Privacy notice

Who processes the data

Data controller: GBPLACE Corp. (EIN 35-2616213), 650 West Avenue, Suite 1211, Miami Beach, FL 33139, United States.

For any request, use the form on the Contact page.

If you are just browsing

We ask for nothing and install nothing. No cookies, no trackers, no profile.

When you open a listing or click through to a seller's site, we record the event: the date, the kind of device, the browser language, the site you came from and the country. It exists so we can tell sellers how many people we send them.

Your IP address is not kept. In its place we store a code derived from it irreversibly with a secret key: it only tells us whether two clicks on the same day come from the same person, and cannot be traced back to you or matched anywhere else.

Legal basis: legitimate interest in measuring the service we provide to sellers. The result is aggregate and identifies nobody.

If you sign up

We ask for first name, last name, email and a password. Those who want to publish also give a business name, a website and, optionally, a phone number.

We do not ask for postal address or tax number: we do not invoice sellers and take no money from buyers, so we have no use for them. If a paid service ever requires them, we will ask then, and only of whoever buys it.

We never see your password: the authentication system encrypts it and none of us can read it.

Legal basis: performance of the relationship created by signing up.

If you write to us

The contact form keeps your name, email, subject and message for as long as it takes to reply and to keep a record of the exchange.

If you subscribe to the newsletter

We collect your first name, last name and email, to send you the newsletter with a personal greeting. The subscription only counts once you have confirmed it from the link we email you: without that click you are not added to any list, and nobody can subscribe your address on your behalf.

Together with the subscription we keep the language, the moment of the request and the moment you confirmed it from the link: it is the record of your consent.

The lists are managed with Listmonk on a GBPLACE server, and the emails are sent through Amazon SES from the European region in Stockholm.

By subscribing you also join the general list of GBPLACE projects, from which you receive news about the studio’s other projects. You can unsubscribe from each of the two lists with the link in its emails.

You can unsubscribe at any time from the link in every email. The data is kept for as long as you are subscribed.

Legal basis: the consent you give by confirming the subscription.

Who we share with

Nobody, commercially. We do not sell data and do not pass it to advertisers.

Data is stored on Supabase (infrastructure in the European Union, Stockholm region), acting as processor on our behalf.

The site runs on a server in the European Union.

The people who administer the service do so from the United States, where the company is based: the data stays stored in Europe, but it is also accessed from there.

When you type an address in your account area, the text is sent to Photon (komoot GmbH) to fetch suggestions. This happens only while you type in that field, and never for people browsing the catalogue.

If you consent to analytics, Google Analytics receives data about your visit under its own terms. If you do not consent, Google is not contacted at all.

When you click away from WETO

The button takes you to the seller's site, adding parameters that tell them you came from WETO. From that moment their privacy notice applies, not ours: we do not know what you do there and do not want to.

How long we keep it

Browsing data (views and clicks) is kept for 24 months, then deleted.

Your profile data stays as long as you keep the account. When you close it, it is deleted straight away.

Contact form messages are kept for 24 months.

Deleting your account

You can close your WETO account yourself, on the site or in the app, without writing to us: sign in, open "Your profile", scroll to "Delete your account", tap "Delete my account" and confirm.

If you can no longer sign in, ask through the form on the Contact page or write to support@weto.co from the address you registered with: we close it for you within 30 days.

What is deleted, straight away: your login (e-mail and password), your first and last name, your phone number and the language you chose.

What stays: the listings of your businesses are archived and are no longer visible to anyone. The name and website of the business stay in our records without an owner, because they are a company's data and not yours. View and click counts and contact form messages follow the periods given above.

The newsletter subscription is separate from the account: to leave it, use the unsubscribe link in any e-mail.

What you can ask for

To know what we hold about you, to correct it, to delete it, to receive it as a file, to object to the processing.

If you believe we are getting it wrong, you may complain to your national data protection authority.