Draft template — not legal advice. This is a structural placeholder generated to scaffold the page. Replace every [[…]] token and have qualified counsel review the full text before publishing. Remove the draft flag once done.

Privacy Policy

This policy explains what personal data we process, why, and the rights you have under the GDPR (DSGVO).

Last updated: [[Date]]

1. Controller

The controller responsible for data processing on this website is [[Legal company name and address — see Imprint]]. You can reach us at privacy@rii.link.

Data protection officer: [[Name & contact, or "not required under Art. 37 GDPR"]].

2. What we process and why

2.1 Account & service data

When you create an account and use rii.link, we process the data needed to provide the service — [[email, name, links, custom domains, routing rules, click/analytics events]]. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.2 Server logs & routing

Our routing engine processes request metadata (e.g. [[IP address, user agent, referrer, timestamp, geo derived from IP]]) to resolve redirects and generate analytics. Legal basis: [[legitimate interest, Art. 6(1)(f), and/or contract]]. We do not sell click data.

2.3 Contact form

If you contact us, we process the name, email and message you submit in order to respond. Messages are delivered via [[SendGrid — see processors below]]. Legal basis: Art. 6(1)(b)/(f) GDPR.

2.4 Cookies & analytics

See our Cookie Policy for the cookies and similar technologies we use, including [[Vercel Analytics, error monitoring]].

3. Processors & third parties

We rely on the following processors under Art. 28 GDPR data processing agreements:

  • [[Hosting — e.g. Vercel / data centre in Frankfurt]]
  • [[Email — SendGrid/Twilio]]
  • [[Analytics — Vercel Analytics]]
  • [[Error monitoring — GlitchTip/Sentry]]

4. International transfers

[[State whether data leaves the EU/EEA and the safeguards used (adequacy decision, SCCs). rii.link markets EU-first residency (Frankfurt) — reconcile this section with the actual infrastructure.]]

5. Retention

We keep personal data only as long as necessary for the purposes above or as required by law. Analytics retention follows your plan tier ([[30 days Free / 1 year Premium / custom Enterprise]]).

6. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15);
  • rectification (Art. 16) and erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing (Art. 21); and
  • lodge a complaint with a supervisory authority (Art. 77) — [[competent authority, e.g. Hessischer Beauftragter für Datenschutz]].

7. Changes to this policy

We may update this policy to reflect changes in our service or the law. The current version is always available on this page.