Legal
Privacy policy
This translation is provided for convenience. The German version is legally binding.
1. Controller
The controller for this website and for ClickAndSay accounts (sign-up, login, subscription, inquiries) is Shalom Dov-Ber Kirsh, Wild Digital Moments, Streleweg 18a/Top 20, 6460 Imst, Austria, hello@clickandsay.com. Processing complies with the General Data Protection Regulation (GDPR).
2. Feedback data in our customers' projects
Agencies, freelancers and site owners use ClickAndSay for their own projects. The controller for a project's feedback data is the customer who created that project in their ClickAndSay account. Wild Digital Moments processes this data only on their behalf (Art. 28 GDPR). Every customer concludes the data processing agreement when signing up. For projects that Wild Digital Moments runs itself, Wild Digital Moments is also the controller for that data.
If you leave a comment through a feedback link, please contact whoever sent you the link first with questions about your data. We will help them answer.
3. What the feedback widget stores
- your name, so the project team knows who a report is from
- your email address, if you provide one (optional, for replies)
- a screenshot of the page and the marked element, together with your note
- the page address and basic browser and device details
4. Why
Solely to process your requested changes and keep you updated on their status. The legal basis is performance of a contract (Art. 6 (1) (b) GDPR). This data involves no tracking, no advertising and no sharing with third parties for advertising purposes.
5. Where and for how long
All data is stored on servers of World4You Internet Services GmbH in Austria. We keep feedback data (markups, screenshots, comments) for the duration of the project and up to 90 days after it ends. After that it is deleted automatically. On request we delete it earlier at any time. A short email to hello@clickandsay.com is enough.
6. Account and subscription
For an account we store your email address, the sender name your clients see, and your password (as a hash only, never in plain text). If you sign in with Google, Google sends us your name and email address. Payments are handled by the payment provider Mollie B.V. (Amsterdam, Netherlands). You enter your card or bank details directly with Mollie; we never see them. The legal basis is performance of a contract (Art. 6 (1) (b) GDPR). We keep account data until you delete the account, which you can do yourself at any time in the account settings.
We only send emails about new features if you explicitly agreed when signing up (Art. 6 (1) (a) GDPR). For that we store the wording you agreed to, the time and a shortened IP address. You can withdraw at any time using the unsubscribe link in every email.
7. Website statistics (anonymous, no cookie)
For this website, not for the feedback widget, we count visits ourselves, on the same server in Austria. No Google Analytics, no sharing with third parties. Recorded are: the page visited, the referring source (domain only), language, window width, device type, time on page, and the outcome of a sign-up attempt (the error code only, never anything you typed). Your IP address is not stored. It only feeds a hash that changes daily, so two visits can be told apart. The legal basis is legitimate interest (Art. 6 (1) (f) GDPR). Nothing is written to or read from your device (Sec. 165 TKG 2021). You may optionally allow “Statistics” in the notice on the home page. That stores an anonymous identifier in your browser so returning visits can be recognised. You can withdraw it at any time via “Cookies” in the home page footer.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A short email to hello@clickandsay.com is enough. If you believe we process your data unlawfully, you can complain to the Austrian Data Protection Authority (dsb.gv.at).