This Privacy Policy lets you know how we collect, use, share, and protect information about you. By interacting with Wavecare through our websites, mobile applications, social media, and any other Wavecare’s affiliate websites where you may interact with Wavecare, you consent to the practices described in this Privacy Policy. Any changes in our Privacy Policy will appear on this page so that you are aware of the data we collect and how we use it.
1. What is personal Data?
Personal data is any information relation to an person. Personal data includes e.g. name, email address or telephone number, information about hobbies, memberships or websites viewed. Personal data also includes location data, online identifier such as the IP-adress or other unique device identifier.
2. Who is the Controller of my Data? How is my data processed?
The controller (“we”, “us”, “our” or “Wavecare”) is
Wavecare ApS
Carl Jacobsensvej 20, 3
2500 Valby, Copenhagen
Denmark
Email: contact@wavecare.com
Phone: +45 33 22 88 02
Other controllers processing your data may also be mentioned in this Privacy Policy.
We offer products on our website www.wavecare.dk (the “Website”). Your personal data collected by Wavecare might be used for the following purposes:
- To provide the functioning of Service,
- To implement the applicable Policies (Social Media & Website Privacy Policy) and carrying out our service,
- To identify and analyze your use of our website and improve it with our legitimate interests of marketing,
- To communicate with you, including via email (for example, for our newsletter or contact form),
- To conduct research and analytics on our user base, or
- As otherwise explained in our applicable Policies or by any communication by us.
Where you choose to contact us, we may need additional information to fulfill your request or to respond to your inquiry. We may provide you with additional data protection related information where the scope of the inquiry or request and personal information we may require fall outside the scope of this Privacy Policy.
3. How is my Data processed when visiting our Websites or Mobile Application, signing up for the newsletter and when you contact us?
Information We Collect
We want you to understand how information you provide to us is collected and used. When you interact with Wavecare, mobile application or use our services, we collect certain information about you and the services you use. An example of using our “services” would be when you visit one of our websites, and social media channels. We may collect and store information from you in the following situations:
Information you provide to us directly, including when you:
- Participate in a contest, promotion, or survey;
- Correspond directly with us, such as through our websites, postal mail, customer service; or
- Post a review or comment on one of our websites, or post other user-generated content on one of our websites or mobile application.
Log Information
- This includes details of how you used our websites or mobile applications including clicks and page information such as the address (or URL) of the website or mobile application you came from before visiting our website or mobile application, which pages you visit on our website or mobile application, which browser you used to view our website or mobile application, and any search terms entered.
- Other information from your interaction with our websites, services, content and advertising, including computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information.
4. Information we collect when you use our services, including:
Device Information
- We may collect device-specific information when you visit our websites or use our mobile applications or services. This includes information such as Internet Protocol (IP) address, hardware model, operating system, unique device identifiers, mobile network information, location data such as zip code, the address of referring websites, the path you take through our websites, and other information about your session on our websites. We may also associate the information we collect from your different devices, which helps us provide consistent services across your devices.
How We Use Your Information
Our primary purpose in collecting information is to provide you with a safe, smooth, efficient, and customized experience. We may use your information in a variety of ways, including for the following purposes:
Product and Service Fulfillment
- We use your contact information to respond to your inquiries, fulfill your requests and improve your experience.
Our Marketing Purposes
- We use your information to deliver newsletters, emails, and social media notifications about our brand, products, events or other promotional purposes.
- We use your information for reporting and analysis purposes. We examine metrics such as how you are using our website, and on our mobile applications, the performance of our marketing efforts, and your response to those marketing efforts.
- We use your information to administer promotions and surveys.
- We use your information to enable Online Tracking and Interest Based Advertising as further described in this Privacy Policy.
- We use your information to improve your experiences when you interact with us.
Internal Operations
- We use your information to improve the effectiveness of our services, conduct research and analysis, or to perform other business activities as needed.
Visiting the Website
If you browse our Website we collect and store information automatically in so-called “server-log-files” that your browser transfers to us. These are:
type/version of the browser, system software used, referrer URL, hostname of the device, time of the server request, IP-address or other unique device identifier.
If you are using a mobile device the following data are collected additionally through the Website: country code, language, hostname of the device, name and version of the operational system.
We use this data only for statistical analysis for the purpose of operation, security, and optimization of our Website. This data processing is based on GDPR as we wish to achieve the legitimate interests of stabilizing and improving our Website,
Newsletter
With the newsletter we inform the user about the Website, our Service and us.
When registering for the newsletter, you must provide an email address. This email address will be transmitted to and stored by us (or a provider as specified below), based on your consent, see GDPR.
Where required by law, following the registration, you will receive an email to confirm the registration (known as the “double opt-in”). By clicking the registration link you confirm that you have given your consent to the processing of your personal data for receiving our newsletter. In case of your registration for the newsletter, we (or our provider as specified below) also store your IP address, the device name, the mail provider as well as the name and the date of registration. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
To receive our newsletter, you are only required to provide your e-mail address. After your confirmation (where required by applicable law), we store your e-mail address solely for providing you with the newsletter. The legal basis for the processing of your personal data for sending the newsletter is your consent, see GDPR.
Use of Mailchimp; Transfer of Data outside the EU
The mail provider “Mailchimp” by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA receives and processes on our behalf the data necessary for the newsletter, in particular email address, IP address, device name. This data is processed on servers in the USA. We entered into a so-called Data Processing Agreement (“DPA”) to comply with the requirements under Art. 28 GDPR with MailChimp that defines roles and responsibilities of us as the controller and data exporter and MailChimp as the processor and data importer with regards to the respective data processing. As part of the DPA, MailChimp agrees to abide by and process personal data that is subject to GDPR in compliance with the Standard Contractual Clauses for processors approved by the European Commission (“SCC”), which are incorporated by reference and form an integral part of the DPA.
Mailchimp is a service with which the dispatch of newsletters can be organized and analyzed. With the help of Mailchimp we can analyze our newsletter campaigns. When you open an e-mail sent with Mailchimp, a file contained in the e-mail (so-called web beacon) connects to the Mailchimp servers in the USA. This allows us to determine whether a newsletter message has been opened and which links have been clicked on.
Details on Mailchimp and its privacy policy can be found here: https://mailchimp.com/legal/privacy/
If you do not want Mailchimp to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a respective link in every newsletter. The data stored for the purpose of newsletter subscription will be stored by us and MailChimp until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data stored by us for other purposes remain unaffected.
You can withdraw your consent to the processing of your personal data and for the sending of the newsletter at any time by sending an email to contact@wavecare.com
Note that unsubscribing from our newsletter will not prevent you from receiving services-related email communications when using our services (e.g., account verification, technical notices).
We may track your user behavior as further described in the description of the provider specified in the following.
Contacting us
When contacting us via email or phone, your details are stored for the purpose of processing the enquiry and, if applicable, follow-up questions are processed based on your consent (where required by applicable law), according to the legal basis of GDPR.
5. What Third Party Services, Cookies, Analytics and Links to Social Networks does the Website use?
Third Party Services
We may use Cookies and services of third parties such as Google, Vimeo, Facebook, LinkedIn and Twitter. These services include, among others, internet based advertising services, tracking technologies and social media functionalities. Please find further information about these third party services in our Social Media Privacy Policy.
Cookies
In order to offer you a convenient online service featuring numerous functions, our Website uses cookies and similar technologies such as pixels and Local Storage Objects (LSOs) like HTML5 (“Cookies”). Cookies help us to distinguish you from other users of our Website. They are usually saved on your device and do not cause any harm. Cookies facilitate the transfer of specific content, such as entering data, which has already been supplied, and helps us identify popular sections of our Website.
If you are located in the EU, the processing of personal data when using Cookies is based either on our legitimate interests to be able to run and operate our Website properly according to GDPR, or on your expressed consent (Opt-in) according to GDPR, depending on the category of the relevant Cookies. The provision of relevant detail information about the Cookies on our Website and your voluntary Opt-in is processed by our Cookie consent management layer upon your initial visit to our website.
How to withdraw my consent: You can withdraw your consent by deactivating the use of individual or all Cookies in the settings of your browser at any time. To find out how to change the settings, please consult the help function of your browser. You may also deactivate and manage a lot of online Cookies by different businesses on the US-website http://www.aboutads.info/choices/ or the EU-website http://www.youronlinechoices.com/uk/your-ad-choices/. However, we want to point out that without Cookies the use and comfort of use of our Website may be restricted.
YouTube
We use the YouTube service provided by Google LLC, D/B/A YouTube, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube: support-de@google.com, website: http://www.google.com/ . If you are located in the EU, please note that the processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection customary for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that in third countries e.g., authorities can access the data collected.
The legal basis for the transmission of personal data is your consent in accordance with GDPR, which you have given on our website.
Videos from the YouTube platform are integrated into our website via the YouTube service. You can revoke your consent at any time. You can find more detailed information on withdrawing your consent either with the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider’s data protection declaration at https://policies.google.com/privacy.
Other transfers
If you have given us a separate consent to use and transfer your personal data, your personal data may be passed on to the recipients named therein. As part of the provision of third-party services on our Website, personal data may be passed on to third parties, for example, vendors helping us with the collection and distribution of informational materials for investors or investor candidates. In addition, no personal data will be transferred on to third parties unless, in individual cases, there is either a specific legal obligation requiring us to do so or if there is a specific legal justification for the transfer, and your interests or fundamental rights and freedoms do not prevail.
For jurisdictions outside the EU, any transfer of your personal data (including transfers to companies affiliated to us) shall be made in compliance with and, if applicable, on the relevant legal bases as set out in the data protection laws of your jurisdiction.
6. Wavecare Me App
What information does the Application obtain and how is it used?
The Application and related services acquire the information you supply when you download, access, or register for the service. Registration with the Service Provider is not mandatory. However, you might not be able to use some of the features offered by the service unless you register.
The Service Provider may also use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.
Legal basis for processing your personal data
Where the GDPR applies, the Service Provider relies on one or more lawful bases to process your personal data, including:
Contract performance: processing necessary to provide the Application or fulfil a contract with you.
Consent: where you have given explicit consent to processing, including for marketing, analytics, or optional features. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
Legitimate interests: where processing is necessary for the Service Provider’s specific legitimate interests, such as maintaining network and information security, preventing fraud and abuse, or improving the Application’s core functionality through analytics, provided those interests are not overridden by your data protection rights or fundamental freedoms.
Legal obligation: to comply with laws or government requests.
Cookies and similar technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, and service delivery. Where required by law, the Service Provider will obtain your consent before using non-essential tracking technologies.
Automated decision-making and profiling
If the Application uses automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, you have the right to request human review, express your point of view, and contest the decision. Information about the logic involved and the likely consequences of that processing will be provided where required by law.
What information does the Application collect automatically?
In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.
Does the Application collect precise real time location information of the device?
This Application does not gather precise information about the location of your mobile device.
Does the Application use Artificial Intelligence (AI) technologies?
The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.
Do third parties see and/or have access to information obtained by the Application?
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, the Service Provider will use an appropriate transfer mechanism required by GDPR Chapter V.
Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs) approved by the European Commission
Other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted
Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
The Service Provider may disclose User Provided and Automatically Collected Information:
As required by law, such as to comply with a subpoena, or similar legal process;
When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
With their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
Where the GDPR applies, the Service Provider enters into Data Processing Agreements (DPAs) with third-party service providers that process personal data on its behalf, as required by Article 28 of the GDPR. These DPAs impose the same data protection obligations on those service providers as described in this Privacy Policy.
What are my opt-out rights?
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, withdraw consent, or exercise any of your rights, contact the Service Provider at app@wavecare.com.
What is the data retention policy and how can you manage your information?
The Service Provider retains personal data based on its necessity for the stated purposes:
User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance or security purposes
Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
Data required for legal compliance: Retained as long as required by applicable law
You have the right to request deletion of your personal data at any time, except where retention is required by law. If you’d like the Service Provider to delete User Provided Data that you have provided via the Application, please contact them at app@wavecare.com and they will respond within the time required by applicable law. Please note that some User Provided Data may be required in order for the Application to function properly.
How does the Application address children’s privacy?
The Application is not intended for children under 16 years of age, or where a higher age of digital consent is established under applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourages parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (app@wavecare.com) so that they will be able to take the necessary actions. If you are under 16 years of age, or where a higher age of digital consent is established by applicable law, your parent or guardian must provide consent on your behalf where permitted by law.
How is your information kept secure?
The Service Provider is committed to safeguarding the confidentiality of your information. The Service Provider implements physical, electronic, and procedural safeguards to protect information it processes and maintains. For example, access is limited to authorized employees and contractors who need to know that information to operate, develop, or improve the Application. However, no security system can prevent all potential security breaches.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law. Where the breach is likely to result in a high risk to your rights and freedoms, the Service Provider will also notify you without undue delay, providing information about the nature of the breach, the categories of data affected, and the measures taken or proposed to address the breach.
How will you be informed of changes to this Privacy Policy?
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at app@wavecare.com.
This privacy policy is effective as of 2026-06-25
What are your GDPR data protection rights?
Under the GDPR, you have the following rights:
Right of Access: You can request access to your personal data.
Right to Rectification: You can request correction of inaccurate data.
Right to Erasure: You can request deletion of your personal data (the “right to be forgotten”).
Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to Object: You can object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes at any time.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. Withdrawal is as simple as toggling preferences in the Application’s settings or contacting the Data Controller.
Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for each country’s Data Protection Authority can be found at: https://edpb.ec.europa.eu/about-edpb/members_en
If you are located in the United Kingdom, you may contact the Information Commissioner’s Office at https://ico.org.uk
What are your California privacy rights (CCPA/CPRA)?
If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:
Right to Know: You can request disclosure of the categories and specific pieces of personal information the Service Provider has collected about you.
Right to Delete: You can request deletion of personal information the Service Provider has collected from you, subject to certain exceptions.
Right to Correct: You can request correction of inaccurate personal information.
Right to Opt-Out: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information to essential purposes.
Right to Non-Discrimination: The Service Provider will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise any of these rights, please contact the Service Provider at app@wavecare.com. The Service Provider will verify your request using the information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.
How do you give your consent?
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases, including contract performance, legitimate interests, or legal obligations, is carried out as described above.
How can you contact the Data Controller?
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at app@wavecare.com.
To request deletion of your personal data or to exercise any of your rights, contact the Service Provider using the details provided above. The Service Provider will respond within one month of receiving your request, extendable by up to two months where necessary due to the complexity or volume of requests, as permitted by applicable law.
7. Access and Changes to this Privacy Policy
This Privacy Policy is accessible via our website at www.wavecare.com and may be downloaded and printed anytime.
We reserve the right to adapt this Privacy Policy as well as our additional privacy policies at any time, considering the currently applicable data protection provisions. We will publish the updated Privacy Policy and/or privacy policies on our website.
Contact
For any inquiries and additional questions about processing personal data please contact:
E-mail: contact@wavecare.com
