Privacy policy
1. Controller
THE WHY GERMANY gUG (haftungsbeschränkt)
Schnellstraße 22, 22765 Hamburg, Germany
Email: ask-why@the-why.de
Telephone: +49 40 2800 6881
2. General information
We process personal data only where necessary to operate this website securely and conveniently, communicate with you or provide embedded content. The principal legal framework is the EU General Data Protection Regulation (GDPR) and applicable German data protection law.
3. Hosting and server logs
This website is hosted by Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne, Germany. When you visit the website, technically necessary log data may be processed, including your IP address, date and time, requested file, amount of data transferred, referrer, browser and operating system. Processing is necessary for delivery, stability and security under Article 6(1)(f) GDPR. Log data is deleted when it is no longer needed for these purposes unless statutory retention duties apply.
4. Contact
If you contact us by email or telephone, we process your information to respond to your request. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual communication and otherwise Article 6(1)(f) GDPR. We delete the data when the matter has been concluded unless statutory retention duties apply.
5. Cookies and consent management
The website uses technically necessary cookies and, with your consent, optional services. We use CookieYes to record and manage your choices. Necessary storage is based on applicable German telecommunications data protection law and Article 6(1)(f) GDPR. Optional services are activated only with your consent under Article 6(1)(a) GDPR. You can change or withdraw your consent at any time through the cookie settings with effect for the future.
6. Google Fonts
The website may load fonts from Google Fonts. This can establish a connection to Google servers and disclose your IP address. Where external Google Fonts are used, they are loaded only with your consent under Article 6(1)(a) GDPR. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated companies in third countries cannot be ruled out.
7. Vimeo
The website embeds a video hosted by Vimeo. Activating the video may establish a connection to Vimeo and process your IP address, device information and usage data, and may set cookies. Activation takes place only with your consent under Article 6(1)(a) GDPR. The provider is Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA. Transfers to third countries are governed by the applicable legal transfer mechanisms.
8. Recipients and international transfers
We use service providers only where necessary to operate and provide the website. For transfers outside the European Economic Area, we rely on an adequacy decision, appropriate safeguards such as the EU Standard Contractual Clauses, or another valid legal basis.
9. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time with effect for the future.
10. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority responsible in Hamburg is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.
11. Updates
We update this privacy policy when the website, the services used or the legal framework changes.
Last updated: 20 September 2026. The German version is authoritative.