Privacy Policy

This Privacy Policy explains the nature, scope and purpose of the processing of personal data. Personal data are generally all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.

Personal data is processed within our project management app RPLAN Connect, its functions and content, the websites linked to it and external online presences such as social media profiles.

We collect & use your personal data exclusively within the framework of the applicable data protection regulations. Our employees and representatives are obliged to comply with data protection regulations in accordance with legal requirements.

Responsible for data processing is Actano GmbH, Paul-Heyse-Str. 26-28, 80336 Munich.

Which functions does RPLAN Connect offer?

RPLAN Connect is a collaborative project management app for planning, implementing and controlling projects. To seamlessly integrate project participants and jointly edit the project, objects (e.g. project, task, milestone, function component) can be shared with other users.

The following personal data are visible to other users:

  • E-Mail Address
  • Abbreviation (if voluntarily entered)
  • First and last name (if voluntarily entered)
  • Profile picture (if voluntarily entered)
  • Activity log of user activities for shared objects (e.g. project created, tasks processed, start date changed, note changed)".

General information about data processing when you use our app

We collect and use your personal data only to the degree necessary to provide our app and our content and services.

We use your personal data exclusively for the execution of the contract of use (Art. 6 Abs.1 lit.b DSGVO).

Your personal data will be stored for as long as the user account exists. In the account settings you have the possibility to delete your data at any time. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which ACTANO GmbH is subject as the person responsible. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data.

Which of your personal data are used by us?

When you subscribe to RPLAN Connect, we use the following personal data:

  • E-mail address (mandatory for registration)
  • Password (mandatory for registration)
  • data that are technically necessary for us to display our website to you and to ensure stability and security

In addition, we use the following data, which you can voluntarily add to your user profile:

  • First name
  • Last name
  • Individual abbreviation
  • Personal profile picture

If you want to use the paid version of RPLAN Connect, we will send the following data to our payment service provider for payment processing:

  • Email address
  • Company name
  • First and last name
  • Address
  • Name of the cardholder
  • Card number

This data is not stored by us, but is forwarded directly to the payment service provider.

Which sources did the data come from?

We process the personal data that we receive directly from you.

In addition, we will process your profile picture (avatar) stored with the service provider Gravatar, Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA, if you activate this option in your profile.

What options do I have to restrict the permissions for my created objects?

RPLAN Connect provides you with a comprehensive permission concept. Permissions are assigned to individual objects (e.g. projects, tasks, folders). Different permissions (e.g. Manager, Editor, Reading) are available. The user only sees the object released for him.

Who will receive your data?

We work with carefully selected external service providers to fulfill our contractual responsibilities and to receive more detailed information on the usage of our product:

External service providers:

  • Hosting Service provider: Profitbricks
    More information about Profibricks can be found here:
    https://www.profitbricks.de/de
  • Service provider for web analysis: Google Analytics
    Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google", more information.
  • Payment service provider: Stripe Payments
    If you wish to purchase our paid version of RPLAN Connect, payment is processed by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we pass on your information provided during the order process together with the information about your order (name, address, company name, credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only if required for this purpose. Stripe is certified according to the EU-American Privacy Shield and thus guarantees an adequate data protection. For more information about Stripe's privacy policy, please visit https://stripe.com/de/privacy.

Furthermore, your personal data will only be passed on to third parties if:

  • you have given your explicit consent,
  • the disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding protective interest in the non-disclosure of your data,
  • in the event that a legal obligation exists for the transfer, and
  • this is legally permissible and necessary for the execution of contractual relationships with you.

When data is transferred outside the European Union, the high level of European data protection does not exist in principle. In the case of a transmission, it may be that there is currently no adequacy resolution of the EU Commission within the meaning of Art. 45 para. 1, 3 DS-GVO. This means that the EU Commission has not yet positively determined that the country-specific data protection level corresponds to the data protection level of the European Union due to the DS-GVO, which is why we have created the above-mentioned appropriate guarantees.

Potential risks that may not be completely excluded in connection with data transmission are in particular:

  • Your personal data could possibly be processed beyond the actual purpose.
  • In addition, you may not be able to assert and enforce your rights under data protection law, such as your right to information, correction, deletion or data transferability.
  • There may also be a higher likelihood that incorrect data processing may occur and that the protection of personal data does not fully comply quantitatively and qualitatively with the requirements of the DS-GVO

Will your data be transferred to any countries outside the European Union (so-called third countries)?

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data in a different way from countries within the European Union. We also use service providers located in third countries outside the European Union to process your data. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection.

We have therefore taken special measures to ensure that your data are processed in third countries as securely as within the European Union. We conclude the standard data protection clauses provided by the Commission of the European Union with service providers in third countries. These clauses provide appropriate guarantees for the protection of your data with service providers in third countries.

Our service provider Google Inc., with whom we work to conduct the web analysis, is certified in the USA according to the EU-US Privacy Shield Agreement.

If you wish to review the existing warranties, you can contact us at privacy@actano.com.

What are cookies and how are they used?

General information

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again.

Differentiation Type of cookies

Technically necessary cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after a page change.

Technically necessary cookies are not absolutely necessary to display the website. However, some functions of the website or app cannot be used properly without these cookies. Consequently, there is no possibility for the user to refuse cookies, which can be deactivated by setting the respective browser.

  • UPDATESID This is a session cookie. This allows us to store your session information while you use our app. Storage time: Until the end of the session
  • SID This is a session cookie. This allows us to store your session information while you use our app. Storage time: Until the end of the session
  • cookie-accepted This is how we save your selection of the cookie banner. Storage time: Until the end of the session.

Cookies for range measurement

Reach measurement cookies collect information about the use of our website. These cookies do not store any information that allows the user to be identified. The information collected is exclusively aggregated and thus evaluated anonymously.

aa) Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”).

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f DSGVO. The data sent by us and associated with cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or here https://policies.google.com/?hl=de

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data, by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. If you click respectively, the opt-out cookie will be set: :
Google Analytics Deactivation Plugin

Which data do we collect for stability testing and monitoring?

General information

We use the Sentry Service from Functional Software, Inc. dba Sentry, 132 Hawthorne Street, San Francisco, CA 94107 to monitor the technical stability of our "RPlan Connect" app and to detect any code errors.

The usage and metadata collected in this context are used only for the analysis and correction of errors. No data is evaluated for commercial purposes.

Data processing is based on our justified interest in accordance with Art. 6 Para.1 lit.f DSGVO, the guarantee of the system stability of our app. To protect the data affected, no personal analysis is made and their IP address is anonymised (so-called IP masking). Within X days all data will be erased after they have been evaluated. For further information, please see Sentry's privacy policy: https://getsentry.com/privacy/.

What happens to my data during a job application?

You can apply to our company electronically under the heading "Jobs". We will of course use your details exclusively for processing your application and will not pass them on to third parties. You are welcome to encrypt your documents with 7zip and send us the password separately. Please note that unencrypted e-mails are not transmitted with access protection. Further information about the data processing of applicants can be found here.

What rights do you have in relation to the processing of your data?

Every data subject has the right to information, the right to correction, the right to cancellation, the right to limitation of processing, the right to opposition and the right to data transferability. The legal restrictions according to the BDSG apply to the right to information and the right of cancellation.

Right of objection

You can revoke the use of your data for advertising purposes at any time without any fees other than the transmission costs according to the basic tariffs.

What right do you have in the case of data processing in your legitimate or public interest?

They have the right to object at any time, on grounds arising from their particular situation, to the processing of personal data concerning them, which is carried out on the basis of data processing in the public interest or data processing in order to protect a legitimate interest, including profiling based on this provision.

In the case of your objection, we will no longer process your personal data unless we can prove that there are compelling, legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

What right do you have in the case of data processing for direct marketing purposes?

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising, this also applies to profiling insofar as it is associated with such direct marketing.

In the case of your revocation of the processing for the purpose of direct marketing, we will no longer use your personal data for these purposes.

Right of revocation

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only valid for the future.

Right of access

You may demand information as to whether we have stored personal data about you. If you wish, we will inform you of the data concerned, the purposes for which the data will be processed, to whom this data will be revealed, how long the data will be stored and what further rights you have in relation to this data.

Other rights

In addition, you have the right to have your data corrected or deleted. If there is no reason for further storage, we will delete your data, otherwise we will reduce the processing. You may also request that we provide all personal information that you have provided to us in a structured, current and machine-readable manner, either to you or to a person or company of your choice.

In all other cases, there is a right of complaint to the responsible data protection authority.

Exercising your rights

To exercise your rights, you can contact our data protection officer via email:


privacy@actano.com

Phone +49 89 / 20 60 44-100. We will process your inquiries immediately and in compliance with legal requirements and inform you of the measures we have taken

Is there an obligation to provide your personal data?

For the execution of the contract of use, you must provide us with the personal data required for the execution of the contractual relationship or which we are required to collect by law. If you do not provide us with this data, it is not possible for us to carry out and process the contractual relationship.

How can you contact the data protection officer?

You can contact our data protection officer at:

Data protection officer
Paul-Heyse-Str. 26-28
 80336 Munich, Germany
privacy@actano.com

Changes to the Privacy Policy

The privacy policy can be changed by us if there are new product developments or changes in the relevant legal situation or jurisdiction. You should therefore check for changes from time to time.