Rath-Net

PRIVACY

Privacy Policy

Status: 10.04.2026

This data protection declaration provides information about the processing of personal data when using the platform Rath Net / Z7.

Responsible: Thomas Rath
Email: thomas.rath@rath-net.at

1. Purposes and legal basis of processing

We process personal data in particular for the following purposes:

  • Provision of the website and user accounts, Art. 6(1)(b) GDPR,
  • Authentication, security, protection against misuse and stability of the platform, Art. 6 Para. 1 lit. f GDPR,
  • Fulfillment of legal obligations, Article 6 Paragraph 1 Letter c GDPR,
  • Processing of user inquiries and management of the platform, Art. 6 Para. 1 lit. b and lit. f GDPR.

2. Which data is processed

Depending on how the platform is used, the following data in particular may be processed:

  • Registration data: first name, last name, nickname, date of birth, email address, password hash,
  • Account data and voluntary profile data: address, telephone number, profile text, profile picture,
  • Usage and security data: login times, IP addresses, status of login attempts, session data,
  • Content data: notes, calendar entries, lists, document metadata and uploaded files,
  • Group and sharing data: group memberships, invitations, shared documents and permissions.

3. Registration and user account

When registering, the mandatory data you enter will be processed to create your user account and enable you to use the protected functions. Registration is not possible without this data.

4. Sign-in and security

When registering, email address, IP address, times and the success or failure of the registration attempt are processed. This serves access control, protection against misuse, technical security and the traceability of security-relevant processes.

5. Documents, content and group functions

Content that you save or upload within the Platform is processed to provide the relevant function. This includes, in particular, documents, calendar entries, notes, lists and group functions. Shares with other users or groups only occur according to the platform functions you use.

Uploaded documents are stored on the server side; According to the current technical status of the application, documents are also stored in encrypted form.

6. Cookies and session processing

The platform uses technically necessary session functions so that registrations, form entries and security mechanisms work. In particular, a session cookie can be stored in the browser. This processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR and, to the extent necessary for the user account, Art. 6 Para. 1 lit. b GDPR.

According to the current status, no non-technically necessary tracking or marketing cookies are used.

7. Recipients of the data

Your data will only be disclosed to the extent necessary to provide the platform.

  • internally to the departments responsible for operations and administration,
  • to other users or groups if you specifically release content or documents,
  • to technical service providers or hosting providers, insofar as they are involved as processors,
  • to authorities or courts if there is a legal obligation.

8. Storage period

We only store personal data for as long as necessary for the respective purposes. User account data is generally stored for the duration of the account's existence. Content data will remain stored until you delete it or the account ends, unless there are legal retention obligations or legitimate reasons for longer storage.

Security and login protocols are only retained for as long as is necessary to prevent misuse, system security or to enforce or defend against legal claims.

9. Obligation to provide

If data is required for registration, login or the use of individual functions, the provision of this data is contractually or functionally necessary. Without this data, the corresponding functions cannot be used.

10. Rights of data subjects

In particular, you have the following rights under the GDPR:

  • Right to information, Art. 15 GDPR,
  • Right to rectification, Art. 16 GDPR,
  • Right to deletion, Art. 17 GDPR,
  • Right to restriction of processing, Art. 18 GDPR,
  • Right to data portability, Art. 20 GDPR,
  • Right to object, Art. 21 GDPR.

If the processing is based on Article 6 Paragraph 1 Letter f of the GDPR, you can object to this processing for reasons relating to your particular situation.

11. Right to complain

You have the right to complain to a data protection supervisory authority. In Austria this is in particular the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

12. Automated decisions

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not currently take place.

13. Changes to this Privacy Policy

This data protection declaration can be adjusted if legal requirements, technical functions or data processing of the platform change. The version published on this page is relevant.