GDPR and Wonderchat

This page does not serve as legal advice. Please determine together with your legal advisor how GDPR applies to your business.

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union (EU) privacy law that allows EU citizens and residents to have access and control over their personal data.

Does it affect you?

If your business is based in the European Union (EU), or you process the personal data of individuals in the EU, the General Data Protection Regulation (GDPR) affects you.

Is Wonderchat GDPR Compliant?

Wonderchat is hosted in the European Union (EU) with its servers and databases in Frankfurt, Germany and complies with the GDPR framework. For more detailed information you can email us at [email protected] to request access to our Security Portal.

The measures we took

Our gives you more information about what data we collect, data retention and transfers, and outlines your data protection rights.

All of Wonderchat’s data is encrypted at rest, and stored in Frankfurt, Germany.

Data accessibility: You have full control of the information you collect, store and manage with Wonderchat.

We have a Data Processing Agreement available for you. Email us at [email protected] and we will send it over.

We can not modify or sign any additional DPAs. Instead, we've put significant effort into creating a standardized DPA that aligns with the regulations and protects all parties involved.

What happens with Chatlog data?

Wonderchat is the provider of a chatbot service that may collect contact information. However it is not the owner of the collected chatlog responses.

What do your cookies track?

Currently, cookies are not used under normal conditions, as we store most widget data in the localStorage. A full list of what is being tracked is listed in our Privacy Policy page.

The chatbot creator is responsible for the data he/she collects

Thus the chatbot creators are the data controller of the respondent data. Wonderchat is the processor and stores information on behalf of the chatbot creators. As long as the chatbot creator’s account is active, they will have full control over the data collected, and the time period for which the data is stored. Chatbot creators are able to delete or export form responses from their accounts if it would be required to do so.

Wonderchat honor all deletions, and all form data which has been deleted by you is permanently deleted from our back-ups within 14 days.

How do you use my personal data?

Wonderchat acts as a data controller in the relationship between Wonderchat and our customers (chatbot owners) for the personal data you give us in order to use our services. Such data are inclusive but not limited to registered information for instance. Wonderchat does not sell personal data to third parties or use it for marketing or advertising purposes.

We will only share your information with our service providers that help us to operate our business. In such cases, the third parties are also required to comply with the GDPR framework. More information about our subprocessors can be found on our Compliance Portal.

Our full list of sub-processors can be found within our Trust Portal.

Who can access my data? Under what circumstances does that happen, and what do they see?

No unauthorized person has access to the data. Access is only granted to the technical team that is responsible for server stability. Access to those is highly monitored and tracked in our activity log.

How do I make sure my Chatbot Contact collection is GDPR compliant?

There are several things you will have to consider when collecting personal information (name, email and phone number) within your chatbot.

Make sure that your Terms of Service and Privacy Policy properly communicate to your customers how exactly you are using Wonderchat. If you collect personal data from your customers and process them via our app, you should inform your customers about their entitlements under GDPR. We recommend you ensure your policies and internal documentation are up-to-date and as clear as possible. You can use this template in terms of your website:

This website is using Wonderchat, a chat platform that connects users with the customer support of [your company name]. We are collecting email addresses/names/phone numbers [remove based on your Chat Survey settings] only with the consent of the users, in order to start the chat. The messages and data exchanged are stored within the Wonderchat application. For more information, please refer to their Privacy Policy.[Your company name] is not making use of these messages or data other than to follow up on users’ registered issues or inquiries. Your personal data will be processed and transmitted in accordance with the General Data Protection Regulation (GDPR).