Data protection policy of Ravenbelt

Last update: 01/2022

We thank you for visiting our website and for your interest in our company. We are very serious about protecting your personal data. We process your data in accordance with the laws and regulations applicable to the protection of personal data, particularly including the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementing laws applicable to us. In this data protection policy, we provide you with comprehensive information about the processing of your data by Ravenbelt and your rights in this respect.

Personal data is information that makes it possible to identify a natural person, particularly including the name, date of birth, address, telephone number, e-mail address and IP address.

Anonymous data is data from which no one can establish a personal connection to the user.

Controller and Data Protection Officer

The controller according to the definition of the General Data Protection Act and other national data protection laws of the EU member states and other data protection regulations is:

RavenBelt e.U.

Lobisserweg 18, 9551 Bodensdorf

AUSTRIA

Contact information of the Data Protection Officer:

office@ravenbelt.com

Your rights as a data subject

First, we would like to inform you of your rights as a data subject. These rights are codified in Art. 15 – 22 EU-GDPR. They are:

The right of access (Art. 15 EU-GDPR),

The right to erasure (Art. 17 EU-GDPR),

The right to rectification (Art. 16 EU-GDPR),

The right to data portability (Art. 20 EU- GDPR),

The right to restriction of data processing (Art. 18 EU-GDPR),

The right to object to data processing (Art. 21 EU-GDPR).

To assert these rights, please contact:

office@ravenbelt.com

Any questions about data processing in our company should be directed to the same e-mail address. You are also entitled to complain to the data protection supervisory authority.

Rights of objection

Please note the following with respect to the rights of objection:

When we process your personal data for purposes of direct advertising, you have the right to object to such data processing at any time without indication of reasons. The same applies to profiling to the extent that it is related to direct advertising.

When you object to processing for purposes of direct advertising, we will no longer process your personal data for these purposes. You can notify you objection free of charge and without observing requirements of form, ideally at:

office@ravenbelt.com

In the event that we process your data for the sake of legitimate interests, you can object to such processing at any time for reasons having to do with your particular situation; the same applies to any profiling on the basis of these provisions.

We will no longer process your personal data unless we can demonstrate compelling, legitimate reasons for the processing that override your interests, rights and freedoms, or when the processing serves the purpose of asserting, exercising or defending against legal claims.

Secure transmission of your data

We employ appropriate technical and organisational safeguards to protect the data stored with us as well as possible against accidental or intentional manipulations, loss, destruction or access by unauthorised persons. The level of security is continually reviewed and adapted to meet new security standards in collaboration with security experts.

Data transfers from and to our website are always encrypted. As the transmission protocol for our websites, we offer HTTPS and we always use the latest encryption protocols. It is also possible to use alternative communication channels (e.g. postal service).

Duration of data storage

We will store your data for as long as needed for the given processing purpose. Please note that numerous retention periods require that data continues to be stored. We are particularly required to do this by retention obligations under commercial law or tax law. Data is routinely erased as soon as no further retention obligations are in effect.

Furthermore, we may store your data when you have granted us your consent to do this or in the event of legal disputes, when we use the data as evidence for purposes of statutory limitation periods, which can last up to three years; the regular limitation period is three years.

Contact form/ Contact by e-mail (Art. 6 para. 1 letter a, b EU-GDPR)

Contact form / contact by e-mail Ravenbelt

A contact form that can be used for contacting us electronically is available on our website. When you write to us using the contact form, we will process the data you enter into the contact form to contact you and answer your questions and wishes.

In this respect, we observe the principle of data minimisation and data avoidance in that you only need to enter the data that we absolutely need to contact you. That includes your e-mail address and the message field itself. In addition, your IP address is also processed as a matter of technical necessity and for legal protection. All other data is requested in optional fields and can be provided optionally (e.g. to answer your questions more specifically in relation to you).

If you contact us by e-mail, we process the personal data communicated in the e-mail only for the purpose of processing your request.

Cookies

Our web pages use so-called “cookies” in several places. They serve the purpose of making our offering more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard drive).

These cookies make it possible for us to analyse how users use our websites. They allow us to design the website contents to meet the needs of users, for example. Cookies also enable us to measure the effectiveness of a given advertisement and place it in accordance with the user’s topical interests, for example.

Most of the cookies we use are so-called “session cookies.” These are automatically deleted after your visit. Permanent cookies are automatically deleted by your computer when the corresponding period of validity has expired (usually after six months) or when you delete them yourself before the expiration of the period of validity.

Most web browsers accept cookies automatically. Usually, however, you can also change your browser settings if you would rather not send us the information. In this case, you will still be able to use the offerings of our website without restrictions (exception: configurators).

We use cookies to make your offering more user-friendly, effective and secure. We also use cookies so that we can analyse how users use our websites. They allow us to design the website contents to meet the needs of users, for example. Cookies also enable us to measure the effectiveness of a given advertisement and place it in accordance with the user’s topical interests, for example.

Cookies are stored on the user’s computer and transmitted from there to our website. As the user, therefore, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the setting in your Internet browser. Furthermore, already placed cookies can always be deleted using the Internet browser or other software programs. This is possible in all commonly used Internet browsers.

Please note that when you deactivate cookies, all the functions of our website may not be fully usable.

Social media plug-ins of social networks / YouTube

We currently use the following social media plug-ins: Facebook, LinkedIn, Instagram. We use the so-called two-click solution for this purpose. This means that when you visit our website, no personal data is transferred to the plug-in provider at first, as a rule. You can recognise the plug-in provider from the marking in the box above its initial letters or its logo. We give you the option of communicating directly with the plug-in provider by clicking on this button. Only when you click on the marked field and thereby activate it will the plug-in provider receive the information that you have visited the corresponding page of our online offering. In the case of Facebook and Xing, the IP address is anonymised immediately after collection, according to the providers. When you activate the plug-in, therefore, your personal data is transmitted to the plug-in provider and stored there (with U.S. providers, in the United States). Because the plug-in provider particularly uses cookies to collect data, we recommend that you delete all cookies in your browser’s security settings before clicking on the greyed-out box.

We have no influence on the data collected and the data processing procedures and we also do not know the full extent of data collection, the purposes of processing or the storage periods. We also have no information about the deletion of collected data by the plug-in provider.

The plug-in provider stores the data collected on you in the form of usage profiles and uses them for purposes of advertising, market research and/or designing its websites to meet the needs of users. Such analysis is particularly performed (also for users who are not logged in) to present relevant advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, for which purpose you must contact each plug-in provider. With these plug-ins, we give you the opportunity to interact with the social networks and other users so that we can improve our offering and make it more interesting for you as the user.

The basis for the processing of your personal data is your consent, the legal basis is Art. 6 para. 1 s. 1 lit. a EU-GDPR.

The plug-in provider processes and stores your data in the USA. They are obliged by corresponding contractual regulations to comply with the data protection standards and the data protection level of the EU. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 para. 1 s. 1 lit. a EU-GDPR), in which case you will be informed of this separately when obtaining your consent.

You can revoke your consent at any time for the future. To do so, simply call up our Consent banner and deselect the corresponding setting. Please note that the change in the Consent Banner settings must be made individually for each end device.

Consent Banner settings

Data is transferred regardless of whether you have an account with the plug-in provider and are logged in to it. When you are logged in to the plug-in provider, your data that is collected by us is directly attributed to your account with the plug-in provider. If you activate the button and link to the page (for example), the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you always log out after using a social network, but especially before activating the button because this way you can prevent the attribution of information to your profile with the plug-in provider.

You can find additional information about the purpose and scope of data collection and processing by the plug-in provider in the data protection policies of these providers, which are shared in the following. There you will also find additional information about your rights and setting options to protect your privacy.

Addresses of plug-in providers and URLs with their data protection policies:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; additional information on the subject of data collection: http://www.facebook.com/help/186325668085084 sowie https://www.facebook.com/privacy/explanation . Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; http://instagram.com/about/legal/privacy/#.

YouTube

Our website includes links to videos from the external video platform YouTube. The associated plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By default, only inactivated images from the YouTube channel are embedded and do not provide an automatic connection to YouTube’s servers. Consequently that operator receives no user data when you view these Web pages.

You can decide for yourself whether YouTube videos should be activated. Your consent for the necessary data to be transferred to the operator (including the Internet address of the current page and the user’s IP address) will only be given when you approve for the video to play by clicking “start video.”

To store the setting that a user wishes, we set a cookie that contains these parameters. When we set these cookies, we do not store any personal data – the cookies contain only anonymized data to adjust the browser. Then the videos will be active and you can play them. If you want to inactivate automatic loading for YouTube videos, you can change your Web browser’s settings to reject cookies or limit their acceptance.

You can find out more about data protection on YouTube in YouTube’s data privacy policy at: https://www.google.de/intl/en/policies/privacy/.