Privacy policy

Privacy

Preamble

This privacy policy explains the nature, scope, and purposes of processing personal data in connection with our online offering at rekit.online and related services.

As of: 11 January 2025

Controller

REKIT Online GmbH
represented by René Simon Pfisterer
Sodener Str. 36, 14197 Berlin, Germany
Email: moin[at]rekit.online
Phone: +49 30 2573 63 80
Legal notice: rekit.online/impressum

Overview of processing

Categories of data:

Master data (e.g. names, addresses)
Employee data, where applicable
Contact data (e.g. email, phone)
Content data (e.g. form entries, uploads)
Contract data
Usage data (e.g. pages visited, access times)
Meta and communication data (e.g. device information, IP addresses)

Purposes of processing:

Provision of contractual services
Contact requests and communication
Security and abuse prevention
Reach measurement and marketing, where consented or legally permitted

Relevant legal bases

Under the GDPR, the following legal bases may apply in particular:

Consent (Art. 6(1)(a) GDPR)
Contract performance (Art. 6(1)(b) GDPR)
Legal obligation (Art. 6(1)(c) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)

Security measures

We implement appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR to ensure a level of security appropriate to the risk.

Disclosure of personal data

Data are disclosed to third parties only where permitted by law, necessary for the contract, or based on your consent. Recipients may include hosting or IT service providers acting on our instructions.

International transfers

If data are transferred to third countries or international organisations, we ensure appropriate safeguards under Art. 44 et seq. GDPR (e.g. adequacy decision or standard contractual clauses), unless an exception applies.

Rights of data subjects

Right to object to certain processing
Right to withdraw consent with effect for the future
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

Cookies

We use cookies and similar technologies where necessary to operate the service, ensure security, or — with consent — for analytics and marketing. See our cookie notice or consent tool where available.

Business services

When providing contractual services, we process data required to perform the contract. Retention follows statutory requirements and our internal deletion policies.

Provision of the online offer and web hosting

We use infrastructure and hosting providers. Access data (e.g. IP address, timestamps) may be processed. The legal basis is primarily Art. 6(1)(f) GDPR (operation and security).

Blogs and publications

If you use comment or interaction features, we process the data you submit for publication and moderation. Legal basis: Art. 6(1)(b) and/or (f) GDPR.

Contact and request handling

When you contact us via form, email, or phone, we process your information to handle the request. Legal basis: Art. 6(1)(b) and/or (f) GDPR.

Messenger communication

If we use messenger services, processing follows the respective provider terms and — where required — your consent or our legitimate interest in efficient communication.

Push notifications

Push notifications are sent only if you have consented or another legal basis applies. You may withdraw consent at any time.

Video conferencing and online meetings

Video tools may process personal data (e.g. participation metadata) at the provider. We select providers with GDPR compliance and conclude data processing agreements where required.

Cloud services

We may use cloud services for storage, collaboration, or backups. Processing is based on Art. 28 GDPR agreements where personal data are affected.

Newsletters are sent only with your consent or another legal permission. You may unsubscribe or object at any time.

Marketing communications

Marketing is carried out in compliance with applicable law (including Section 7 UWG). Email marketing requires consent or another legal basis.

Surveys

Survey data are used to evaluate and improve our offer. Legal basis: consent or legitimate interest, unless overridden by your interests.

Web analytics, monitoring, and optimisation

We may collect pseudonymous usage statistics to improve our offer. Where not based solely on legitimate interests, we obtain consent beforehand.

Online marketing

Online marketing measures (e.g. remarketing) are used only with a legal basis, in particular prior consent under Art. 6(1)(a) GDPR where required.

Customer reviews

Displaying or collecting reviews may involve personal data. Legal basis: consent, contract performance, or legitimate interest in showing references.

Social media presences

For social profiles, the platform’s privacy notices apply. We may process interaction data; legal basis may be consent or Art. 6(1)(f) GDPR.

Plugins and embedded content

Third-party embeds (e.g. videos, maps) may transfer data to providers in third countries. We inform you about services and purposes where technically and organisationally reasonable.

As of: 11 January 2025