1. What this Privacy Policy is about

This Privacy Policy explains how WeddingPeer processes personal data when you visit or use our website, our mobile applications, our communication features, or other WeddingPeer services (collectively, the “Platform”).

WeddingPeer is a technical platform through which users can publish listings, find other users, get in touch, and exchange information. In particular, this Privacy Policy explains:

• which personal data we process,

• for what purposes we process such data,

• which legal bases we rely on,

• to whom we disclose data,

• how long we retain data,

• what rights you have,

• how you can contact us with data protection questions.

This Privacy Policy applies to the processing of personal data of visitors, registered users, listers, prospective users, communication partners, and other persons whose data is processed in connection with WeddingPeer.

2. Who is responsible for data processing

The controller responsible for the processing of personal data described in this Privacy Policy is:

JaegerLabs
Postfach
8810 Uster
Email: info@weddingpeer.com

If you have any questions about data protection or wish to exercise your rights, you may contact us at any time at info@weddingpeer.com.

3. What personal data we process

We process personal data that you provide to us directly, that we collect automatically, or that we receive from third parties.

3.1 Data you provide to us directly

Depending on how you use our Platform, we may process in particular the following data:

• First and last name

• Display name / username

• Email address

• Password or password-related security data (passwords themselves only in technically secured, hashed form)

• Profile photo

• Biography / profile description

• City, region, postal code, or other location information provided by you

• Listing content, including descriptions, images, prices, size information, availability, and other details

• Communication content, in particular messages, inquiries, and replies exchanged between users via the Platform

• Content you send us in connection with support requests, security reports, or complaints

• Data you provide as part of a voluntary verification, e.g. ID documents, confirmations, or other supporting documents

• Data you provide when filling in forms, surveys, or feedback features

3.2 Data we collect automatically

When you use our Platform, we automatically collect certain technical and usage-related data, in particular:

• IP address

• Date and time of access

• Browser type and browser version

• Operating system and device characteristics

• Language settings

• Referrer URL

• Pages and content accessed

• Search queries, clicks, interactions, and navigation on the Platform

• Device IDs or similar technical identifiers

• Log data and error data

• Cookie and similar identifier data

3.3 Data we receive from third parties

Where permitted and necessary, we may also receive personal data from third parties, for example:

• from service providers delivering authentication, hosting, communication, analytics, security, or support services,

• from verification or security service providers,

• from persons who submit reports, complaints, or legal notices to us,

• from authorities or courts, where legally required.

4. The purposes for which we process personal data

We process personal data for the following purposes:

4.1 Provision and operation of the Platform

We process personal data in order to provide and operate our Platform, in particular to:

• create and manage user accounts,

• provide login and authentication functions,

• publish and display listings,

• technically enable contact and communication between users,

• handle user inquiries, support cases, and security reports,

• technically deliver and maintain Platform functions.

4.2 Communication

We process data in order to communicate with you, in particular to:

• send transaction-related or service-related communications,

• send security alerts or account notices,

• respond to contact requests, support inquiries, or legal requests.

4.3 Security, abuse prevention, and fraud prevention

We process data to ensure the security of the Platform and prevent abuse, in particular to:

• detect suspicious activities, spam, scraping, fraud, or unauthorized access,

• investigate breaches of our rules or applicable law,

• implement technical security measures,

• document and handle incidents.

4.4 Improvement and further development of the Platform

We process data to analyze and improve our Platform, user-friendliness, and stability, in particular to:

• evaluate usage patterns,

• detect and fix errors,

• test and further develop features,

• understand reach, interaction, and overall Platform performance.

4.5 Legal and regulatory purposes

We process data where necessary in order to:

• comply with legal obligations,

• respond to requests from authorities or courts,

• assert, defend, or enforce legal claims,

• protect our rights, our users, or third parties.

4.6 Voluntary verification

If we offer voluntary verification for certain users or profiles, we process the data provided for that purpose exclusively in order to technically and organizationally implement the relevant verification function, reduce abuse, and display trust signals on the Platform.

4.7 Marketing and optional consents

Where you have given your consent, or where otherwise permitted under applicable law, we process personal data for marketing purposes, in particular to:

• send newsletters or product information,

• inform you about new features, offers, or changes,

• document and manage consents.

You may unsubscribe from marketing communications at any time. This does not affect the lawfulness of processing carried out before your withdrawal.

5. The legal bases we rely on

Where the General Data Protection Regulation (“GDPR”), the UK GDPR, or comparable data protection laws apply, we rely in particular on the following legal bases for the processing of personal data:

5.1 Contract or pre-contractual measures

We process data to the extent necessary to provide you with our Platform, maintain your account, respond to your inquiries, or provide features that you explicitly use.

5.2 Legitimate interests

We process data to the extent necessary to pursue our legitimate interests or the legitimate interests of third parties, in particular for:

• IT security and Platform protection,

• abuse, spam, and fraud prevention,

• stability and further development of the Platform,

• internal administration,

• legal enforcement and defense against claims,

• limited internal analytics and reach measurement,

• moderate communications reasonably expected by users in connection with our services.

5.3 Consent

Where legally required, we process data on the basis of your consent, in particular for:

• marketing emails,

• cookies or similar technologies that are not technically necessary,

• optional features that expressly rely on consent.

You may withdraw your consent at any time with effect for the future.

5.4 Legal obligation

We process data to the extent necessary to comply with legal obligations.

5.5 Important note regarding Swiss data protection law

Where the Swiss Federal Act on Data Protection (“FADP”) applies, personal data is processed in accordance with Swiss law. Terms such as “processing,” “personal data,” or “legitimate interests” may be defined differently depending on the applicable law. This Privacy Policy is intended to transparently describe processing both under the Swiss FADP and, where applicable, under the GDPR / UK GDPR.

6. To whom we disclose personal data

We do not sell personal data.

However, we may disclose personal data to the following categories of recipients where necessary for the purposes described above:

6.1 Other users of the Platform

If you create a profile, publish a listing, or communicate via the Platform, certain information may be visible or accessible to other users, for example:

• Your display name,

• Your profile photo,

• Your profile description,

• Location details, to the extent published by you,

• Your listings and their content,

• Message content vis-à-vis the respective communication partner,

• Any verification badges or trust signals, if we offer such functions.

Please note that information you voluntarily make public may be seen, stored, or further processed by others.

6.2 Processors and service providers

We work with external service providers who may process personal data on our behalf, in particular in the areas of:

• Hosting and cloud infrastructure

• Database and backend services

• Authentication and login

• Email and communication services

• Security and monitoring tools

• Analytics and error diagnostics tools

• Storage and media delivery

• Support and ticketing systems

• Verification or trust-and-safety services

Our current or typical categories of service providers may in particular include services such as Supabase or functionally comparable providers, where we actually use them.

Where such service providers process personal data on our behalf, we enter into data processing agreements or comparable protective arrangements where legally required.

6.3 Authorities, courts, and other third parties

We may disclose personal data if we are legally required to do so or if this appears necessary in order to:

• comply with legal obligations,

• comply with official or court orders,

• enforce or defend legal claims,

• protect the rights, safety, or integrity of WeddingPeer, our users, or third parties.

6.4 Corporate transactions

In connection with a merger, acquisition, financing, reorganization, asset transfer, or sale of business units, personal data may be transferred to the companies involved, advisers, or acquirers, where legally permitted and necessary.

7. International data transfers

WeddingPeer may transfer personal data to countries outside your country of residence, outside Switzerland, outside the United Kingdom, or outside the European Economic Area, or have such data processed there by service providers.

This may in particular be the case where we use cloud, hosting, support, communication, or security service providers with offices or server locations in other countries.

Where we transfer personal data to countries that do not provide a level of data protection recognized as adequate under applicable law, we ensure appropriate safeguards where legally required. These may in particular include:

• Standard Contractual Clauses,

• additional contractual, technical, or organizational safeguards,

• transfers based on legally recognized derogations,

• other transfer mechanisms permitted under applicable data protection law.

8. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, for as long as we have a legitimate interest in retaining it, or for as long as we are legally required to do so.

The specific retention period depends in particular on the type of data and the purpose of processing.

Typically, the following principles apply:

• Account data is generally retained for as long as your account remains active.

• Profile and listing data is generally retained for as long as it is needed on the Platform or for as long as an account remains active.

• Message and communication data is generally retained for as long as it is necessary to provide the communication function, handle abuse cases, enforce rights, or comply with legal obligations.

• Security, log, and technical data is generally retained only for as long as necessary for security, stability, and evidentiary purposes.

• Verification documents are retained only for as long as necessary for the verification purpose, abuse prevention, or legal proof.

• Legal-related documents may be retained for longer periods where necessary for the establishment, exercise, or defense of legal claims or to comply with statutory retention obligations.

If you request deletion of your account or close your account, we will generally delete or anonymize your personal data within a reasonable period, unless legal obligations, legitimate interests, or legal reasons prevent immediate and complete deletion.

9. Cookies and similar technologies

We use cookies and similar technologies (e.g. Local Storage, pixels, tags, or comparable identifiers) to technically provide our Platform, ensure security, store settings, and, where permitted, analyze usage.

9.1 Technically necessary cookies

Some cookies or similar technologies are required for the operation of our Platform. They may, for example, be used to:

• maintain your session,

• manage login states,

• support security and abuse prevention,

• store language settings or cookie preferences.

Such technologies may be used without separate consent where permitted under applicable law.

9.2 Analytics and convenience technologies

Where we use analytics, reach measurement, or convenience technologies that are not technically necessary, we do so, where legally required, only on the basis of your consent.

You may adjust your cookie settings at any time via [Cookie Settings Link / Consent Tool].

9.3 Browser settings

In addition, you can control or delete cookies in your browser. Please note that certain Platform functions may be limited if technically necessary cookies are disabled.

10. Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, manipulation, or disclosure.

Depending on the situation, these may in particular include:

• TLS/HTTPS encryption during transmission,

• access restrictions and authorization concepts,

• logging of security-relevant events,

• backup and recovery mechanisms,

• monitoring, hardening, and security checks,

• data protection and security-related processes with service providers.

Despite appropriate security measures, no electronic storage or transmission is completely secure. If you suspect that your account or your data has been compromised, please contact us immediately at info@weddingpeer.com.

11. Your rights

Depending on the applicable law, you may in particular have the following rights:

• Access: You may request information about whether we process personal data about you and, if so, request access to such data.

• Rectification: You may request the correction of inaccurate data or the completion of incomplete data.

• Erasure: Under certain conditions, you may request the deletion of your personal data.

• Restriction: Under certain conditions, you may request the restriction of processing.

• Data portability: Under certain conditions, you may request that we provide certain data to you in a structured, commonly used, and machine-readable format or transfer it to another controller.

• Objection: Under certain conditions, you may object to the processing of your data, in particular with regard to direct marketing or processing based on legitimate interests.

• Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, please contact us at info@weddingpeer.com.

We may ask you for additional information in order to verify your identity and prevent unauthorized access to data.

12. Right to lodge a complaint

Where the GDPR, UK GDPR, or comparable data protection laws apply to the relevant processing, you generally also have the right to lodge a complaint with a competent data protection supervisory authority.

Where Swiss data protection law applies, you may contact the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

We would appreciate the opportunity to address your concerns directly first.

13. Are you required to provide data?

Certain personal data is required in order for us to provide you with core functions of the Platform, such as account creation, login, communication, or security.

If you do not provide such data, we may not be able to offer certain functions to you, or only in a limited way.

Other data is voluntary. If you choose not to provide optional data, this may result in certain convenience, profile, or trust features not being available.

14. Automated decisions and profiling

To the extent that we do not carry out any legally relevant automated individual decision-making with legal or similarly significant effects, no automated decision-making takes place within the meaning of applicable data protection law.

Should we implement such procedures in the future, we will inform you separately where legally required.

15. Data protection relating to minors

Our Platform is not directed at children under the age of 18. We do not knowingly collect personal data from children under 18.

If you believe that a child has provided us with personal data, please contact us so that we can review and, where appropriate, delete the relevant data.

16. External links and third-party content

Our Platform may contain links to third-party websites, services, or content. The processing of data by such third parties is governed exclusively by their own privacy information and terms. We are not responsible for the privacy practices of external third parties.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, in particular if our services, our data processing activities, legal requirements, or our service providers change.

The current version will be published on our Platform. In the event of material changes, we may also inform you in an appropriate manner, for example by email, by notice on the Platform, or at your next login.

18. Contact

If you have any questions about this Privacy Policy, the processing of your personal data, or the exercise of your rights, please contact us at:

info@weddingpeer.com

or in writing at:

JaegerLabs
Postfach
8810 Uster