Wiehr. Privacy Policy. Official Legal Document

1. Information We Collect

We collect minimal information necessary to operate this website and provide our services to you:

Usage Data: Information about how you interact with our website, including IP address (anonymized), browser type, access times, and pages visited, collected through standard server logs and Google Analytics (only on production, with anonymization enabled).
Cookies: We use essential cookies for website functionality and Google Analytics for understanding site usage (only on production). All analytics data is anonymized and aggregated.
Contact Information: Only when you voluntarily provide it through our contact forms or social media links.
Technical Data: Device information, browser version, and general geographic location (country/region level only, never precise location).

2. Legal Basis for Processing by Region

For users in different regions, we process your personal data based on the following legal grounds:

European Union: Legitimate Interest, Consent, and Legal Obligation under GDPR ( (EU) 2016/679)
United States: Consent, legitimate business interests, and compliance with CCPA/CPRA ( (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and other state laws
Russian Federation: Consent and legal requirements under Federal Law No. 152-FZ
CIS Countries: Consent and legal compliance with national data protection laws
Asia-Pacific: Consent and legal basis under PDPA ( (Singapore), PDPA (Thailand), APPI (Japan), PIPEDA (Canada), and other regional laws
Latin America: Consent and legal basis under LGPD ( (Brazil), LFPDPPP (Argentina), and other regional laws

3. Regional Compliance Framework

We comply with data protection laws across major jurisdictions:

European Union: General Data Protection Regulation (GDPR) and ePrivacy Directive
United States: California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and other state laws
Russian Federation: Federal Law No. 152-FZ "On Personal Data"
CIS Countries: National data protection laws of Belarus, Kazakhstan, Ukraine, Azerbaijan, Armenia, Moldova, and other CIS states
Asia-Pacific: Personal Data Protection Act (Singapore), Personal Data Protection Act (Thailand), Act on the Protection of Personal Information (APPI - Japan), Personal Information Protection and Electronic Documents Act (PIPEDA - Canada), Privacy Act 1988 (Australia)
Latin America: Lei Geral de Proteção de Dados (LGPD - Brazil), Ley de Protección de Datos Personales (Argentina), Ley de Protección de Datos Personales (Chile), and other regional laws

4. Russian Federation Compliance Compliance

For users in the Russian Federation, we comply with Federal Law No. 152-FZ "On Personal Data":

Data Localization: Personal data of Russian citizens is processed and stored in accordance with Russian legal requirements
Consent Requirements: We obtain explicit consent for processing personal data when required
User Rights: Russian users have the right to access, correct, and delete their personal data
Data Protection: We implement appropriate technical and organizational measures to protect personal data

4. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain our website and services
To analyze website usage and improve user experience (anonymized data only)
To respond to your inquiries and communications
To ensure the security and proper functioning of our website
To comply with legal obligations in EU, Russia, and other jurisdictions

6. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

When required by law or to protect our rights (including all applicable regional legal requirements)
With trusted service providers who assist in operating our website (e.g., hosting services) under appropriate data processing agreements
With your explicit consent for specific purposes
To comply with cross-border data transfer requirements under all applicable laws
For US residents: We do not "sell" or "share" personal information under CCPA/CPRA definitions

7. Data Retention by Region

We retain personal data only as long as necessary and in compliance with regional requirements:

Analytics Data: Retained for 26 months in anonymized form (Google Analytics default)
Server Logs: Retained for 30 days, then automatically deleted
Contact Information: Retained only as long as necessary to respond to your inquiry, maximum 2 years
Cookies: Session cookies deleted when you close your browser; persistent cookies expire according to their specific purpose
Regional Requirements: We comply with specific retention periods required by GDPR, CCPA/CPRA, LGPD, and other applicable laws

8. Your Rights by Region

Your data protection rights vary by jurisdiction but generally include:

European Union (GDPR):

Right to Access your personal data
Right to Rectification of inaccurate data
Right to Erasure ("right to be forgotten")
Right to Restrict Processing
Right to Data Portability
Right to Object to processing
Right to Lodge Complaint with supervisory authority

United States (CCPA/CPRA and State Laws):

Right to Know what personal information is collected
Right to Delete personal information
Right to Opt-out of sale or sharing of personal information
Right to Correct inaccurate personal information
Right to Limit Use of Sensitive Personal Information
Right to Non-discrimination for exercising privacy rights

Russian Federation (152-FZ):

Right to Information about data collection
Right to Access personal data
Right to Correction of inaccurate data
Right to Blocking of incorrect data
Right to Destruction of unlawfully processed data
Right to Withdraw Consent to processing

Asia-Pacific Region:

Singapore (PDPA): Access, correction, withdrawal of consent, data portability
Japan (APPI): Purpose of use, disclosure, correction, suspension of use
Australia (Privacy Act): Access and correction of personal information
Canada (PIPEDA): Access, correction, challenge compliance

Latin America:

Brazil (LGPD): Access, correction, deletion, data portability, information
Argentina: Access, correction, confidentiality, updating, suppression
Chile: Access, correction, deletion, opposition, information

9. Data Security

We implement appropriate technical and organizational security measures:

SSL/TLS encryption for data transmission
Secure server infrastructure
Regular security audits and updates
Access controls and authentication measures
Compliance with GDPR Article 32, CCPA security requirements, and other regional standards
Breach notification procedures per applicable laws (72 hours for GDPR, "reasonable time" for CCPA/CPRA, etc.)

10. International Data Transfers

Your information may be transferred internationally with appropriate safeguards:

EU Users: Transfers protected by Standard Contractual Clauses, Adequacy Decisions, or other GDPR Chapter V mechanisms
US Users: Transfers comply with state privacy laws and federal requirements
Russian Users: Cross-border transfers comply with Russian legal requirements
CIS Users: Transfers comply with CIS regional agreements and national laws
Asia-Pacific Users: Transfers comply with PDPA, APPI, PIPEDA, and other regional requirements
Latin America Users: Transfers comply with LGPD, regional data protection laws, and international standards

11. Children's Privacy by Region

Protection of children's data varies by jurisdiction:

EU: GDPR Article 8 - parental consent required for under 16 (or lower national age)
US: COPPA - parental consent required for under 13; additional state protections may apply
Russia: Special protections for minors under 18
CIS Countries: Various age thresholds and parental consent requirements
Asia-Pacific: Age limits vary (13-18) with parental consent requirements
Latin America: LGPD and other laws provide special protection for children's data

12. Cookies and Tracking Technologies

Our use of cookies complies with regional regulations:

EU: GDPR and ePrivacy Directive compliance with consent requirements
US: State privacy laws and emerging federal cookie legislation
Russia: Federal Law on Information and cookie usage requirements
Asia-Pacific: Regional cookie consent and transparency requirements
Latin America: LGPD and other regional cookie regulations
Essential Cookies: Required for website functionality across all regions
Analytics Cookies: Google Analytics with anonymization enabled

13. Changes to This Policy

We may update this privacy policy and will provide appropriate notice:

Changes will be posted on this page with updated "Last updated" date
EU Users: Material changes notified as required by GDPR
US Users: Notice provided as required by CCPA/CPRA and state laws
Russian Users: Notification complies with Russian law
Other Regions: Notice provided according to local legal requirements

14. Contact Information and Regional Authorities

For privacy-related inquiries and to exercise your rights:

General Inquiries: Contact us through our social media channels or website contact information
EU Users: Contact your local data protection authority (DPA)
US Users: Contact state attorneys general or the FTC for federal matters
Russian Users: Contact Roskomnadzor for complaints
CIS Users: Contact national data protection authorities in your country
Asia-Pacific Users: Contact regional privacy commissioners (PDPC Singapore, PPC Japan, etc.)
Latin America Users: Contact ANPD (Brazil), AAIP (Argentina), and other regional authorities
Response Time: We will respond to legitimate requests within legally required timeframes (30 days for GDPR, 45 days for CCPA/CPRA, etc.)

15. Legal References by Region

This privacy policy complies with comprehensive legal frameworks:

European Union:

General Data Protection Regulation (GDPR) (EU) 2016/679
ePrivacy Directive 2002/58/EC
Member state implementations

United States:

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Virginia Consumer Data Protection Act (VCDPA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Children's Online Privacy Protection Act (COPPA)
Other emerging state privacy laws

CIS Countries:

Russia: Federal Law No. 152-FZ
Belarus: Law on Personal Data
Kazakhstan: Law on Personal Data and Their Protection
Ukraine: Law on Personal Data Protection
Other CIS national laws

Asia-Pacific Region:

Singapore: Personal Data Protection Act (PDPA)
Japan: Act on the Protection of Personal Information (APPI)
Australia: Privacy Act 1988
Canada: Personal Information Protection and Electronic Documents Act (PIPEDA)
Thailand: Personal Data Protection Act (PDPA)

Latin America:

Brazil: Lei Geral de Proteção de Dados (LGPD)
Argentina: Ley de Protección de Datos Personales
Chile: Ley de Protección de Datos Personales
Mexico: Ley Federal de Protección de Datos Personales