Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following provides information on how we handle your personal data when you use our website. Personal data means all data by which you can be personally identified.

1.2 The data controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) / Datenschutz-Grundverordnung (DSGVO) is Nikita Ratai, Hafenstr. 29, 67346 Speyer, Germany, Tel.: +49 176 23812963, Email: office@rataimedia.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the web server (so-called “server log files” / Server-Logfiles). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Amount of data sent in bytes

Source/referrer from which you reached the page

IP address used (if applicable: anonymized)

The processing is carried out in accordance with Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used otherwise. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.

3) Hosting & Content-Delivery Network

For hosting our website and displaying page content, we use a provider who delivers its services either directly or via selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some cookies are automatically deleted after closing the browser (so-called “session cookies” / Session-Cookies), while others remain on your device longer and allow storing page settings (so-called “persistent cookies” / persistente Cookies). In the latter case, you can refer to your web browser’s cookie settings overview for storage duration.

If any of the cookies we use also process personal data, this processing is carried out in accordance with Art. 6(1)(b) GDPR / Art. 6 Abs. 1 lit. b DSGVO for the performance of a contract, in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO in the case of consent given, or in accordance with Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO to safeguard our legitimate interests in optimal website functionality and a user-friendly and effective website experience.

You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or generally.

Please note that declining cookies may limit the functionality of our website.

5) Contact

5.1 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the so-called “Business Version” of WhatsApp.

If you contact us regarding a specific business (e.g., an order) via WhatsApp, we store and use the mobile phone number you provided via WhatsApp and – if provided – your first and last name in accordance with Art. 6(1)(b) GDPR / Art. 6 Abs. 1 lit. b DSGVO to process and respond to your request. On the same legal basis, we may ask you via WhatsApp for additional data (order number, customer number, address, or email address) to assign your inquiry to a specific case.

If you use our WhatsApp contact for general inquiries (e.g., services, availability, or our website), we store and use the mobile number you provided via WhatsApp and – if provided – your first and last name in accordance with Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO based on our legitimate interest in efficiently and promptly providing the requested information.

Your data will only ever be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and that phone numbers stored in the address book are automatically transmitted to a server of the parent company Meta Platforms Inc. in the USA. For operating our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact data of users who have also contacted us via WhatsApp.

This ensures that any person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp number from the address books of their chat contacts in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO by accepting the WhatsApp terms of use when first using the app. Transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

The purpose and scope of data collection, further processing, and use by WhatsApp, as well as your rights and settings options for protecting your privacy, can be found in the WhatsApp privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits sharing with third parties.

Data may be transmitted to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework / EU-US-Datenschutzrahmen, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.

5.2 Contact Form or Email

When contacting us (e.g., via contact form or email), personal data is collected. The data collected depends on the respective contact form. This data is used exclusively to respond to your inquiry or for contacting you and related technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR / Art. 6 Abs. 1 lit. b DSGVO. Your data will be deleted after your request has been fully processed, provided no statutory retention obligations apply.

6) Website Functionalities

6.1 Instagram Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network. To increase data protection when visiting our website, the plugins are initially deactivated via a so-called “2-click” or “Shariff” solution.

This ensures that no connection to the provider’s servers is made when a page containing such plugins is accessed. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO does your browser establish a direct connection to the provider’s servers. Information about your device (including your IP address), browser, and browsing behavior may be transmitted to the provider and possibly further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the plugin again. Revocation does not affect data already transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider, ensuring protection of our visitors’ data and prohibiting unauthorized sharing.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework / EU-US-Datenschutzrahmen, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.

6.2 YouTube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider’s servers to load the content, at the latest when playback starts. Certain information, including your IP address, is transmitted to the provider.

If embedded video playback is started via the plugin, the provider also sets cookies to collect information about user behavior, generate playback statistics, and prevent misuse.

If you are logged into a user account with the provider while visiting our website, your data will be assigned directly to your account when clicking on a video. If you do not want this assignment, you must log out before starting playback.

All aforementioned processing, including setting cookies to read information on your device, only occurs if you have explicitly consented in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO. You can revoke this consent at any time with future effect using the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework / EU-US-Datenschutzrahmen, ensuring compliance with European data protection standards.

6.3 Google Maps

This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps to visually present geographic information. Using this service, our location is shown and possible routes are facilitated.

When accessing pages embedding Google Maps, information about your use of our website (e.g., your IP address) is transmitted to Google servers and stored, which may include transfer to servers of Google LLC in the USA. This occurs regardless of whether you have a Google account or are logged in. If logged in, your data is assigned directly to your Google account. To avoid this, log out before activating the map. Google stores data (even for non-logged-in users) as usage profiles and evaluates it.

Collection, storage, and evaluation occur in accordance with Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO based on Google’s legitimate interest in displaying personalized advertising, market research, and optimizing Google websites. You have the right to object to the creation of these user profiles; please contact Google to exercise this right. To prevent future data transmission to Google via Google Maps, you can deactivate the web service by disabling JavaScript in your browser.

Where legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO. You can revoke this consent at any time with future effect.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework / EU-US-Datenschutzrahmen.

Further privacy information from Google: https://business.safety.google/privacy/  / 

https://business.safety.google/intl/de/privacy/

6.4 Google Translate

This website uses the “Google Translate” translation service via API integration from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). To display automated translations into the language of your choice, your browser establishes a connection to Google servers. Google uses “cookies” / Cookies, which are text files stored on your device that allow analysis of website usage. Data generated by the cookie about your use of this website (including shortened IP address) is usually transmitted to and stored on Google servers, which may also include transfer to Google LLC in the USA.

All processing described above, including setting cookies to read information on your device, occurs only if you have given explicit consent in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO. You can revoke your consent at any time with future effect using the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework / EU-US-Datenschutzrahmen.

Further privacy information from Google: https://business.safety.google/privacy/  / 

https://business.safety.google/intl/de/privacy/

7) Rights of the Data Subject

7.1 Applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (rights of access and intervention / Auskunfts- und Interventionsrechte), with the respective legal basis indicated:

Right of access / Auskunftsrecht pursuant to Art. 15 GDPR / Art. 15 DSGVO

Right to rectification / Recht auf Berichtigung pursuant to Art. 16 GDPR / Art. 16 DSGVO

Right to erasure / Recht auf Löschung pursuant to Art. 17 GDPR / Art. 17 DSGVO

Right to restriction of processing / Recht auf Einschränkung der Verarbeitung pursuant to Art. 18 GDPR / Art. 18 DSGVO

Right to notification / Recht auf Unterrichtung pursuant to Art. 19 GDPR / Art. 19 DSGVO

Right to data portability / Recht auf Datenübertragbarkeit pursuant to Art. 20 GDPR / Art. 20 DSGVO

Right to withdraw consent / Recht auf Widerruf erteilter Einwilligungen pursuant to Art. 7(3) GDPR / Art. 7 Abs. 3 DSGVO

Right to lodge a complaint / Recht auf Beschwerde pursuant to Art. 77 GDPR / Art. 77 DSGVO

7.2 Right to Object / Widerspruchsrecht

If we process your personal data based on a balancing of interests due to our overriding legitimate interest, you have the right to object at any time for reasons arising from your particular situation in accordance with Art. 21(1) GDPR / Art. 21 Abs. 1 DSGVO.

If you exercise your right to object, we will cease processing the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if processing is necessary for asserting, exercising, or defending legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time in accordance with Art. 21(2) GDPR / Art. 21 Abs. 2 DSGVO. If you exercise this right, processing for direct marketing purposes will cease.

8) Retention Periods of Personal Data

The retention period of personal data depends on the respective legal basis, processing purpose, and, if applicable, the statutory retention period (e.g., commercial and tax law retention periods / handels- und steuerrechtliche Aufbewahrungsfristen).

For personal data processed based on explicit consent in accordance with Art. 6(1)(a) GDPR / Art. 6 Abs. 1 lit. a DSGVO, data is retained until you withdraw your consent.

For data processed under contractual obligations in accordance with Art. 6(1)(b) GDPR / Art. 6 Abs. 1 lit. b DSGVO, statutory retention periods apply, after which data is routinely deleted unless it is still required for contract performance or there is a legitimate interest in continued storage.

For data processed under Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO, data is retained until you exercise your right to object pursuant to Art. 21(1) GDPR / Art. 21 Abs. 1 DSGVO, unless compelling legitimate reasons override your interests, rights, and freedoms, or if processing is necessary for asserting, exercising, or defending legal claims.

For personal data processed for direct marketing under Art. 6(1)(f) GDPR / Art. 6 Abs. 1 lit. f DSGVO, data is retained until you exercise your right to object pursuant to Art. 21(2) GDPR / Art. 21 Abs. 2 DSGVO.