Privacy Policy

1. Controller

The controller for the processing of personal data in connection with the product vantastic (vantastic.ai) is:

NewEase AG
Bahnhofstraße 1, 47574 Goch, Deutschland
Register court: Amtsgericht Düsseldorf, HRB 68709 · VAT ID: DE285711682
Represented by the managing board Roland Wienen M.A.
Phone: +49 2832 8964112 · Email: info@newease.ag

2. Data protection officer

You can reach our data protection officer at:

Felix Freyberg
Freyberg Consulting
Mandrellaplatz 3, 12555 Berlin, Deutschland
Email: kontakt@felix-freyberg.de

3. What data we process

• Master data: name, email address, phone number.
• WhatsApp communication data: phone number, message content, message metadata (sent, read and delivery status), consent and opt-out events.
• Purchase and contract data from our funnels (e.g. via our payment service provider).
• Platform usage and log data (technically necessary data, IP address).
• Anonymous usage data of our website for reach measurement — without cookies and without storing your IP address (see section 8).

4. Purposes and legal bases

• Sending WhatsApp messages (informational and promotional messages): solely on the basis of your explicit consent (Art. 6 (1) (a) GDPR); consent can be withdrawn at any time.
• Contract performance and customer support (Art. 6 (1) (b) GDPR).
• Operation, security and improvement of the platform as well as reach / performance measurement (Art. 6 (1) (f) GDPR).

5. Recipients and third-country transfers

To provide our services we use carefully selected processors, including:

• Meta Platforms Ireland Ltd. / Meta Platforms, Inc. for sending and receiving WhatsApp messages (WhatsApp Business Platform).
• Hosting and infrastructure providers (application, database, file storage).
• Payment service providers for processing purchases.

This may involve a transfer to third countries (in particular the USA). Such transfers are made on the basis of appropriate safeguards (EU standard contractual clauses or an adequacy decision).

6. Storage period and deletion

We store personal data only for as long as necessary for the stated purposes or to comply with statutory retention obligations. We delete your WhatsApp contact and communication data upon withdrawal of consent or at your request — see the data deletion instructions.

7. Your rights

Within the legal framework, you have the right to:

• access and rectification,
• erasure (“right to be forgotten”, Art. 17 GDPR) and restriction of processing,
• data portability,
• object to the processing,
• withdraw consent at any time (without affecting the lawfulness of processing carried out up to that point),
• lodge a complaint with a competent supervisory authority.

For WhatsApp messages you can unsubscribe at any time by replying STOP or using the opt-out button in a message.

8. Reach measurement of our website (our own, cookieless analytics)

We measure the use of our public website with a self-operated, data-minimising method. We use no cookies, store no data on your device and use no third-party services — in particular no Google Analytics and no Meta Pixel.

We process:

• the pages visited and the date and time of the visit,
• the referring website (referrer) and any campaign parameters in the address visited,
• device type, browser and operating system (from the browser identifier),
• your approximate location at country level,
• anonymous interaction signals such as scroll depth, clicks on our call to action and time on page.

We do not store your IP address. To approximately recognise repeat visits within a single day, we derive a non-reversible numeric value (hash) from the IP address, browser identifier and a secret value that changes daily. This value does not allow any conclusions about your identity and is renewed every day, so that recognition across days is ruled out.

The purpose is statistical reach and performance measurement, to understand how our website is used and to improve it. The legal basis is our legitimate interest in an economical and user-friendly design of our website (Art. 6 (1) (f) GDPR). As no information is stored on or read from your device, no consent under Section 25 TDDDG (formerly TTDSG) is required. No transfer to third parties or third countries takes place.

Storage period: the anonymous event data is automatically deleted after 400 days at the latest.

Objection: you can object to this measurement at any time. To do so, enable the “Do Not Track” setting in your browser — we do not evaluate visits with “Do Not Track” enabled. As we store no data that identifies you, we do not process any personal data that would require further deletion. If you have any questions, contact us at info@newease.ag.

9. Contact

For any data protection matters you can reach us at info@newease.ag.