Privacy Notice OpRisk Quick Check

This privacy policy is intended to provide you with an overview of how we process the personal data you provide when registering and when completing the form.

I. Controller and Data Protection Officer

The controller within the meaning of the GDPR for the processing of personal data submitted by registration and via the form is:

The data protection office of the controller is:

II. General information on data processing

Description and scope of data processing

We process the information you provide when registering and completing the form solely for the following purposes:

• Calculation and provision of the maturity level with regard to risk management
• Provision of customised offers of our services

Legal basis for the processing of personal data

The personal data provided via the form are processed for the calculation and provision of the Maturity Level on the basis of the so-called legitimate interest pursuant to Article 6 (1) lit. f GDPR. A legitimate interest exists if we have a business or commercial reason to use your data and your fundamental rights and freedoms do not override this.

You have the right to object to this processing at any time with effect for the future. Please contact [email protected] for this purpose.

The provision of customised service offers to you is based on the consent given by you via the so-called double opt-in procedure in accordance with Article 6 (1) lit. a GDPR.

Your consent can be withdrawn at any time with effect for the future. To do so, please use the unsubscribe link in the offer e-mails or contact [email protected].

Duration of storage

We store your personal data as long as we provide you with offers for our services or you have withdrawn your consent. Provided that the law does not stipulate any further retention periods, we will only store your personal data for as long as is necessary or you have objected to future processing.

III. Your legal rights

In summary, you have the following rights:

• The right of access under Article 15 of the GDPR
• The right to rectification of your personal data pursuant to Article 16 of the GDPR
• The right to erasure according to Article 17 GDPR
• The right to object to the processing of your personal data.
• The right to withdraw consent given by you
• The right to request the restriction of the processing of your personal data.
• The right to request the transfer of your personal data to you or a third party.
• The right to complain to a supervisory authority.