Legal
Privacy Policy
Last updated 24 August 2026
This policy explains how WOCOO Management and Consulting GmbH, Austria ("onesend", "we", "us") processes personal data when you use our website and service. We are the controller for the personal data described here.
1. Data we process
- Account data: your name, email address, company name, billing address, country, and VAT ID.
- Billing data: subscription and payment records. Card and bank details are handled by our payment provider and are not stored by us.
- Sending metadata: recipient addresses, message subjects, timestamps, delivery status, bounces, and complaints, retained according to your account's retention settings. We do not store the body content of the email you send beyond what is required to deliver it.
- Suppression data: addresses that bounced or complained, so you do not email them again.
- Technical data: log data such as IP addresses and request metadata, used for security and to operate the service.
2. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service and your account | Performance of a contract (Art. 6(1)(b)) |
| Billing, invoicing, and tax records | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Deliverability, suppression, and abuse prevention | Legitimate interests (Art. 6(1)(f)) |
| Security and service integrity | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal requests | Legal obligation (Art. 6(1)(c)) |
3. Processors and recipients
We share personal data only with providers that process it on our behalf under contract, including our hosting provider in Germany, our payment provider Mollie in the European Union, and the receiving mail providers to whom your email is delivered. VAT IDs are validated through the EU VIES system. We do not sell personal data.
4. Location of processing
onesend is operated on infrastructure within the European Union. Where any processing would involve a transfer outside the EU or EEA, we rely on an appropriate legal safeguard.
5. Retention
Sending metadata is retained according to your account's retention settings, after which recipient data is deleted or anonymised. Invoices and tax records are retained for the period required by law. Anonymous, aggregated statistics that contain no personal data may be kept indefinitely.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. You may exercise these rights by contacting us. You also have the right to lodge a complaint with a supervisory authority, in Austria the Datenschutzbehörde.
7. Cookies
Our website uses only what is necessary to operate, including a session cookie when you are signed in to the dashboard. We do not use advertising or cross-site tracking cookies.
8. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and separation of sending infrastructure.
9. Changes
We may update this policy and will reflect the date of the latest version above.
10. Contact
For privacy questions or to exercise your rights, contact privacy@onesend.eu.