Privacy Policy
This privacy policy explains which personal data we process when you use evergreetz (evergreetz.com and greetz.ai), for what purpose, and what rights you have.
1. Controller
Wonderlandmovies GmbH
Große Hamburger Straße 28
10115 Berlin, Germany
Phone: +49 30 209 889 37
Email: [email protected]
Represented by the managing directors Benjamin Budde and Jan-Till Manzius
2. Data protection officer
IITR Datenschutz GmbH, Dr. Sebastian Kraska
Marienplatz 2, 80331 Munich, Germany
Email: [email protected], Phone: +49 89 18917360
3. Hosting and server log files
evergreetz is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you visit the website, the server processes technically necessary data: IP address, date and time of access, page requested, amount of data transferred, referrer URL, and browser and operating system information.
This data is stored in server log files to deliver the website and to trace attacks or misuse. Log files are deleted after 14 days. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.
4. Cloudflare
We use services of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. All traffic to the website passes through Cloudflare's network (content delivery network, protection against attacks). This involves processing your IP address, browser and device information, time of access and security events. The jQuery and Font Awesome libraries used on the site are also loaded via cdnjs, a Cloudflare service.
Before the form is submitted, Cloudflare Turnstile checks whether the request comes from a human, by evaluating browser and device information. Cloudflare may set technically necessary cookies for this purpose.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the service against misuse and automated requests and delivering it quickly. Where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework or standard contractual clauses. More information: cloudflare.com/privacypolicy.
5. Creating a video greeting
When you create a video greeting, we process the information from the form:
- chosen character, occasion, type of greeting, mood and language,
- names of sender and recipient,
- optional additional details (e.g. hobbies, dates, personal notes),
- optionally an uploaded photo.
Please only enter information needed for the greeting and no sensitive data. We use the following service providers to create the video:
- OpenAI (OpenAI Ireland Ltd., Dublin, Ireland, or OpenAI, L.L.C., San Francisco, USA): the AI writes the text of your greeting from the occasion, type, mood, names and additional details.
- Google Cloud Text-to-Speech (Google Cloud EMEA Ltd., Dublin, Ireland): the generated text, which may contain the names you entered, is converted into speech.
- Google Cloud Vision (Google Cloud EMEA Ltd., Dublin, Ireland): an uploaded photo is automatically checked for explicit content.
The legal basis is your consent, given before submitting the form (Art. 6(1)(a) GDPR), and providing the video you requested (Art. 6(1)(b) GDPR). Processing by OpenAI and Google in the USA cannot be ruled out; it is based on the EU-U.S. Data Privacy Framework or standard contractual clauses.
6. Storage and access to videos
The finished video is stored on our server and can be accessed via a randomly generated link that cannot be guessed. Anyone who knows this link can watch the video, so only share it with people who are meant to see it.
The video, preview image, subtitles and any uploaded photo are deleted automatically 24 hours after creation. Please download or share your video right after it has been created.
Also after 24 hours, the names of sender and recipient, your additional details and the generated text are deleted from our database. Only data without personal reference is kept for statistical purposes: chosen character, occasion, type of greeting, mood, language and time of creation. A custom occasion you typed in is also kept, so please do not enter names there. On request to [email protected] we will delete your video and details earlier. Please include the link to the video.
7. Cookies and analytics
evergreetz does not set cookies for analytics or advertising and uses no tracking services. Cloudflare may set technically necessary cookies to protect against bots (see section 4); the legal basis is Section 25(2) TDDDG. Fonts are loaded from our own server.
8. Your rights
Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing before the withdrawal. Please contact us or our data protection officer.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
9. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.
10. Changes
We update this privacy policy when our service, the providers we use or legal requirements change. The version published here applies.
This is a translation for convenience. The German version is legally binding.