Privacy Policy Monthly Invoice Support Portal (Digital Platforms)

You can find the privacy policy for the payment method "Monthly Invoice" (the “Privacy Policy Product”) here.

Version 4.1, Valid from: 28.08.2024.

I. Processing of Personal Data

1. Who is responsible for processing my data?

Riverty GmbH, Gütersloher Straße 123, 33415 Verl is responsible for processing your data. You can reach our Data Protection Officer by post at the address listed above with the addition “To the Data Protection Officer" or by email at datenschutz@riverty.de.

2. What data does Riverty process?

When you visit and use this portal including contact by telephone (the “Digital Platforms”), your personal data will be processed if Riverty has a legal permission to do so.

When you use our Digital Platforms, the following data and information are automatically sent to our server (the “Access Data”): your IP address, details about the content you requested and your usage behavior (e.g., which sections (FAQs, contact forms, etc.) you viewed), the content entered by you via the Digital Platform (e.g., search terms, login data, reviews, form inputs, click data), date and time of access, technical information about the device you used, information about the internet browser you used, and the duration of the use of the Digital Platform.

With your login, we process not only the Access Data but also your contact data (e.g., name, address, email address) and data about your purchases, the payment methods you chose (e.g., instalment payments, payment pauses, direct debit), information based on anti-money laundering regulations as well as any optional inputs (e.g., inputs in the chatbot, contact form, review form, identification or signature process, analysis process of your bank account).

3. For what purposes are the data processed?

The purposes of data processing may result from technical, contractual, or legal requirements or, if applicable, from consent.

We use the data mentioned in section 2 for the following purposes:

To provide the Digital Platform, enabling you to register online to use our Digital Platforms.
To process your telephone contact requests, enabling you to process your requests by telephone.
To ensure technical security, particularly to fix technical errors and to ensure unauthorized persons have not accessed our systems.
For contract fulfilment and for providing and executing other services you requested, such as querying your Riverty account information.
To process your contact requests, e.g., via the contact form or chat function.
To analyse and optimize the offer, making the Digital Platforms more efficient and interesting for our users, e.g., through statistical evaluation of Access Data.
To comply with legal regulations (e.g., anti-money laundering laws) and for the adjustment of your risk profile initiated by you.

Further information on the purposes of data processing can be found in Section II. of this privacy policy.

4. What rights do I have?

If you have given consent for the processing of personal data for certain purposes, you can revoke this consent at any time with effect for the future.

You have the right at any time to request information about the personal data stored about you. If data about you is incorrect or no longer current, you have the right to request its correction. You also have the right to request the deletion or restriction of the processing of your data in accordance with Art. 17 or Art. 18 GDPR. Furthermore, you may have a right to receive the data you provided in a commonly used and machine-readable format (right to data portability). In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of your data on grounds relating to your particular situation, which is carried out on the basis of Art. 6 (1) (f) GDPR.

You have the right to lodge a complaint with a supervisory authority, particularly in the country of your residence, your workplace, or the place of the alleged violation, if you believe that the processing of personal data concerning you violates the GDPR.

5. Is there any advertising to existing customers via email?

6. What cookies are used?

No cookies are used

7. Is there an obligation to provide data?

Generally, you are not obligated to provide your data. Only when you conclude a contract, you must provide certain data (e.g., your email address or name). Without this data, we will not be able to conclude or execute the contract with you.

8. Does Riverty share data with third parties?

If we use additional service providers for the operation of the Digital Platform or for the provision and execution of our offers, other than those mentioned in this privacy policy (processors, e.g., data centers, technical service providers), they will only have access to your data to the extent and for the period necessary to provide the respective services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same level of data protection as the European Union. In this case, we ensure that the service providers guarantee an equivalent level of data protection contractually or otherwise. You can request a copy of these guarantees from the contact details mentioned in section 1.

9. How long are the data stored?

We store your data as long as it is necessary to provide the Digital Platforms and the associated services or we have a legitimate interest in further storage, including for the defence of legal claims. Details on cookie-based data storage can be found in the Privacy Center.

In all other cases, we delete your personal data except for such data that we must retain to fulfil legal (e.g., tax or commercial) retention periods (e.g., contracts).

II. Individual Processing Purposes

1. Provision of the Digital Platform

When you use our Digital Platform, we process the Access Data that accrues to technically provide you with the content and functions you have accessed. The legal basis for the associated processing of your Access Data is Art. 6 (1) (b) GDPR.

2. Processing your contact requests and using the chat function

If you use the contact form or contact us by email or phone, we process the data you entered, your email address and/or your phone number, and your request to process your concern. If necessary, your information may also be forwarded to third parties. Depending on the request (e.g., questions about Riverty’s products and services, asserting your data subject rights such as information), your contact data will be processed further (with the help of service providers).

Riverty also offers you the opportunity to contact us via the chat function. The chat communication takes place both automatically through an intelligent bot and through our customer service team, which responds individually to your concerns. The following data is processed: first name and last name of the data subject, email address, phone number, and the entire customer service correspondence.

The legal basis for processing your data is based on Art. 6 (1) (f) GDPR (contact requests) or Art. 6 (1) (a) GDPR (chat function). Riverty's legitimate interests lie in processing your concern and further communication. If your contact aims at concluding a contract, the legal basis for processing your data is Art. 6 (1) (b) GDPR.

3. Telephone communication channel (AI voice assistant)

Riverty GmbH offers you the option of contacting us by telephone using an AI voice assistant.

Communication is performed automatically with the help of artificial intelligence in order to respond to your individual needs. In order to be able to process these calls, their content is stored for a short time. Individual calls can be forwarded to our customer service team for further processing under certain conditions. (especially if you do not agree to the use of the AI voice assistant) The following data is processed: First name and surname of the data subject, e-mail address, telephone number and all communication including customer service correspondence.

If a service provider carries out data processing in third countries (e.g. cloud use) as part of the use of the AI voice assistant, the service provider is contractually obliged to comply with the legal requirements under GDPR.

The legal basis for data processing when using the AI voice assistant is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). You can revoke your consent to processing in the context of the use of the AI voice assistant just described at any time for the future by contacting Riverty GmbH.

Every data subject has the right to information from Riverty GmbH in accordance with art. 15 EU GDPR, the right to correction according to art. 16 EU GDPR, the right to deletion according to art. 17 EU GDPR, the right to the restriction of processing according to art. 18 EU GDPR and the right to data portability according to art. 20 EU GDPR.

In addition, you can contact the supervisory authority in charge of Riverty GmbH.

5. Ensuring technical security

The Access Data accruing during the use of the Digital Platform is temporarily stored in the log data (the “Server Log Files”) of our servers. The storage of the Server Log Files is separate from your other data. Therefore, we cannot directly link the Server Log Files to you. After no later than seven days, the Server Log Files are completely anonymized by shortening the IP address, so that a personal reference is permanently excluded. The aforementioned processing of Access Data is based on Art. 6 (1) (f) GDPR for the necessary ensuring of technical security, particularly to prevent attack and fraud attempts on our servers, as well as to fix errors.