withdraw your consent to the processing of your personal data and for the sending of the newsletter at any time by sending an email to contact@wavecare.com

Note that unsubscribing from our newsletter will not prevent you from receiving services-related email communications when using our services (e.g., account verification, technical notices).

We may track your user behavior as further described in the description of the provider specified in the following.

Contacting us

When contacting us via email or phone, your details are stored for the purpose of processing the enquiry and, if applicable, follow-up questions are processed based on your consent (where required by applicable law), according to the legal basis of GDPR.

1. What Third Party Services, Cookies, Analytics and Links to Social Networks does the Website use?

Third Party Services

We may use Cookies and services of third parties such as Google, Vimeo, Facebook, LinkedIn and Twitter. These services include, among others, internet based advertising services, tracking technologies and social media functionalities. Please find further information about these third party services in our Social Media Privacy Policy.

YouTube

We use the YouTube service provided by Google LLC, D/B/A YouTube, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube: support-de@google.com, website: http://www.google.com/ . If you are located in the EU, please note that the processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that in third countries e.g., authorities can access the data collected.

The legal basis for the transmission of personal data is your consent in accordance with GDPR, which you have given on our website.

Videos from the YouTube platform are integrated into our website via the YouTube service. You can revoke your consent at any time. You can find more detailed information on withdrawing your consent either with the consent itself or at the end of this data protection declaration.

Further information on the handling of the transferred data can be found in the provider’s data protection declaration at https://policies.google.com/privacy.

Other transfers

If you have given us a separate consent to use and transfer your personal data, your personal data may be passed on to the recipients named therein. As part of the provision of third-party services on our Website, personal data may be passed on to third parties, for example, vendors helping us with the collection and distribution of informational materials for investors or investor candidates. In addition, no personal data will be transferred on to third parties unless, in individual cases, there is either a specific legal obligation requiring us to do so or if there is a specific legal justification for the transfer, and your interests or fundamental rights and freedoms do not prevail.

For jurisdictions outside the EU, any transfer of your personal data (including transfers to companies affiliated to us) shall be made in compliance with and, if applicable, on the relevant legal bases as set out in the data protection laws of your jurisdiction.

1. Access and Changes to this Privacy Policy

This Privacy Policy is accessible via our website at www.wavecare.com and may be downloaded and printed anytime.

We reserve the right to adapt this Privacy Policy as well as our additional privacy policies at any time, considering the currently applicable data protection provisions. We will publish the updated Privacy Policy and/or privacy policies on our website.

Contact
For any inquiries and additional questions about processing personal data please contact contact@wavecare.com

In order to offer you a convenient online service featuring numerous functions, our Website uses cookies and similar technologies such as pixels and Local Storage Objects (LSOs) like HTML5 (“Cookies”). Cookies help us to distinguish you from other users of our Website. They are usually saved on your device and do not cause any harm. Cookies facilitate the transfer of specific content, such as entering data, which has already been supplied, and helps us identify popular sections of our Website.

If you are located in the EU, the processing of personal data when using Cookies is based either on our legitimate interests to be able to run and operate our Website properly according to GDPR, or on your expressed consent (Opt-in) according to GDPR, depending on the category of the relevant Cookies. The provision of relevant detail information about the Cookies on our Website and your voluntary Opt-in is processed by our Cookie consent management layer upon your initial visit to our website.

How to withdraw my consent: You can withdraw your consent by deactivating the use of individual or all Cookies in the settings of your browser at any time. To find out how to change the settings, please consult the help function of your browser. You may also deactivate and manage a lot of online Cookies by different businesses on the US-website http://www.aboutads.info/choices/ or the EU-website http://www.youronlinechoices.com/uk/your-ad-choices/. However, we want to point out that without Cookies the use and comfort of use of our Website may be restricted.

Below we provide you with an overview of how your data is processed on our social media pages.

We, Wavecare ApS, Carl Jacobsensvej 20, 3, 2500 Valby, Copenhagen, Denmark, operate the following pages (“Social-Media-Pages”) on the following social media networks (“Social Media”):

• Facebook: facebook.com or mobile app by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA or Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, please refer to privacy notice https://www.facebook.com/policy.php, opt-out: https://www.facebook.com/ads/preferences or https://www.facebook.com/settings;

• Twitter: twitter.com or mobile app by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, please also refer to privacy notice https://twitter.com/en/privacy, opt-out: https://twitter.com/personalization;

• LinkedIn: linkedin.com or linkedin mobile app by LinkedIn Corporation, Legal Department – Privacy, 1000 W. Maude Ave, Sunnyvale, CA 94085, USA / LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, please also refer to https://www.linkedin.com/legal/privacy-policy / https://www.linkedin.com/psettings/privacy 

• YouTube: youtube.com or mobile app by Google LLC 1600, Amphitheatre Pkwy, Mountain View, CA 94043, USA, Google Ireland Ltd., Gordon House Barrow St Dublin 4 Ireland, please also refer to privacy notice: https://policies.google.com/privacy, settings: https://www.youtube.com/account, https://policies.google.com/privacy#infochoices

• Instagram: instagram.com or mobile app by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, please refer to privacy notice http://instagram.com/about/legal/privacy/; opt-out: https://www.instagram.com/accounts/privacy_and_security/

1. Controller for Data Processing

When you visit our Social-Media-Pages, personal data is processed both by us and by the responsible social media provider as the responsible party.

The respective provider of Social Media assumes the data protection obligations towards you as the user, such as information on data processing, and is the contact person for your rights. This follows from the fact that such provider has direct access to the relevant information on the Social-Media-Page and the processing of your personal data.

2. Transmission of Data; Data Processing outside the EU

We only pass on personal data that we receive via the Social-Media-Pages to third parties in accordance with the provisions of this Social Media Privacy Policy and our Website Private Policy.

If you are located in the EU, note that when using Facebook, Instagram, Twitter, LinkedIn or YouTube, personal data may also be processed outside the European Union. 

For users who have their usual residence in the European Economic Area or Switzerland, Google Ireland Limited is the data controller for your data, unless otherwise stated in the privacy notices of a particular service. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws. You can also find more information in Google’s privacy notice: https://www.google.com/policies/privacy/.

If your personal data is transferred to countries outside the European Union, the Social Media provider regularly provide appropriate guarantees, for example by concluding the Standard Contractual Clauses issued by the European Commission, or by adhering to approved Binding Corporate Rules to ensure that the transfer of data takes place with the same level of data protection that corresponds to the GDPR.

3. Data Processing and Legal Basis

With our Social-Media-Pages, we can communicate with you and provide you with interesting information. We may receive further data from you through your comments, shared images, messages, and reactions, which we then process to answer or communicate with you. If you use Social Media on several end devices, a cross-device analysis of the data can take place.

Furthermore, the providers of the Social-Media-Pages may use your data on your behavior, interests, etc. and may also use cookies and tracking technologies to analyze and improve their services.

If you are located in the EU, data processing may take place with your explicit consent (Art. 6 (1) a GDPR), the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract (Art. 6 (1) b GDPR), or on the basis of our legitimate interests, e.g., in improving the services and presentation to the outside world (Art. 6 (1) f GDPR).

Use of Page Insights and Cookies on Facebook

On our Facebook pages the Page Insights function to process statistical data from users is used – see also the agreement at: https://www.facebook.com/legal/terms/page_controller_addendum. This involves the processing of data in the form of so-called ‘page insights’ by Lilium and Facebook, which are described in more detail at https://www.facebook.com/business/a/page/page-insights.

Evaluations and statistics are generated in the form of page insights from the usage data of the Facebook pages, which support us in improving our marketing activities and our external presence. We may also learn about users and their behavior who interact with or use our Facebook Pages to display relevant content and develop features that may be of interest to them. These page statistics show us, for example, which people from certain target groups interact most with our Facebook Page or which content on the Facebook Page was visited, shared or liked when and how often. When classifying people into target groups, demographic data or data about the location of a person is also included in order to place targeted advertisements with these people. If you use Facebook on several end devices, a cross-device analysis of the data can take place. The data collected in this way is statistically processed and usually anonymous, i.e. we cannot establish any reference to the individual person. 

Information on Page Insights and the processing of personal data can be found, for example, in Facebook’s data protection statement at https://www.facebook.com/policy.php or at https://www.facebook.com/business/a/page/page-insights.

Facebook also uses cookies and storage technologies. More information can be found here: https://www.facebook.com/policies/cookies/

Display of Content and Cookies when using Twitter

When you use Twitter, even if you’re just looking at Tweets, Twitter receives some personal information from you like the type of device you are using and your IP address. Twitter uses this information for things like showing you more relevant Tweets, people to follow, events, and ads, as described in detail in the Twitter privacy notice. This may also involve providing your payment information to Twitter to use their paid services.

Twitter also uses cookies and similar technologies. For more information please refer to https://help.twitter.com/en/rules-and-policies/twitter-cookies.

Data processing and Cookies when using LinkedIn

On our LinkedIn pages LinkedIn and Lilium may use your personal data for careers and recruiting services (see also the data processing agreement: https://legal.linkedin.com/dpa). Data on how you use LinkedIn may be shared with us and certain third parties as described in detail here: https://www.linkedin.com/legal/privacy-policy#share

LinkedIn also uses cookies and similar technologies as set forth here: https://www.linkedin.com/legal/cookie_policy

Please find further information with respect to the processing of personal data regarding career and recruiting services in our Recruitment Privacy Policy https://www.lilium.com/privacy-in-recruiting.

Data processing via YouTube and Google Account

When you have an existing YouTube or Google account your account data will be connected and processed. If you do not wish this to happen, you should log out from your existing YouTube or Google account. For further information please refer to https://policies.google.com/privacy.

YouTube and Google also use cookies and similar technologies for user experience and advertising. For further information please refer to https://policies.google.com/technologies/cookies?hl=en-GB and https://policies.google.com/technologies/ads?hl=en-GB.

Instagram Insights and Cookies on Instagram

When using Instagram and you have an account there, Instagram can assign your activities to your profiles there. On our Instagram pages the Instagram Insights function to process statistical data from users is used (see also for Facebook that is connected to the provider of Instagram the agreement at: https://www.facebook.com/legal/terms/page_controller_addendum). This involves the processing of data in the form of so-called ‘Instagram Insights’ by Instagram and Lilium, described in more detail at https://help.instagram.com/788388387972460?helpref=faq_content.

Evaluations and statistics are generated in the form of Instagram Insights from the usage data of the Instagram pages, which support us in improving our marketing activities and our external presence. Instagram Insights lets us learn more about our users and the performance of our website. For this purpose, Instagram provides us with statistics on specific posts and stories created to find out how users interacted with them. When classifying people into target groups, demographic data or data about the location of a person is also included in order to place targeted advertisements with these people. If you use Instagram on several end devices, a cross-device analysis of the data can take place. The data collected in this way is statistically processed and usually anonymous, i.e. we cannot establish any reference to the individual person.

Instagram also uses cookies and similar technologies. For more information please refer to: http://instagram.com/about/legal/privacy/

4. Your Rights and Objections, Contact Details

Facebook

As a Facebook user, you can at any time influence how your user behavior is recorded when you visit Facebook pages. To do this, you can manage the settings for advertising preferences in your Facebook account or at https://www.facebook.com/ads/preferences, or the Facebook settings in your account or at https://www.facebook.com/settings. Facebook also provides opportunities to contact or exercise rights at https://www.facebook.com/help/contact/2061665240770586 or https://www.facebook.com/help/contact/308592359910928.

Twitter

As a Twitter user, you can at any time influence how your user behavior is recorded when you visit Twitter pages. To do this, you can manage the settings for advertising preferences in your Twitter account or under https://twitter.com/personalization or https://twitter.com/de/privacy#overlay-chapter2.10.1 or without an account under https://pscp.tv/account/settings. Twitter also provides opportunities to contact or exercise rights at https://help.twitter.com/forms/privacy.

LinkedIn

As a LinkedIn user, you can at any time influence how your user behavior is recorded when you visit LinkedIn pages. To do this, you can manage the advertising and general settings in your account under https://www.linkedin.com/psettings/privacy. LinkedIn also provides opportunities to contact and exercise rights under https://www.linkedin.com/legal/privacy-policy, https://www.linkedin.com/legal/cookie-policy and for individual messages online via https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

YouTube

As a YouTube user, you can at any time influence how your user behavior is recorded when you visit YouTube pages. To do this, you can manage the advertising and general settings in your account under https://www.youtube.com/account, https://policies.google.com/privacy#infochoices or https://myaccount.google.com/privacycheckup. YouTube/Google also provides opportunities to contact (for example via: https://support.google.com/) and exercise rights under https://support.google.com/policies/troubleshooter/7575787?hl=en-GB.

Instagram

As an Instagram user, you can at any time influence how your user behavior is recorded when you visit Instagram pages. To do this, you can manage the settings for advertising preferences in your Instagram account or under https://www.instagram.com/accounts/privacy_and_security/. Instagram also provides opportunities to contact or exercise rights at https://help.instagram.com/contact/1845713985721890 or http://instagram.com/about/legal/privacy/.

How To Contact Us:

If you have questions about our Privacy Policy, or to exercise your rights as detailed above, contact us by:

Phone:  +45 33 22 88 02
E-mail:   contact@wavecare.com