Privacy Policy

We welcome your visit to rinasc.ai. The protection of your personal data is important to us. In this privacy policy, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of personal data when visiting and using this website.

1. Controller

For questions about data protection and to exercise your data subject rights, please contact us at the e-mail address above.

2. What we collect and why

We process personal data exclusively for the purposes set out below and on the basis of the legal grounds specified in each case:

2.1 Provision of the website (server logs)

Each time our website is accessed, our hosting provider records technical data that your browser automatically transmits:

• IP address (anonymized / shortened)
• Date and time of access
• Browser type and version, operating system
• Referrer URL (previously visited page)
• Requested URL and HTTP status code

Purpose: Provision of the website, ensuring stability and security, defense against attacks.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).
Storage period: Maximum 30 days in server logs, then automatic deletion.

2.2 Contact and Diagnostic forms

When you use our contact form or 10-day Diagnostic form, we process the data you enter (name, company, e-mail address, position, message) to respond to your inquiry and, where applicable, to initiate a business relationship.

Purpose: Processing your inquiry, initiating a consulting engagement.
Legal basis: Art. 6 (1) (b) GDPR (contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in business initiation).
Storage period: Until completion of the requested process or as long as a concrete business initiation context exists. Inquiries without follow-up contact are deleted no later than 12 months after submission. Upon contract conclusion, statutory retention periods (typically 6 to 10 years) apply.

3. Service providers and data transfers

We use the following service providers to operate the website. With all providers, data processing agreements pursuant to Art. 28 GDPR are in place. For transfers to third countries (in particular the USA), the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.

3.1 Vercel — Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, your IP address is transmitted to Vercel for technical reasons.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating the website).
Privacy policy: vercel.com/legal/privacy-policy

3.2 HubSpot — Lead management (only on form submission)

When you complete and submit our contact or Diagnostic form, the form data is transmitted to HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA, and stored in our CRM. The data transmission is performed exclusively server-side (from our website infrastructure to HubSpot). HubSpot does not place any cookies or tracking scripts on our website.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).
Privacy policy: legal.hubspot.com/privacy-policy

3.3 Fonts

We use fonts (Cormorant Garamond, Inter, IBM Plex Mono, JetBrains Mono) that we serve directly from our own servers (self-hosting). No connection to third-party servers — in particular not to Google Fonts — is established. Your IP address is not transmitted to external providers when fonts are loaded.

4. Cookies and similar technologies

This website uses strictly necessary cookies only, which are required for the proper operation of the website. We do not use any tracking, marketing, analytics or personalization cookies.

Legal basis for strictly necessary cookies: § 25 (2) (2) TTDSG (German Telecommunications-Telemedia Data Protection Act — strictly necessary for the telemedia service expressly requested by the user).

You can delete cookies in your browser at any time or restrict their use. However, completely disabling all cookies may result in certain features of the website being unavailable or only available in a limited form.

5. Your rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — you have the right to obtain confirmation as to whether or not personal data are being processed.
• Right to rectification (Art. 16 GDPR) — you have the right to have inaccurate data rectified or incomplete data completed.
• Right to erasure (Art. 17 GDPR) — you have the right to request the deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR) — you have the right to object to the processing of your data where this is based on legitimate interests.
• Right to withdraw consent (Art. 7 (3) GDPR).

To exercise your rights, an informal notification to hello@biwrx.com is sufficient.

6. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint about the processing of your personal data with a data protection supervisory authority. The competent authority for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
www.ldi.nrw.de

7. Security of data processing

We take appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss or manipulation. In particular, the data transmission between your browser and our server is secured by TLS encryption (HTTPS).

8. Obligation to provide data

You are not obligated to provide us with your data. The provision of data is neither legally nor contractually required. However, without the transmission of the respective necessary data, the use of certain services (e.g. contact form) is not possible.

9. No automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place on this website.

10. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.