Company Information
- Company Name: Wavect GmbH
- Legal Form: GmbH (limited liability company)
- Address: Häusern 6a, A-6070 Ampass, Tirol, Austria
- Registered Office: Tirol, Austria
- Commercial Register Number: FN 575337 i
- Register Court: Landesgericht Innsbruck
- Managing Director: Riedl Kevin, Christof Jori
- VAT Identification Number: ATU77948526
Contact Information
- Telephone: +43 650 30 566 44
- Email: [email protected]
- Website: wavect.io
- Opening hours: Mon–Sat 07:00–21:00, Sunday 18:00–21:00 (on-site by appointment); online every day 06:00–23:00
Disclaimer and Legal Notice
Content Responsibility:
Wavect GmbH is responsible for the content of this website in accordance with general laws. Despite careful content control, we assume no liability for the content of external links. The operators of linked pages are solely responsible for their content.
Third-Party Trademarks and Comparative Advertising
Third-party names and trademarks. All third-party company names, product names, brands, logos and trademarks mentioned anywhere on this website are the property of their respective owners. They are used solely for identification and for descriptive reference. Their use does not imply any affiliation, partnership, sponsorship, endorsement, certification or business relationship between Wavect GmbH and the respective owner, and no such relationship should be inferred.
Comparative content. Some pages on this website, in particular the pages under /compare/, compare Wavect GmbH with other providers, with categories of provider, or with engagement models. These comparisons are published by Wavect GmbH as an independent buyer aid. They are prepared with the intention of being objective, of comparing only features that serve the same need, and of relying on features that are material, relevant, verifiable and representative.
Sources and review dates. Statements about other providers are taken from publicly available sources, primarily the provider’s own published pages, public commercial registers and public directories. Each comparison page lists the sources used for the statements about the other provider, together with the date on which each source was checked. Published information changes. A statement therefore reflects only the source as it stood on the date shown, and readers should verify the current position with the provider directly before making a decision.
What these pages do not say. The comparisons do not allege any legal or contractual breach, any deficiency in quality, or any improper conduct by any other provider. Where a comparison notes a structural fact, for example an ownership structure, a legal form, a governing law, a published price model or a certification, that fact is stated as published and is accompanied by the question a buyer should put to the provider. It is not an assertion about that provider’s competence, integrity or intentions. Statements of opinion are our assessment for the purpose of a purchasing decision and are identified as such.
Buyer scenarios. Any illustrative buyer scenario, sample dialogue or quoted question shown on a comparison page is an example written by us. It is not a quotation from, and not an account by, any actual customer, and it is labelled accordingly on the page.
Our own figures. Figures we publish about Wavect GmbH, such as the number of products shipped, countries served, platform ratings or price entry points, refer to our own records as of the review date shown on the relevant page. We provide evidence for these figures on request.
Client outcome figures. Figures in our case studies that describe a client’s own business, such as funds raised, grants secured or efficiency gains, are that client’s own reported numbers and are marked as client-reported where they appear. Figures describing our own work come from our engagement records as of the review date. Case studies describe our own contribution inside a larger effort, and other parties, including the client’s own teams, contributed to the results. If you are named in a case study and want a correction or a removal, use the notice and correction procedure below.
Notice and Correction Procedure
If you are a provider named on this website, or a representative of one, and you consider a statement about you to be inaccurate, outdated, incomplete or unfairly presented, please write to [email protected] with the page URL, the exact passage, and the correct position together with a source we can check.
We will acknowledge receipt without undue delay and normally within three business days. We will review the passage against the source cited on the page and, where the objection is justified, correct or remove it, normally within ten business days of receipt. Where a passage is factually correct but the presentation can be improved, we will adjust the presentation. Where we do not follow an objection, we will explain why and identify the source we relied on. Corrections are reflected in the review date shown on the page.
Requests for the removal of a factually correct and sourced statement will be assessed on their merits. This procedure is offered voluntarily and in good faith. It does not restrict, replace or waive any statutory right of either side, and it does not constitute an admission of any kind.
Data Protection Officer
For any data protection inquiries, please contact our Data Protection Officer:
- Data Protection Officer: Kevin Riedl
- Email: [email protected]
Data Privacy & GDPR Compliance
We take the protection of your personal data seriously and comply with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act (TKG 2021). Fonts and core website assets are self-hosted. Optional third-party services are described below and do not load before the relevant consent.
Hosting and delivery
This website is hosted on Cloudflare Pages. Cloudflare processes connection and security data such as IP address, request URL, timestamp, browser information and security signals to deliver and protect the website. Cloudflare may process data outside the EEA under its Data Processing Addendum, the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Legal basis: legitimate interest in secure and reliable delivery (Art. 6(1)(f) GDPR). Cloudflare Privacy Policy.
Agent Commerce, payments and order notifications
Our B2B Agent Commerce interface processes company name, billing email, billing address, VAT ID, selected offer, an opaque agent-mandate reference, tax result, order and payment status. Cloudflare D1 stores commerce records in an EU jurisdiction and Cloudflare Queues transports only opaque event and order identifiers to the notification worker. Stripe processes tokenized card payments; MPP carries the payment challenge and proof without giving us card or wallet secrets. USDC payments settle publicly on Base, so wallet addresses, amount and transaction reference are visible on that blockchain. We do not place names, email addresses, billing addresses, prompts, files or project information on-chain. Resend sends minimized internal order notifications to Wavect. Legal bases are contract steps and performance (Art. 6(1)(b) GDPR), statutory accounting and tax duties (Art. 6(1)(c) GDPR), and our legitimate interest in secure, reliable order and fraud handling (Art. 6(1)(f) GDPR).
Agent Commerce privacy notice version 2026-08-06. To document a B2B electronic contract, we record the explicit business-customer statement, the agent’s authority scope and tax-inclusive spending ceiling, the accepted terms and acknowledged privacy-notice versions, and SHA-256 hashes of the mandate reference and normalized contract evidence. The acknowledgement proves that this notice was presented; it is not consent to marketing or optional processing. We do not add an IP address, user-agent string, representative name or raw mandate to this contract record. Expired unused quotes, including their billing data, are deleted after 24 hours. Orders and their minimized contract, payment and tax evidence are retained only for applicable contract, accounting and tax periods.
Consent-based services
The following optional services load only after your specific selection in our privacy settings. Legal basis: consent (Art. 6(1)(a) GDPR and Section 165(3) TKG 2021).
- Website analytics: Umami Cloud (analytics data hosted in the EU) and PostHog EU produce website statistics and help improve pages after analytics consent. PostHog may process your IP address and record consented sessions. Form inputs are masked, while visible page text, browser console logs and network request timings can be recorded. Replay is configured without request header or body capture. Analytics remains disabled when the browser sends Do Not Track. Umami Privacy Policy; PostHog Privacy Policy.
- Ad measurement: For advertising measurement, Google Ads and the OpenAI Ads Measurement Pixel load only after a separate ad-measurement opt-in. They process technical connection, device and usage data and may use advertising cookies or click identifiers to attribute contact-page visits to Google or ChatGPT ads. A contact-page visit is an intent signal, not a submitted enquiry. OpenAI also measures successfully submitted contact forms. Our explicit event calls do not send form names, email addresses or messages. Google enhanced conversions are disabled for the contact-page event, and Google personalization stays denied unless you separately enable personalized Google ads. OpenAI event calls opt out of future user-level personalization. OpenAI automatic advanced matching may detect supported customer information on the page and hash it in the browser; according to OpenAI, the raw value is not sent through this feature. We honor Do Not Track and Global Privacy Control for ad measurement. Google uses basic consent mode: no Google tag request or cookieless conversion ping before opt-in. Withdrawal stops new measurement and reloads the page to unload the SDKs. Google Privacy Policy; OpenAI Privacy Policy.
- Personalized Google ads: Only after your separate choice, Google Ads (Google Ireland Limited) can use advertising cookies, technical connection/device data and visits to eligible public commercial pages to create advertising audiences and show Wavect ads again on Google and other websites. A successful enquiry may be used to exclude you from acquisition advertising. This choice does not enable OpenAI measurement or website analytics. It is optional, does not affect access to the site and can be withdrawn through the footer privacy settings. We honor Do Not Track and Global Privacy Control. Our explicit audience calls use the public route and fixed audience categories, not free-form queries, referrers, form contents or customer contact lists. Audience creation is advertising profiling; we do not use it for automated decisions with legal or similarly significant effects. Google may process data outside the EEA under the safeguards described in its policies. The planned audience membership is 30 days; Google advertising cookies and provider records have their own retention settings. How Google uses data; Google Privacy Policy; Google ad controls.
- External media: LinkedIn posts are displayed as privacy facades. LinkedIn receives connection and browser data only after you enable external media or load an individual post. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn Privacy Policy.
Optional AI assistant: LeadWin
Our AI assistant is provided by Feedbax, Armin Bossag, Holsteinstr. 10, 41564 Kaarst, Germany. It loads only after your separate AI-chat consent, either in our privacy settings or through the clearly labelled activation button. Consent to chat does not enable website analytics or advertising. LeadWin’s detailed visitor profiling is disabled. You can use our ordinary contact page without enabling the assistant.
When enabled, the service processes connection data; opening a conversation sends your messages, any files you voluntarily upload, voluntarily provided contact information, the current page path, the referring host and derived country to Feedbax and its AI providers. Please do not enter sensitive personal data, passwords or confidential documents. The assistant is AI and can make mistakes. We use it for information and voluntary enquiries, not decisions with legal or similarly significant effects.
The chat also offers public social posts, videos and original links. Opening a YouTube video loads a player from youtube-nocookie.com and sends connection data to Google. Other social content or original links may connect to LinkedIn, Instagram/Facebook, TikTok or X. Those platforms may process technical data and identifiers, including outside the EEA, under their own privacy policies. You can use text advice and our ordinary contact page without opening social content. Google/YouTube; LinkedIn; Meta; TikTok; X.
Feedbax hosts chat records in Germany through UmbHost/Hetzner. Its published processor list also includes Cloudflare (delivery/security), OpenAI in the USA (messages and context, no model training, abuse-monitoring retention up to 30 days), and Web Cats UAB in Lithuania (language detection without storing message text). The vendor describes EU-US Data Privacy Framework and standard contractual clauses for applicable transfers. We have concluded Feedbax’s Article 28 data processing agreement. Processor agreement and subprocessors; LeadWin privacy information.
Legal basis for loading the optional service: consent, Art. 6(1)(a) GDPR and Section 165(3) TKG 2021. Voluntary contact requests may additionally involve pre-contractual steps under Art. 6(1)(b) GDPR. Withdraw chat consent through Privacy settings in the footer; we remove the widget and reload the page to unload its connections and timers. Withdrawal does not erase an existing record. For access or deletion, contact [email protected]. Feedbax does not automatically delete conversations during the account’s lifetime; we review necessity and request deletion when the enquiry is completed and no further purpose applies, at the latest after 24 months unless statutory retention requires longer.
Consent Management
Our first-party consent manager separates website analytics, ad measurement, personalized Google ads, AI chat and external media. Existing version-4 or version-5 permission is never extended to personalized ads; the new choice starts off. New permissions for any optional purpose activate only after the server confirms that it stored the consent record. No box is preselected. "Reject all" and "Accept all" are equally available, and you can withdraw or change your choice through "Privacy Settings" in the footer. The necessary wavect_consent_v6 cookie stores the selected categories, consent version, timestamp, a reference for that choice and a pending-confirmation marker for up to 180 days. The reference is used only to prevent a stale consent response from overriding a newer choice; it is not sent to advertising providers. Session storage may remember a dismissed interface notice (wavect-guarantee-bar-dismissed) or an external-media choice for the current tab (li-autoload). Optional providers may store their own identifiers only after consent. In addition, your consent choices (the selected categories, the consent version and a timestamp, plus a coarse country derived from your connection) are recorded on our servers as proof of consent under Art. 6(1)(c) and Art. 7(1) GDPR. The record also includes a random receipt identifier, the language and whether you accepted, rejected or changed your choices. We store it in Cloudflare D1 with EU jurisdiction, without your IP address. A scheduled job deletes records older than 24 months.
After ad-measurement consent, tab-scoped session storage (wavect_google_contact_seen_v1) prevents repeat contact-page events; it contains only a sent flag, is cleared on withdrawal and ends with the tab session.
Contact forms
Contact and report-request forms are transmitted to Web3Forms. Web3Forms processes the form fields, connection data and message for delivery to us. The contact form also loads hCaptcha from Intuition Machines, Inc. for abuse prevention, which processes technical connection and browser data and may use browser storage. Do not submit sensitive data through these forms. Legal basis for the requested communication: Art. 6(1)(b) GDPR or our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. Web3Forms Privacy Policy; hCaptcha Privacy Policy.
Web3Forms is operated by Web3Creative in India. Its DPA describes possible processing outside the EEA and the use of EU standard contractual clauses where required. We have configured a seven-day retention period for new submissions in Web3Forms. Submissions already held there and backup copies may follow longer deletion schedules. The seven-day setting covers the Web3Forms copy. Wavect keeps its own enquiry records for up to 24 months unless a longer legal period applies. Web3Forms data processing agreement.
We use HubSpot to manage enquiries and follow-up. After Web3Forms accepts your submission, the website may also send your email address and the submitted request, including the name you supplied and an enquiry reference, to our HubSpot CRM. This operational copy does not subscribe you to marketing emails or enable advertising data sharing. No HubSpot browsing-tracking script is installed for this purpose. Processing may involve HubSpot affiliates and subprocessors outside the EEA under its data-processing agreement and applicable transfer safeguards. Legal basis: the requested communication under Art. 6(1)(b) GDPR or our legitimate interest in managing enquiries under Art. 6(1)(f) GDPR. HubSpot Privacy Policy; HubSpot DPA.
Blog email subscriptions
If you subscribe to the blog, we process your email address, language, selected topics, consent version and confirmation time. A neutral double-opt-in email is sent before you are added. Resend (Plus Five Five, Inc., USA) provides email delivery, contact storage and preference management. Resend sends our blog emails through Ireland and stores customer data in the United States. It retains email and log data for 30 days, with a separate seven-day backup cycle. Its documentation lists its subprocessors. Transfers rely on Resend’s DPA, SCCs and, where applicable, Data Privacy Framework certification. Legal basis: consent (Art. 6(1)(a) GDPR and Section 174 TKG 2021). Subscription contact data remains until you withdraw consent, except minimal suppression or evidence data required to honor an opt-out or legal obligations. Every marketing email contains a free unsubscribe and preference link. Resend Privacy Policy.
You may request access, rectification, erasure, restriction, objection or data portability, or withdraw newsletter and optional-service consent at any time by emailing [email protected]. Withdrawal does not affect processing carried out before withdrawal. Providing your email is voluntary. Newsletter registration alone does not enable advertising profiling. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).
Booking
Our "Apply now" button links to Zeeg.me, a scheduling tool operated by Zeeg GmbH, Germany. Clicking the link opens Zeeg.me in a new tab; no Zeeg widget or script is embedded on this website. Data you enter when booking (name, email, selected time) is processed by Zeeg. Zeeg Privacy Policy.
Data retention
Unless a longer statutory period applies, we keep personal data only as long as necessary for the stated purpose: hosting and security logs are retained only briefly and then deleted; Agent Commerce technical logs for up to 30 days and unused quotes for up to 24 hours; order, invoice, payment and contract records for seven years where required by Austrian accounting and tax law; Umami Cloud analytics data for six months, PostHog analytics events for one year and PostHog session replays for 30 days; Google Ads and OpenAI Ads conversion data according to the applicable Ads account and provider retention settings; live-chat transcripts and contact-form enquiries for up to 24 months; booking data for the duration of the engagement and applicable retention obligations. Our first-party consent cookie is stored for 180 days. Third-party processors may apply their own retention as set out in their respective policies.
Copyright and Image Credits
The content and works on these pages created by the site operators are subject to Austrian copyright law. Duplication, processing, distribution, and any kind of exploitation outside the limits of copyright require the written consent of the respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use.
Image Credits:
- Images from Kevin Riedl’s photoshoot from February 2024 executed by Christina Weiler, Weiherburggasse 5a, A-6020 Innsbruck ("Photographer") who transferred all necessary intellectual property including commercial rights to Wavect GmbH on February 2024.
- Images from a Company’s team photoshoot in Vienna in February 2024 executed by Studio Matphoto e.U. ("Photographer") who transferred all necessary intellectual property including commercial rights to Wavect GmbH on February 2024.
- Employees shown on team pictures also assigned Wavect GmbH with full commercial rights even after leaving the company.
Terms and Conditions
For detailed terms and conditions, please visit our Terms and Conditions.