— legal
Privacy Policy
Version 2.1 · Last updated mmxxvi
Who we are
WRST is a sole proprietorship (eenmanszaak) registered in the Netherlands, preparing the launch of a DIY watch assembly kit. We are the data controller for all personal data collected through wrst.store. Contact: privacy@wrst.store.
What we collect & why
The site is currently in its waitlist phase. We only collect the following:
- Waitlist sign-up — your email address, plus your browser type, the page you came from, and the country your IP address maps to. Used to tell you when the drop launches and to understand where interest comes from. Voluntary and consent-based.
- Visit statistics — we count visits using the privacy-friendly statistics built into our hosting platform: pages viewed, referring site, device type and country. We do not use them to identify you or for advertising. Legal basis: legitimate interest.
How long we keep your data
- Waitlist sign-up — until you unsubscribe, or 12 months after launch
- Visit statistics — kept by our hosting provider in aggregated form
Who we share data with
Only when strictly necessary. We never sell your data. Our processors: Google (the waitlist is stored in a Google Sheets spreadsheet), an IP geolocation service (your IP address is sent to it to work out your country; the IP address itself is not stored in the waitlist), and our hosting provider. Some of these providers are based outside the EU, including in the United States. Transfers are covered by EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
Your GDPR rights
You have the right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Email privacy@wrst.store. We respond within 30 days. You may also lodge a complaint with the Autoriteit Persoonsgegevens.
Cookies
We don't use analytics or advertising cookies on this site. Our hosting platform may use strictly necessary technical storage to serve the site, which needs no consent. If that changes, we will update this policy and ask for your consent first.
Security & breach notification
SSL/TLS encryption everywhere and strict access controls. Any qualifying breach is notified to the Autoriteit Persoonsgegevens within 72 hours.
Children
Our products and this waitlist are not intended for users under 16. We do not knowingly collect data from children. If you are under 18, you confirm you have the consent of a parent or legal guardian.