Skip to content
Wavemond

Wavemond privacy policy

Last updated: 13 October 2026

This policy has two parts:

  • Part A covers you if you visit wavemond.com or contact us as a hotel.
  • Part B covers you if you are a hotel guest using Wavemond by tapping your phone on the plate in your room.

Who we are

Wavemond is a brand of Study Spencer ApS.

Study Spencer ApS
CVR 46765850
Himmelstrupvej 47
5462 Morud, Denmark
Email: martin@wavemond.com
Phone: +45 30 55 62 68

Part A: Visitors to wavemond.com and hotels contacting us

A1. Data controller

Study Spencer ApS is the data controller for everything in Part A.

A2. What the site is for

wavemond.com presents Wavemond to hotels: read about the solution, get an estimate of the potential and request a demo. No accounts, no login.

A3. What we process and why

Demo form. Name, email and hotel name (required), and optionally number of hotels, number of rooms, phone and message. Used to contact you about a demo and a possible collaboration. Legal basis: GDPR Article 6(1)(b) (pre-contract steps) and 6(1)(f) (legitimate interest in answering business enquiries).

Send the estimate. The estimate is made in your browser and nothing is stored unless you ask for it to be sent. Then we receive name, email, hotel name, the figures you entered and the result. Same purpose and legal basis.

Email and phone. What you tell us. Used to reply. Legal basis: Article 6(1)(f), and 6(1)(b) where it concerns a contract.

Technical data. Our providers process IP address, browser type, time and pages viewed to deliver the site securely. Legal basis: Article 6(1)(f).

A4. Cookies

No marketing or advertising cookies. The site uses:

  • __cf_bm (Cloudflare): necessary security cookie, expires after 30 minutes.
  • Visitor statistics from the hosting platform (/~flock.js): a random session id for about 30 minutes in browser storage or as the cookie "session-id". The statistics only run if you accept in the cookie banner. You can change your choice at any time via "Cookie settings" at the bottom of the page. Legal basis: your consent, Article 6(1)(a).

A5. Retention (proposal)

  • Enquiries that do not lead to a collaboration: deleted within 12 months of last contact.
  • Enquiries that lead to a collaboration: kept while it lasts; accounting records 5 years.
  • Technical logs: per our providers' standard practice.

Part B: Hotel guests using Wavemond

B1. How it works

A Wavemond plate sits on the wall or the bedside table in your room. When you hold your phone to it, the hotel's own guest page opens in your browser. There you can see the hotel's services, such as room service, restaurant, spa and late checkout, and send a request to the hotel. No app, no account.

B2. Who is responsible

The hotel is the data controller for your requests and orders made through the guest page.

Wavemond (Study Spencer ApS) is the data processor for that data. We run the guest page for the hotel and only process data on the hotel's instructions under a data processing agreement. The data is shared between the hotel and Wavemond because we both need to see the request to deliver the service. We do not use it for our own purposes.

Wavemond is itself the data controller for:

  • technical logs and security
  • anonymised statistics across hotels used to improve the product, which cannot be traced back to you.

The hotel's own systems. If you need to book a table or spa time, or give your name or phone number, the guest page sends you on to the hotel's own platform. Wavemond does not receive that data, and the hotel's own privacy policy applies there.

B3. What is processed

  • Room: which plate and room the tap came from, so the hotel knows where to deliver.
  • Requests and orders: what you ask for via the guest page, and when.
  • Use of the guest page: which pages and services are opened, and when.
  • Technical data: IP address, browser and device type, timestamps.

You do not give your name, phone number or other contact details to Wavemond. No account, no login, no app.

Payment. No payment is made through the guest page. Payment follows the hotel's normal rules.

No health data. The guest page does not ask about allergies, diets or other health information, and you must not write such information to us through it. If you need to tell the hotel about an allergy, contact the hotel directly.

B4. Purposes and legal bases

  • Providing the service you ask for: the hotel's basis is typically Article 6(1)(b).
  • The hotel's overview of how the guest page is used: aggregated figures only, Article 6(1)(f).
  • Wavemond's operation, security and anonymised product statistics: Article 6(1)(f).

The hotel sets its own legal bases. The above describes the typical ones.

B5. What we do not do

No marketing to guests. No selling of data. No tracking across hotels and no profiles of individual guests.

B6. Who sees the data

Hotel staff handling your request, Wavemond as needed to run and support the platform, our hosting and database sub-processors (see below), and authorities where required by law.

B7. Retention

  • Requests and orders with room number are deleted 90 days after checkout.
  • Technical logs: max 30 days.
  • Anonymised statistics may be kept.

B8. Children

The guest page is not aimed at children, and requests should be sent by an adult. We do not knowingly collect data about children.

B9. Your rights as a guest

As the hotel is the data controller for your requests, contact the hotel first. You are also welcome to write to martin@wavemond.com and we will help the hotel answer you.

Common to Parts A and B

Providers and transfers outside the EU/EEA

We use data processors, including Lovable (hosting), Supabase (database, stored in the EU, Ireland), Cloudflare (network and security) and our email provider. On wavemond.com, fonts are loaded from Google Fonts, so your IP address is sent to Google. Where data leaves the EU/EEA, transfers rely on the EU-US Data Privacy Framework if the provider is certified, or on standard contractual clauses.

No automated decision-making.

Your rights

Access, rectification, erasure, restriction, objection to processing based on legitimate interest, and data portability. Write to martin@wavemond.com. We reply within one month.

Complaints

Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, +45 33 19 32 00, dt@datatilsynet.dk.

Changes

We update this policy when the site, platform or our data handling changes.