Privacy Statement

Data Controller Details

Entity Name: rightWFM Ltd.
Address: Ulitsa Lozenets 17A, 1421 Sofia, Bulgaria
Contact Email: info@rightwfm.com
Website: https://rightwfm.com
Lars Hollatz is the Privacy Contact of rightWFM Ltd. He can be reached via the email address above.

Personal Data We Process

rightWFM Ltd. processes your personal data because you use our services and/or because you provide this data to us yourself (such as via our contact form or booking modal). Below is an overview of the personal data we process:

• First and last name (provided when submitting forms or booking calls)
• E-mail address
• Phone number (optional, for WhatsApp or direct callback)
• IP address, browser type, and device details (processed automatically for hosting, security, and error-monitoring purposes)
• Usage metrics, page paths, and anonymous engagement logs (processed cookieless for aggregate statistics)

Special and/or Sensitive Personal Data We Process

Our website does not intend to collect data about website visitors who are under 16 years of age. However, we cannot verify whether a visitor is older than 16. We advise parents to be involved in the online activities of their children to prevent data collection without parental consent. If you believe we have collected personal data about a minor without permission, please contact us at info@rightwfm.com and we will delete this information.

Purposes and Legal Bases for Data Processing

rightWFM Ltd. processes your personal data on the following legal bases:

• Consent: When you voluntarily submit a query via our contact form, book a consultation call via Cal.com, or reach out to us on WhatsApp.
• Performance of a Contract: When processing is necessary to provide support or carry out services we have agreed to deliver under an Order Document.
• Legitimate Interests: For technical protection, aggregate website optimisation, and application security (e.g. Cloudflare security rules and server-side error logging).

Third-Party Data Processors and Service Integration

To deliver a seamless, high-performance website and service, we integrate the following GDPR-compliant processors. Appropriate Data Processing Agreements (DPAs) are in place where required:

• Cloudflare Web Analytics: We use Cloudflare Web Analytics for aggregate, cookieless website measurement. It does not collect personal data, does not use cookies, and requires no analytics consent banner. It is provided by Cloudflare, Inc., our primary hosting provider.
• Formspree: Our contact form submissions are safely processed and routed via Formspree. Standard fields are used and spam filter controls are active.
• Cal.com: Consultation bookings are handled via Cal.com. Data provided is used strictly to set up, cancel, or reschedule meetings.
• Sentry: Application error tracking and exception monitoring (processed dynamically if error logging is active; request payload bodies are scrubbed to prevent PII storage).
• Cloudflare Infrastructure: Our web hosting infrastructure and DDoS protection are provided by Cloudflare, Inc. Standard access logs are processed for security and uptime verification.

Automated Decision-Making

rightWFM Ltd. does not make decisions based on automated processing on matters that could have (significant) consequences for people.

How Long We Store Personal Data

rightWFM Ltd. does not store your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected. Contact queries are stored for up to 12 months for support continuity, or longer if they relate to active contracts or statutory legal/tax obligations.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access & Rectification: You can view or request correction of your personal data at any time.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data.
• Right to Restriction & Objection: You can object to data processing or request that we restrict processing.
• Right to Data Portability: You can request a transfer of your personal data to another controller.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority (such as the Commission for Personal Data Protection in Bulgaria or your local EU Data Protection Authority).

To exercise any of these rights, please send your request to info@rightwfm.com.

How We Protect Personal Data

rightWFM Ltd. takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure, and unauthorised modification. If you have the impression that your data is not properly secured or there are indications of abuse, please contact us at info@rightwfm.com.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our operational practices or legal obligations. The latest version will always be accessible on our website with a revised revision date.