In this privacy policy, we explain how personal data is processed when you visit this website or contact us. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and, where applicable, the German Telecommunications Digital Services Data Protection Act (TDDDG). This privacy policy applies to the website https://www.rainbowapex.com.
The controller within the meaning of the GDPR is:
RAINBOWAPEX
Owner: Robert Schreiber
Friedrich-Ebert-Straße 102
47229 Duisburg
Germany
Email: [email protected]
A data protection officer has not been appointed at present. If a data protection officer is appointed in the future, their contact details will be published here.
We only process personal data if there is a legal basis for doing so. In particular, the following may be considered:
Insofar as access to information on the end device or the storage of information on the end device is necessary (e.g., cookies/local storage), this is done in accordance with the TDDDG (in particular § 25 TDDDG).
When this website is accessed, information is automatically transmitted to the server by the browser and stored in server log files. In particular, the following may be processed:
Purposes: Ensuring technical provision, system security, abuse and error analysis, and server administration. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation).
Storage period: Log files are generally stored for up to 7 days and then deleted or anonymized. Longer storage may be necessary in individual cases (e.g., to investigate security incidents or to defend against specific attacks); in this case, the data will be deleted after clarification has been completed, provided that there are no legal retention obligations to the contrary.
This website is technically provided via Cloudflare services (e.g., as a content delivery network/protection and delivery infrastructure; depending on deployment, also as a platform for website delivery). Technically necessary access data (in particular IP address, timestamp, requested content, and device/browser information) is processed in order to deliver the website securely and efficiently.
Note on cookies: Depending on the Cloudflare security and protection functions activated (e.g., bot protection/challenge mechanisms), technically necessary cookies may be set. These serve exclusively to protect the website and defend against unauthorized access.
Provider (Germany):
Cloudflare Germany GmbH
c/o Design Offices Munich Atlas
Rosenheimer Straße 143C – 8th floor
81671 Munich
Germany
Depending on the processing, Cloudflare companies outside the EU/EEA may also be involved. In this case, the requirements of Art. 44 ff. GDPR apply (see Section 11).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, stable, and high-performance operation). Depending on the specific arrangement, processing is carried out either under Cloudflare's own responsibility or within the framework of order processing. If Cloudflare acts as a processor, processing is based on a data processing agreement in accordance with Art. 28 GDPR.
Role note: Cloudflare is typically used as a processor for hosting, CDN and performance services. For certain security and protection functions (e.g., attack detection, bot or abuse prevention and challenge mechanisms), Cloudflare may, depending on the configuration and purpose, also act under its own responsibility . The applicable contractual terms (including the DPA) and Cloudflare's privacy information govern in each case.
Information on the Cloudflare Customer DPA: https://www.cloudflare.com/cloudflare-customer-dpa/
Any transfers to third countries are carried out in accordance with Art. 44 ff. GDPR, e.g. on the basis of an adequacy decision or appropriate safeguards (in particular standard contractual clauses) and, if necessary, additional protective measures.
Domain registrar: The domain is registered with IONOS . IONOS provides domain management in this context. Simply registering a domain does not necessarily lead to independent processing of content data in the context of website delivery.
When contacting us by email or contact form, the information provided (e.g., name, email address, message text, company/telephone number, if applicable) is processed in order to handle the inquiry and respond to questions.
The legal basis is Art. 6(1)(b) GDPR, provided that the inquiry is directed at a contract or its initiation. In all other cases, processing is based on Art. 6 (1) (f) GDPR (legitimate interest in efficient communication).
Storage period: Requests are generally stored for as long as necessary for processing and documentation purposes, and then deleted, provided that there are no legal retention obligations to the contrary.
If you contact us by email, communication will take place via the email service (IONOS) used by us, provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. The communication content (your message) and communication metadata (e.g., sender/recipient, time) will be processed in order to process your request.
The legal basis is Art. 6(1)(b) GDPR (contract/initiation), if applicable; otherwise, Art. 6 (1) (f) GDPR (legitimate interest in efficient communication). If consent is required, processing is based on Art. 6 (1) (a) GDPR.
Note on transfers to third countries: When using email services, processing outside the EU/EEA (especially in the USA) cannot be ruled out. Any transfers are carried out in accordance with Art. 44 ff. GDPR (e.g., on the basis of appropriate safeguards such as standard contractual clauses) and, where applicable, supplementary protective measures.
Further information: IONOS's privacy policy at https://www.ionos.de/terms-gtc/datenschutzerklaerung/.
If a contact form is provided on this website, the above principles apply accordingly. In addition, the data entered in the form and technical access data (e.g., IP address, timestamp) are processed to prevent misuse (e.g., spam) and to ensure the secure provision of the form. The legal basis for this is Art. 6 (1) (f) GDPR (security/misuse prevention) or, if the request is contractual in nature, Art. 6(1)(b) GDPR.
If digital content (e.g., audio downloads) is offered or sold via this website, we process personal data to the extent necessary for the execution and processing of orders, the provision of downloads, communication, and the fulfillment of legal obligations.
In particular, the following may be processed: Inventory data (e.g., name), contact data (e-mail), contract/order data (e.g., purchased content, time, price), invoice data, if applicable, and technical data for provision (e.g., IP address, timestamp, download/access logs, if technically necessary).
The legal basis is Art. 6(1)(b) GDPR (contract fulfillment/initiation) and – for the fulfillment of statutory retention obligations (e.g., commercial and tax law requirements) – Art. 6 (1) (c) GDPR. Art. 6 (1) (f) GDPR may be relevant for fraud prevention and IT security measures. Payment processing: If payments are made via external payment service providers, we usually receive confirmation or
Payment processing: If payments are made via external payment service providers, we usually receive confirmation or transaction information (e.g., payment status, transaction ID) from them. Payment data (e.g., credit card details) is processed independently by the respective payment service provider, depending on the provider. The payment service provider used is identified during the ordering process.
Storage period: Order and invoice data are stored in accordance with the statutory retention periods (usually 6 or 10 years). Other data is deleted as soon as it is no longer required for processing, provided that there are no legal obligations to the contrary.
This website is designed to minimize data use wherever possible. Depending on the function, however, cookies or comparable technologies (e.g. local storage) may be used to save settings and make the site more convenient to use.
Specifically, the theme setting (light/dark) is currently stored in local storage (rainbow-theme).
The legal basis for technically necessary storage/access is Section 25 (2) TDDDG and – insofar as personal data is processed – Art. 6 (1) (f) GDPR GDPR (legitimate interest in a stable, secure, and user-friendly website). Technologies that are not technically necessary (e.g., marketing) will – if used in the future – only be used with prior consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
This website uses Google Analytics for anonymized reach measurement and to improve stability, performance, and content. Google Analytics is loaded only after your consent. Without consent, no analytics script is activated and no analytics data is transmitted to Google.
Once consent has been granted, Google Analytics may process usage data such as visited pages, interaction events, referrers, approximate location data, and device/browser information. IP anonymization is enabled, and advertising features such as Google signals and personalized advertising are disabled.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can grant, refuse, or withdraw consent for the future at any time via the analytics settings. If consent is refused or withdrawn, no analytics data will be transmitted.
The analytics recipient is generally Google Ireland Limited. Processing by Google LLC in the United States cannot be ruled out; where applicable, it is based on Google’s standard contractual clauses.
This website uses no externally integrated web fonts from third-party providers. The device’s standard system font is used, so no connection to external font services (e.g. Google Fonts) is established when fonts are loaded.
Should external fonts be integrated in the future, we will amend this privacy policy accordingly and, if necessary, obtain consent in advance.
Personal data will only be disclosed if this is necessary or if there is a legal basis for doing so, in particular:
If service providers are engaged as processors (e.g., for hosting, IT or email services), they are contractually bound by data processing agreements in accordance with Art. 28 GDPR .
Typical recipients/categories of recipients may include: hosting/CDN service providers (e.g., Cloudflare), domain registrars (e.g., IONOS), and—in the case of contact by email—the email service provider (e.g., IONOS), in each case to the extent necessary for the provision of the website, communication, or contract processing.
Transfers to countries outside the EU/EEA will only take place under the conditions of Art. 44 ff. GDPR (e.g., adequacy decision, standard contractual clauses, consent). If third country transfers are made in connection with Cloudflare, appropriate safeguards are generally used for this purpose (in particular standard contractual clauses (SCC)), unless an adequacy decision exists. If third country transfers take place through services used, this is indicated separately in this privacy policy.
Personal data will only be stored for as long as is necessary for the respective purposes or for as long as statutory retention periods exist. Once the purpose no longer applies or the retention periods have expired, the data will be deleted or anonymized.
Data subjects have the following rights in particular:
To exercise these rights, you can contact us at any time using the contact details above.
Data subjects have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent supervisory authority (typically at the registered office of the controller):
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Website: https://www.ldi.nrw.de
Appropriate technical and organizational measures are used to protect data from loss, manipulation, unauthorized access, or disclosure. However, absolute protection during data transmission over the Internet cannot be guaranteed.
This privacy policy may be amended to reflect legal requirements or changes to the services. The current version published on this website applies.