PRIVACY POLICY

1. DATA CONTROLLER

The data controller responsible for deciding how and why your personal data is processed is:

Werkwerk Consultants Inc.
1618, 11th Floor, Reg JS Triumph Square Building
Quezon Avenue, South Triangle
Quezon City 1103, NCR, Second District
Philippines

Privacy enquiries and requests may be sent to click here to reveal e-mail address.

2. PERSONAL DATA WE PROCESS

When you visit this website, the hosting infrastructure may process technical information such as your IP address, browser and device information, requested pages, referral information, and the date and time of each request.

If you contact us by email, we process the information you provide, which may include your name, contact details, company, role, correspondence, and information about your enquiry.

3. PURPOSES AND LEGAL BASES

We process technical data to deliver, maintain, and protect the website. Where applicable, this processing is based on our legitimate interests in operating a secure and reliable website under Article 6(1)(f) GDPR.

We process correspondence to respond to enquiries, discuss requested services, and take steps before entering into a contract. Depending on the circumstances, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR.

We may also process personal data where necessary to comply with a legal obligation under Article 6(1)(c) GDPR.

4. HOSTING AND SERVER LOGS

This website is hosted and delivered through Cloudflare:

Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA

Cloudflare processes website requests on our behalf and may process information including IP addresses, traffic-routing data, system-configuration information, and other request data. This processing is used to deliver the website, investigate faults, prevent misuse, and maintain security.

Werkwerk does not maintain a separate application-level log of routine website requests. Cloudflare retains and deletes data in accordance with the applicable service configuration, contractual terms, and its privacy policy.

For more information, see Cloudflare's Privacy Policy.

5. LOCAL AND SESSION STORAGE

The landing page uses the session-storage key werkwerk:preloader:v1 to record whether the introductory animation has already been shown in the current browser-tab session. The value is stored only for that session.

The website uses the local-storage key werkwerk:locale:v1 to remember an English or German language choice that you make through the language suggestion or a language link. On later visits, the preference redirects you to the equivalent page in your chosen language. It remains in your browser until you change the language or clear your browser storage.

Before a preference exists, the website reads your browser's preferred languages locally to decide whether to display a language suggestion. This information is not stored or sent to Werkwerk by the language-selection script. Neither storage key is used for advertising, analytics, or cross-site tracking.

6. ANALYTICS AND EXTERNAL SERVICES

This version of the website does not use analytics or advertising scripts. Website fonts are hosted with the site and are not requested from an external font provider.

We will update this policy and assess any consent requirements before introducing analytics or other non-essential services.

7. RECIPIENTS

Cloudflare, Inc. processes technical request data as our website hosting, content-delivery, and security provider. If you contact us, personal data in your correspondence may also be processed by the communications and information-technology providers that deliver and store the message.

Service providers process personal data only for the agreed purposes and under appropriate contractual safeguards.

We may also disclose personal data where required by law or where necessary to establish, exercise, or defend legal claims.

8. INTERNATIONAL TRANSFERS

Werkwerk is established in the Philippines, and Cloudflare operates a global network. Personal data may therefore be processed in the Philippines, the United States, the European Economic Area, and other countries in which Cloudflare operates.

Where the GDPR requires safeguards for a transfer outside the European Economic Area, we use a transfer mechanism permitted by the GDPR. Cloudflare states that it relies on the EU-U.S. Data Privacy Framework for eligible transfers to the United States and on approved standard contractual clauses, with supplementary measures where required, for other covered transfers.

9. DATA RETENTION

The session-storage value described above is deleted when the browser-tab session ends. The language preference remains in local storage until you choose another language or clear your browser storage. Cloudflare retains technical request data according to the service configuration and its applicable retention periods.

We normally retain enquiry correspondence for up to 24 months after the last meaningful contact. We may retain information for longer where it relates to an active or prospective engagement, or where necessary to meet legal, accounting, security, or dispute-resolution requirements. We delete or anonymise personal data when it is no longer required.

10. YOUR RIGHTS

Subject to the conditions and exceptions in applicable law, you may have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, and data portability. You may also object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal. To exercise your rights, click here to reveal e-mail address. We may need to verify your identity before responding.

You may lodge a complaint with the Philippine National Privacy Commission. If the GDPR applies, you may also complain to the supervisory authority in the EEA country where you live, work, or believe an infringement occurred.

11. AUTOMATED DECISION-MAKING

We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

12. SECURITY

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or loss. No method of transmission or storage can provide absolute security.

13. CHANGES TO THIS POLICY

We may update this privacy policy to reflect changes to the website, our processing activities, or applicable law. The current version will be published on this page.

Effective date and last updated: July 22, 2026.