Information on the processing of your personal data in accordance with the GDPR
ratiotec GmbH & Co. KG
Max-Keith-Str. 66, 45136 Essen, Germany
Managing Directors: Manuel Schneider, Sebastian Merhofe
Phone: +49 (0)201 36149-0
Email: info@ratio-tec.de
Data Protection Officer:
Email: datenschutzbeauftragter@ratio-tec.de
Phone: +49 (0)201 36149-0
The following overview summarises the types of data processed, the purposes of their processing, and refers to the data subjects concerned.
Below you will find an overview of the legal bases of the GDPR on which we process personal data:
We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of processing, as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to data, as well as access to, input, disclosure, safeguarding of availability and separation of data. Communication between your browser and our server is exclusively encrypted via TLS/SSL (HTTPS).
Where we disclose, transfer or otherwise grant access to data to other persons and companies (processors or third parties) in the course of our processing, this is done solely on the basis of a legal permission, your consent, a legal obligation, or on the basis of our legitimate interests.
Where we commission third parties to process data on the basis of a data processing agreement, this is done on the basis of Art. 28 GDPR.
Where we process data in a third country (i.e. outside the European Union or the European Economic Area) or where this takes place in the context of the use of third-party services, this is done solely on the basis of legal or contractual permissions. Subject to express consent or contractually or legally required transfer, we only process data in third countries with a recognised level of data protection or on the basis of special guarantees such as Standard Contractual Clauses (Art. 44–49 GDPR).
You have the following rights under the GDPR:
Competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2–4, 40213 Düsseldorf.
We process user data in order to provide our online services. For this purpose, we process the IP address of the user, which is necessary for the transmission of content to the user’s browser.
Our hosting provider collects data on every access to the server (so-called server log files) on the basis of our legitimate interests (Art. 6(1)(f) GDPR). The access data includes: name of the website accessed, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL, IP address and the requesting provider.
Log file information is stored for a maximum of 14 days for security purposes and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
“Cookies” are small files that are stored on users’ devices. We may use temporary and permanent cookies. Temporary cookies (session cookies) are deleted once a user leaves the website and closes their browser. Permanent cookies remain stored even after the browser is closed.
If users do not wish cookies to be stored on their device, they are asked to deactivate the corresponding option in their browser settings. Stored cookies can be deleted in the browser settings. Excluding cookies may lead to functional restrictions of this website.
When contacting us (e.g. via contact form, email, phone), the user’s information is processed for the purpose of handling the contact request in accordance with Art. 6(1)(b) GDPR. The information may be stored in a CRM system. We delete enquiries once they are no longer required. We review the necessity every two years; in addition, the statutory archiving obligations apply.
We process master, contract and payment data of our customers, prospects and business partners for the purpose of providing contractual services, customer service and customer care (Art. 6(1)(b) GDPR). Deletion takes place after the expiry of statutory warranty and retention obligations. In particular, data is retained for 6 years pursuant to § 257(1) HGB and for 10 years pursuant to § 147(1) AO.
We process applicant data exclusively for the purpose of and within the framework of the recruitment process in accordance with Art. 6(1)(b) GDPR in conjunction with § 26 BDSG. In the event of a successful application, the data will be further processed for the employment relationship. Otherwise, the data will be deleted after a period of six months in order to fulfil the burden of proof obligations under the AGG (General Equal Treatment Act).
We integrate the fonts (“Google Fonts”) of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The integration takes place via a server-side request to Google. In this process, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a uniform presentation).
Privacy Policy: https://policies.google.com/privacy
Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people and do not knowingly collect it.
We maintain online presences within social networks and platforms in order to communicate with customers, prospects and users active there. When accessing the respective networks, the terms and conditions and data processing policies of the respective operators apply.
We process user data insofar as users communicate with us within the social networks, e.g. write posts on our online presences or send us messages.
This section applies to our apps – currently the Android app “Temperature Control” (the “App”) – and to our license server, which the App uses to validate and activate licenses. The controller is ratiotec GmbH & Co. KG as named in Section 1. The other sections of this privacy policy apply in addition, in particular those on legal bases (Section 3), security measures (Section 4) and your rights (Section 7). Information on the license portal for our dealers (partners) can be found in the privacy policy of the license server: license.ratio-tec.com/privacy.
When a license is activated or the device is changed, the App transmits the following data in encrypted form to our license server:
We use this data to validate the license, assign it to the device (one license per device) and enable your dealer to support you. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). This information is required; without it the license cannot be activated. We do not use it for advertising, analytics or profiling.
If you request a license in the App after a trial period, the App transmits the device identifier, email address, company name and address to the dealer through whom the trial license was issued. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request).
Audit log: We log actions on licenses with the time, the acting app or account, and the device identifier and device name, in order to keep license management traceable and to bill renewals (Art. 6(1)(f) GDPR).
Emails: Your dealer receives notifications about renewals and activated trial licenses, including your company name and email address (Art. 6(1)(b) GDPR).
Connection data: For every request from the App, the license server necessarily processes your IP address. We do not keep an access log; server and proxy error logs contain IP addresses only in truncated form (Art. 6(1)(f) GDPR – operation and troubleshooting).
Within ratiotec, only the administrators of the license portal have access. We do not sell or rent your data or share it with advertising networks or data brokers. Data is processed exclusively in the European Union; no transfers to third countries take place.
Deletion takes place automatically every night. Deleted data remains in encrypted backups for up to 30 days, and in backups taken before software updates for up to 90 days. Beyond that, we retain data only where statutory retention obligations require it (in particular 6 years under Section 257 of the German Commercial Code (HGB) or 10 years under Section 147 of the German Fiscal Code (AO)).
Data is transmitted exclusively in encrypted form via HTTPS/TLS. Administrators sign in with two-factor authentication, and backups are encrypted. License information cached locally on your device is encrypted using the Android Keystore system.
Bluetooth sensor data: The App communicates directly with your own Bluetooth Low Energy (BLE) temperature sensors to display and record temperature readings. This data is processed and stored locally on your device only and is not transmitted to us.
Camera: The App uses the camera only to (a) scan a QR code during license activation and (b) optionally attach a photo to a sensor for your own reference. Photos are stored locally only and are not transmitted to us.
Other permissions: The following permissions serve solely the continuous monitoring of your sensors and alerting; none of them result in additional data being sent to us:
Deletion on your device: Sensor data, photos and cached license information are stored only on your device until you uninstall the App; uninstalling the App removes them completely. Data stored on the license server is not affected; you can request its deletion as described below.
The App is intended for business and industrial use and is not directed at children. We do not knowingly collect personal data from children.
The rights described in Section 7 also apply to data processed in connection with the App and the license server. You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (audit log, connection data) (Art. 21 GDPR). The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.
Please send deletion requests and any other requests regarding your rights to info@ratio-tec.de or to our data protection officer at datenschutzbeauftragter@ratio-tec.de. We will respond within one month of receipt (Art. 12(3) GDPR). Where requests are complex or numerous, this period may be extended by a further two months; we will inform you of any extension within the first month.
No automated decision-making or profiling takes place. Material changes affecting how the App handles your data will additionally be communicated through the App or your dealer.
We reserve the right to adapt this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.
As of: October 2026