Privacy notice

Owner and Data Controller

For this website, the Data Controller is:

Types of Data collected

This website has no contact forms, no login, and no third-party trackers. The only data it comes into contact with is the following:

• Usage Data. Technical information processed automatically while you browse — IP address, browser type and version, the pages requested, the date and time of the request — recorded in the server logs kept by the hosting provider in order to serve the site and keep it secure.
• Trackers. None. This site sets no cookies, and writes nothing to your browser's local or session storage. There is no profiling, no advertising and no third-party analytics. Details in the cookie policy.
• Data you communicate directly. If you write to us by email or call us, we process what you give us: your name, your email address or phone number, and the content of your message.

Registration and use of an account happens on app.reibanq.eu — that data is not processed by this website (see the dedicated section below).

Mode and place of processing the Data

Website data is processed using IT systems operated by the Controller and by its hosting provider, on servers located in the European Economic Area, with security measures appropriate to the risk. No transfer of this website's data outside the EEA is required for the purposes described here.

Services and providers

This is the full technical list of what runs this website, and who is behind each piece. It is short because the site is deliberately plain: static pages, no third-party code, nothing loaded from anyone else's server.

• Hosting — Hostinger. The pages are served from Hostinger's infrastructure, which also keeps the server logs described above. Hostinger acts as a processor on our instructions, under a data processing agreement.
• Fonts — served by us. The two typefaces used on this site are stored on this domain and delivered with the pages. Nothing is requested from Google Fonts or from any other font service, so no font provider ever sees your IP address.
• Email — our provider. Correspondence you send to the addresses on this site is carried and stored by our email provider, again as a processor under a data processing agreement.
• Nothing else. No analytics or statistics service, no tag manager, no content delivery network, no advertising or remarketing tag, no A/B testing tool, no live-chat widget, no embedded maps, videos or social buttons, and no contact form. Every image, stylesheet, script and font on these pages comes from this domain alone.

Because no third-party resource is loaded, no third party is in a position to set or read anything on your device while you browse this site. The cookie policy says the same thing from the other side. The account and card platform at app.reibanq.eu is a separate service and is not covered by this list.

Who receives the data

The data described above is not sold, and is not shared for anyone else's marketing. Beyond the Controller's own staff, it is accessible only to the following categories of recipient, each acting as a processor on the Controller's instructions under a data processing agreement — each one is named in Services and providers above:

• The hosting provider — which serves the pages and keeps the server logs described above
• The email provider — which carries and stores the correspondence you send us and the answers we send back

Data may also be disclosed to public authorities, supervisors or courts where the law requires it. The data of your account and cards follows a different route, described below.

Retention time

Data is kept only as long as the purposes above require:

• Server logs — for the hosting provider's standard log-retention period, after which they are deleted. They are not used for any purpose other than serving and securing the site.
• Email and phone correspondence — for as long as needed to handle your request, and for a reasonable period afterwards so the exchange has a record.
• Anything a legal obligation requires us to keep — for the period that obligation sets, and no longer.

Purposes of processing

• Operating and delivering this website (serving pages, security, abuse prevention)
• Answering the email and phone enquiries you send us
• Complying with legal obligations
• Protecting the site, the Controller and its users from misuse or fraud

Legal basis

The Controller may process the data described above if one of the following applies: you have given consent (for specific purposes); processing is necessary to provide the website service or to answer your requests before entering into any agreement; processing is necessary to comply with a legal obligation; or processing is necessary for the legitimate interests of the Controller or of a third party (operating and protecting the site).

Is providing your data required?

No. You are not required by law or by contract to give us any personal data in order to read this website, and there is nothing on it that asks you for any. The only data you provide by choice is what you put in an email or say on a call — and if you provide none, the only consequence is that we cannot answer a question you have not asked. The technical data in the server logs is generated by the request itself and cannot be separated from it.

Automated decision-making and profiling

This website carries out no automated decision-making and no profiling within the meaning of Article 22 GDPR. Nothing about you is scored, segmented or decided automatically on the basis of the data described in this notice.

Your account and cards — data processed by Orenda FS B.V.

Your rights

Under the GDPR you have the following rights with respect to the data described in this notice. Exercise them by writing to privacy@reibanq.com:

• Access — obtain confirmation and a copy of your data
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted where applicable
• Restriction — limit processing in the cases provided by law
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, where processing is based on consent

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

Supervisory authority

If you believe your rights have not been respected, you can lodge a complaint with the Dutch Data Protection Authority:

Updates to this notice

This notice is kept under review. If it changes, the updated version is published on this page, with the date at the top of the page updated to match.