Privacy Policy

The controller for data processing on this website is:

hello@kwestclub.com

This website (kwestclub.com) is a landing page with a voluntary email sign-up for people interested in the project. We process personal data sparingly and only for the purposes described here.

We don't measure your behavior: the website uses no analytics or tracking services, and in our emails we measure neither opens nor clicks.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you open the site, Vercel processes technically necessary connection data, see server log files.

A data processing agreement is in place with Vercel Inc. On transfers to the USA, see the separate section further down.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating the website securely and efficiently).

The hosting provider automatically collects and stores information in server log files that your browser transmits:

• truncated or full IP address
• date and time of the request
• page or file requested
• referrer URL
• browser type, browser version and operating system

This data is not merged with other data sources. It serves technical delivery, security and error analysis.

Retention: Vercel deletes these logs automatically, after 24 hours at the latest. We don't forward them to other services and don't keep them anywhere else.

Legal basis: Art. 6 (1) (f) GDPR.

If you sign up via the form, we process your email address in order to send you the confirmation email and, after you confirm, to tell you when we launch.

Double opt-in: after you enter your address you receive an email with a confirmation link. Only when you click it is your address added to our contact list. This is how we make sure the sign-up really came from you.

If you don't confirm, no record is created here: the confirmation link carries your address inside it, signed, and nothing is stored beforehand.

Data processed:

• your email address
• the time of sign-up and confirmation, as proof of consent
• the IP address you signed up and confirmed from
• the consent wording you agreed to, including its version
• connection data such as the IP address arising during sending and hosting

Processor: sending and contact management run through Resend. Behind the product name stands Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. A data processing agreement is in place with them.

Sub-processor: for technical delivery, Resend uses Amazon Web Services (Amazon Simple Email Service). Your address and the message are processed in the eu-west-1 region, that is, in data centers in Ireland.

Transfers to third countries: the server location does not give rise to a transfer — processing takes place in the EU. A third-country element arises because both companies are based in the USA and can access data from there. See the section "Transfers to the USA" for details.

Legal basis: Art. 6 (1) (a) GDPR (your consent).

Proof of consent: so that we can demonstrate your consent, we file a record in an internal mailbox when you confirm. It contains your address, the time and IP address of sign-up and confirmation, the language, and the wording of the consent text. That mailbox is hosted by Microsoft, see "Contact by email". The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (duty to demonstrate consent). We keep the record for as long as your address is on the list. If you unsubscribe, we delete it along with your address.

Withdrawal: you can withdraw your consent at any time with effect for the future, using the unsubscribe link in any email or informally at hello@kwestclub.com. After that we won't write to you again. Your address stays on record as unsubscribed — that is the only way to make sure a later send doesn't reach you by mistake. If you want it deleted entirely, write to us and we'll remove the entry. The lawfulness of processing carried out up to that point is unaffected.

Retention: we store your address until you unsubscribe or withdraw your consent.

If you write to us at hello@kwestclub.com, we process your email address and the content of your message in order to reply.

How it gets there: our mailboxes on @kwestclub.com are hosted by Microsoft. Incoming and outgoing messages are processed and stored in Exchange Online. The provider for Europe is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement with Microsoft is in place; it forms part of the Microsoft Product Terms as the Data Protection Addendum.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry). Where it concerns a contract or steps prior to one, Art. 6 (1) (b) GDPR applies.

Transfers to third countries: mailbox data is stored in data centers in the EU. Where Microsoft exceptionally accesses it from a third country for support or operations, this is safeguarded by the EU Standard Contractual Clauses.

Retention: we keep your enquiry until it is dealt with and no statutory retention obligations stand in the way.

If you write to the address given in our legal notice, we process your sender details and the content of your letter in order to reply.

How it gets there: the address is a rented business address. Post is received there by Venturo Group GmbH, Zum Isetal 1, 38518 Gifhorn, Germany, and forwarded to us unopened. They do not take note of the content of your letter. A data processing agreement with them is in place.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in dealing with your post). Where it concerns a contract or steps prior to one, Art. 6 (1) (b) GDPR applies.

Retention: we keep your letter until your matter is dealt with and no statutory retention obligations stand in the way.

This website uses no tracking or analytics cookies. The only cookie set is a technically necessary one storing your language preference (NEXT_LOCALE), and only once you switch language.

This cookie is required for the website to function and does not need consent under § 25 (2) TDDDG.

We use no web analytics services, no profiling and no advertising or tracking technologies.

The same applies to our emails: no tracking pixel, no rewritten links. Our sending provider processes only what delivery requires — recipient address, time and delivery status.

This website links to our Discord server. The link is a plain redirect: as long as you do not click it, no data is transmitted to Discord.

Once you follow the link, the privacy policy of Discord Netherlands B.V. or Discord Inc. applies. We have no influence over the processing that happens there.

We run our own profiles on X (Twitter), Instagram, TikTok and YouTube, and link to them in the footer of this site. Those links are plain redirects too: as long as you don't click them, no data goes to the platforms.

If you visit one of our profiles, the platforms process your data under their own responsibility — depending on the provider that means usage behavior, device data and IP address, usually via cookies and also outside the EU. We have no influence over it and no access to that data. Anyone with an account on the platform is usually recognized there.

The profiles are operated by:

• X: Twitter International Unlimited Company, Dublin, Ireland
• Instagram: Meta Platforms Ireland Limited, Dublin, Ireland
• TikTok: TikTok Technology Limited, Dublin, Ireland
• YouTube: Google Ireland Limited, Dublin, Ireland

Joint controllership: where a platform provides us with statistics about the use of our profile, we are jointly responsible for that together with them (Art. 26 GDPR). We only receive such statistics in aggregate and cannot identify individuals in them. What the platforms collect in detail, and how to exercise your rights against them, is set out in their own privacy notices — and that is also where those rights bite hardest, because that's where the data sits.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in public communication and in staying in touch with the community).

You don't need any of these networks to reach us: an email to hello@kwestclub.com will do.

Two of our processors are based in the USA: Vercel Inc. (hosting) and Plus Five Five, Inc. (Resend, email delivery). The processing itself happens in Europe, but both companies can access data from the USA. That amounts to a transfer to a third country.

Both are certified under the EU-U.S. Data Privacy Framework. By decision of 10 July 2023 the European Commission found that certified US companies provide an adequate level of protection. Who is listed can be checked at dataprivacyframework.gov.

In addition, the European Commission's Standard Contractual Clauses apply. They form part of both data processing agreements and serve as a fallback should anything change about the framework — as happened twice to its predecessor.

You have the right at any time to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent you have given (Art. 7 (3) GDPR)

Just write to hello@kwestclub.com.

You have the right to object at any time, on grounds relating to your particular situation, to processing we base on Art. 6 (1) (f) GDPR. In our case that covers hosting including server log files, answering emails, and our profiles on social networks.

Where processing is for direct marketing, you can object at any time without giving any reason.

An informal email to hello@kwestclub.com is enough.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

This website uses TLS encryption, recognizable by the https:// in the address bar, to protect transmitted data.

The version published on this website at any given time applies. We adapt this policy when the data processing changes.