PRIVACY POLICY

Last updated: November 2024

Introduction

This Privacy Policy sets out the ways in which ROKKHOPPER Innnovations GmbH ("ROKKHOPPER", "we", "us" or "our") collects, protects and uses the personal data ("Personal Data") provided by you ("User", "you" or "your") when purchasing TierCrush. ROKKHOPPER Innovations GmbH is the controller responsible for the processing of your personal data. Our contact details are as follows:

ROKKHOPPER Innovations GmbH
Troststraße 6/44
1100 Vienna, Austria

If you have any questions regarding data protection, you can also contact our Data Protection Officer Adam Vukovic at [email protected].

The Privacy Policy explains the choices available to you regarding our use of your personal data and the procedures for accessing and updating that data. This Policy does not apply to the privacy practices of companies that we do not own or control or individuals that we do not employ. You acknowledge that you have read this Privacy Policy and agree to all of its terms and conditions. By using TierCrush, you agree to be bound by this Privacy Policy. If you do not agree to the terms of this Privacy Policy, you are not authorized to use or access TierCrush.

Collection of information

Collection of personal information when purchasing TierCrush

When you purchase TierCrush, we receive and store any information that you voluntarily provide. Currently, this only includes your e-mail address, which is required to register on the website and to access purchased products. We process your email address to fulfill our contractual obligations to you (Art. 6(1)(b) GDPR). Additionally, we process any additional information you voluntarily provide based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Collection of personal information when using TierCrush

To provide our services, we process the name and company email address of employees, which you enter voluntarily for business purposes. This processing is solely for the purpose of creating and managing individual employee subscriptions and ensuring access to the services for business purposes. This data is used exclusively internally and is not shared with third parties or processed for other purposes. Employees can request information about the stored data at any time and request the correction of inaccurate information.

Collection of non-personal information

When you visit the website, our servers automatically record information that your browser sends. This data may include information such as your device's IP address, browser type and version, operating system type and version, language settings or the web page you visited before coming to our website, the pages of our website you visit, the time spent on those pages, the information you search for on our website, access times and dates, and other statistics.

Collection of information in connection with purchases

All purchases are processed by a third party payment processor, Stripe (https://stripe.com). Stripe may ask you for personal and/or non-personal information, such as your name, address, e-mail address, credit card information or other personal information. Stripe has a privacy policy (https://stripe.com/privacy) that describes the collection and use of personal information. ROKKHOPPER Innovations GmbH has no control over Stripe or its collection or use of information. Any questions or concerns about Stripe's practices should be directed to Stripe.

Links to external information pages

Our platform contains links that redirect to the websites of external products. These links are provided solely to offer direct access to general information about the respective products. The providers of these products are responsible for the content and availability of these external websites and products.

Management of personal information

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. For example, your email address will be retained as long as you have an account with us or as necessary to fulfill our contractual obligations. After the relevant retention period has expired, your data will be securely deleted or anonymized in accordance with our data retention policies. Once data has been anonymized or deleted, your rights to access, erasure, rectification, or data portability can no longer be exercised on that data, as it will no longer be identifiable to you.

Updating Personal Information

You can always update all personal information, such as your or your employees email address and name. If you request the deletion of your email address, please note that you will no longer be able to access any products you have purchased from us. If you update your information, we may retain a copy of the original, unrevised information in our records for a period, as required for compliance with legal obligations, dispute resolution, and the enforcement of our agreements.

Use of Retained Data

We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may also use aggregated data derived from or incorporating your personal data after you have updated or deleted it, but this will be done in a manner that does not identify you personally.

Use and processing of the information collected

The information we collect may be used to personalize your experience, improve our website, improve customer service, process transactions, send notification emails such as password reminders, updates, etc., and operate our website. The non-personal data collected is only used to identify potential cases of abuse and to compile statistical information about the use of the website. This statistical information is not aggregated in a way that would identify any particular user of the system. We may process personal data about you if any of the following apply:

you have given your consent for one or more specific purposes. Note that under some laws we may process data until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases. However, this does not apply where the processing of personal data is covered by European data protection law;
the provision of information is necessary for the performance of a contract with you and/or pre-contractual obligations
the processing is necessary for compliance with a legal obligation to which you are subject
the processing is related to a task carried out in the public interest or in the exercise of official authority vested in us
the processing is necessary for the pursuit of legitimate interests.

International data transfers

Please note that the personal data you enter on our website, namely your name and e-mail address, will be stored on servers located in the United States. In accordance with our legal obligations, we would like to inform you that the personal data we collect may be subject to the laws of the United States, including the USA PATRIOT Act and the CLOUD Act. These laws allow US authorities to access data stored on servers in the US under certain circumstances. We are using State of the Art safeguards and legal protections to minimize the risk of such access and ensure the security of your data. If you have any concerns about the processing of your data in the USA or would like further information about the protective measures we have taken, you can contact us at any time.

Your rights

You can exercise certain rights in relation to your data processed by us. In particular, you have the right to do the following:

You have the right to withdraw your consent if you have previously consented to the processing of your data;
You have the right to object to the processing of your data if the processing is based on a legal basis other than your consent;
You have the right to know whether data is being processed by us, to receive information about certain aspects of the processing and to receive a copy of the data being processed; You have the right to verify the accuracy of your data and to request that it be updated or corrected;
In certain circumstances, you have the right to restrict the processing of your data, in which case we will not process your data for any purpose other than storage;
Under certain circumstances, you have the right to request that we erase your personal data;
You have the right to receive your data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies provided that your data is processed by automated means and that the processing is based on your consent, on a contract to which you are a party or on pre-contractual obligations.
The right to object to processing Where personal data are processed in the public interest, in the exercise of official authority or for the purposes of our legitimate interests, you may object to such processing by providing a ground relating to your particular situation to justify the objection.

Exercising your rights

Requests to exercise your rights can be sent by e-mail to [email protected]. These requests can be made free of charge and will be processed as soon as possible.

Cookies

This website uses cookies. Our website uses cookies to enhance user experience. The cookies we use are strictly necessary to manage user sessions and facilitate navigation on our website. We do not use cookies for tracking or advertising purposes. By using this website, you agree to the use of cookies.

Security Measures

We have applied technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or misuse. These measures include, but are not limited to, the use of firewalls, encryption, and access controls. However, we cannot guarantee absolute security over the internet. Therefore, while we strive to protect your personal information, you acknowledge that

there are security and privacy limitations of the internet over which we have no control.
the security, integrity and confidentiality of any information and data exchanged between you and our website cannot be guaranteed.
and despite our best efforts, such information and data may be viewed or tampered with by third parties during transmission.

Data breach as a result of external activities

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.

Legal Disclosure

We will disclose any information we collect, use or receive when required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or respond to a governmental request.

Modification of the privacy policy

We may revise this Privacy Policy from time to time. If a modification has a significant impact on your rights, we will notify you (for example, by email). This notification will also include a reasonable period of 14 days after which the new terms will come into force. Changes will never apply retroactively. By continuing to use or access the Services after the effective date of any changes, you agree to be bound by the modified Agreement. If you do not agree with the changes, you must stop using TierCrush.