Privacy Policy

Where to know Insights GmbH

Effective Date: 25 October 2025 Last updated: 25 October 2025

1.Controller and Contact

The responsible party (“Controller”) within the meaning of the General Data Protection Regulation (GDPR) is:

Where to know Insights GmbH

Potsdamer Platz 10, 10785 Berlin, Germany

Registered HRB 275003 B, Amtsgericht Charlottenburg

VAT ID: DE454849469

Email: info@wheretoknow.com

If you have any questions about this Privacy Policy or data protection, please contact us at the above email address.

2.Scope and Purpose

This Privacy Policy explains how we collect, use, and protect personal data when you visit our website www.wheretoknow.comor use our services.

We process personal data in accordance with:

  • theGeneral Data Protection Regulation (GDPR),
  • theGerman Federal Data Protection Act (BDSG), and
  • theTelemedia Act (TMG).

3.Data We Process

3.1 When Visiting Our Website

When you visit our website, the following data may be automatically collected:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages viewed and duration

This data is processed for technical operation, security, and statistical purposes (Art. 6(1)(f) GDPR).

For statistical purposes (e.g., analytics cookies), processing is based solely on your explicit consent (Art. 6(1)(a) GDPR).

3.2 When Contacting Us

If you contact us (e.g. via email or contact form), we process your name, email address, and message content for the purpose of responding to your inquiry (Art. 6(1)(b) GDPR).

3.3 When Using Our Services (SaaS Platform)

For registered business clients, we process account and user data such as:

  • Name, company, email, and user role
  • Login credentials
  • Review and analytics data provided or accessed via the platform

This data is processed to provide our contractual services (Art. 6(1)(b) GDPR).

We process only the personal data that is strictly necessary for the performance of our Services and for legally required purposes.

4.Cookies and Tracking

Our website usesfunctional cookies necessary for technical operation. We may also use analytics cookies to understand usage trends and improve user experience.

You can manage or delete cookies in your browser settings.

Where consent is required, we use a cookie banner compliant with Art. 6(1)(a) GDPR.

5.Use of Third-Party Services

We may use trusted third-party providers for hosting and analytics.

Provider Purpose Data Location Legal Basis
Amazon Web Services (AWS) Hosting and infrastructure EU (Frankfurt) Art. 6(1)(f) GDPR
OpenAI L.L.C. AI text generation features (e.g., automated review replies) USA Art. 46 GDPR (Standard Contractual Clauses)

6.Data Sharing

We do not sell or rent personal data.

Data is shared only with subprocessors who support us in providing the Services, and only under strict data-protection agreements.

7.Data Retention

We store personal data only as long as necessary to fulfill the purposes described or as required by law (e.g., accounting and tax retention periods).

After termination of a client contract, data is deleted or anonymized in accordance with our Data Processing Agreement (DPA), typically within 30 days.

8.Your Rights under GDPR

You have the following rights:

  • Access (Art. 15 GDPR) – to know what data we hold about you.
  • Rectification (Art. 16 GDPR) – to correct inaccurate data.
  • Erasure (Art. 17 GDPR) – to request deletion.
  • Restriction of processing(Art. 18 GDPR).
  • Data portability (Art. 20 GDPR).
  • Objection (Art. 21 GDPR) – to processing based on legitimate interests.
  • Complaint – to the competent supervisory authority:
    • Berliner Beauftragte für Datenschutz und Informationsfreiheit
    • Alt-Moabit 59–61, 10555 Berlin, Germany

      www.datenschutz-berlin.de

To exercise these rights, please email us at info@wheretoknow.com.

9.Data Security

We use encryption (HTTPS/TLS) and modern security practices to protect your data from unauthorized access, alteration, or loss.

Access to systems is restricted and regularly reviewed.

10.International Transfers

If personal data is transferred outside the EU/EEA (e.g., to OpenAI L.L.C., USA), such transfer occurs based on EU Standard Contractual Clauses (SCCs) ensuring adequate protection.

Before any international transfer, we review and apply supplementary technical safeguards (e.g., pseudonymization where feasible) to mitigate potential risks associated with government access in third countries.

11.Updates to This Policy

We may update this Privacy Policy to reflect legal or technical developments.

The latest version is always available at www.wheretoknow.com/privacy.

12.Contact for Data Protection Matters

For any questions or requests regarding data protection, please contact:

Where to know Insights GmbH

Potsdamer Platz 10, 10785 Berlin, Germany

Email: info@wheretoknow.com

From fragmented guest reviews to strategic intelligence.

All in one powerful platform.

Already a partner?Log in here

A product by Where to know Insights GmbH, Berlin, Germany · HRB 275003 B · © 2026 Where to know, All Rights Reserved.