Privacy Notice for www.runrfx.com
Last updated: [date of publication]
This notice applies to our website www.runrfx.com. runRFX is a service of sourcenet.io UG (haftungsbeschränkt). Our website www.sourcenet.io and our applications have their own privacy notices, which you will find there.
In short: Our website sets no cookies and doesn’t count visits. Fonts and images come from our own server. We only receive your details if you request an intro call or write to us.
1. Who is responsible
sourcenet.io UG (haftungsbeschränkt)
Paul-Klee-Str. 14, 40822 Mettmann, Germany
Managing director: Alexander Klähn
E-mail: hello@sourcenet.io
We are not required to appoint a data protection officer (Section 38 of the German Federal Data Protection Act, BDSG). For questions about data protection, write to us at the address above.
2. When you visit our website
Hosting with Cloudflare. Our website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes your IP address and technical information from your browser (such as browser type, language, the page requested and the time) to deliver the page to you and protect it against attacks. If you open the home page without a language, we send you to the German or English version based on your browser’s language setting; nothing is stored. We keep no access logs of our own.
- Legal basis: our legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR).
- Processing on our behalf: Cloudflare processes the data on our behalf, under a data processing agreement.
- Transfer to the USA: Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition.
No cookies, no statistics, no third-party fonts. Our website sets no cookies and stores nothing in your browser. We don’t count visits and embed no services for audience measurement or advertising. We load fonts from our own server, not from Google or other providers.
3. When you request an intro call
The form. If you request an intro call through the form on our home page, it sends your company, your name, your work e-mail address, your message, what you’d like to put out to tender if you give it, and the page’s language to a function on our hosting at Cloudflare (section 2). The function passes them on as an e-mail to our inbox. We use these details to get back to you, arrange a time and discuss your request.
How your data travels. The e-mail is sent by our e-mail service, Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, on our behalf. We don’t pass your IP address to Brevo, and the page itself loads nothing from Brevo. Brevo records the sending, without the content of your message, and deletes that record after twelve months. Our inbox is on Google Workspace (Google Cloud EMEA Limited, Dublin, Ireland), which processes your message there on our behalf.
- Legal basis: your request, that is, steps prior to a possible contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
- Retention: until your request has been dealt with. If it leads to a contract, or the message is a business letter, we keep it as long as commercial and tax law require (six years for business letters, ten years for accounting records).
- Processing on our behalf: Cloudflare for the function, Brevo for sending, on servers in the EU, and Google Workspace for our inbox, each under a data processing agreement.
- Transfer to the USA: Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the standard contractual clauses apply in addition.
- Required or voluntary: your details are voluntary. Without your company, name, e-mail address and message, however, we can’t handle your request.
This request doesn’t put you on a newsletter or any marketing list.
4. When you write to us
If you send us an e-mail, we process your address, your name and your message to reply to you. Our e-mail runs on Google Workspace (Google Cloud EMEA Limited, Dublin, Ireland), which processes it on our behalf. The legal basis, retention and the transfer to the USA are the same as in section 3.
5. Your rights
You have the right
- to access your data (Art. 15 GDPR),
- to have incorrect data rectified (Art. 16 GDPR),
- to have your data erased (Art. 17 GDPR),
- to have processing restricted (Art. 18 GDPR),
- to receive your data in a common format (Art. 20 GDPR),
- to object to processing based on our legitimate interest (Art. 21 GDPR).
To exercise them, write to us at hello@sourcenet.io.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
6. Changes
If our website or the law changes, we will update this notice. The version published here applies.
This English version is provided for your information; the German version is binding.