Privacy notice

This notice explains what personal data racksafetyapp.com collects, why, on what legal basis, how long we keep it and what rights you have (Articles 13 and 21 of the General Data Protection Regulation, GDPR).

Who is responsible

Prvi Red obrt za usluge, vl. Hrvoje Čemeljić, Ulica Marka Stančića 13, 10000 Zagreb, Croatia (OIB 40527108947); details in the legal notice. For anything about your data, write to hrvoje@prvired.com. We are a small business and have not appointed a data protection officer, because the law does not require one for us.

What we record when you visit

To learn which parts of RackApp interest people and where the website or the app is unclear, we record:

• on the website: the pages you open, which parts of a page you scroll to, how long a page is open, the buttons and links you click and the files you download;
• in the app you can try on this site: which screens you open and what you click (the button or link text and the screen it was on);
• in that app: what you type or choose in its fields, for example measurements, notes, a site name or a search. We never record its sign-in email, the code, your name, organisation or credentials fields, signature names, or photos and files you choose. Email addresses and phone numbers typed anywhere else are masked before they are stored;
• with each visit: a random visit number that only lives while the page is open, the page you arrived on, the website that sent you (its domain only), campaign tags in the link (for example from an ad), your device type (phone, tablet or computer) and your browser language.

The app on this site uses sample data. Please don't type real personal data into it.

We use no cookies, store nothing on your device and use no third-party analytics; the app on this site forgets everything when you reload the page. Your IP address is needed to deliver the website to you. Our server holds it only in its working memory, to limit abuse (too many requests from one address), and forgets it about ten minutes after your last request. It is not written to any database or log. If your browser sends the Global Privacy Control signal, nothing of the above is recorded.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in understanding how visitors use the website and the app, so that we can improve the product, and in measuring which of our advertising works. We have weighed this against your interests: we cannot tell who you are from these records, nothing links your visits to each other, nothing is stored on your device, the records stay with us, and typed text is deleted early.

How long: the record of pages, clicks and screens is deleted automatically after 400 days; text you typed in the app is deleted automatically after 180 days.

Your right to object: you can object to this recording at any time, for reasons relating to your particular situation (Art. 21 GDPR): write to us, or switch on Global Privacy Control in your browser and nothing is recorded from then on. Because we don't know who you are, we can only find a past visit if you tell us roughly when it happened, or if you signed up from it.

When you sign up

We store your email address, your role, your country, the optional company and inspection volume, whether you want a call or product news, the exact wording you agreed to, and when you signed up and confirmed. We link your sign-up to the visit you signed up from, so we can see what you looked at and tried; the form tells you this before you send it. We confirm your email address by email (double opt-in) and contact you from hrvoje@prvired.com to set up your account. We sort sign-ups by role and inspection volume to decide whom to contact first; we make no automated decisions about you that have legal or similarly significant effects.

Email address, role and country are needed to sign up; everything else is optional. You are not obliged to sign up, and without signing up you can still use the whole app on this site.

Legal basis: setting up your account and calling you if you asked for it are steps you requested before a contract (Art. 6(1)(b) GDPR). Linking your sign-up to your visit is based on our legitimate interest in understanding what our future customers need (Art. 6(1)(f) GDPR); you can object as described above. Product news only with your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time with the link in each email or by writing to us, without affecting the lawfulness of anything sent before.

How long: if you become a customer, your details become part of your account and the contract. If you don't, we delete your sign-up when you ask us to, and at the latest 24 months after you signed up. If you only withdraw your consent to product news, we stop sending it at once and keep a note that you withdrew it.

When you email us

If you write to hrvoje@prvired.com, we use your message and address to answer you: to take steps you asked for before a contract (Art. 6(1)(b) GDPR), or otherwise in our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep the conversation as long as it is needed for that, and longer only where the law requires it, for example for business records.

Who processes the data for us

• Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The website, the database and its backups are on Hetzner's servers in Helsinki, Finland, under a data processing agreement (Art. 28 GDPR).
• Email: our mailbox hrvoje@prvired.com is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, under a data processing agreement. Google may process emails in the United States; that transfer is covered by the EU–US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) and by the EU standard contractual clauses (Art. 46 GDPR).
• Confirmation emails: when we use an email service to send them, we will name it here before we start.

The website loads nothing from other companies: fonts, scripts and images come from our own server. Apart from email, as described above, your data stays in the EU. We do not sell data, share it for advertising or use advertising trackers. We pass data to authorities only where the law obliges us to.

How we protect it

All connections to the website are encrypted (HTTPS). The admin area where we read the records is protected by a password and only we use it. The database is copied every night to a backup on the same server; the copies are deleted after 14 days, so data deleted from the database is gone from the backups within 14 days.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive a copy in a common format (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw consent at any time (Art. 7(3)). Write to hrvoje@prvired.com; we answer within one month and may ask you to confirm that the data is yours, for example by replying from the email address you signed up with.

You can also complain to a data protection authority, in particular in the EU country where you live or work. Ours is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr.

Children

This website is meant for businesses. It is not directed at children under 16, and we do not knowingly collect their data.

Changes

We update this notice when what we do with data changes. The current version is always on this page.

Version of 17 October 2026.