Privacy Policy for ONE MESSAGE

For the purposes of this Privacy Policy: 

• Account means a unique account created for you to access our Service or parts of our Service. 
• Company (referred to as either "the Company", "the Provider", "We", "Us" or "Our" in this Agreement) refers to RMH MEDIA GmbH, Richmodstr. 31, 50667 Cologne. 
• Customer refers to the customer, for which we provide this service (see below (10)). 
• Cookies are small files that are placed on your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses. 
• Country refers to: Nordrhein-Westfalen, Germany 
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet. 
• Personal Data is any information that relates to an identified or identifiable individual. 
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. 
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the time and date of a used API endpoint). 
• Website, Application or Service refers to the ONE MESSAGE application, accessible from Veeva CRM (customer instances). 
• "You" means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. 

All content of the Application is hosted on Google Cloud Platform servers located within the EU (Frankfurt/Germany).  

You can read more about Googles privacy policies and compliance to GDPR here: 

• https://cloud.google.com/security/gdpr 
• https://cloud.google.com/security/privacy 

We use Google Cloud Platform to store and process all our data, and it has default encryption at rest using either AES256 or AES128 technology.

You can read more about Google Cloud encryption here:  

• https://cloud.google.com/security/encryption-at-rest/

a) Types of Data Collected 

Personal Data 

Before using our Service, we ask you to provide us with certain personally identifiable information that can be used to contact or identify you.  

Personally identifiable information may include, but is not limited to: 

• Email address 
• First name and last name 
• Title 
• Phone number 

The legal basis for the processing of your Personal Data is either the fulfillment of a contract (Art. 6(1) lit. b)) with you or your consent (Art. 6(1) lit. a) GDPR). 

Usage Data  

Besides that, if you use this service without otherwise transmitting data to us, we collect following technically necessary usage data via log files, which are automatically transmitted to our server: 

• Date and time 
• IP address 
• Visited web page/used API endpoints only 

We only use Session Cookies to store certain information about your current session. Session Cookies are deleted as soon as you close your web browser.  

We use session Cookies for the purposes set out below: 

Necessary / Essential Cookies 

Type: Session Cookies 

Administered by: Us 

Purpose: These Cookies are essential to provide you with services available through the application and to enable you to use some of its features.  

They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that you have asked for cannot be provided, and we only use these Cookies to provide you with those services. 

For processing of this data, the legal basis is Art. 6(1) lit. f) GDPR. The processing of the mentioned data is necessary for the running of the Application and protection against misuse of the Application and thus serves the protection of a legitimate interest of our company. 

b) Use of Your Personal Data 

We may use Personal Data only for the following purposes: 

• To provide and maintain our Service, including to monitor the usage of our Service. 
• To manage your requests: to attend and manage your requests to us. 

As soon as the personal data mentioned are no longer required to provide the service, the data will be deleted.  

The collection of the data for the provision of the service and the storage of the data in log files is absolutely necessary for the operation of the service. Consequently, there is no possibility for the user to object to this aspect.  Further storage may take place in individual cases if this is required by law. 

The current defined storage periods are as follows: 

• Logfiles: 30 days  

We may share or disclose your personal information in the following situations: 

• Displaying and collaborating with others in the service: when an authorized User submits content, it may be displayed to other authorized users in the same customer instance. For example, an authorized user’s name may be displayed with their created content. 
• Customer access: Owners, administrators, Authorized Users, and other Customer representatives and personnel may be able to access, modify, or restrict access to your information. This may include, for example, accessing or modifying your profile details. 
• Comply with a legal obligation 
• Protect and defend the rights or property of the Company 
• Prevent or investigate possible wrongdoing in connection with the Service 
• Protect the personal safety of Users of the Service or the public 
• Protect against legal liability 

Your information, including Personal Data, may be processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Your submission of such information represents your agreement to that transfer. 

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. 

All data transfers to and from this service are encrypted (e. g. via TLS). 

To provide this service, your data must be transferred to the Instant Messaging Platforms (IMP) which you are using. The Data Protection Policies of these Platforms apply accordingly.  

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. 

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. 

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. 

You have the right to access your Personal Information processed by us and may request a copy. If you have any questions regarding the Privacy Policy or the information we process, or any complaints regarding the way we are handling your data, please contact us at the email-Address which can be found below at (10).  

We will provide you with information about the Personal Information we control and process about you free of charge once per calendar year (provided that you have asked for the information in a written request signed by you or that you have otherwise given proof of identity). 

We will on our own initiative, or upon the request of you, rectify, delete, or complete any Personal Information in the register which we find is incorrect, unnecessary, inadequate, or outdated. You have the right to have incorrect details revised under certain circumstances. Please send such requests to the email-Address which can be found below at (10) specifying what you would like to modify. 

We will respond and/or implement your preferences within 30 days of receiving your request. In order to provide any Personal Information to you, we will verify your identity and authenticate your access right before doing so. 

You can also object to certain Personal Information about you being processed, request that processing of your Personal Information be limited or withdraw your consent of processing your data at any time. Please note that the limitation or deletion of your Personal Information may mean we will be unable to provide you with our Services.  

You also have the right to receive your Personal Information in a machine-readable format and have the data transferred to another party responsible for data processing. 

We are committed to handle any request, complaint or concern that you may have about our use of your personal information in a fair and transparent way. 

If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to file a complaint with the data protection authority in your country (if one exists in your country) or supervisory authority.

If you have any questions about this Privacy Policy, you can contact us: 

Postal address: 

RMH MEDIA GmbH
Data Privacy Officer
Richmodstr. 31
50667 Cologne / Germany 

By email: 

privacy@one-message.app