Privacy Notice

Data controller

We are RAKwireless Technology Limited

Room 1002 10/F, Easey Commercial Building 253-261 Hennessy RD Wan Chai, Hong Kong

Company registration number: 2565392

Please use this web form to contact us with your inquiries.

With respect to the personal data collected on the Site we act as a data controller.

Data Protection Officer

RAKwireless has appointed the external DPO. RAKwireless’s DPO is Sekurno OÜ.

Sekurno OÜ is a legal entity duly established under the laws of the Republic of Estonia, registration number is 14992608.

Sekurno OÜ is a team of cybersecurity engineers and compliance experts striking deep expertise in the field of data protection and security.

Correspondence address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 10151.

Please use this web form to contact us with your inquiries.

Please contact us or our DPO to receive answers to any data protection-related questions. Please note that we may record any oral communication related to data subject rights to preserve the evidence of the existence of your request and our response.

We may collect and process your personal information when you:

a. register an account on the Site (“Account Data”);

b. make a purchase on the Site (“Purchase Data”);

c. contact us via the Site or contact details available on the Website (“Contact Data”);

d. agree to receive updates or marketing emails from us (“Marketing Data”);

e. access and browse the Website (“Site Data”);

f. read, write or evaluate the content available on the Site via forum functionality (“Forum Data”),

Such personal data is collected and processed as follows:

Account Data

While making a purchase you are able to register a personal account on the Site and provide us with certain information required for registration. Such information is necessary to create a personal account and further use it. The Account Data includes the following:

The mandatory data is transferred to us in any case, because this data is always contained within your Account. We receive the optional data only if you have provided such information within the Account. Please note that you can modify or delete respective data within the Site by yourself.

Purchase Data

While making a purchase on the Site you should provide us with the personal information required to purchase and deliver Products available on the Site. If you do not provide us with the necessary Purchase Data, we will not be able to process your order and fulfill a contract with you. The Purchase Data includes the following:

The mandatory data is transferred to us in any case, because this data is always contained within your Account. We receive the optional data only if you have provided such information within the Account. Please note that you can modify or delete respective data within the Site by yourself.

Contact Data

When you contact us via the Site or contact details available on the Site, you may provide us with the following data:

This data is necessary to address your issue, answer your request, contact you back, or address you properly, where and as applicable depending on the type of personal information.

Marketing Data

When you contact us via the Site or contact details available on the Site, you may provide us with the following data:

For marketing purposes we may also refer to personal information collected from analytical technologies described in detail in the Cookie Policy.

As a Merchant, we may send you marketing emails (provided that we have your consent to do so) about our referral campaign and new opportunities. You may withdraw your consent in your Account or via the “Unsubscribe” link in the marketing email.

You may always unsubscribe from receiving marketing emails by

1. contacting us or
2. clicking the unsubscribe button available within each marketing email we send you.

When you unsubscribe from receiving marketing emails, your Marketing Data will be erased from the respective database, however anyway no longer than 1 year.

Site Data

When you visit the Site, we automatically collect certain information about your device. Personal data may be collected using:

• cookie technology;
• log files;
• web beacons, tags, and pixels.

For a detailed description and information about Site Data please refer to Cookie Policy.

Forum Data

We provide you with a place for discussion with other customers of the Site. We use Discourse to enable you to take part in the forum discussions and use the Site’s chat functionality. We will also collect certain personal information from you and host the data you provide while using the forum.

Users’ personal data may be collected when:

• they register within the Site;
• read, write or evaluate the content available on the Site via forum functionality.

The Site may collect the following personal data:

Please note that without this information you will not be able to register an account within the Site and use forum functionality. You could find more information about our forum’s data protection approaches by visiting the following link: https://forum.rakwireless.com/privacy.

Please do not share your personal data in the text fields of your posts and/or direct messages with other forum members, especially your sensitive data. Data protection laws vary from country to country and allow other forum members to freely collect and process personal data that you publicly share.

Success Stories

When you share your success story published from your social media account, we may process personal data used to create a webpage on such Social Media (e.g. name, or nickname, identifier, likes, shares, information comprised in the social media post, photo used as a profile picture, other personal information that you chose to provide us)

Please read the respective social medium’s privacy policy to learn more.

• Facebook
• Instagram
• Twitter
• Linkedin
• YouTube
• Pinterest
• TikTok
• Github
• Hackster
• Discord

We do not sell or rent out your personal data. However, we may share your personal data if it is reasonably necessary for the performance of our undertakings with you (process your order) and/or our legitimate interest to maintain and develop the Site. In particular, your personal information is shared with the following categories of recipients:

• a. our affiliates;
• b. our subcontractors such as Ghost (Privacy Policy available at Ghost.org Privacy Policy) and team members, e.g., support team, technical team, etc.;
• c. third-party solutions integrated with the Site, e.g., solutions enabling you to make the purchase such as Shopify (Privacy Policy available at Privacy Policy – Privacy & Terms – Google); bot traffic prevention solutions such as hCaptcha; support solutions such as Zendesk (Privacy Policy available at Privacy Policy - Zendesk); caching and reverse-proxy load balancing services such as Cloudflare (Privacy Policy available at Cloudflare's Privacy Policy | Cloudflare);
• d. third-party solutions that provide us with the data storage facilities that are physically located in Germany such as Amazon Web Services (Privacy Policy available https://aws.amazon.com/privacy/ );
• e. shipping companies that deliver you the products ordered on the Site;
• f. payment institutions that process payments on the Site;
• g. marketing email solutions, such as Klaviyo or any other solution we may use (Privacy Policy available at Privacy Policy - Klaviyo); affiliate marketing solutions such as Kickbooster (Privacy Policy available at Kickbooster Privacy Policy);
• h. government institutions that may request access to your personal data.

Please note that we and the aforementioned recipients are located in jurisdictions that may not ensure the same level of data protection as the country of your residence. We will endeavor to protect your personal data while it is processed, stored, or transferred.

• Standard Contractual Clauses. If and to the extent we are subject to the General Data Protection Regulation, when we transfer personal data to a country that does not ensure the same level of data protection as the country of your residence, we will use additional safeguards, namely, Standard Contractual Clauses (next “the SCC”) which are deemed to be appropriate data protection safeguards. The SCCs are designed to establish a level of data protection aligning with the GDPR implying certain obligations on data importers regarding specific technical measures, such as strong encryption before transmission, requirements for encryption keys, and encryption of data-at-rest.
• Transfer Impact Assessment. In addition to the SCC, we are conducting regular assessments of the laws and practices of the recipient country. This assessment helps us to verify the security measures and safeguards implemented by that country.
• Security measures (technical and organisational measures, or TOMs). Measures we use include but are not limited to pseudonymization of data, encryption, anti-virus software, access/transfer control requirements. Please note that this is not an exhaustive list of technical or organizational measures we use, but a general overview.
• Legal Grounds. Transfers of personal data should either be conducted to the countries which the European Commission found as those ensuring an adequate level of protection. Alternatively, where countries could not ensure this level of protection, data transfers should be supplemented by appropriate safeguards, and be based on the condition of effective judicial remedy and enforceable data subject rights.

According to the applicable data protection legislation, you may have the following data protection rights:

• a. right to access:

You are able to request access to your personal data that we store about you. Among others you may ask us regarding:

• the purposes for collecting personal information about you;
• categories of personal information concerned;
• who receives your personal information or categories of such recipients;
• how long we are going to store the information about you and if not possible criteria to determine the storage period;
• when your personal information was obtained not from you directly, the source where it came from;
• the existence of either profiling activities or automated decision making based on your personal information. Where such activities are performed, we should also inform you about the importance, and expected consequences of them;
• a copy of your personal information processing. For such requests further, we may charge you with a reasonable fee. We generally provide users with an electronic copy of their personal information unless they request otherwise.

• b. right to rectification:

You have the right to correct inaccurate (for example, old or incorrect) personal information related to you.

• c. right to erasure or the right to be forgotten:

You have, under certain circumstances, the right to request the erasure of your personal information. Please note, that this right only applies to the data available at the time of request and is not applicable to future data.

Request to the erasure of personal information is possible when:

• personal information is no longer needed for the purposes it was primarily collected or processed;
• when you have already withdrawn your consent for processing your personal data, and we do not have other legal ground to process it;
• when your personal data is processed under legitimate interest and you object to such legal ground. Moreover, there is no overriding legitimate interest to proceed processing of your personal data;
• your personal information was unlawfully processed;
• when your personal data has to be erased due to legal obligation.

• d. right to restrict processing:

You may request us to stop processing your personal information when:

• you have reasonable doubts that your information is accurate, and we are verifying the accuracy of such information;
• your personal information was unlawfully processed;
• the purpose of your personal information collection no longer exists, but you wish to store it longer to defend a legal claim.

Moreover, you may request us to stop processing your personal data while we are working on a rectification request or request to object to the processing of your personal information.

• e. right to data portability:

You have the right to obtain from us and further reuse your personal data for your own purposes within other services. You will also be able to transfer your personal information from one IT environment to another in a safe and secure way, when certain conditions apply, such as:

• the processing is based on your consent or needed for the performance of a contract with you;
• the processing is made only electronically, without any paper-based files included.

• f. right to object:

You have the right to object to the processing of your personal information at any time. This allows you to prevent us from (stop) processing your personal information. This right applies only when one of the following conditions are met:

• your personal information is used for direct marketing purposes;
• the processing is based on our legitimate interest;
• we are performing tasks carried out for the public interest or by governmental authority;
• your personal information was processed for either research or statistical purposes.

• g. right not to be subject to automated decision making and profiling:

Currently, neither we nor the Website uses your personal data for profiling or decisions made solely by automated means.

• h. right to lodge a complaint with a supervisory authority:

You have a right to lodge a complaint with a data protection authority in a country you either reside, permanently live, work, or in a country where data protection infringement takes place.

Site is not intended for the use of children (under 18 years old or older, if the country of your residence determines a higher age restriction). We do not knowingly market to, or solicit data from children. We do not knowingly process, collect, or use the personal data of children, and in case we receive such data, we will erase it within a reasonable timeframe.

As a general rule, we store your data as long as it is necessary for the purposes it was collected and according to the requirements of the applicable legislation. Following the expiration of the storage period, such data will be either erased or anonymised. In particular, your personal data will be processed as follows:

1. Purchase Data is processed as long as it is necessary under the requirements of the applicable legislation. Such data is stored for a period of 3 years from the date it was collected.
2. Contact Data is processed for the period of 1 year following our contact with you.
3. Marketing Data is stored until you remain subscribed to our newsletter. You may unsubscribe from receiving marketing emails in accordance with Section 2.4 above.
4. Site Data is stored during the applicable cookie storage period as described in the Cookie Policy. You may also learn more about such data in the Cookie Policy and on the websites of the applicable third parties.

Personal data is either deleted or anonymized upon the expiry date. After this date, your personal data will be made inaccessible, irretrievable, and non-refundable for anyone, by no means. Also, the data may alternatively be made impossible to link with the identified or any identifiable natural person (the Site user).

We keep this Notice under regular review and may update it at any time. If we make any changes to this document, we will change the “Last Updated” data above. Please, review this Notice regularly, or follow the updates on the Site.