Privacy policy

Who is responsible

The data controller is:

We have not appointed a data protection officer. The GDPR does not require one for what we do (Article 37). For anything about this policy or your data, write to the email address above.

What we process, and why

Messages you send us

If you email us, we receive your email address, your name if you give it, and whatever you choose to tell us. We use this only to answer you and to handle your request.

The legal basis is our legitimate interest in reading and answering messages sent to us (Article 6(1)(f) GDPR). If your message is about a contract with us, or steps towards one, the basis is Article 6(1)(b). If the law requires us to keep a message, for example to show how we handled a data protection request, the basis is that legal obligation (Article 6(1)(c)).

Contacting us is voluntary. If you give us no way to reach you, we cannot reply.

We delete messages within 12 months after the conversation ends. We keep a message longer only if the law requires it, or if we need it to establish, exercise or defend a legal claim.

The waitlist

The button on the home page opens a form hosted by Google, where you can leave your email address to hear when Remoney is released. Joining is voluntary; nothing on this website requires it, and you can read every page without it.

We use what you enter only to tell you about the release. The legal basis is your consent, given by submitting the form (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to office@remoney.app, and we will delete your entry. Withdrawing does not affect what was lawful before you withdrew.

While you are filling the form in you are on Google's website, not ours. Google processes what you type there, and the technical data your browser sends it, on its own terms; that is Google's to describe and Google's to change, and it is set out in Google's privacy policy. We receive the responses and can see them.

We delete the waitlist once the app is released and the announcement has gone out, and earlier if you ask.

Technical data when you visit

This website is a set of static files hosted by Cloudflare. To deliver a page, Cloudflare's servers process the technical data your browser sends with every request: your IP address, the date and time, the page you asked for, the referring page if there is one, and your browser and operating system.

This data is used to deliver the website, to keep it secure and available, and to protect it from abuse. The legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). Your browser sends this data automatically, and a page cannot be delivered without it.

We keep no server logs ourselves. We do not combine this data with anything else, and we do not try to identify visitors. Cloudflare keeps request data for a limited period that it sets itself, as described in Cloudflare's privacy policy.

What this site stores on your device

This website sets no cookies. If you switch the colour theme in the footer, that choice is kept in your browser's session storage so it survives while you move between pages, and your browser discards it when you close the tab. It holds only the word light ordark, and it never leaves your device.

Nothing else is stored on your device or read from it.

The site has no forms of its own, no accounts and no newsletter, and it carries no advertising. The waitlist form is on Google's website, not this one, and whatever Google stores on your device while you are there is covered by Google's privacy policy.

Visitor statistics

We use Cloudflare Web Analytics, and its real user monitoring, to see how many people read the site, which pages they open, and how quickly and how well those pages load on real visitors' devices. It is the only measurement on the site.

A script that Cloudflare serves from static.cloudflareinsights.com runs on the page and sends what it measures to Cloudflare. What that measurement collects, and what Cloudflare does with it afterwards, is Cloudflare's to describe and Cloudflare's to change. It is set out in Cloudflare's privacy policy.

The legal basis is our legitimate interest in knowing whether the site is read and whether it works (Article 6(1)(f) GDPR). You can object at any time, and any content blocker that blocks static.cloudflareinsights.com stops the measurement.

Who receives the data

• Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare hosts this website, measures visits as described above, and relays email sent to our address. For visitor request data, it acts as our processor under its data processing addendum. Cloudflare also uses network and traffic data for its own security purposes, as an independent controller, as described in its privacy policy.
• Google, which hosts the waitlist form and stores the responses until we delete them. What Google does with the data it handles is set out in Google's privacy policy.
• Our mailbox provider, which stores the messages you send us.

We do not sell personal data. We share it with no one else unless the law obliges us to.

Links to other websites

This website links to the waitlist form on Google's website, to ropotvs.com, and, once the app is released, to the App Store. Each of them has its own privacy policy. Our links carry no tracking parameters, and following one is your choice.

Transfers outside the European Economic Area

Cloudflare is based in the United States and runs a global network, so the data described above may be processed in the United States. Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing adequate protection (Implementing Decision (EU) 2023/1795, under Article 45 GDPR). If that framework stops applying, Cloudflare relies on the Commission's standard contractual clauses (Article 46(2)(c) GDPR). They are part of Cloudflare's data processing addendum.

Google likewise runs a global network, so the waitlist entries may be processed outside the European Economic Area. Google LLC is certified under the same EU–U.S. Data Privacy Framework, and Google's terms provide for the Commission's standard contractual clauses where the framework does not apply.

Your rights

Under the GDPR you have the right to:

• get access to the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• have its processing restricted (Article 18);
• receive data you gave us in a portable format, where we process it on the basis of a contract (Article 20).

Your right to object

You can object at any time, on grounds relating to your particular situation, to processing that is based on our legitimate interests (Article 21). That covers the messages you send us, the technical data of your visit, and the visitor statistics.

Your right to withdraw consent

The waitlist is the one thing here that runs on consent. You can withdraw it at any time (Article 7(3)), and it is as easy to withdraw as it was to give: write to office@remoney.app and we will delete your entry. Withdrawing does not affect what was lawful before you withdrew.

Automated decisions

We make no decisions by automated means and do no profiling (Article 22).

How to use your rights

Write to office@remoney.app. We reply within one month. If a request is complex we may need up to two more months, and we will tell you if so (Article 12(3)).

Complaints

If you think we have handled your data unlawfully, you can complain to the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 București, Romania
Phone: +40 318 059 211
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
How to file a complaint with ANSPDCP

You can also complain to the data protection authority of the EU country where you live or work, and you have the right to go to court.

Changes to this policy

If this policy changes, we will publish the new version on this page and update the date at the top.