How we process information about you when you visit the website, contact us, or are a customer, supplier or business partner. If you are a debtor in a debt-collection case, the other policy is the one to read — it sits right beside this one.
We are the data controller for the processing of the personal data this policy is about. Our details:
When we write "we", "us" and "our", we mean Rieck Inkasso. When we write "the website", we mean rieckflow.com. When we write "you", we mean you as a visitor, client, supplier or business partner.
The policy applies when you visit the website, contact us, create an account, or when you are a client, supplier or business partner of ours.
If, on the other hand, you are a debtor in a debt collection case, this is not the text you should be reading. The processing of information about debtors is set out in the privacy policy for debt collection — it has its own page, and it is written for you.
The website, our emails and our social media profiles may contain links to other organisations and websites. This policy does not govern how they process your data. Read their own policies when you visit them.
If you are a client, supplier or business partner, we process your contact details in order to administer the contractual relationship. These are B2B details: name, email, telephone number, job title and the organisation you work for.
The legal basis is Article 6(1)(b) of the GDPR — processing necessary for the performance of a contract, including the correspondence preceding the contract that takes place at your request.
If you are a client using the portal, we also process the information that access requires: email, name, IP address, company data and bank details, together with information about your own customers. Without it we cannot deliver the service.
The information is retained for up to 3 years after the agreement ends, cf. the general limitation period in § 3 of Forældelsesloven (the Danish Limitation Act) — unless other legislation requires us to retain it for longer.
We process information about your use of the website in order to compile statistics, understand how the site is used and make it better. This is ordinary personal data: IP address, browser type and version, operating system, which pages you visit, when you visit them, how long you spend on each page, and where you came from.
We process no sensitive data for this purpose.
The legal basis is your consent, cf. Article 6(1)(a), and the legitimate interests balancing rule in Article 6(1)(f). The information is collected directly from you and via cookies and similar technologies. You can withdraw your consent at any time.
We process information in order to analyse the use of our products, develop new features, understand trends and run and grow the business. This covers your contact details, the organisation you work for, and how you use the portal.
The legal basis is your consent, cf. Article 6(1)(a), and the legitimate interests balancing rule in Article 6(1)(f). The information is retained for up to 3 years from collection.
When you create an account with us, you also consent to us sending you marketing by email under Markedsføringsloven (the Danish Marketing Practices Act). The consent can be withdrawn at any time.
Every marketing email contains an unsubscribe link. You can also write to us and ask to be unsubscribed — and we will do it.
We process information in order to comply with the law and to be able to answer claims and requests from public authorities — including the requirements that follow from the rules for authorised debt collection agencies, the Danish anti-money laundering legislation (hvidvaskloven) and Bogføringsloven (the Danish Bookkeeping Act).
This covers your contact details, information about the organisation you work for, your use of our services, and whatever information the specific obligation requires. The information is retained for as long as the legislation requires.
We apply technical, organisational and administrative measures to protect your information. The internet is not, however, a completely secure environment, and emails are not necessarily encrypted in transit. Please therefore do not send confidential or sensitive information to us in an ordinary email — call us instead.
We use suppliers (data processors) to run the website and the portal. When we do, we have a data processing agreement in place setting out how they may process information on our behalf, and we impose requirements on their security.
We do not disclose your information to third parties for their own purposes. If RieckFlow becomes involved in a merger, an acquisition, a restructuring or a bankruptcy, the information may, however, pass on as part of the transaction.
Where personal data is transferred to countries outside the EU/EEA — for example because a supplier is located there — it takes place on the basis of the European Commission’s standard contractual clauses (SCC), binding corporate rules or another valid transfer mechanism. You can always ask for a copy of the mechanism relied on.
The police and other authorities may request access to information held by us. We assess each request under fixed internal procedures and disclose only information that is strictly required by law, and only on the basis of a valid court order or an equivalent document.
Conditions and limitations may attach to the rights, so you will not necessarily be entitled to, say, data portability in the individual case. If you are in doubt, ask us. The law gives us one month to reply; we aim to reply sooner.
If you wish to complain about our processing of your information, please contact us first. If we cannot help you, you can complain to Datatilsynet:
Our website and services are not directed at children. You must be over 18 to use them.
We change the policy when our practices or the legislation change. Material changes are announced on the website, and if you are registered as a user, you will be notified at the email address you signed up with.
The policy was last updated on 12 July 2026.
Access, rectification, erasure or an export of your data: write to us, and we will get started. The law gives us a month; we answer sooner.
Call on any business day or write — we reply within 2 hours on any business day.
35 15 47 65 [email protected]If you are unhappy with the way we process your information, you can complain to Datatilsynet (the Danish Data Protection Agency).
datatilsynet.dkThen this policy does not apply to you. The processing of information about debtors is set out in the privacy policy for debt collection.
Privacy policy (debt collection)
