Privacy Policy
Last updated: January 21, 2026
1. Data Controller
The data controller responsible for your personal data is:
DVG Deutsche Verbraucherschutzgesellschaft GmbHSeestr. 20 G
50374 Erftstadt
Germany
Email: privacy@rep4.eu
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at dpo@rep4.eu.
2. Personal Data We Collect
We collect personal data that you provide directly to us, including:
- Contact Information: Name, email address, company name, and job title
- Account Information: Login credentials and account preferences
- Communication Data: Records of correspondence with us
- Transaction Data: Payment information and billing details
- Technical Data: IP address, browser type, device information, and cookies
3. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
- Consent (Art. 6(1)(a)): When you explicitly agree to processing, such as subscribing to our newsletter
- Contract (Art. 6(1)(b)): When processing is necessary to perform our services for you
- Legal Obligation (Art. 6(1)(c)): When we must process data to comply with legal requirements
- Legitimate Interests (Art. 6(1)(f)): When processing is necessary for our legitimate business interests, provided your rights don't override those interests
4. How We Use Your Data
We use your personal data to:
- Provide EU representative services as contracted
- Process payments and manage your account
- Send service-related communications and updates
- Respond to your inquiries and support requests
- Improve our website and services
- Comply with legal obligations
- Send marketing communications (with your consent)
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
- Client data: Retained for the duration of our service agreement plus 7 years for legal compliance
- Marketing data: Retained until you withdraw consent
- Technical data: Retained for up to 2 years for analytics purposes
6. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data under certain circumstances.
Right to Restrict Processing
Request limitation of how we use your personal data.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw previously given consent at any time.
Right to Lodge a Complaint
File a complaint with a supervisory authority.
To exercise any of these rights, please contact us at privacy@rep4.eu. We will respond within 30 days as required by GDPR.
7. Data Sharing and Transfers
We may share your personal data with:
- Service Providers: Third parties who assist in providing our services (e.g., payment processors, hosting providers)
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
When transferring data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience on our website. You can manage your cookie preferences through your browser settings.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for website functionality | Session |
| Analytics | Help us understand how visitors use our site | 2 years |
| Marketing | Used to deliver relevant advertisements | 1 year |
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication measures
- Employee training on data protection
- Incident response procedures
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Data Protection Officer
Email: dpo@rep4.eu
General Privacy Inquiries
Email: privacy@rep4.eu
You also have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is generally the competent state data protection supervisory authority (Landesdatenschutzbehoerde) for your case.