Privacy policy

The operators of these pages take the protection of your personal data seriously. Personal data is processed only to the extent necessary to operate the website, process your request or prepare a commissioned service.

Controller

RIS Web- & Software-Development GmbH & Co. KG, Siemensstraße 9, 93055 Regensburg, Germany. Contact: kontakt@ris.dev.

Hosting and server log files

When the website is accessed, the server processes technically required access data, in particular IP address, time of access, requested URL, referrer, browser and operating-system information and transferred data volume. This data is used for secure delivery, error analysis and prevention of misuse. It is not combined with other data sources without a specific reason.

Contact forms, system check, emergency support and action plan

If you use a form, RIS processes the information you enter, such as name, company, email address, telephone number, message, reason for request, affected systems, score/risk classification and technical context data such as landing page, referrer and voluntarily transmitted campaign parameters. Processing is used to handle your request, prioritise urgent matters and prepare a suitable next step.

For the system check or action plan, a PDF containing score, risk assessment, priorities and recommended actions may be generated from your information. The PDF is stored for processing your request and, where technically available, attached to the request in the support system.

Form processing, temporary storage and failure protection

Forms are processed via a server-side lead endpoint. To prevent data loss, a local queue or database may be used. Request content, processing status, technical error information and an internal lead ID are stored there. Logs are kept without personal content as far as possible.

Processing your request

Your request may be recorded in an internal processing system for structured handling. Only the form and context data required for processing is transmitted. If automated processing is temporarily unavailable, RIS may use a direct fallback channel for processing.

Cookies, Cookiebot and Consent Mode

The website uses a consent solution to manage optional services. Tracking and marketing services are used only where they are technically configured and your consent allows them. Consent Mode is technically configured and set restrictively by default.

Google reCAPTCHA / bot protection

Google reCAPTCHA is technically prepared to protect the lead forms against automated misuse. Google may process technical information such as IP address, browser data, referrer, user interactions and the verification result. reCAPTCHA is used only when the required keys, domains and server-side settings are correctly configured.

The secret key is processed exclusively on the server side and is not delivered to the frontend.

Google, Microsoft, Clarity and Ads

Google Tag Manager, Google Analytics, Google Ads, Microsoft Ads UET and Microsoft Clarity are technically prepared for later live operation, but are not active without approval. Production activation will take place only with documented approval, suitable IDs and consent configuration.

Legal bases

The processing of contact and request data is carried out, depending on the context, for the performance of pre-contractual measures or to safeguard legitimate interests in processing and securing requests. Optional analytics and marketing services are activated only on the basis of consent.

Retention period

Request data is stored for as long as necessary for processing, follow-up, evidence and statutory retention obligations. Data that is no longer required is deleted or anonymised.

Your rights

Within the scope of the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may contact RIS at any time using the contact details stated in the legal notice.

Security

RIS uses technical and organisational measures to protect transmitted data against loss, misuse and unauthorised access. Completely risk-free data transmission over the internet cannot nevertheless be guaranteed.