Privacy PolicyWhat we protect, what we do.

Controller

RIP Solutions GmbH
Marktplatz 11 · 93449 Waldmünchen · Germany
Managing Director: Karl Wilhelm
Phone: +49 9972 959 3999
Data protection contact: [email protected]

There is no statutory requirement to appoint a data protection officer. For data protection enquiries please contact the address above directly.

Scope & approach

This privacy policy applies to the website rip-app.com and the associated RIP App platform for funeral directors and crematoria. Where content is processed on behalf of our customers, the respective data processing agreements pursuant to Art. 28 GDPR apply additionally.

We treat data as what it is in our industry: entrusted to us. We collect as little as possible, protect it consistently from a technical standpoint and are legally transparent.

Hosting

This website is hosted on servers in Germany. When you access the site, technically required data is transmitted to our hosting service provider and processed in server log files. We have concluded a data processing agreement with the hoster pursuant to Art. 28 GDPR; the data centres used are certified to recognised standards (including ISO/IEC 27001).

Legal basis: Art. 6(1)(f) GDPR – legitimate interest in providing our online services securely, stably and efficiently.

Server log files & SSL/TLS

When you visit the website, our hoster automatically collects technically necessary data in server log files: IP address, date and time of request, data transferred, page accessed, HTTP status code, browser type and version, operating system and, where applicable, referring URL. Transmission is SSL/TLS-encrypted (HTTPS).

Logs are evaluated to ensure operations and defend against attacks and are deleted or pseudonymised after at most 14 days. Legal basis: Art. 6(1)(f) GDPR.

Cookies & consent

We use cookies and comparable storage technologies (local storage) only where this is technically necessary for the operation of the website or where you have expressly consented.

Technically necessary cookies (session, security, cookie preferences) are processed on the basis of § 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Optional cookies – e.g. for reach measurement with Google Analytics – are only set after your consent (§ 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR). You can withdraw your consent at any time with future effect via the "Cookie settings" link in the footer.

Google Analytics (GA4)

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

If you have consented, we use Google Analytics 4 for statistical reach measurement and to improve our website. Data processed includes a truncated (anonymised) IP address, device and browser data, approximate location (country/region), referrer and website interactions. The full IP address is not transmitted to Google; IP anonymisation is enabled by default in GA4. Data is stored for a maximum of 14 months.

The legal basis is your consent pursuant to § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. We have concluded a data processing contract with Google pursuant to Art. 28 GDPR. Data transfers to Google LLC in the USA are safeguarded via the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and supplementary EU standard contractual clauses pursuant to Art. 46 GDPR.

You can withdraw your consent at any time via the cookie settings or prevent tracking via the browser add-on at tools.google.com/dlpage/gaoptout. Further information is available in Google's privacy notice.

Contact

If you contact us by email ([email protected]), phone (+49 9972 959 3999) or via a contact form, we process your details (e.g. name, contact information, message content) to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual enquiries, otherwise Art. 6(1)(f) GDPR. We store the data until the purpose ceases – plus any applicable statutory retention periods (in particular § 257 HGB, § 147 AO).

Processing on the platform

On the RIP App platform, master data, case data, task data, appointment data, communication data and – where required by establishments – verification data are processed. The respective customer (funeral director, corporate group, crematorium) is responsible for this content; we process it exclusively on their instructions.

The basis is a data processing agreement pursuant to Art. 28 GDPR. On the website we process only what is necessary for operations or what you have expressly consented to.

Encryption & security

Data is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256). Sensitive content between family, funeral director and partners is additionally end-to-end protected.

Keys are managed according to current best practices, rotated regularly and accesses logged. We implement technical and organisational measures pursuant to Art. 32 GDPR and review them on an ongoing basis.

Recipients & third-country transfers

We only disclose personal data where this is necessary for the performance of a contract, a statutory obligation exists, or you have consented. Recipients are in particular our carefully selected processors:

Our hosting provider (server location Germany), Google Ireland Limited (web analytics, if consented; group transfers to the USA) and, where applicable, other IT and communications service providers (email, CDN, backup) within the EU/EEA. Transfers to third countries (in particular the USA) take place only where an adequate level of data protection exists – on the basis of the EU-US Data Privacy Framework and/or EU standard contractual clauses pursuant to Art. 46 GDPR and supplementary safeguards.

Legal bases

We process personal data on the basis of the GDPR – in particular Art. 6(1)(a) (consent), (b) (contract/pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests).

Platform content of our customers is processed on the basis of Art. 28 GDPR (data processing). Cookies and comparable technologies additionally pursuant to § 25 TDDDG.

Retention periods

Data is retained only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Server log files: max. 14 days. Google Analytics: max. 14 months. Email or phone enquiries: until final processing, then subject to tax and commercial retention periods (generally 6 or 10 years). Platform data of our customers: pursuant to data processing agreement. Memorial spaces can remain available indefinitely at explicit request.

Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may withdraw any consent given at any time with future effect (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

Changes & last updated

We update this privacy policy when legal requirements or our processing activities change. The current version is always available on this page.

Last updated: May 2026 · Data protection enquiries: [email protected].