Data Protection

Updated 19/10/2021


§ 1. Overview of data protection

1. General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath.

2. Data recording on this website

2.1 Who is the responsible party for the recording of data on this website (i.e. the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party” on this website.

2.2 How do we record your data?

If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (The legal basis is Art. 6 para. 1 sent. 1 lit. f GDPR):

  • IP address
  • date and time of the request
  • time zone difference to Greenwich Mean Time (GMT)
  • content of the request (specific page)
  • access status / HTTP status code
  • amount of data transferred in each case
  • website from which the request came
  • browser
  • operating system and its interface
  • language and version of the browser software

2.3 What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

2.4 What are my general right to objection or revocation against the processing of my data?

If we collect or have collected and process personal data from you (on the basis of Art. 6 para. 1 lit. e or f or Art. 9 para. 2 lit. a GDPR), you have the right at any time (with effect for the future) to object to data processing (including profiling). In exceptional cases, the objection may be ineffective, e.g. if we can prove compelling legitimate interests for processing that outweigh your interests or processing serves to assert, exercise or defend legal claims. If we process your personal data in order to execute direct advertising, you have the right to object to this processing at any time. This also applies to profiling insofar as it is associated with such direct advertising. You also have the right to object to the processing of your data relating to you, which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is for fulfillment of a task in the public interest is required.

§ 2. General information and mandatory information

1. Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

2. "Information about the responsible party" (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

RIS AG (XOAP TM)
Werderstrasse 21
50672
Germany

Phone: +49 221 643083 0
E-mail: info@ris.ag

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

3. Rights as far as your information is concerned

You have the following rights regarding your personal data:

  • right of information
  • right of correction or deletion
  • right of restriction of processing
  • right of object to processing
  • right of data portability

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Please do not hesitate to contact us at any time under the address disclosed in section “Information about the responsible party” on this website if you have questions about this or any other data protection related issues.

§ 3. Recording of data on this website

1. Cookies

We use cookies on this website; These are small text files that are filed or saved on your computer via your Internet browser (e.g. Google Chrome, Safari, Firefox, Edge). Under certain circumstances, this cookie contains a so-called cookie ID - a unique identifier consisting of a character string that enables Internet pages and servers to be assigned to the storing browser. At the same time, we receive information via these cookies that enables us to optimize our website to meet the needs of our visitors. We sometimes only use cookies for the duration of your stay on the website. All cookies on our website contain purely technical information, no personal data. Our offers can be used without cookies (even if they may not be fully functional). Most browsers are set so that they automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

2. Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent. The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your agreement (Art. 6 para. 1 lit. a GDPR) if this has been requested. The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

§ 4. Social Media

1. Usage of Social Media Plug-ins

We currently use the following social media plug-ins: Twitter, Facebook, LinkedIn. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the plug-in provider. You can recognize the provider of the plug-in by the box and the providers initial letter or logo on it. We give you the opportunity to use the button to communicate directly with the provider of the plug-in. Only if you click on the button and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under para. 2.2 "How do we record your data" of this declaration will be transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data will be transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies using the security settings of your browser before clicking on the button.

We have no influence on the data collected and the data processing operations, nor are we aware of the full scope of the data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider saves the data collected about you as a user profile and uses this for advertising, market research and / or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-in is Art. 6 para. 1 sent. 1 lit. f GDPR.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and z. If, for example, if you link the page, the plug-in provider will also save this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but in particular before activating the button, as this allows you to avoid being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. There you will also find further information on your rights in this regard and to set options to protect your privacy.

Addresses of the respective plug-in providers and URL with their data protection information:

§ 5. Analysis tools and advertising

1. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

This analysis tool is used on the basis of Art. 6 sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

§ 6. Newsletter

1. Newsletter Subscription

This website may offer users the ability to subscribe to a newsletter. The form used for this purpose determines what personal data is transmitted.

RIS AG informs its customers and business partners regularly through a newsletter about company news and offers. A confirmation email will be sent to the email address registered by a data subject when signing up for a newsletter following the double opt-in procedure. This confirmation email is used to prove whether the data subject who signed up for the newsletter is the owner of the email address specified during registration.

During the registration for the newsletter, we also store the IP address of the computer system used by the data subject as well as the then-current date and time. The collection of this data is necessary to understand the (possible) misuse of the email address of a data subject at a later date, and it, therefore, serves the aim of the legal protection of the controller.

The personal data collected as part of newsletter registration will only be used to send our newsletter. Also, newsletter subscribers may be informed by email, as long as this is necessary for the operation of the newsletter service. There will be no transfer of personal data collected by the newsletter service to third parties.

The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time. A corresponding link is found in each newsletter. Alternatively, the un-subscription may be communicated to the controller in a different way.

2. Newsletter Tracking

The newsletter of RIS AG may contain so-called tracking pixels. A tracking pixel is a miniature image embedded in such emails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, RIS AG may see if and when an email was opened by a data subject, and which links in the email were clicked by data subjects.

Such personal data collected in the newsletter tracking pixels are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters better to the interests of the data subject. This personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, this personal data will be deleted by the controller. RIS AG automatically regards a withdrawal from the receipt of the newsletter as a revocation.

Contact us

If you have any questions or need some kind of clarification please feel free to contact us. We will be happy to help you!

Call anytime

+49 221 643083-0

Email us

hello@xoap.io