Privacy Policy (GDPR Compliant)

Last Updated: January 15, 2027

At lazz.org, operating as an official WeTransfer B.V. development mirror, we take the protection of your personal data seriously. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Controller

2. Data Collected

2.1 Automatically Collected Information

Each time you access our services, the following information is collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL (previously visited page)
• Amount of data transferred

2.2 Data You Provide

When you use our services, we collect:

• Email address (upon registration)
• Uploaded files and metadata
• Share links and access logs
• Communication with our support

3. Purpose of Data Processing

Purpose	Legal Basis
Service provision	Contract fulfillment (Art. 6(1)(b) GDPR)
Security and abuse prevention	Legitimate interest (Art. 6(1)(f) GDPR)
Technical administration	Legitimate interest (Art. 6(1)(f) GDPR)
Legal obligations	Legal requirement (Art. 6(1)(c) GDPR)
Service improvement	Legitimate interest (Art. 6(1)(f) GDPR)

4. Data Storage and Security

4.1 Storage Location

Your data is stored in ISO-certified data centers within the European Union. As part of WeTransfer's infrastructure expansion, you benefit from their world-class security standards.

4.2 Encryption

All uploaded files are stored encrypted:

• Transmission: SSL/TLS encryption (HTTPS)
• Storage: AES-256 encryption
• Access: Only via secure share links

4.3 Retention Period

We store your data only as long as necessary:

• Uploaded files: Until deletion or max 90 days of inactivity
• Account data: Until account deletion
• Access logs: 30 days
• Backup data: Up to 30 days after deletion

5. Data Sharing

5.1 Third Parties

We only share your data with third parties in the following cases:

• With your express consent
• To fulfill contractual obligations (e.g., hosting providers)
• When legally required (e.g., court order)
• To protect our rights or the rights of others

5.2 International Transfer

As part of WeTransfer's global infrastructure, data may be processed across different regions for load balancing. However, all data storage complies with GDPR requirements and remains within EU data protection standards.

6. Cookies and Tracking

6.1 Necessary Cookies

We use technically necessary cookies to provide our service:

• Session cookies for login
• Security cookies for abuse prevention
• Preference cookies for your settings

6.2 Analytical Cookies

To improve our service, we use anonymized usage statistics. You can opt out of analytical cookies without restricting the use of our service.

7. Your Rights

Under GDPR, you have the following rights:

7.1 Right of Access

You have the right to obtain information about the personal data we store about you.

7.2 Rectification and Deletion

You can request correction of incorrect data or deletion of your data.

7.3 Restriction of Processing

You can request restriction of the processing of your data.

7.4 Data Portability

You have the right to receive your data in a structured, machine-readable format.

7.5 Right to Object

You can object to the processing of your data when it is based on legitimate interest.

7.6 Withdrawal of Consent

Where you have given consent, you can withdraw it at any time with effect for the future.

7.7 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

8. Security Measures

We implement comprehensive technical and organizational measures to protect your data:

• Encrypted data transmission (SSL/TLS)
• Encrypted data storage (AES-256)
• Regular security audits
• Access restrictions and authentication
• Firewalls and intrusion detection systems
• Regular backups with encryption

9. Protection of Minors

Our service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from minors, please contact us immediately.

10. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy to reflect changes in legal requirements or changes to our service. The current version is always available on our website.

11. Data Protection Contact

For questions about data protection or to exercise your rights, please contact us:

← Back to Home | CDRP Guidelines | Terms & Conditions