GDPR & Data Protection

Data Controller

GetWebP Inc. is the data controller for personal data processed in connection with this website and related services.

Local image processing

For image processing performed locally via our Extension or WebAssembly, GetWebP acts solely as a software provider. No data transfer occurs, and therefore, GDPR processing roles do not apply to your content.

Legal Basis for Processing

We process your data based on the following legal grounds:

• Consent (Art. 6(1)(a)): For non-essential cookies and marketing communications.
• Contract (Art. 6(1)(b)): To provide the Pro features you purchased.
• Legitimate interest (Art. 6(1)(f)): To ensure the security and operation of our website.

Data We Process

In connection with our website and services, we may process the following categories of data. Our extension does not collect or transmit images or usage behaviour.

• Website: IP address, device/browser information, and pages visited (e.g. for security and operation).
• Cookies and similar technologies as described in our Cookie Policy.
• Contact form: name, email, and message content when you submit an inquiry.
• Extension: we do not collect images, conversion history, or usage data; processing is entirely local.

Purpose and Retention

We use data only for the stated purposes and retain it as follows:

• Website operation and security: as long as necessary for security and logs, typically up to 12 months.
• Cookie data: as set in our Cookie Policy; you can withdraw consent at any time.
• Contact form: until your request is resolved and any follow-up period required for legal or support purposes.

Your Rights

Under the GDPR you have the right to:

• Access your personal data and receive a copy (Art. 15).
• Rectification of inaccurate data (Art. 16) and erasure where applicable (Art. 17).
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Object to processing based on legitimate interests (Art. 21) and withdraw consent at any time.
• Lodge a complaint with a supervisory authority in your country (e.g. Ireland DPC, CNIL).

Contact and Data Protection

For privacy and data protection requests, contact us at info@getwebp.com. We will respond within 30 days. If we appoint a Data Protection Officer (DPO), their contact details will be published here.

International Transfers

Where we use service providers outside the EU/EEA (e.g. in the US), we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions. Our sub-processors (see below) are bound by data processing terms consistent with GDPR.

Complaints

You have the right to lodge a complaint with a supervisory authority in your country of residence or place of work. In Ireland: Data Protection Commission (DPC). In France: CNIL. We will cooperate with any competent authority.

Changes to This Page

We may update this GDPR page from time to time. The "Last Updated" date at the top will be revised when changes are made. We encourage you to review this page periodically.

List of Sub-processors

We use the following sub-processors to operate our website and services. Each is bound by data processing terms consistent with GDPR.