Potsdamer Platz 10, 10785 Berlin, Germany

Registered HRB 275003 B, Amtsgericht Charlottenburg

VAT ID: DE454849469

Email: info@wheretoknow.com

If you have any questions about this Privacy Policy or data protection, please contact us at the above email address.

This Privacy Policy explains how we collect, use, and protect personal data when you visit our website www.wheretoknow.com, use our web platform, or use our mobile application ("Where to know" or "WTK") available on Apple App Store and Google Play Store.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and applicable mobile platform privacy requirements.

When you visit our website, the following data may be automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages viewed and duration

This data is processed for technical operation, security, and statistical purposes (Art. 6(1)(f) GDPR).

When you use the Where to know mobile application, we may collect and process the following data:

• Account credentials (email address, encrypted password) — required for login
• Device information (device model, OS version, unique device identifiers) — for app functionality and crash reporting
• App usage data (screens viewed, features used, session duration) — for improving the app experience
• Push notification tokens — if you grant permission for push notifications
• Crash logs and diagnostic data — for identifying and fixing technical issues

We do not collect location data, contacts, camera or microphone access. The app does not track you across other apps or websites.

If you contact us via email or contact form, we process your name, email address, and message content for the purpose of responding to your inquiry (Art. 6(1)(b) GDPR).

For registered business clients, we process account and user data such as name, company, email, user role, login credentials, and review and analytics data provided or accessed via the platform. This data is processed to provide our contractual services (Art. 6(1)(b) GDPR).

The Where to know mobile app requests only the permissions necessary for its core functionality:

• Internet access — required to connect to our servers and display your hotel intelligence data.
• Push notifications — optional, used to alert you to new reports or critical review signals. You can disable this at any time in your device settings.

We do not request access to your camera, microphone, contacts, location, or any other sensitive device features.

5.Cookies and Tracking

We do not sell or rent personal data.

Data is shared only with subprocessors who support us in providing the Services, and only under strict data-protection agreements. We do not share your data with third-party advertisers.

We store personal data only as long as necessary to fulfill the purposes described or as required by law.

After termination of a client contract, data is deleted or anonymized in accordance with our Data Processing Agreement (DPA), typically within 30 days.

App usage and diagnostic data is retained for a maximum of 12 months before being deleted or anonymized.

You have the following rights:

• Access (Art. 15 GDPR) – to know what data we hold about you.
• Rectification (Art. 16 GDPR) – to correct inaccurate data.
• Erasure (Art. 17 GDPR) – to request deletion.
• Restriction of processing(Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection (Art. 21 GDPR) – to processing based on legitimate interests.
• Complaint – to the competent supervisory authority:
  • Berliner Beauftragte für Datenschutz und Informationsfreiheit

  Alt-Moabit 59–61, 10555 Berlin, Germany

  www.datenschutz-berlin.de

To exercise these rights, please email us at info@wheretoknow.com.

To request deletion of your account and all associated data from the mobile app, please email info@wheretoknow.com with the subject line "Account Deletion Request". We will process your request within 30 days.

We use encryption (HTTPS/TLS) and modern security practices to protect your data from unauthorized access, alteration, or loss.

Access to systems is restricted and regularly reviewed. Data transmitted between the mobile app and our servers is encrypted in transit.

If personal data is transferred outside the EU/EEA (e.g., to OpenAI L.L.C., Apple, Google, or Expo), such transfer occurs based on EU Standard Contractual Clauses (SCCs) ensuring adequate protection.

Before any international transfer, we review and apply supplementary technical safeguards where feasible.

The Where to know platform and mobile application are designed exclusively for business use by hospitality professionals. We do not knowingly collect personal data from individuals under the age of 18.

If you believe a minor has provided us with personal data, please contact us at info@wheretoknow.com and we will delete it promptly.

We may update this Privacy Policy to reflect legal or technical developments.

The latest version is always available at www.wheretoknow.com/privacy.

For material changes, we will notify registered users via email or in-app notification.

Where to know Insights GmbH

Potsdamer Platz 10, 10785 Berlin, Germany

Email: info@wheretoknow.com