— legal

Privacy Policy

Version 2.1 · Last updated mmxxvi

Who we are

WRST is a sole proprietorship (eenmanszaak) registered in the Netherlands, preparing the launch of a DIY watch assembly kit. We are the data controller for all personal data collected through wrst.store. Contact: privacy@wrst.store.

What we collect & why

The site is currently in its waitlist phase. We only collect the following:

  • Waitlist sign-up — your email address, plus your browser type, the page you came from, and the country your IP address maps to. Used to tell you when the drop launches and to understand where interest comes from. Voluntary and consent-based.
  • Visit statistics — we count visits using the privacy-friendly statistics built into our hosting platform: pages viewed, referring site, device type and country. We do not use them to identify you or for advertising. Legal basis: legitimate interest.

How long we keep your data

  • Waitlist sign-up — until you unsubscribe, or 12 months after launch
  • Visit statistics — kept by our hosting provider in aggregated form

Who we share data with

Only when strictly necessary. We never sell your data. Our processors: Google (the waitlist is stored in a Google Sheets spreadsheet), an IP geolocation service (your IP address is sent to it to work out your country; the IP address itself is not stored in the waitlist), and our hosting provider. Some of these providers are based outside the EU, including in the United States. Transfers are covered by EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

Your GDPR rights

You have the right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Email privacy@wrst.store. We respond within 30 days. You may also lodge a complaint with the Autoriteit Persoonsgegevens.

Cookies

We don't use analytics or advertising cookies on this site. Our hosting platform may use strictly necessary technical storage to serve the site, which needs no consent. If that changes, we will update this policy and ask for your consent first.

Security & breach notification

SSL/TLS encryption everywhere and strict access controls. Any qualifying breach is notified to the Autoriteit Persoonsgegevens within 72 hours.

Children

Our products and this waitlist are not intended for users under 16. We do not knowingly collect data from children. If you are under 18, you confirm you have the consent of a parent or legal guardian.