A communication system, comprising: a) a wireless Low-Power Wide Area Network LPWA; b) at least one network server; c) at least one application server or a plurality of application servers, connectable to the network servers; d) at least one gateway or a plurality of gateways; e) at least one end device or a plurality of end devices, each end device being personalized with at least: f) an, at least within the LPWA network, unique device identifier DevEUI, g) for at least one application server, an application server identifier AppEUI and a symmetric cryptographic key AppKey of respective application server, the AppEUI or/and the DevEUI comprising an Organizationally Unique Identifier OUI, by which an owner or operator of the application server is uniquely identified; h) wherein each of the one or plurality of end devices is connectable to the network server via a gateway, wherein each end device is connectable to a gateway via the LPWA; i) wherein the system comprises join-in means constructed to perform a join-in procedure of joining in end devices to the LPWA by execution of an over-the-air-activation OTAA procedure network protocol, the join-in procedure comprising: j) at the network server, receiving from an end device a join-in request message, the join-in request message comprising at least the DevEUI and the AppEUI, k) verifying, using the DevEUI, if the end device is permitted to join the LPWA and, if it is permitted, activating the end device in the system, and l) connecting, using the AppEUI, the activated end device to the application server specified by the AppEUI; characterized in that the system further comprises: m) a privacy layer constructed to collaborate with the join-in means of step i), therein being constructed to, in the join-in request message, replace the Organizationally Unique Identifier OUI of the owner with the Organizationally Unique Identifier OUI (G&D OUI) of an owner of the privacy layer or replace the Organizationally Unique Identifier OUI of the operator of the application server with the Organizationally Unique Identifier OUI (G&D OUI) of an operator of the privacy layer, wherein the owner or operator of the privacy layer is different from the owner or operator of the application server, so that the real owner or operator of the application server remains hidden. a) a wireless Low-Power Wide Area Network LPWA; b) at least one network server; c) at least one application server or a plurality of application servers, connectable to the network servers; d) at least one gateway or a plurality of gateways; e) at least one end device or a plurality of end devices, each end device being personalized with at least: f) an, at least within the LPWA network, unique device identifier DevEUI, g) for at least one application server, an application server identifier AppEUI and a symmetric cryptographic key AppKey of respective application server, the AppEUI or/and the DevEUI comprising an Organizationally Unique Identifier OUI, by which an owner or operator of the application server is uniquely identified; h) wherein each of the one or plurality of end devices is connectable to the network server via a gateway, wherein each end device is connectable to a gateway via the LPWA; i) wherein the system comprises join-in means constructed to perform a join-in procedure of joining in end devices to the LPWA by execution of an over-the-air-activation OTAA procedure network protocol, the join-in procedure comprising: j) at the network server, receiving from an end device a join-in request message, the join-in request message comprising at least the DevEUI and the AppEUI, k) verifying, using the DevEUI, if the end device is permitted to join the LPWA and, if it is permitted, activating the end device in the system, and l) connecting, using the AppEUI, the activated end device to the application server specified by the AppEUI; <EOS>