Privacy Policy

Last Updated: 02.06.2024

Introduction

Reffect UG (haftungsbeschränkt) ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website remind5.com (the "Site") and use our services. This policy is in accordance with the General Data Protection Regulation (GDPR) and other applicable German laws.

Data Controller

Reffect UG (haftungsbeschränkt)
Georgswerder Bogen 13A
21109 Hamburg, Germany
info@reffect.org

1. Information We Collect

We may collect and process the following data about you:

  • Personal Identification Information: Name (or company name), email address.
  • Payment Information: Payment details processed by Stripe.
  • Technical Data: IP address, browser type, operating system, and other technical data collected by Vercel and Supabase.
  • Usage Data: Information about how you use our website and services.

2. How We Use Your Information

We use the information we collect in the following ways:

  • To Provide and Maintain Our Service: Including processing transactions and managing subscriptions.
  • To Improve Our Service: Analyzing usage data to enhance user experience.
  • To Communicate with You: Sending updates, newsletters, and other information.
  • To Comply with Legal Obligations: Ensuring compliance with applicable laws and regulations.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you have given us explicit consent to process your data.
  • Contract: When processing is necessary for the performance of a contract with you.
  • Legal Obligation: When we are required to comply with a legal obligation.
  • Legitimate Interests: When processing is necessary for our legitimate interests, provided that your interests and fundamental rights do not override those interests.

4. Data Sharing and Disclosure

We may share your information with third parties in the following circumstances:

  • Service Providers: We use third-party service providers such as Stripe for payment processing, Supabase for database services and Vercel for hosting. These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
    • Stripe: For payment processing. Stripe's privacy policy can be found here.
    • Supabase: For database services. Supabase's privacy policy can be found here.
    • Vercel: For hosting services. Vercel's privacy policy can be found here.
  • Legal Requirements: If required by law or in response to valid requests by public authorities.

5. Data Transfers

As we use service providers based in the United States (Stripe, Supabase, and Vercel), your data may be transferred to, stored, and processed in the United States. We ensure that these transfers are conducted in compliance with GDPR requirements, including the use of Standard Contractual Clauses (SCCs) where necessary.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Data Protection Rights

Under GDPR, you have the following rights:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our provided contact information.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Reffect UG (haftungsbeschränkt)
Georgswerder Bogen 13A
21109 Hamburg, Germany
info@reffect.org