Privacy Policy
United States notice: Section 6 describes additional privacy rights that may apply depending on your state and applicable legal thresholds.
This policy explains how REHOWS processes personal data when you use REHOWS.com. REHOWS is the controller for the processing described here. Privacy-request contact options will be provided through the website.
1. Data we process
- Updates: email address, consent wording and date, language, country, subscription status and unsubscribe identifier.
- Feedback: rating, a random browser-session identifier, source page, language, country and timestamps.
- Contributions: if contribution features are made available, the details you submit, which may include name, email, organisation, website, region and cost information.
- Technical and analytics data: hosting and security logs may include IP address, browser or device information, requested URL and timestamps. Privacy-conscious website analytics provide aggregated information such as visited pages, referrers, approximate country, and browser or device type. When a PDF report is downloaded, we record an anonymous event containing the time, selected country, language, data region and feature source; we do not store the report contents or project name with that event.
- Country and language routing: our hosting provider derives an approximate country from your IP address so REHOWS can direct you to an available country and language version. REHOWS receives the country-level result in the request; it does not need your precise location for this routing.
Cost plans and PDF reports are generally created in your browser. Do not enter confidential or sensitive personal information into free-text fields.
2. Purposes and legal bases
- Send requested product updates based on your consent. You may withdraw consent at any time.
- Collect ratings, understand site and feature performance, and improve estimates based on our legitimate interests in improving and securing the service.
- Review submitted cost information and communicate about a contribution based on our legitimate interests and, where applicable, steps requested by you.
- Prevent abuse, maintain security and meet legal obligations based on legitimate interests or applicable law.
- Select an appropriate country and language entry page based on our legitimate interest in making the service understandable and locally relevant. Unknown or unsupported locations use the English fallback.
3. Service providers and international transfers
We use carefully selected service providers to operate REHOWS, including providers of website hosting, content delivery, database infrastructure, authentication, security and analytics. They may receive only the data reasonably necessary for their function and process it on our behalf subject to applicable contractual, confidentiality and data-protection obligations. We may replace a provider or add a provider category as the service develops, and will update this policy where that materially changes how personal data is processed.
Processing or support may involve countries outside the European Economic Area. Where required, international transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard. You may request information about applicable safeguards through the privacy contact made available on the website.
4. Retention
We retain personal data only while needed for the purposes above. Subscription records are kept while you remain registered and for a limited period afterward to document requests and consent. Feedback, contribution and anonymous report-download records are reviewed periodically and deleted, aggregated or anonymised when no longer reasonably needed. Security logs are kept according to the hosting provider’s operational retention periods. Legal obligations, disputes or fraud prevention may require longer retention.
5. Your rights
Subject to the GDPR and applicable exceptions, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier processing. We may request information needed to verify your identity.
You may also lodge a complaint with the Dutch Data Protection Authority or the supervisory authority where you live or work.
6. Additional rights in the United States
Depending on the state where you live and subject to applicable thresholds and exceptions, you may have additional rights to know, access, correct or delete personal information, obtain a portable copy, and appeal a refused request. Some laws also provide rights concerning sale, sharing, targeted advertising or certain profiling. REHOWS does not currently sell personal information or use it for targeted advertising. We will not discriminate against you for exercising an applicable privacy right.
7. Security, children and changes
We use reasonable technical and organisational safeguards, but no internet service is completely secure. REHOWS is not directed to children and we do not knowingly request children’s personal data. We may update this policy when the service or legal requirements change.