Radworks Privacy Policy

Last updated June 19th, 2025

General information

As the operator of the Radworks App and the Website https://radworks.org/, including its subpage https://radworks.org/app (hereinafter “Radworks App” and “Website”), Better Internet Foundation (hereinafter referred to as the "Foundation" or "we") takes the protection of personal data very seriously. We treat personal data confidentially, in accordance with the statutory data protection regulations and on the basis of this privacy policy. The legal basis can be found particularly in the General Data Protection Regulation (GDPR), the Telecommunications and Telemedia Data Protection Act (TDDSG) and the Federal Data Protection Act (BDSG).

The following services are available on the Website: 

  • Visit of the Website,

  • Subscription to the waitlist and email updates for the Radworks App, 

  • Soon: Download of the Radworks App (while the use of the Radworks App is subject to a different privacy policy, which will be released with its launch).

When you use the Website, various personal data is processed depending on the type and scope of use. Personal data is information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly (e.g. by reference to an online identifier).

This privacy policy informs you in accordance with Art. 12 et seq. GDPR about the processing of your personal data when you use the Website. In particular, it explains what personal data we collect and what we use it for. It also informs you how and for what purpose this is done and on what legal basis.

This privacy policy expressly refers to the website-specific data processing processes as described under 1.1 when you visit the Website. Separate privacy policies apply to other data processing by us.

Controller

According to the GDPR, the controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 

The controller for the data processing processes covered by this privacy policy is:

Better Internet Foundation 
Bahnhofstrasse 20 
6300 Zug, Switzerland
E-Mail: ops@betterinternet.foundation

Purposes and legal bases of data processing

Accessing and visiting the Website - server log files

For the purpose of the technical provision of the Website, it is necessary for us to process certain information automatically transmitted by your browser so that the Website can be displayed in your browser and you can use the Website. This information (the "Access Data") is automatically collected by our host, Framer (see below), each time you visit the Website and automatically stored in so-called server log files. These are

  1. Browser type and browser version

  2. Operating system used

  3. Website from which the access is made (referrer URL)

  4. Host name of the accessing computer

  5. Date and time of access

  6. IP address of the requesting computer

The processing of the aforementioned Access Data is necessary for technical reasons in order to provide a functional website and to ensure system security. This also applies to the processing of your IP address, which is necessary and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the aforementioned purposes, we use server log files exclusively for the needs-based design and optimization of the Website purely statistically and without drawing any conclusions about your person. This data is not merged with other data sources, nor is it analyzed for marketing purposes.

Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of Access Data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

The storage period and deletion of your Access Data are governed by the section titled "Duration of data processing and deletion" of this privacy policy. Your IP address will be stored on Framer’s server for a maximum of 30 days for IT security purposes. 

Use of cookies and associated functions/technologies

We do not use our own so-called cookies on the Website and neither does our service provider Framer. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you return to the Website.

Waitlist form 

On the Website, there is a waitlist form available, which we offer so that you can sign up for more information about the Radworks App. If you sign up via the waitlist form, we will store and process contact details you provide, for the purpose of processing and responding to the sign up. This also applies to the date and time you signed up to our waitlist.  We use tally.so as a waitlist form to collect and store your sign up data. 

If you contact us as part of an existing contractual relationship, make support requests or contact us in advance for information about our range of products and services, the data and information you provide will be processed for the purpose of processing and responding to your inquiries in accordance with Art. 6 (1) sentence 1 lit. b GDPR (legal basis). In addition, the processing is carried out by us to safeguard our legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR for the purpose of responding appropriately to inquiries. 

This information also applies if you contact us via the e-mail address provided on the Website. In this case, we will process the personal data you provide with your e-mail address and your inquiry.

The storage period and deletion of your corresponding data are governed by the section titled "Duration of data processing and deletion" of this privacy policy.

Waitlist Subscription

If you have expressly consented, we will use your e-mail address to send you email communication with news regarding the Radworks App after signing up for our waitlist. To receive the email updates, it is sufficient to provide an e-mail address; the provision of further information is voluntary. In any case, we store your times of registration and confirmation, which we receive during registration and confirmation, in order to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis in this case is Art. 6 (1) sentence 1 lit. a GDPR. 

Deregistration

You can unsubscribe at any time, regardless of whether the sending of email communication is based on consent or legal permission, via a link at the end of each email communication. Alternatively, you can also send your unsubscribe request to us at any time using the contact details provided above. You will not incur any costs other than the transmission costs according to the basic rates of your communications service provider.

The storage period and deletion of your consent-based data are generally governed by the section titled "Duration of data processing and deletion" of this privacy policy. If you unsubscribe from the email communications, the data you provided when registering for the waitlist will be deleted. However, this does not affect data that we have stored for other purposes.

Compliance with legal regulations

We also process your personal data in order to fulfill legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. 

We process your personal data in accordance with Art. 6 (1) sentence 1 lit. c GDPR (legal basis) to fulfill a legal obligation to which we are subject.

Law enforcement

We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the prevention or prosecution of criminal offenses. 

We process your personal data to protect our legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses (legitimate interest).

Consent-based data processing 

If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. 

The legal basis in this case is Art. 6 (1) sentence 1 lit. a GDPR.

Consent that has been granted can be revoked at any time. Please note that the revocation is only effective for the future and processing up to that point is not affected.

Recipients of data

Within our company, access to your data is granted to those departments that need it to fulfill our contractual and legal obligations or to exercise our rights. 

Service providers and vicarious agents employed by us (e.g. technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. 

In some cases, the recipients receive your personal data as processors and are then strictly bound by our instructions when handling your personal data. These processors include the following companies in particular: 

  • Waitlist Form: Marie Martens and Filip Minev,Tally BV, Muidepoort 19A, 9000 Gent, Belgium 

  • Hosting: Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, The Netherlands

Finally, in individual cases we transmit personal data to our consultants in legal or tax matters, whereby these recipients are generally already obliged to maintain special confidentiality and secrecy due to their professional status.

Data transfer to third countries  

If necessary for our purposes, we may also transfer your data to recipients outside the European Economic Area ("Third Countries"). This is particularly the case in the context of contract processing or due to legal regulations. 

We only transfer your data to recipients in Third Countries in accordance with the provisions of Chapter 5 of the GDPR, i.e. if it is ensured that the EU Commission has established an adequate level of data protection within the meaning of Art. 45 (1) GDPR or that appropriate safeguards within the meaning of Art. 46 (2) and (3) GDPR have been implemented or an exception pursuant to Art. 1 GDPR has been established or appropriate safeguards within the meaning of Art. 46 (2) and (3) GDPR have been implemented or an exception pursuant to Article 49 GDPR exists and there are no overriding interests worthy of protection against the transfer of the data. 

We use the EU Commission's standard contractual clauses for the transfer of personal data to third countries (SCC) to ensure an appropriate level of protection for the recipient of the data.

You have the option of accessing the SCC via the link provided or requesting a copy from the data protection officer.

Duration of data processing and deletion

We initially process your personal data for the duration for which the respective processing purpose - see above - requires corresponding processing. 

Insofar as the processing is carried out for the performance of a contract, the processing period also includes the periods of initiation of a contract (pre-contractual legal relationship) and the performance of a contract (including any subsequent claims). 

Insofar as the processing is carried out to safeguard our legitimate interests, the processing period includes the period until the processing purposes pursued are achieved.

If the processing is based on your consent, the processing period covers the period from the time you give your consent until the time you withdraw your consent or until the time the processing covered by the consent is completed. 

In this respect, we would like to point out that even in the event of withdrawal of consent, further processing may be possible on the basis of other legal bases (Art. 17 (1) lit. b) GDPR). 

Even if the primary processing purposes have been achieved, further processing of your personal data may take place, in particular if this is necessary to fulfill a legal obligation and/or to protect our rights. This includes the following purposes in particular:

Fulfillment of statutory retention obligations The retention and documentation periods specified there are up to ten years.

Preservation of evidence, taking into account the statute of limitations. 

Social Media

In addition, we also use various social media services, some of which we have integrated directly on the Website or websites, which we are represented on. Those services might process personal data. Further information on data processing can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy.

We use the following social media: 

Data security

Personal data is protected by us by means of suitable technical and organizational measures in order to ensure an appropriate level of protection and to safeguard your personal rights. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data from unauthorized access by third parties. 

In particular, the Website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the contact requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be intercepted by third parties. 

Nevertheless, we would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is therefore not possible.

Rights of data subjects

Right to information: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right to obtain access to the personal data concerning you and the information pursuant to Art. 15 (1) lit. a-h GDPR. Where personal data concerning you are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer. Subject to the conditions set out in Art. 15 GDPR, you have the right to receive a copy of the personal data concerning you undergoing processing.

Right to rectification: You have the right to obtain from us without undue delay the rectification of personal data concerning you if it is inaccurate. Taking into account the purposes of the processing, you have the right to have incomplete personal data concerning you completed, including by means of providing a supplementary statement.

Right to erasure: You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the grounds listed in Art. 17 GDPR applies, e.g. if the data have been unlawfully processed.

Right to restriction of processing: Subject to the conditions set out in Art. 18 GDPR, you have the right to obtain from us restriction of processing.

Right to data portability: Subject to the conditions set out in Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us. In exercising your right to data portability, you have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible.

Right to withdraw consent: If the data processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If you withdraw your consent, you can also choose, inter alia, the contact channel that you used when giving your consent.

Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Right of objection

Subject to the conditions set out in Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on lit. (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. 

Subject to the conditions set out in Art. 21 GDPR, where personal data concerning you are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR you, on grounds relating to your particular situation, have the right to object to processing of personal data concerning you.

Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to make the Website available to you without restriction or answer your inquiries to us. 

Personal data that we do not necessarily require for the above-mentioned processing purposes is marked accordingly as voluntary information.

Automated decision-making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Validity and amendment of this privacy policy

This privacy policy is currently valid and effective as of June 19, 2025.

Due to the further development of the Website or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. In this case, we will update this privacy policy accordingly on the Website.