Source: https://support.royalapplications.com/support/solutions/articles/17000075594-privacy-policy
Timestamp: 2019-04-23 04:05:45+00:00

Document:
send electronic mail as defined in Section 107 (3) of the Austrian Telecommunications Act [TKG].
When using such data the controllers shall meet the requirements under communication law, in particular Section 107 TKG.
The controllers will store IP addresses of licenced customers to verify the licence key and prevent misuse of the licence key. The controllers have an overriding legitimate interest in such data processing for the purposes of verifying the licence.
The controllers will store the IP addresses of their customers for a period of 7 days to defend against targeted attacks in the form of server overloads (Denial of Service attacks) or other damage to the systems. The controllers have an overriding legitimate interest in such data processing for the purpose of maintaining the functionality of their services provided online (Recital 49 GDPR).
The customer is under no obligation to provide data.
The customer is subject to no automated decision-making which would become legally effective vis-à-vis him.
Customer data from the sale of licences by e- commerce providers / sales platforms.
Email addresses of customers and content of support requests by email and via the website.
Cloud provider stores visitor IP addresses accessing web servers and download sites in log files and for security purposes.
Cloud provider stores IP addresses accessing web servers and download sites in log files and for security purposes.
All processors can be written to and contacted via the controller with regard to questions of data protection law.
The controllers advise that they keep available separate online presences in social media channels for advertising purposes and for communicating with customers. In these online presences customer data may be processed outside the European Union, which increases the risk for a data protection breach. To the extent that they are resident in the USA the providers of social media channels have submitted to the EU-US Privacy Shield.
Those online presences are kept available in the technical environment of the relevant social media operator. The social media operator will then use the customer's visit to the online presence for his own purposes, in particular for sending out (interest-based) advertising. The social media operators use the visit to store cookies on the customer's terminal device, to retrieve existing cookies/identifiers, to draw conclusions from the user behaviour regarding the customer's interests and thus to enhance the user profile which has been established for the customer or the identifier. The aim is to send out interest-based advertising to the customer, which may also be done on websites of third-party providers visited at a later point in time.
Processing personal data of the customer is based on the overriding legitimate interests of the controller in advertising measures and communication with the customer, which is protected by conventions and constitutional law through the freedom to carry on a business (Art.6 of the Austrian Basic Law [Staatsgrundgesetz/StGG]) and the freedom to communicate (in particular Art. 10 ECHR, which also protects advertising measures). If the customers are users of social media channels, data processing may also be covered by the customer's consent.
The controllers advise that they have no access whatsoever to the customer's data. Thus, the controllers recommend customers contact the social media channel directly if they want to assert their rights to access, rectification, erasure, restriction, objection and data portability. Users of social media channels may also make changes in their privacy settings themselves. If necessary, the controllers will provide assistance to the customer.
Non-registered users: Personal data (in particular the IP address) of (non- registered) visitors to the website will be stored for purposes of IT security for a period of 7 days.
Registered customers: Generally, data of registered customers will be processed by the controller on the legal basis stated above for another 40 months after termination of the contract (= 36 months for potential contractual claims for damages + a service period of a maximum of 4 months for service of a claim) and then deleted (in any case, the reference to a person).
Basis: Art 15 GDPR "Access"
Contents: The customer shall have the right to obtain confirmation as to whether or not his personal data is being processed.
Basis: Art 16 GDPR "Rectification"
Contents: The customer shall have the right to obtain without undue delay the rectification of inaccurate personal data or to have it completed.
Basis: Art 17 GDPR "Erasure"
Contents: The customer shall have the right to obtain the erasure of personal data without undue delay as long as the reasons stated in Art 17(1) GDPR are fulfilled.
Basis: Art 18 GDPR "Restriction"
Contents: The customer shall have the right to obtain restriction of processing of personal data as long as the reasons stated in Art 18(1) GDPR are fulfilled.
Basis: Art 21 GDPR "Objection"
Contents: The customer shall have the right to object to processing of his personal data at any time to the extent that the processing of personal data is based on an overriding legitimate interest of the controller.
Basis: Art 20 GDPR "Data portability"
Contents: The customer shall have the right to receive the personal data concerning him, which he has provided, in a structured, commonly used and machine-readable format.
Contents: Each customer shall have the right to lodge a complaint with the supervisory authority if he considers that the processing of personal data relating to him infringes this Regulation.
1 If only the masculine form is used to describe natural persons in this data protection information, it shall refer to both women and men equally. If a term is used for a specific person, the respective gender-specific form shall be used. The term customer refers to both consumers and entrepreneurs.

References: Art. 10
 Art 15
 Art 16
 Art 17
 Art 17
 Art 18
 Art 18
 Art 21
 Art 20