Legal

Privacy notice

This English version is provided for convenience only. The German version is legally binding.

This privacy notice explains which personal data we process when you visit integrityscope.com or contact us, for what purposes, on which legal basis and for how long. Terms such as “personal data” and “processing” are used as defined in Art. 4 of the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

RANOVIS UG (haftungsbeschränkt)
represented by its managing director Ralph Nohe
Am Kriegerdenkmal 9 b
90427 Nürnberg (Nuremberg)
Germany
Phone: +49 911 2525 7599
E-mail: info@ranovis.com

For matters concerning integritySCOPE and data protection you can also reach us at info@integrityscope.com.

2. General information and legal bases

We process personal data only where this is necessary to operate this website, to handle your enquiry or to meet legal obligations, or where you have given your consent. We do not sell data and we do not use third-party advertising or tracking services.

Depending on the processing, we rely on the following legal bases:

Art. 6(1)(a) GDPR – your consent (e.g. newsletter);
Art. 6(1)(b) GDPR – performance of a contract and pre-contractual steps (e.g. handling your enquiry and preparing a proposal);
Art. 6(1)(c) GDPR – legal obligations (e.g. retention duties under commercial and tax law);
Art. 6(1)(f) GDPR – legitimate interests (e.g. secure operation of the website, audience measurement, recognition of visitor organisations). Where we rely on legitimate interests, you have the right to object under Art. 21 GDPR.

3. Hosting

This website and its database run on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. Hetzner processes data solely on our behalf; we have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of the website. For further information, see Hetzner’s privacy policy (opens in a new tab).

4. Server log files

When you access this website, the web server (OpenLiteSpeed) processes the following data for technical reasons and stores it in log files: IP address, date and time of access, requested address (URL), HTTP status code, amount of data transferred, referrer URL and browser and operating-system identifier (user agent).

The log files are used exclusively to ensure the security and stability of operations, for example to prevent and investigate attacks. They are deleted after no more than 14 days unless a specific security incident requires longer retention as evidence. They are not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure operation of the website.

5. SSL/TLS encryption

For security reasons this website uses encrypted connections only (HTTPS with TLS). You can recognise this by “https://” in the address bar and the padlock symbol in your browser. Data you send to us – for example via the enquiry form – therefore cannot be read by third parties in transit.

6. Enquiry and contact form, e-mail

When you contact us via the enquiry form, we process the data you enter in order to answer your enquiry, agree the scope of an analysis with you and send you a proposal:

Contact details: name, e-mail address, company, job title and, optionally, your phone number;
Scope details: selected countries and regions, sectors, modules and focus areas;
Project details: occasion, timeframe, company size and your free-text message;
Language version, the page from which the enquiry was sent, and the time of the enquiry and of your acknowledgement of this privacy notice.

Process and recipients

Your enquiry is stored in our database on the server in Germany. We receive a notification by e-mail and you receive a confirmation of receipt at the address you provided. We use Mailjet to send these e-mails and to manage your contact details (see section 7). Only the people at our company who handle your enquiry have access.

To prevent abuse, we use a hidden form field, a timing check and a limit on the number of requests per time window. For this limit, your IP address is used briefly in the server’s memory as a counter key; it is not stored. We do not use third-party services such as CAPTCHAs.

If you write to us directly by e-mail, we process the information in your e-mail for the same purposes.

Legal basis and retention

The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at a proposal or contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries and preventing misuse.

We delete your enquiry data 24 months after our last contact if no contract is concluded. If a contract is concluded or statutory retention obligations apply (in particular under German commercial and tax law, generally six or ten years), we retain the relevant records for the duration of those obligations (Art. 6(1)(c) GDPR).

7. E-mail delivery and contact management via Mailjet

To send e-mails (notification of your enquiry, confirmation of receipt, confirmation e-mail and newsletter delivery) and to manage contacts, we use the Mailjet service of Mailjet SAS, Paris, France (Sinch group). Mailjet processes the data on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.

When you send an enquiry, we create a contact for you in Mailjet and store your contact details and the key data of the requested scope (countries, sectors, modules, focus areas, occasion). This contact is not subscribed to the newsletter and receives no marketing e-mails unless you separately request and confirm the newsletter.

Mailjet is a company established in the EU. Where Mailjet uses sub-processors that process data outside the EU/EEA, according to Mailjet such transfers are safeguarded by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR (legitimate interest in reliable delivery and orderly contact management); for the newsletter, your consent (section 8). The data is deleted together with your enquiry data (section 6).

9. Audience measurement with Umami (no cookies)

For statistical analysis of how the site is used, we use the open-source software Umami, which we run ourselves on our own server. The script and the measurement data are transferred exclusively via our own domain; there is no connection to third parties and the data does not leave our server.

Umami sets no cookies, does not track you across devices or websites and does not create user profiles. It records aggregated information such as the page viewed, referring website, browser, operating system, device type, screen size, language and the country derived from the IP address. To our knowledge the IP address itself is not stored; Umami derives a regularly rotating, anonymised session identifier from characteristics of the request that does not allow conclusions about your identity.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is understanding and improving how our website is used. Because no information is stored on or read from your device, no consent under § 25 TDDDG is required. You may object to this processing at any time under Art. 21 GDPR.

10. Recognition of visitor organisations

We want to know which companies and organisations are interested in our services. To do so, we determine from the network connection of a page view which network operator or organisation the network used belongs to. The aim is a statement such as “a visit from the network of Example Corp.” – not the identification of individuals.

How recognition works

After a page has loaded, your browser sends a short message to our own server containing only the page path (without parameters), the page language and – on the first page view only – the host name of a referring external website. No message is sent if your browser transmits “Do Not Track” or “Global Privacy Control”.
Your IP address is processed only transiently in memory to determine the network range it belongs to. The IP address is never stored – neither in full nor shortened.
We shorten the IP address to its network block (/24 for IPv4, /48 for IPv6) and determine the network operator using a local copy of the public IP-to-ASN table (iptoasn.com). Using the public IANA bootstrap list, we then query the regional internet registry responsible for that network (RIPE NCC, ARIN, APNIC, LACNIC or AFRINIC) directly via RDAP for the registered holder; this query contains only the network address of the block, not your IP address, and no intermediary service is involved. In addition, our server performs a reverse DNS lookup; this necessarily transmits your full IP address as a short-lived query to the DNS resolver used by our hosting provider. Nothing from it is stored except, for companies, the domain.
So that not every page view triggers new lookups, we store the result for up to 30 days under a cryptographic key value (HMAC with a secret key) of the network range. The network range itself is not stored.
Connections of consumer internet and mobile providers as well as hosting and cloud providers are labelled as such; they are not attributed to any individual or household.

Data stored and retention

For each page view we store: name and domain of the identified organisation, number and name of the autonomous system (ASN), country of the network range, type of network (business, access provider, hosting, unknown), page path, language version, host name of the referring website, time and a flag indicating whether the access is probably automated (bot). No IP address, no network prefix, no browser identifier, no cookies.

This data is deleted automatically after 12 months. We do not combine it with other data to identify individuals and we do not pass it on to third parties. If you send an enquiry, we do not link it to the visit data.

Legal basis and balancing of interests

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in business-to-business sales and market development: we want to understand which sectors and organisations take notice of our services. Your interests are protected because no IP addresses are stored, only organisation-level network information is kept, no profiles of individuals are created, no information is stored on or read from your device, and the data is deleted after 12 months.

Your right to object

You may object to this processing at any time under Art. 21(1) GDPR on grounds relating to your particular situation. Send your objection informally to info@integrityscope.com or by post to RANOVIS UG (haftungsbeschränkt), Am Kriegerdenkmal 9 b, 90427 Nürnberg, Germany.

Because we do not store IP addresses, we cannot attribute individual visits to a person after the fact. Please therefore tell us the organisation or domain the objection should apply to. We will delete the corresponding entries and exclude the organisation from further recording.

11. Appointment booking via Calendly (external link)

To book an information session, we link to the scheduling service Calendly. Calendly is not embedded in our website; no data is transferred to Calendly when you visit our pages. Only when you click the link does Calendly’s website open in a new tab, and Calendly then processes the data you enter there as well as connection data.

The provider is Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. According to its own information, Calendly is certified under the EU-U.S. Data Privacy Framework, on the basis of which transfers to the USA are permitted under Art. 45 GDPR. For details, see Calendly’s privacy notice (opens in a new tab).

The legal basis for booking an appointment is Art. 6(1)(b) GDPR (pre-contractual steps at your request). If you prefer not to use Calendly, you can always reach us by e-mail or via the enquiry form.

12. Cookies and staff login

This website sets no cookies for visitors.

An internal, non-public administration area is accessible to our staff only. Login uses a one-time link sent by e-mail (magic link). After login, a technically necessary session cookie is set (§ 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR, legitimate interest in secure administration). We use no other cookies.

13. Fonts and no third-party embeds

All fonts, scripts and graphics are delivered from our own server. We do not embed Google Fonts, content delivery networks, social-media plugins, map or video services or advertising networks. When you open our pages, your browser therefore does not connect to third-party servers.

14. Your rights

With regard to your personal data, you have the following rights against us:

access to the data processed (Art. 15 GDPR);
rectification of inaccurate data (Art. 16 GDPR);
erasure (Art. 17 GDPR);
restriction of processing (Art. 18 GDPR);
data portability (Art. 20 GDPR);
objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR);
withdrawal of consent with effect for the future (Art. 7(3) GDPR).

How to exercise your rights

An informal message to info@integrityscope.com or to the address given in section 1 is sufficient.

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de (opens in a new tab)

16. No automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

17. Changes to this privacy notice

We update this privacy notice when the website, our processing activities or the legal situation change. The version published here applies.

Last updated: October 2026