Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Harun Mujkic (Revya)
Am Schwalbanger 27
86633 Neuburg an der Donau
Germany
Phone: +49 176 80504145
Email: contact@revya.eu

2. General Information on Data Processing

We process our users' personal data only to the extent necessary to provide a functioning website and our content and services. Personal data is generally processed only with the user's consent or on the basis of a legal permission (Art. 6(1) GDPR), such as to fulfil contractual obligations or to protect legitimate interests.

3. Hosting and Technical Provision

This website is hosted by Vercel Inc. (USA), with functions running in our Frankfurt (EU) region. The hosting provider processes technically necessary data (including IP address, time of access, page requested, and browser used) in server log files to ensure the secure and stable operation of the website. This processing is based on our legitimate interest in a secure and performant provision of our services (Art. 6(1)(f) GDPR). Because Vercel is based in the USA, personal data may be transferred to a third country; we have entered into a data processing agreement with Vercel based on the EU Standard Contractual Clauses.

Our database (customer, contract, device, and support-ticket data) is operated by Neon Inc., with servers located in Frankfurt am Main, Germany (EU). This data is therefore not transferred to third countries outside the EU.

4. Contact Form

If you send us a request via our contact form, the data you provide (name, email address, phone number if given, company, address, country, area of interest, and your message) is stored by us for the purpose of processing your request and in case of follow-up questions. The legal basis for this is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We do not pass on this data without your consent.

Data submitted via the contact form remains with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing it no longer applies (e.g. once your request has been fully processed). Mandatory statutory retention periods (in particular under commercial and tax law) remain unaffected.

5. Email Communication

Emails sent to our addresses (e.g. contact@revya.eu) are forwarded via the ImprovMX service to a mailbox operated by Google Ireland Limited (Gmail). When sending and receiving emails, personal data (including sender address and message content) is therefore processed by both ImprovMX and Google. Both providers have been engaged as processors, or on the basis of appropriate safeguards (Standard Contractual Clauses), within the meaning of the GDPR. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in functioning business communication).

6. Customer Portal and Contract Processing

For customers with whom a rental relationship exists or is being established, we process further data within our customer portal, in particular contract, device, and support-ticket data. This processing is carried out to fulfil the contract or to carry out pre-contractual measures (Art. 6(1)(b) GDPR). Each customer only ever has access to their own data; viewing other customers' data is technically impossible.

7. Cookies

For logged-in areas (customer portal, admin area), we use a technically necessary session cookie to keep you signed in during your session. This cookie is strictly required for those areas to function and falls under the exemption from the consent requirement under Section 25(2) of the German TTDSG and/or Art. 6(1)(f) GDPR. We currently do not use any analytics, tracking, or marketing cookies.

8. Your Rights as a Data Subject

You have the right at any time to:

  • Access to the personal data we hold about you (Art. 15 GDPR),
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR), and
  • Object to the processing (Art. 21 GDPR).

To exercise these rights, an informal email to contact@revya.eu is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

9. SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy whenever our data processing changes, for example when introducing new features or service providers. The version published on this page at any given time applies.