Last updated: 2 July 2026
The party responsible for data processing on this website is:
Pasquale CannavaleWe collect and process personal data only to the extent necessary to provide a functional website and our content and services. Processing is carried out on the basis of Art. 6 para. 1 GDPR.
The hosting provider automatically collects and stores information in server log files, which your browser transmits. This includes in particular:
The data are not merged with other data sources and are automatically deleted by the hosting provider after a short period. Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a fault-free operation of the website).
If you send us inquiries via the contact form, your information will be stored for the purpose of processing the inquiry and for any follow-up questions. Submission is handled by a first-party server route of this website that sends the data by email to our mailbox; that email mailbox is the only place the data is stored. Your information is deleted as soon as it is no longer required to process your inquiry, and at the latest once any statutory retention periods have expired. Legal basis is Art. 6 para. 1 lit. b GDPR (initiation or performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your inquiry).
We do not pass this data on to third parties. The technical service providers we use (hosting, email) process the data solely on our behalf on the basis of data processing agreements (Art. 28 GDPR).
The data you enter in the contact form is not transmitted to an external form provider. It is sent via a first-party server route of this website (hosted by our provider Vercel, see section 7) and delivered from there by email via Zoho Mail (servers in the EU, see section 6) to our mailbox. The fields you enter are transmitted (name, email address, company name (optional), project type and message) together with technical signals used to prevent abusive submissions (a hidden check field and the time taken to fill in the form, measured in your browser). As with every page request, your IP address is also processed on the server side (see sections 3 and 7). The form data is not stored with any third-party provider; the delivered email is the only place it is stored. Legal basis is Art. 6 para. 1 lit. b GDPR (initiation of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your inquiry).
For sending and receiving email messages — including the inquiries delivered via the contact form — we use the service Zoho Mail (Zoho Corporation Pvt. Ltd., registered in India) with processing in a data centre in the European Union. When you write to us via the form or directly to hello@wynvor.com, your contact details and the contents of your message are stored for the purpose of processing your request. Zoho processes this data solely on our behalf on the basis of a data processing agreement (Art. 28 GDPR). The processing is based on our legitimate interest (Art. 6(1)(f) GDPR) or on the initiation of a contract (Art. 6(1)(b) GDPR). Further information can be found in the Zoho privacy policy.
This website is hosted with Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Dynamic processing (server functions, in particular sending the contact form) takes place in a data center in the European Union (Frankfurt am Main); static content is delivered via Vercel's global edge network. As Vercel Inc. is a US company, a transfer of personal data to the USA cannot be ruled out. For this, Vercel has implemented appropriate safeguards pursuant to Art. 46 GDPR in the form of Standard Contractual Clauses (SCCs). Further information can be found in the Vercel privacy policy.
Fonts are served locally. No connection is made to external services such as Google Fonts, and no IP addresses are transmitted to third parties.
You have the following rights vis-à-vis us:
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
This website uses only one technically necessary cookie: NEXT_LOCALE. It is set by the framework we use (next-intl) and contains only the code of the current language (e.g. “de” or “en”); it holds no personal data. Which language is shown is determined solely by the address you visit (e.g. /en/… for English), not by this cookie. The cookie is used only on this domain (wynvor.com) and is not shared with third parties. Legal basis is § 25 para. 2 no. 2 TDDDG (strictly necessary); no consent is required. You can delete the cookie at any time via your browser settings. In addition, this website stores your display preference (light or dark theme) locally in your browser (local storage, key “wynvor-theme”) so that your chosen appearance is retained on your next visit. This is a technically necessary preference that you set yourself (§ 25 para. 2 no. 2 TDDDG); it is not transmitted to third parties and can be deleted at any time via your browser. No analytics or tracking cookies and no third-party cookies are set.
When you use our invoice tool at /tools/rechnung, the tool stores your entries exclusively in your browser's LocalStorage. The data is never transmitted to our server, to Vercel, or to any third party. All computations (VAT, IBAN validation, Swiss QR-Bill) run client-side in a WebAssembly module.
Only the following keys are stored:
Legal basis: Art. 6 para. 1 lit. b GDPR (contractual necessity — you actively use the tool) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a working offline-first persistence). NO data is shared with third parties, no tracking, no profiling.
You can fully delete the tool's stored data at any time: via the "Delete all data" action in the tool settings (/tools/rechnung/settings) or via your browser's LocalStorage controls. After deletion, recovery is not possible — the tool will then show the onboarding flow.