Privacy Policy
Certain products and platforms within the RND ecosystem may operate under separate platform-specific privacy policies.
RND Global, represented by Jakob Düsterhöft (hereinafter "RND Global", "we", "our" or "us"), takes the protection of personal data very seriously. The processing of personal data is carried out exclusively in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") and all other applicable European and German data protection regulations.
This Privacy Policy applies to the website rnd-global.com as well as to general communications, support requests, contact forms, operational inquiries and career-related submissions processed through this website.
Certain divisions, products, platforms or independently operated services within the RND ecosystem, including but not limited to UpStar and related projects, may operate under separate platform-specific privacy policies. In such cases, the respective platform-specific privacy policy shall apply in addition to or instead of this Privacy Policy where appropriate.
The controller within the meaning of Art. 4 No. 7 GDPR is:
RND Global
represented by Jakob Düsterhöft
c/o IP-Management #11042,
Ludwig-Erhard-Str. 18,
20459 Hamburg,
Germany
When visiting this website, certain technical information may automatically be processed by our infrastructure providers and systems. This may include IP address, browser type, operating system, device information, access timestamps, requested pages, referral URLs and other technically necessary metadata required for the secure and stable operation of the website.
Personal data may additionally be processed when users voluntarily submit information through contact forms, support inquiries, operational communication channels or career-related submissions. Such information may include names, email addresses, message contents, project-related information and any other information voluntarily provided by the user.
The processing of such data is carried out solely for the purpose of operating the website, handling inquiries, maintaining communication, improving operational security and ensuring the technical functionality of our services and infrastructure.
The processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR where consent has been granted, Art. 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual communication, Art. 6(1)(c) GDPR where legal obligations require processing and Art. 6(1)(f) GDPR where processing is necessary for our legitimate interests in maintaining secure infrastructure, responding to inquiries, operating digital systems and ensuring stable communication channels.
Our legitimate interests include, in particular, the operation, protection and optimization of our digital infrastructure, prevention of misuse, spam and technical abuse, internal operational management and the maintenance of secure communication systems.
If users contact us through forms, support channels or email communication, the transmitted information will be processed for the purpose of handling and responding to the respective request. Users are requested not to submit sensitive personal data unless explicitly required and appropriate.
Career-related inquiries may additionally be reviewed internally by relevant operational teams within the RND ecosystem where necessary for evaluating collaboration opportunities or project assignments.
Communication data may be retained for a reasonable period where necessary for operational documentation, legal compliance, dispute prevention or follow-up communication.
The technical operation of this website may involve the use of external infrastructure, hosting, database, communication and operational service providers, including but not limited to Lovable, Supabase, Resend, Namecheap and related technical infrastructure providers.
Such providers may process technical connection data, infrastructure logs, request metadata and communication-related information on our behalf where necessary for providing their respective services.
Where required under applicable law, appropriate contractual agreements and safeguards are implemented with service providers acting as processors pursuant to Art. 28 GDPR.
This website is designed to operate with minimal tracking technologies. Technically necessary cookies or comparable storage technologies may nevertheless be used where required for website security, infrastructure operation, session handling, spam prevention or technical functionality.
At the time of writing, no advertising-related tracking technologies, behavioral profiling systems or marketing pixels are intentionally operated on rnd-global.com. Should this change in the future, this Privacy Policy may be updated accordingly.
RND Global operates as an overarching digital network and operational structure for multiple independently managed digital products, platforms and brands. Certain inquiries submitted through this website may therefore be internally forwarded to the responsible division, project or operational team where necessary for proper handling.
Separate services within the ecosystem may maintain their own legal documents, support structures, operational systems and data processing practices.
Personal data shall only be retained for as long as necessary for the purposes for which the data was collected, for operational documentation, legal compliance or the establishment, exercise or defense of legal claims.
Technical server logs may additionally be retained temporarily for security, infrastructure monitoring and abuse prevention purposes.
Where technically necessary, personal data may be processed by service providers located outside the European Union or the European Economic Area. In such cases, appropriate safeguards pursuant to Art. 44 et seq. GDPR shall be implemented where legally required, including standard contractual clauses or comparable legal mechanisms.
Users have the right, subject to applicable legal conditions, to request information pursuant to Art. 15 GDPR, rectification pursuant to Art. 16 GDPR, erasure pursuant to Art. 17 GDPR, restriction of processing pursuant to Art. 18 GDPR, the right to data portability pursuant to Art. 20 GDPR and to object to processing pursuant to Art. 21 GDPR.
Where processing is based on consent, consent may be withdrawn at any time with future effect.
Requests regarding personal data may be submitted to: communications@rnd-global.com
Users additionally have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 GDPR if they believe that the processing of personal data violates applicable data protection law.
RND Global implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, manipulation or disclosure. Access to personal data is restricted to authorized operational personnel where required for legitimate business purposes.
However, despite all reasonable security measures, no digital infrastructure or online transmission can be guaranteed to be completely secure.
Google Maps is an optional external service and is only loaded after the user has provided consent. When Google Maps is enabled, a connection to Google may be established and technical information such as the user's IP address, browser information, and referrer data may be transmitted to Google.
The optional distance calculator uses the browser's geolocation interface only after the user actively requests the feature and grants permission through the browser. The location coordinates are used locally to calculate an approximate straight-line distance to RND Global. They are not stored, logged, added to URLs, or transmitted to Google by RND Global.
Users can withdraw their Google Maps consent at any time through the "Privacy Settings" link in the footer. See Google's Privacy Policy and Google Maps Terms for further information.
RND Global reserves the right to modify or update this Privacy Policy at any time in order to reflect changes in legal requirements, infrastructure, operational structures, services or technical systems.
The latest version shall always be made available through this website.
Website delivery and security. RND Global uses Cloudflare and Lovable to deliver, host and protect this website. In this context, IP addresses, request and browser information, timestamps, referrer information and security events may be processed for reliable delivery, abuse prevention and system security. The legal basis is Article 6(1)(f) GDPR. Further information is available in the Cloudflare Privacy Policy and the Lovable Privacy Policy.
Web fonts. This website requests font files from Google Fonts. The request may transmit the visitor's IP address and technical browser information to Google. Further information is available in Google's Google Fonts Privacy FAQ and Privacy Policy.
Contact forms and booking. Contact-form data, including name, email address, subject and message, and booking data, including name, company, email address, telephone number, topic, message, selected time and time zone, are processed to handle the request, prepare or perform a business relationship and organize the requested meeting. The legal basis is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR. Data is stored in Supabase and transactional messages are delivered through Lovable's email infrastructure and its subprocessors. To prevent automated abuse, a one-way hash derived from technical connection information is counted within an hourly window and removed no later than seven days after that window. See the Supabase Privacy Policy and the Lovable Privacy Policy linked above.
Google Calendar and Google Meet. If a meeting is booked, the scheduling details required to create and manage the appointment are transferred to Google Calendar and a Google Meet link may be generated. Availability checks use free/busy time windows and do not require the website to display calendar event titles or descriptions. Google processes this data under its applicable terms and privacy policy.
Invoice lookup and payment. If the payment page is used, the invoice number and email address entered are used on the server to retrieve matching invoice and payment-status information from Stripe. If a user follows a Stripe-hosted invoice or payment link, further processing takes place directly through Stripe. Details are available in the Stripe Privacy Policy.
Telephone calls. For calls to RND Global telephone numbers operated through Twilio, Twilio may process the calling and called number, call time and duration, routing information and other technical communications metadata required to establish, secure and account for the connection. Details are available in the Twilio Privacy Notice.
Contact, booking, communication and payment-related records are retained only for as long as necessary to handle the request, perform or prepare the business relationship, comply with statutory retention duties or establish, exercise or defend legal claims.