Privacy Policy

With the following privacy policy we would like to inform you which types of your personal data we process for which purposes and in which scope.

Protecting your data is important to us

This Privacy Policy explains how personal data is collected and processed when you visit academy.riester.de, a subdomain operated by Rudolf Riester GmbH. It applies specifically to this website and its learning‑related services. 

1. Data Controller

Rudolf Riester GmbH
Bruckstrasse 31
72417 Jungingen
Germany
Fax: +49 7477 9270 70

Authorised Representatives:
Davide Nocentini, President and CEO
E-mail address: info@riester.de
Phone: +49 7477 9270 0
Imprint: https://academy.riester.de/imprint

Responsible party for journalistic editorial contributions in accordance with § 18 section 2 of the State Media Treaty (MstV):

Responsible for content: Davide Nocentini, Address as above

External data protection officer in accordance with article 37 of the GDPR in conjunction with section 38(1) of the revised Federal Data Protection Act

Safia Rapp

Am Mahlensteig 14

72574 Bad Urach

safiarapp@datenschutzexpertin.de

 

 This policy applies to academy.riester.de, a subdomain operated by Rudolf Riester GmbH. 

2. Scope of This Policy 

This privacy policy explains how personal data is collected and processed when users:

  • Visit academy.riester.de
  • Access learning content
  • Register for courses or events
  • Subscribe to newsletters
  • Submit forms hosted on HubSpot

Other Riester websites may have separate policies.

3. Data We Collect 
3.1. Automatically Collected Data 

Collected via HubSpot and other analytics tools:

  • IP address
  • Browser and device information
  • Pages visited
  • Time spent on pages
  • Referrer URLs
  • Cookie identifiers

3.2. Data Provided Through Forms

Depending on the form:

  • Name (First Name, Last Name)
  • Company name
  • Email address
  • Country
  • Course or event preferences
  • Any information voluntarily submitted

3.3. Email Interaction Data

If users subscribe to Academy updates:

  • Email opens
  • Link clicks
  • Subscription preferences

3.4. Cookies

HubSpot sets:

  • Essential cookies
  • Analytics cookies
  • Marketing cookies

Additional cookies may be set by embedded services (YouTube, LinkedIn or Google Analytics).

4. Legal Basis for Processing 

In the following, you will find an overview of the legal basis of the GDPR on which we base the processing of personal data. Please note that in addition to the provisions of the GDPR, national data protection provisions of your or our country of residence or domicile may apply. If, in addition, more specific legal bases are applicable in individual cases, we will inform you of these in the data protection declaration.

  • Consent (Article 6 (1) (a) GDPR) - The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

  • Performance of a contract and prior requests (Article 6 (1) (b) GDPR) - Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  • Legitimate Interests (Article 6 (1) (f) GDPR) -Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

  • Balance of interests (Art. 6 para. 1b GDPR) - Furthermore, data processing occurs for the protection of legitimate interests of this company or third parties for specific purposes after prior balancing of interests, e.g to secure the domiciliary right, protection of legal claims, investigation of criminal offences, determination of default risks, optimised product development, optimised customer approach for advertising purposes such as telephone contact to other companies, postal delivery of promotional information (e.g. invitation to functions and events, presentation of new products and services), optimised requirement planning, or to ensure data security.

In addition to the data protection regulations of the General Data Protection Regulation, national regulations apply to data protection in Germany. This includes in particular the Law on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special provisions on the right to access, the right to erase, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated individual decision-making, including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (§ 26 BDSG), in particular with regard to the establishment, execution or termination of employment relationships as well as the consent of employees. Furthermore, data protection laws of the individual federal states may apply.

5. Use of HubSpot

academy.riester.de is hosted on HubSpot CMS, which also provides: 

HubSpot provides:

  • Website hosting
  • CRM and contact management 
  • Form processing
  • Email marketing
  • Analytics
  • Content management

HubSpot acts as a data processor under a Data Processing Agreement (DPA). Data may be transferred to the USA under the EU–US Data Privacy Framework or Standard Contractual Clauses. 

6. Third‑Party Tools

Depending on the content used on the Academy website, third‑party services may include: 

  • Google Analytics
  • YouTube embeds
  • LinkedIn Insight Tag
  • Cookie consent tool

These services may set their own cookies or process usage data. 

 7. Data Retention 

We retain personal data only as long as necessary for:

  • providing Academy services
  • managing subscriptions
  • fulfilling legal obligations
  • analytics and security purposes

You may request deletion at any time.

 8. Your Rights Under GDPR 

You have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion
  • withdraw consent
  • object to processing
  • request data portability
9. Security

We use technical and organizational measures to protect personal data, including:

  • SSL encryption
  • secure hosting infrastructure
  • access controls

HubSpot provides additional security features as part of its platform.

10. Updates to This Policy

We may update this Privacy Policy when:

  • new tools or services are added
  • HubSpot features change
  • legal requirements change

The latest version will always be available on this page.