Privacy Notice

This notice applies to the public website and the RateForce platform. It applies in particular to visitors, contacts, authorised users and information contained in publicly available reviews.

We process data to provide the website and platform, respond to enquiries, manage user accounts and permissions, ensure IT security, and collect and evaluate publicly available product reviews.

Depending on the processing, we rely on Article 6(1)(b) GDPR for pre-contractual measures and performance of a contract, Article 6(1)(c) GDPR for legal obligations, Article 6(1)(f) GDPR for the secure and efficient operation of our services, and Article 6(1)(a) GDPR where consent is required.

When the website is accessed, technically necessary server log data may be processed, including IP address, date and time of access, requested address, referrer, browser type and operating system. This serves the delivery, stability and security of the website. The legal basis is Article 6(1)(f) GDPR. Log data are retained only as long as necessary for those purposes.

The public RateForce website currently uses no analytics, marketing or social-media tracking services and sets no non-essential cookies. If this changes, this notice will be updated before the service is activated and consent will be obtained where required.

To provide the platform, we process in particular names, business contact details, account credentials, roles and permissions, and technical usage and security data. This data is required to secure access, provide the subscribed functions and prevent misuse. Browser access credentials are stored per tab in the browser session storage and are removed when they expire or after an unauthorised response.

When you contact us by email, phone or post, we process the data you provide to deal with your enquiry. Depending on the context, the legal basis is Article 6(1)(b) or (f) GDPR.

When the relevant integration is activated, Apify is intended to support the technical collection of publicly available product reviews. The source information required for the retrieval and publicly visible review content are processed for this purpose. Apify will act as a processor under our instructions.

When the relevant integration is activated, Google Gemini is intended to support the automated analysis of publicly available review content, for example to identify potential policy violations or provide a professional classification. Only content and technical context required for the analysis will be sent to the service. The specific Google product, data region and contractual basis will be defined before activation, and this notice will be updated accordingly.

We retain personal data only as long as necessary for the relevant purpose or where statutory retention duties apply. The data are then erased or anonymised.

Data may be accessed only by persons and service providers who need it to perform their duties. Where processors are used, we bind them contractually to data protection and confidentiality.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and withdrawal of consent with effect for the future.

Where we process data on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation.

We update this Privacy Notice when data processing, service providers or legal requirements change. The current version is published on this page.