The controller within the meaning of the GDPR is:
Andreas Meisinger
Lupinenweg 48
60433 Frankfurt
Germany
Email: [email protected]
wish-ly.app offers personalised wish and memory pages for different occasions (e.g. birthday, wedding, graduation, new baby, holidays and other occasions we may offer in the future). The following applies equally to all occasions and special campaigns. When you create and use a page, we process the following personal data:
| Data category | Purpose | Legal basis |
|---|---|---|
| Name and email address of the person ordering | Contract processing, confirmation email | Art. 6(1)(b) GDPR |
| Name of the person(s) being celebrated or of the occasion (e.g. birthday child, couple, graduate, parents) and date of the occasion | Creating the page | Art. 6(1)(b) GDPR |
| Further details provided by the orderer about the page or event (e.g. place and date of a party) | Display on the page, organising the event | Art. 6(1)(b) GDPR |
| Photos and greeting cards uploaded by guests | Display on the page | Art. 6(1)(a) GDPR (consent) |
| Wishes, messages and names left by guests | Display on the page | Art. 6(1)(a) GDPR (consent) |
| Guest details for participation, where the occasion provides for it (e.g. name, guess, RSVP and number of guests for a reveal party) | Organising and running the event | Art. 6(1)(a) GDPR (consent) |
| Keywords or text for AI writing suggestions (Basic/Premium only) | Generating suggested wording for wishes and messages | Art. 6(1)(a) GDPR (consent) |
| Birthday reminder (optional): your email address, first name and birthday (day/month) of the person you want to be reminded about | Sending a single reminder email 5 days before the birthday (double opt-in) | Art. 6(1)(a) GDPR (consent) |
| Payment data | Payment processing (via Stripe only, not stored by us) | Art. 6(1)(b) GDPR |
Data is stored only as long as necessary for the respective purpose. The plan you booked is decisive; the period runs from the date of the occasion (for pages booked retroactively, from the creation date), regardless of the type of occasion:
After the storage period has expired, all content (page, photos, wishes and guest details) is irrevocably deleted.
We only share personal data in the following cases:
We do not share data with any other third parties unless we are legally obliged to do so.
As a data subject you have the following rights under the GDPR:
To exercise your rights, contact: [email protected]
You also have the right to lodge a complaint with the competent data protection supervisory authority.
wish-ly.app does not use tracking cookies and does not use any analytics tool. Only technically necessary data required to operate the website is processed. For some occasions (e.g. a reveal party), a random guest identifier is stored in your browser’s local storage so that we can recognise your contribution. It contains no personal details and is not used for tracking.
Links from a wish-ly page to wish-ly.app (e.g. “Create your own page” or the QR code on the poster) contain an anonymous referral code for the respective page. It is stored only for the duration of the browser session in session storage (sessionStorage) and sent along when a new page is created. We use it solely to count, in aggregate, how many visits and new pages result from which type of link — without IP address, without cookies and without attribution to any person.
All data transfers are encrypted via HTTPS (SSL/TLS). We use technical and organisational measures to protect your data against unauthorised access.
For questions about data protection, contact us at: [email protected]
As this is a micro-enterprise, there is no obligation to appoint a data protection officer.
We reserve the right to amend this privacy policy where necessary. The date of the last update is stated above.