§ 1Who we are
We are the data controller for the processing of the personal data this policy is about. Our details:
- Company
- RIECK INKASSO ApS
- Address
- Østergade 4, st., 8370 Hadsten
- Company reg. no.
- 41645369
When we write "we", "us" and "our", we mean Rieck Inkasso. When we write "the website", we mean rieckflow.com. When we write "you", we mean you as a visitor, client, supplier or business partner.
§ 2When does the policy apply?
The policy applies when you visit the website, contact us, create an account, or when you are a client, supplier or business partner of ours.
If, on the other hand, you are a debtor in a debt collection case, this is not the text you should be reading. The processing of information about debtors is set out in the privacy policy for debt collection — it has its own page, and it is written for you.
The website, our emails and our social media profiles may contain links to other organisations and websites. This policy does not govern how they process your data. Read their own policies when you visit them.
§ 3Client, supplier and partner relationships
If you are a client, supplier or business partner, we process your contact details in order to administer the contractual relationship. These are B2B details: name, email, telephone number, job title and the organisation you work for.
The legal basis is Article 6(1)(b) of the GDPR — processing necessary for the performance of a contract, including the correspondence preceding the contract that takes place at your request.
If you are a client using the portal, we also process the information that access requires: email, name, IP address, company data and bank details, together with information about your own customers. Without it we cannot deliver the service.
The information is retained for up to 3 years after the agreement ends, cf. the general limitation period in § 3 of Forældelsesloven (the Danish Limitation Act) — unless other legislation requires us to retain it for longer.
§ 4When you visit the website
We process information about your use of the website in order to compile statistics, understand how the site is used and make it better. This is ordinary personal data: IP address, browser type and version, operating system, which pages you visit, when you visit them, how long you spend on each page, and where you came from.
We process no sensitive data for this purpose.
The legal basis is your consent, cf. Article 6(1)(a), and the legitimate interests balancing rule in Article 6(1)(f). The information is collected directly from you and via cookies and similar technologies. You can withdraw your consent at any time.
§ 5Business and product development
We process information in order to analyse the use of our products, develop new features, understand trends and run and grow the business. This covers your contact details, the organisation you work for, and how you use the portal.
The legal basis is your consent, cf. Article 6(1)(a), and the legitimate interests balancing rule in Article 6(1)(f). The information is retained for up to 3 years from collection.
§ 6Marketing
When you create an account with us, you also consent to us sending you marketing by email under Markedsføringsloven (the Danish Marketing Practices Act). The consent can be withdrawn at any time.
Every marketing email contains an unsubscribe link. You can also write to us and ask to be unsubscribed — and we will do it.
§ 7Meeting our obligations
We process information in order to comply with the law and to be able to answer claims and requests from public authorities — including the requirements that follow from the rules for authorised debt collection agencies, the Danish anti-money laundering legislation (hvidvaskloven) and Bogføringsloven (the Danish Bookkeeping Act).
This covers your contact details, information about the organisation you work for, your use of our services, and whatever information the specific obligation requires. The information is retained for as long as the legislation requires.
§ 8How we protect your information
We apply technical, organisational and administrative measures to protect your information. The internet is not, however, a completely secure environment, and emails are not necessarily encrypted in transit. Please therefore do not send confidential or sensitive information to us in an ordinary email — call us instead.
§ 9Data processors and disclosure
We use suppliers (data processors) to run the website and the portal. When we do, we have a data processing agreement in place setting out how they may process information on our behalf, and we impose requirements on their security.
We do not disclose your information to third parties for their own purposes. If RieckFlow becomes involved in a merger, an acquisition, a restructuring or a bankruptcy, the information may, however, pass on as part of the transaction.
Where personal data is transferred to countries outside the EU/EEA — for example because a supplier is located there — it takes place on the basis of the European Commission’s standard contractual clauses (SCC), binding corporate rules or another valid transfer mechanism. You can always ask for a copy of the mechanism relied on.
§ 10Public authorities
The police and other authorities may request access to information held by us. We assess each request under fixed internal procedures and disclose only information that is strictly required by law, and only on the basis of a valid court order or an equivalent document.
§ 11Your rights
- Access and rectification
- You can ask for a copy of the information we process about you and have information you believe to be incorrect corrected.
- Erasure
- In certain circumstances you can ask us to erase information about you.
- Withdrawal of consent
- Where the processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of the processing carried out beforehand.
- Objection and restriction
- You can object to the processing and ask for it to be restricted. If your objection is justified, we will no longer process the information.
- Data portability
- You can have your information released to you in a structured, commonly used and machine-readable format.
- Direct marketing
- You can object at any time to your information being used for marketing.
Conditions and limitations may attach to the rights, so you will not necessarily be entitled to, say, data portability in the individual case. If you are in doubt, ask us. The law gives us one month to reply; we aim to reply sooner.
§ 12Complaints
If you wish to complain about our processing of your information, please contact us first. If we cannot help you, you can complain to Datatilsynet:
- Authority
- Datatilsynet (the Danish Data Protection Agency)
- Address
- Borgergade 28, 5., 1300 København K
§ 13Children
Our website and services are not directed at children. You must be over 18 to use them.
§ 14Changes to the policy
We change the policy when our practices or the legislation change. Material changes are announced on the website, and if you are registered as a user, you will be notified at the email address you signed up with.
The policy was last updated on 12 July 2026.