Summarywewed is a planning tool. The data entrusted to it concerns the organisation of a private event, which is why this policy goes into this level of detail.
wewed is a wedding planning tool: a date, a budget, a checklist built around that date, a guest list and their replies, a seating plan, a gift list, and a website for close friends and family. Searching for vendors is possible, but it is one step among others and not the main purpose of the service.
That distinction matters for data protection. A directory processes a search query; a planning tool processes the running order of a private event and the identity of the people invited to it. This policy therefore begins with that data, before turning to the rest.
WEWED SRL processes only the data necessary for the operation of the service, for managing relationships with vendors and partners, and for communicating with users. We comply with Regulation (EU) 2016/679, the GDPR, and with applicable Belgian law. WEWED is the controller of that data.
SummaryDate, budget, guest list and replies received are processed solely to make the planning tools work.
The data below is processed in connection with the use of the planning tools.
- The project. Date, venue under consideration, number of guests, budget and its breakdown by category. This information feeds the checklist, the budget and the countdown plan, and accompanies enquiries sent to vendors.
- Progress. Tasks completed, amounts committed, vendors chosen. These elements allow the display to reflect the actual state of the planning.
- Guests. Name, email address where applicable, reply to the invitation, seating and dietary requirements. See the box below.
- Exchanges with vendors. Enquiries sent and replies received. The vendor is an independent controller for the data passed to it.
- The wedding website and the gift list. Texts and photographs uploaded, including by an authorised vendor, and the make-up of the list. This content is only accessible once published.
The particular case of guests
Guests are third parties: they did not sign up to the service, they were added to it by the user. They receive no commercial communication from us, only the invitation and the follow-up of their reply. Their data is not passed to vendors, is not used for audience measurement, and is deleted together with the planning space. It may be deleted at any time by the user, or at the request of the person concerned.
What we do not do
None of this data is sold or passed to advertisers, and none of it is used to build an advertising profile. The budget you enter has no bearing on the adverts you see. The guest list does not leave the planning space.
SummaryIdentification, contact details, technical data including the IP address, and for vendors the details of their business.
Outside the planning space, data is collected when you visit the site, get in touch, subscribe to the newsletter, apply to be listed as a vendor, or meet us at a trade event.
- Identification data : surname, first name.
- Contact details : email address, telephone number, town or region.
- Business data, for vendors: trading name, type of services, area covered, details of the listing and of the subscription.
- Interaction data : browsing on the site, forms submitted, emails and calls.
- Technical data : IP address, logs, browsing data and cookies, see section 10.
- Images or visual content, where you take part in an event or a communication campaign.
We do not seek sensitive data within the meaning of the GDPR and ask users not to send us any. A dietary requirement entered for a seating plan stays in the planning space and is used for that purpose only.
SummaryRunning the service and answering enquiries. Marketing requires prior consent, which can be withdrawn.
We process your personal data for the following purposes: contacting you, providing the information requested, managing relationships with vendors and partners, ensuring the proper operation and improvement of the site, and communicating about and promoting the project.
Your data is used for direct marketing only with your prior, freely given, specific, informed and unambiguous consent, which you may withdraw at any time.
SummaryFour bases depending on the processing: performance of the contract, legitimate interest, consent, legal obligation.
In accordance with Article 6 of the GDPR, we process your data on the following bases: pre-contractual steps or performance of a contract, legitimate interest, consent, legal obligation.
You may withdraw your consent at any time, without affecting the lawfulness of processing already carried out.
SummaryKept no longer than necessary. Deleting an account deletes its contents.
We do not keep your personal data longer than necessary to achieve the purposes for which it was collected, unless the law requires otherwise or we need it to defend our rights. As a guide:
- Contact details and enquiries: up to 24 months after the last contact.
- Vendor and partner data: up to 36 months after the last exchange.
- Newsletter data: until you unsubscribe.
- Technical data and logs: for a limited period, for security purposes.
- Data relating to a dispute: for the duration of the dispute and the limitation periods.
SummaryWith the vendor contacted, and with technical processors, within the limits of their task.
We share your personal data only where necessary to achieve the purposes described in section 4.
In practice there are two cases. The vendor you contact receives what you send it, and becomes the controller for that data. Our technical suppliers, hosting, email delivery, audience measurement, access it strictly as far as their task requires, governed by contractual agreements.
The servers hosting your data are located in the European Union or the European Economic Area. We do not transfer data outside the European Union without appropriate safeguards compliant with the GDPR.
SummaryRegister kept in accordance with Article 30 of the GDPR, technical and organisational security measures, notification in the event of a breach.
We keep a record of processing activities in accordance with Article 30 of the GDPR. That record sets out all processing operations, their purposes, the categories of data, the recipients, the retention periods and the security measures in place.
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or unauthorised disclosure. These measures include in particular:
- access control;
- securing systems and communications;
- contractual agreements with our suppliers;
- training the people authorised to process the data.
In the event of a personal data breach presenting a risk to the individuals concerned, we will comply with the notification obligations laid down by the GDPR.
SummarySeven rights, exercised by email, free of charge, answered within a month. A complaint may be lodged with the Data Protection Authority.
Under the GDPR, you have the following rights:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object;
- right to data portability;
- right to withdraw your consent at any time.
You exercise these rights by writing to contact@wewed.be, preferably from your account address. The request is free and answered within one month.
If you consider that your rights are not being respected, you may lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Brussels, the competent authority in Belgium.
SummaryThe detail is set out in the cookie policy: categories, retention periods and how to withdraw consent.
Our site uses cookies and similar technologies to ensure it works properly, to improve its performance and, where applicable, to analyse how it is used. On your first visit, a banner lets you manage your preferences.
The Cookies page sets out the categories present, how long they last and how to change your mind.
SummaryA single contact address. The version online is always the version that applies.
For any question about this statement or to exercise your rights:
WEWED SRL, for the attention of the data protection officer, contact@wewed.be. Company number CBE 1033.891.623, Belgium.
WEWED may amend this statement to reflect legal, technical or functional changes in its activities. The most recent version is always published on the site.