Privacy Policy
This Privacy Policy explains how Online Tools Center (“we”, “our”, or “us”) collects, uses, and protects your information when you visit https://www.onlinetoolscenter.com. We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
Your privacy matters. We collect minimal data, we never sell your personal information to third parties, and we give you full control over your data under GDPR.
1. Data Controller
The data controller responsible for your personal data is:
- Company:
- RNX IT TECHNOLOGIES SRL
- Brand:
- Online Tools Center
- Country:
- Romania, European Union
2. Data We Collect
We collect different categories of data depending on how you use the platform:
2.1 Data you provide to us
When you use the contact form, we collect:
- Name
- Email address
- Message subject and content
2.2 Data collected automatically
When you visit the platform, our servers and third-party services may automatically collect:
- IP address — used for security, rate limiting, and spam prevention
- User agent string — browser and device type, used for compatibility and bot detection
- Pages visited and usage patterns — via analytics (see Section 6)
- Referring URL — the page that linked to us
2.3 Tool ratings
If you rate a calculator tool, we store your IP address and a device identifier to prevent duplicate votes. No account or personal details are required.
2.4 Data we do NOT collect
- We do not require account registration
- We do not store the values you enter into our calculators
- We do not collect payment information
- We do not collect special-category data (health, financial, biometric, etc.) — calculator inputs are processed locally in your browser and are never transmitted to our servers
3. How We Use Your Data
| Purpose | Data used | Example |
|---|---|---|
| Respond to contact enquiries | Name, email, message | Replying to your support request |
| Security & spam prevention | IP address, user agent | Blocking bot submissions, rate limiting contact form |
| Platform analytics | IP (anonymised), pages visited | Understanding which tools are popular |
| Preventing duplicate ratings | IP address, device ID | Ensuring one rating per user per tool |
| Legal compliance | Any data held | Responding to lawful data subject requests |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.
4. Legal Basis for Processing (GDPR)
Under GDPR Article 6, we rely on the following legal bases for processing personal data:
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to contact form submissions | Art. 6(1)(b) — Performance of a contract / pre-contractual steps |
| Security, rate limiting, spam prevention | Art. 6(1)(f) — Legitimate interests (protecting platform integrity) |
| Analytics (anonymised) | Art. 6(1)(f) — Legitimate interests (improving the service) |
| Ratings (preventing duplicates) | Art. 6(1)(f) — Legitimate interests (maintaining fair ratings) |
| Compliance with legal obligations | Art. 6(1)(c) — Legal obligation |
Where we rely on legitimate interests, you have the right to object to that processing (see Section 9).
6. Third-Party Services
We use the following third-party services that may process data on our behalf:
| Service | Purpose | Privacy policy |
|---|---|---|
| Vercel | Hosting & CDN — processes IP addresses and request logs | vercel.com/legal/privacy-policy |
| Neon (PostgreSQL) | Database — stores contact messages and ratings | neon.tech/privacy |
| Google reCAPTCHA v2 | Spam prevention on the contact form — processes IP and browser data | policies.google.com/privacy |
| Vercel Speed Insights | Performance analytics — anonymised, no personal data stored | vercel.com/legal/privacy-policy |
Each provider acts as a data processor under a Data Processing Agreement (DPA) and is contractually obliged to process data only on our instruction and in accordance with GDPR.
We do not sell your data to any third party.
7. Data Retention
| Data category | Retention period |
|---|---|
| Contact form messages | Up to 2 years, or until deletion is requested |
| Rate-limit logs (IP + timestamp) | 24 hours (automatically purged) |
| Tool ratings (IP + device ID) | Indefinitely (to maintain integrity of ratings) |
| Server/access logs | Up to 30 days (managed by Vercel) |
| Admin session tokens | 30 days from last login |
We review retained data periodically and delete it when it is no longer necessary for the purpose for which it was collected.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction:
- All data in transit is encrypted via HTTPS/TLS
- Database connections use SSL encryption
- Admin access is protected by session-based authentication with HTTP-only cookies
- Passwords are stored as bcrypt hashes — never in plain text
- IP-based rate limiting protects against brute-force and spam attacks
- Contact form submissions are protected by Google reCAPTCHA
While we take every precaution, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33.
9. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
Right of access (Art. 15)
Request a copy of the personal data we hold about you.
Right to rectification (Art. 16)
Ask us to correct inaccurate or incomplete data.
Right to erasure / "right to be forgotten" (Art. 17)
Request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing (Art. 18)
Ask us to limit how we use your data in certain circumstances.
Right to data portability (Art. 20)
Receive your data in a structured, machine-readable format and transfer it to another controller.
Right to object (Art. 21)
Object to processing based on legitimate interests or for direct marketing purposes.
Right not to be subject to automated decision-making (Art. 22)
We do not carry out automated decision-making with legal or similarly significant effects.
To exercise any of these rights, contact us at support@onlinetoolscenter.com or via our contact form. We will respond within 30 days.
You also have the right to lodge a complaint with your local supervisory authority. In Romania, this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) (dataprotection.ro).
10. Children's Privacy
Online Tools Center is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately at support@onlinetoolscenter.com and we will take steps to delete it promptly.
Use of the platform by users aged 16 or under must be under the supervision of a parent or legal guardian.
11. International Data Transfers
Some of our third-party service providers (e.g. Vercel, Neon) are based in or may process data in the United States or other countries outside the EEA.
Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with each provider
- providers certified under recognised adequacy frameworks where applicable
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we update this policy, we will revise the “Effective date” at the top of this page. For material changes, we will make reasonable efforts to notify users by posting a prominent notice on the platform.
We encourage you to review this page periodically. Your continued use of the platform after changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
- Company:
- RNX IT TECHNOLOGIES SRL
- Contact form:
- https://www.onlinetoolscenter.com/contact