Privacy Policy

Privacy Policy

River Rock
Owner and Data Controller


Types of Data Collected

River Rock does not provide a list of Personal Data types collected.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using the River Rock Platform.

Unless specified otherwise, all Data requested by the River Rock Platform is mandatory and failure to provide this Data may make it impossible for River Rock to provide its services. In cases where River Rock specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or functionality of the Service.

Users who are uncertain about which Personal Data is mandatory are encouraged to contact River Rock.

Any use of Cookies – or of other tracking tools – by River Rock or by third-party services used by River Rock serves the purpose of providing the Service required by the User, in addition to other purposes described in this document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published, or shared through River Rock and confirm that they have the third party’s consent to provide the Data to River Rock.


Mode and Place of Processing the Data

Methods of Processing

River Rock takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data.

Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the stated purposes. In addition to River Rock staff, the Data may be accessible to external parties (such as third-party service providers, mail carriers, hosting providers, IT companies, and communication agencies) appointed as Data Processors by River Rock. An updated list of these parties may be requested from River Rock at any time.

Legal Basis of Processing

River Rock may process Personal Data relating to Users if one of the following applies:

  • Users have given their consent for one or more specific purposes;

  • Provision of Data is necessary for the performance of an agreement with the User;

  • Processing is necessary for compliance with a legal obligation;

  • Processing relates to a task carried out in the public interest or in the exercise of official authority;

  • Processing is necessary for the legitimate interests pursued by River Rock or a third party.

River Rock will gladly help clarify the specific legal basis applicable to processing.


Place of Processing

Data is processed at River Rock’s operating offices and other places where processing parties are located.

Depending on the User’s location, data transfers may involve transferring Personal Data to a country other than their own. To learn more about these locations, Users should check the relevant sections or contact River Rock.


Retention Time

Personal Data is retained as long as required for the purpose it was collected for.

Specifically:

  • Data collected for contract performance is retained until that contract is fulfilled.

  • Data collected for legitimate interests is retained as long as necessary to fulfill those purposes.

  • River Rock may retain Data longer if consent has been given and not withdrawn, or if required by legal obligation or authority.

After expiration of the retention period, Personal Data will be deleted, and associated rights (e.g., access, erasure, rectification, portability) can no longer be exercised.


The Rights of Users

Users may exercise the following rights regarding their Data processed by River Rock:

  • Withdraw consent at any time.

  • Object to processing on grounds other than consent.

  • Access their Data.

  • Verify and seek rectification of inaccurate Data.

  • Restrict processing under certain circumstances.

  • Have their Data deleted where applicable.

  • Receive and transfer their Data to another controller (where feasible).

  • Lodge a complaint with a data protection authority.


Right to Object to Processing

Where Personal Data is processed for public interest or legitimate interest purposes, Users may object by providing a justification related to their situation.

Users can object to direct marketing at any time without justification.


How to Exercise These Rights

Users can direct any rights-related requests to River Rock using the contact details provided. These requests are free of charge and will be handled within one month.


Additional Information About Data Collection and Processing

Legal Action

User Data may be used by River Rock for legal purposes in court or in legal stages arising from improper use of the River Rock Platform.

Users acknowledge that River Rock may be required to disclose personal data to public authorities.

Additional Information

Further details on Personal Data collection may be provided upon request.

System Logs and Maintenance

For maintenance and operational purposes, River Rock and third-party services may collect system logs or use Personal Data (such as IP addresses).


Information Not Contained in This Policy

More information regarding Personal Data may be requested from River Rock using the contact information provided.


How “Do Not Track” Requests Are Handled

The River Rock Platform does not support “Do Not Track” requests.

Users should consult third-party privacy policies to determine if those services honor “Do Not Track.”


Changes to This Privacy Policy

River Rock reserves the right to update this policy at any time by notifying Users via this page, within the River Rock Platform, or using available contact details.

Users are encouraged to review this page frequently, referencing the date of last modification.

If changes affect processing based on consent, River Rock will request renewed consent if required.

Top