Privacy Policy

1. Controller

Louis Yung, Mittelseestraße 2, 63065 Offenbach am Main, Germany,
info@wavtherapy.com

2. Visiting this website

When you visit this website, the hosting provider automatically stores data in server log files: IP address, date and time, page requested, volume of data transferred, referrer and the browser used. This processing serves the technical provision and the security of the website and is based on Art. 6(1)(f) GDPR. The data is not combined with any other data.

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, who store these log files on our behalf. A data processing agreement under Art. 28 GDPR is in place with STRATO, and the website is hosted in a data centre in Germany. Any sub-processors STRATO uses are listed in that agreement and approved by us. The server log files, including the IP addresses they contain, are deleted after seven days at the latest.

3. No cookies, no tracking, no consent banner

This website sets no cookies and stores nothing on your device — no local storage, no session storage, nothing comparable. It runs no analytics, no tracking and no advertising tools. And it loads nothing from third-party servers: no fonts, no maps, no embedded videos, no external scripts. The audio examples, the video and all scripts on the product page are served from this server.

Because nothing beyond what is strictly necessary is stored on your device, and no third party is involved in delivering these pages, this site needs no consent banner and asks you for no consent (§ 25 TDDDG, the German act implementing the European ePrivacy rules on storing information on end-user devices).

The only route off this site is the buy button, which takes you to Lemon Squeezy. That is a link, not an embedded element: nothing is transmitted to Lemon Squeezy until you follow it.

4. Purchase through Lemon Squeezy

The purchase is handled by Lemon Squeezy, LLC, acting as the merchant of record. Clicking the buy button takes you to their platform. The data you enter there (name, email address, billing and payment data) is processed by Lemon Squeezy under their own responsibility. Payment data never reaches us at any point. We receive the information required to perform the contract (name, email address, order and licence data) on the basis of Art. 6(1)(b) GDPR.

Privacy notice of Lemon Squeezy: lemonsqueezy.com/privacy

5. Licence activation in the software

When the software is activated — once — a connection is made to the servers of Lemon Squeezy. The licence key you entered and a device name are transmitted, in order to associate the activation with the key and to check the permitted number of devices. The legal basis is Art. 6(1)(b) GDPR.

After successful activation the software makes no further connections of its own. It sends no usage data, no telemetry, and does not re-check the licence.

A further connection only occurs if you trigger it yourself: the button “remove this computer from your license” in the licence window releases a device slot. In doing so, the licence key and the identifier of the activation created earlier are transmitted to Lemon Squeezy again. The legal basis is Art. 6(1)(b) GDPR.

6. Contact by email

If you write to us by email, we process your details in order to deal with your enquiry, on the basis of Art. 6(1)(b) or (f) GDPR. We delete the data as soon as it is no longer required and no retention obligations stand in the way.

7. Retention periods

Server log files are kept only for as long as they are needed for the technical provision and the security of the website, and are deleted after that. Purchase and invoice data is retained in line with the periods laid down in German commercial and tax law (as a rule, ten years).

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as a right to object to processing based on legitimate interests (Art. 21 GDPR). Please write to the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the one where you live or the one at our seat: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (the Hesse Commissioner for Data Protection and Freedom of Information),
Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de

Last updated: 13 August 2026