Privacy Policy
Last updated: 06/10/2026
1. Data controller
For privacy matters: contact form
2. Data we collect and why
2.1 Browsing and analytics (legitimate interest — Art. 6.1.f GDPR)
- Affiliate link click counter: we record how many times a product link is clicked, without storing your IP address. We only keep the total per item.
- Click fraud prevention: we temporarily store your IP address in cache memory to limit repeated clicks on the same item. This information expires automatically and is not linked to your identity.
2.2 Contact form (Art. 6.1.f and 6.1.c GDPR)
When you send a message through the contact form, we collect:
- Name and email address: to be able to respond to you.
- Message and category: to manage your inquiry.
- IP address and browser user agent: to prevent spam and comply with Art. 32 GDPR.
These data are stored for a maximum of 90 days, after which they are automatically deleted.
For anti-spam protection we use Cloudflare Turnstile (Cloudflare, Inc., San Francisco, CA, USA). More information: cloudflare.com/privacypolicy.
2.3 Technical cookies (strictly necessary — exempt from consent)
- Session cookie: required to keep your session. Expires when the browser is closed or after 2 hours of inactivity.
- Cookie notice flag: stored in localStorage, not a tracking cookie.
2.4 Advertising cookies (optional — require your consent)
If you accept advertising cookies, Wasema loads Google AdSense (Google Ireland Ltd., Dublin, Ireland). Legal basis: consent (Art. 6.1.a GDPR), revocable from the "Manage cookies" link in the footer.
3. External processors
| Provider | Purpose | Country | Guarantees |
|---|---|---|---|
| Google AdSense | Advertising (only with consent) | Ireland (EU) + USA | SCCs |
| Amazon Associates | Affiliate program | EU + USA | SCCs |
| Cloudflare Turnstile | Anti-spam form | USA | EU DPA |
| Cloudflare R2 | Image storage | EU/USA | EU DPA |
| DeepL | Article translation | Germany (EU) | No transfer |
4. Retention period
- Contact messages: 90 days (automatically deleted)
- Application logs: 90 days
- Session cookie: 2 hours of inactivity
- Account data: while active + 30 days after cancellation
5. Your rights (GDPR Art. 15-22)
- Access, rectification and erasure (right to be forgotten): we respond within a maximum of 30 days.
- Portability: data in machine-readable format.
- Objection and withdrawal of consent: at any time.
To exercise your rights: contact form (category: Privacy).
If you believe the processing is incorrect, you can file a complaint with the authority in your country (AEPD in Spain, ÚOOÚ in the Czech Republic, BfDI in Germany, CNIL in France).
6. Affiliate disclosure
Wasema participates in Amazon Associates. If you click a link and purchase, we receive a commission at no additional cost to you. Our recommendations are editorially independent.
7. Security
Wasema implements HTTPS, encrypted session cookies, secure HTTP headers (CSP, HSTS, X-Frame-Options) and automated security audits.
8. Changes to this policy
If we significantly change this policy, we will update the header date. For changes that affect your rights, we will notify you by email if you have an account.
9. Contact
For any privacy questions: contact form.
Response time: maximum 30 days (Art. 12 GDPR).