Effective: September 20, 2026

1. Controller
Khaalid Cali, trading under NOWHEKNOW
Leipziger Straße 124, 10117 Berlin, Germany
Email: contact@nowheknow.xyz

2. Website delivery and security
The website is provided through Wix. When the site is accessed, data such as the IP address, date and time, requested URL, referrer information, browser and device information, and technical security or error data may be processed. The purposes are secure website delivery, stability, error analysis, and prevention of misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website. Where strictly necessary cookies or similar storage technologies are used, Section 25(2) TDDDG applies. The service provider is Wix Online Platforms Limited together with affiliated Wix companies under the applicable contractual and privacy terms.

3. Market and language selection through Cloudflare
The NOWHEKNOW offer API runs on Cloudflare Workers and Cloudflare D1. Cloudflare provides the API with a country code derived from the network request. It is used to select the DE or US experience, language, currency, and permitted retailer destinations. NOWHEKNOW does not store the raw IP address in the offer database. Cloudflare may process connection and security data while providing its services. The legal basis is Article 6(1)(f) GDPR.

4. Cookies and consent
Strictly necessary technologies may be used to provide the website and its security functions. NOWHEKNOW uses Usercentrics for Wix to manage consent. The banner adapts its display to the visitor’s location and stores the selected choice together with the technically required proof data. Non-essential analytics, marketing, or functional technologies are activated for visitors who require consent only after voluntary approval. The legal basis is Article 6(1)(a) GDPR together with Section 25(1) TDDDG. Consent can be changed or withdrawn for the future through the cookie settings.

5. Retailer and affiliate links
When a visitor actively clicks a retailer link, the NOWHEKNOW offer API may check the selected offer again. If click measurement is enabled, a random click ID may be stored together with the offer, outfit or TASTE entry, placement, market, and time. NOWHEKNOW does not store the visitor’s name, email address, or raw IP address in the offer database. After the redirect, retailers and affiliate networks may process data and cookies under their own privacy notices and consent mechanisms. Individual click IDs are generally deleted after 180 days unless statutory retention obligations, pending commission transactions, or specific misuse cases require longer storage. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is secure commercial operation and correct attribution of possible commissions.

6. Contact by email
When you contact NOWHEKNOW by email, your email address, message content, communication metadata, and voluntarily provided information are processed to handle the request. Depending on the request, the legal basis is Article 6(1)(b) GDPR for pre-contractual communication or Article 6(1)(f) GDPR for general enquiries and secure business operation. Data is deleted when the request is completed and no statutory retention obligation or legitimate evidence interest remains.

7. No NOWHEKNOW customer accounts or payment processing
NOWHEKNOW currently provides no customer accounts and does not process payments for featured products. Orders are completed exclusively on the selected retailer’s website. The retailer is responsible for order, payment, shipping, and return data.

8. Recipients and international transfers
Recipients may include Wix, Cloudflare, the email service provider, and, after an active retailer click, the selected retailer and any related affiliate network. If data is processed outside the European Economic Area, the transfer relies on applicable safeguards such as an adequacy decision or standard contractual clauses.

9. Your rights
Where the legal requirements are met, you have rights of access, correction, deletion, restriction of processing, data portability, and objection. Consent may be withdrawn at any time for the future. Requests can be sent to contact@nowheknow.xyz. You also have the right to complain to a data protection authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information.

10. Automated decisions
NOWHEKNOW currently makes no solely automated decisions about website visitors that have legal or similarly significant effects.

11. Changes
This privacy notice will be updated when providers, purposes, legal bases, retention periods, or site functions change.