Privacy policy
This translation is provided for convenience. Only the German version is legally binding: Datenschutzerklärung (German)
1. Controller
wedigo it solutions, owner Nicolas Ginzel, Lünnewelle 30, 38446 Wolfsburg, e-mail: its@wedigo.it.
2. This website
This website is deliberately kept lean: it loads no external scripts, fonts, videos or trackers, sets no cookies (the only exception is the customer area after signing in, see section 8), stores nothing in your browser and does not embed any third-party services. When you visit it, our web server processes the technically necessary data (IP address, time, page requested, browser identifier) in server log files; legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). The log files are deleted after 14 days at the latest. From them the server also creates monthly access statistics (Webalizer) that only we can view. They contain aggregated figures on page views, countries of origin and browsers, and a list of the most frequent client IP addresses. The purpose is to detect errors, load and attacks (Art. 6(1)(f) GDPR). We keep these statistics for up to 12 months.
Hosting: The website, our license service and the customer area run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Nuremberg (Germany).
Language: The language follows the address (/de/ for German). When you arrive from outside, for example from a search engine or a link, the website redirects you based on your browser’s language setting (the “Accept-Language” field): German if your browser is set to German, otherwise English. Nothing is stored for this; a language chosen with the language switch is kept because the website does not redirect while you move between its own pages.
3. Contact by e-mail and contact form
The contact form sends your details (e-mail address, optionally name or company, product, subject, message) by e-mail to our mailbox; the request is not stored on the web server. To prevent abuse, the server counts submission attempts per IP address: for this it stores only a non-reversible key derived from the IP address together with the times, for at most one hour (Art. 6(1)(f) GDPR, legitimate interest in secure operation). The form does not set any cookies. Further processing is the same as for an e-mail:
If you contact us by e-mail, we process the information you provide in order to handle your inquiry (Art. 6(1)(b) GDPR). The data is deleted as soon as the inquiry has been concluded, unless statutory retention obligations prevent this.
4. Purchase of licenses and payment
Sales of Acmefyer and Spherifyer are processed by our payment partner Stripe as merchant of record; the purchase is made via “Link”, a service of the Stripe group. When you click “Checkout”, you are redirected to its checkout page; an e-mail address you optionally entered is passed on so that it can be prefilled. Stripe processes payment, billing and contact data under its own responsibility, issues the invoice including VAT, remits the VAT and handles withdrawals and refunds. Privacy information: stripe.com/de/privacy and link.com/privacy.
We receive your name, e-mail address, order number and product from Stripe in order to issue the license key, provide support and manage licenses (Art. 6(1)(b) GDPR). We do not receive full card or account details. We retain order data for ten years in accordance with commercial and tax law requirements (§ 147 AO, § 257 HGB).
If you request your license keys again on the page Resend license key, we use the e-mail address you enter only to look up the licenses bought with it and to send their keys to exactly this address (Art. 6(1)(b) GDPR). We do not store the address itself. Against misuse, the server counts requests per address for at most 24 hours using a non-reversible check value (hash) of the address, and requests per IP address for at most one hour as with the contact form (Art. 6(1)(f) GDPR). The page shows the same answer whether or not there are licenses for the address. The form sets no cookies.
5. External links
Links to third-party websites (e.g. DB-IP, MaxMind, Stripe, Link) are subject to the privacy policies of the respective providers.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority; the competent authority is the Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover.
7. Our software
Acmefyer, Spherifyer, GoDesk and i-Tracker run entirely on your own systems and do not send any telemetry to us. Acmefyer and Spherifyer verify an entered license online with www.wedigo.net: on activation and every 30 days after that; if a check fails, the application retries once a day until it succeeds. The data transmitted is the serial number of the license key, a check value derived from it (it proves that the key is present without sending the key itself), a random installation ID, the product and version and, for technical reasons, the IP address; the e-mail address is not transmitted. The purpose is to check that the license is valid and used on one installation only (Art. 6(1)(b) GDPR, performance of the license agreement). We store the serial number, installation ID, product, version and time of the last check for as long as the license exists; when it ends (e.g. through a refund), this data is deleted unless statutory retention obligations apply. The IP address is not stored in the license management, only in the server log files, where it is deleted after 14 days at the latest. Without a license key, no license check takes place. In addition, the applications connect to wedigo its to look for updates: by default every six hours a request to www.wedigo.net/update and, if there is a new version, its download. In the process, the IP address is necessarily transmitted for technical reasons; no data about your installation or environment is sent. The check can be switched off in the configuration (update.mode: off).
i-Tracker downloads the location database for its map on its own and checks once a day for a new version: by default from DB-IP (db-ip.com), or from MaxMind (maxmind.com) if MaxMind credentials have been configured. In the process, the IP address of the i-Tracker server is necessarily transmitted to the respective provider for technical reasons. We receive none of this data. Automatic updating can be disabled in the configuration (geoip.auto_update: false).
8. Customer area
In the customer area at www.wedigo.net/customer/, customers see their purchases, license keys and the installation on which a license is active, have the key sent again to the purchase e-mail address and release an installation. Purchases are matched by the e-mail address you bought with.
Data processed: your e-mail address (it is the account), a hash of your password (Argon2id; we do not store the password itself), the chosen language and the times of creation, last sign-in and last password change. For signing in, a one-time code by e-mail or a one-time link to set the password, both stored only as a hash and only until they expire (10 or 30 minutes). If you set up an authenticator app, its secret key (encrypted) and hashes of your recovery codes. One session per sign-in with times and the browser identifier; for “Recent sign-ins” and trusted devices a rough name derived from it (e.g. “Firefox · Windows”), the last 20 sign-ins. The customer area does not store IP addresses. Purchase and license data come from our license management (sections 4 and 7); the customer area only displays them. We send you service e-mails (sign-in link, sign-in code, notice of a sign-in from a new device, of a password change and of setting up or removing the authenticator app) through our own mail server.
Legal basis: Art. 6(1)(b) GDPR (customer area as part of the contractual relationship, at your request) and Art. 6(1)(f) GDPR (security of the accounts, e.g. sign-in code, throttling of failed attempts, notice of a new device).
Cookies: The customer area sets only technically necessary cookies (§ 25(2) no. 2 TDDDG), valid only for the path /customer, sent only over HTTPS, not readable by scripts and not sent to other websites: __Secure-portal keeps you signed in and is set only after a successful sign-in (until you close the browser or sign out; on the server at most 24 hours, invalid after 2 hours without use). __Secure-trust is set only if you choose “Trust this device for 30 days” and saves you the sign-in code on this device; it lasts a fixed 30 days and ends earlier on a password change, “Forgot password”, “Sign out everywhere” or removal in the account settings. __Secure-gflow is created only when you click “Sign in with Google” and holds the state of that one sign-in for at most 10 minutes.
Sign-in with Google: It is enabled only for our own administration, not for customers. Clicking “Sign in with Google” redirects you to Google, which processes the sign-in under its own terms (policies.google.com/privacy). We store the Google identifier and the verified e-mail address only for approved admin accounts.
Retention and recipients: The account exists until you request its deletion (by e-mail to its@wedigo.it or through the contact form); we then delete the account, sessions, devices and sign-in history. Purchase and license data are subject to the periods in section 4. Logs of our administrative actions on a license (e.g. “revoked”) are kept for 2 years. The customer area runs on the same server as the website (section 2); no data is passed on to third parties. Invoices and payment details are provided by Link (Stripe); the customer area only links to them.
Last updated: October 2026