Legal
Privacy Policy
1. Privacy at a glance
The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data collection on this website
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information about the responsible party” in this privacy policy.
Your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page access).
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
2. Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).
Website hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
This privacy policy applies exclusively to the website rinqo.de. The use of the rinqo platform (app.rinqo.de), including the AI agents operated there, is governed by a separate privacy policy available within the platform.
We have concluded a data processing agreement per Art. 28 GDPR with our hosting provider.
All service providers used to operate this website process personal data exclusively within the European Union.
Server log files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us: browser type and browser version, operating system used, referrer URL, time of the server request and IP address. This data is not merged with other data sources.
Collection is based on Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in the technically error-free provision and the security of the website. The log data is deleted as soon as it is no longer required for these purposes.
3. General information and mandatory disclosures
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
Responsible for data processing on this website: Sven Pflüger, Schusterstraße 40, 79098 Freiburg im Breisgau. Email: hello@rinqo.de.
Storage duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.
Legal basis for data processing
Insofar as you have consented to data processing, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR. Consent can be revoked at any time.
Revocation of your consent
Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The legality of the processing carried out until the revocation remains unaffected.
Right to object
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation.
Right to lodge a complaint
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The supervisory authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de). The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, correction, deletion
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin, recipients and the purpose of data processing, and if applicable, a right to correction or deletion of this data.
SSL/TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
Contact form and email delivery
When you contact us via the contact form on our website, the data you provide (name, email address, company if applicable, and message) will be processed to handle your inquiry.
For sending contact form messages, we use the email service Brevo provided by Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France. Registered office and data processing are located in the European Union.
The provider processes your data on our behalf on servers within the European Union. A data processing agreement per Art. 28 GDPR is in place.
The legal basis for processing is Art. 6 para. 1 lit. b GDPR (processing your inquiry) or Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient handling of inquiries). Your data will be deleted once your inquiry has been dealt with and no business relationship is established, at the latest after six months; statutory retention obligations remain unaffected.
Newsletter
If you would like to receive the newsletter offered on this website, all we need from you is an email address. Registration uses a double opt-in procedure: you receive a confirmation email and are only added to the mailing list after clicking the confirmation link.
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time, for example via the unsubscribe link in every newsletter email; the legality of the processing carried out until the revocation remains unaffected.
For sending the newsletter, we use the provider named in the “Contact form” section. To prove your consent, we store the date and IP address of your signup and your confirmation; the legal basis is our accountability obligation (Art. 5 para. 2, Art. 7 para. 1 GDPR). After you unsubscribe, your address is blocked for sending and removed from the mailing list. It remains stored on a suppression list so you are not accidentally contacted again; we do not use it for any other purpose. On request, we delete it completely.
Audience measurement (Plausible, self-hosted)
This website measures its audience with Plausible Analytics, an open-source analytics tool. We run Plausible ourselves, on our own server in Germany. No analytics provider is involved, and no data is passed on to third parties.
The measurement runs entirely on our server: no analytics script is executed in your browser, and no information is read from your device — no cookies, no screen dimensions, no other device characteristics. We process only what your browser transmits with every page request anyway; the IP address is used transiently to derive a daily-changing, non-reversible identifier and is not stored. No cross-device or cross-site tracking takes place.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the statistical analysis of website usage without accessing end devices). The analysis takes place exclusively on our own server; the only processor involved is our hosting provider (see section 2).
AI interaction notice (EU AI Act, Art. 50)
rinqo operates AI agents for phone, chat and email. Under Article 50 of Regulation (EU) 2024/1689 on artificial intelligence (the “EU AI Act”, fully applicable from 02 August 2026), providers must inform natural persons at the start of an interaction that they are interacting with an AI system.
Our agents identify themselves as AI to end customers at the start of every interaction. Synthetic voice output is disclosed as AI-generated. Escalation to a human is available at any time.
Further information on the model architecture, the service categories we use and the training-data exclusion is available on the AI transparency page. The named provider list is available to registered customers in the dashboard.
Live demo of the AI agents on this website
On this website you can try our AI agents directly. Your input is transmitted to our platform at app.rinqo.de and processed there; a conversation record is created. If you provide contact details, such as an email address or a company name, these may be stored as a prospect record. The controller is the same entity as for this website.
The legal basis is Art. 6(1)(b) GDPR: you start the conversation yourself, and the processing serves pre-contractual measures at your request. No consent is required for this and none is obtained. We delete the conversation records once their purpose has been fulfilled. The agent identifies itself as an AI system at the start of every interaction (see the section on AI labelling).
To run the conversation, your browser creates a session and a visitor identifier. Both are held in sessionStorage and are deleted as soon as you close the tab. They are strictly necessary for the service you requested within the meaning of Section 25(2)(2) TDDDG (German Telecommunications Digital Services Data Protection Act); no consent is required. No cross-device or cross-site recognition takes place.
Cookies and tracking (TDDDG)
The German Telecommunications and Digital Services Data Protection Act (TDDDG, in force since 14 May 2024) regulates the protection of privacy when using digital end devices. Under § 25 TDDDG, storing or reading information on your device (e.g. cookies) generally requires consent, except for storage that is strictly technically necessary.
This website does not use any cookies, pixels or comparable trackers requiring consent. Audience measurement is carried out without cookies and without accessing your device (see the “Audience measurement” section). A consent banner is therefore not required.
Should we use services requiring consent in the future, we will obtain your consent beforehand via a consent management tool and update this privacy policy accordingly.
Objection to advertising emails
The use of contact data published as part of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to.
Source: e-recht24.de