AUTHORISEME
Back
Privacy Notice
How we collect, use, and protect your data

The following notice provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Controller

The controller for this website is

AuthoriseMe GmbH Austraße 34 35745 Herborn Germany

Phone
+49 2772 57 59 100
Email
info(at)authoriseme.eu
Managing Director
Raffael A. Fruscio

Contact details of the data protection officer (Art. 13 (1) (b) GDPR)

We have appointed a data protection officer. You can reach them at

data.de(at)raan-group.com

How do we collect your data and what do we use it for?

Your data is collected when you provide it to us, e.g. when you send us an email or commission our services. All data transmitted to us, including any personal data resulting from it (e.g. name, email address etc.), is stored and processed by us for the purpose of handling your request or providing our services. If you do not provide us with this data, we cannot process your request or provide our services. This data is processed on the basis of Art. 6 (1) (b) or (c) GDPR if your request is connected to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), where this has been requested. Consent can be withdrawn at any time. Further data is collected automatically when you visit the website by means of our IT systems. This is primarily technical data such as the internet browser used, the operating system or the time of the page request etc. This data is required to ensure the error-free display of the website. If we cannot collect this data, we cannot display the website. This data is collected on the basis of Art. 6 (1) (f) GDPR.

Data processing within the Raan Group

AuthoriseMe GmbH is part of the Raan Group. The companies within the group work closely together on internal organisation, sales and marketing. Specialised companies or divisions of our group of companies carry out certain data processing tasks centrally for the affiliated companies in the group. In addition, certain data processing operations are carried out in centralised IT systems. Insofar as a contract exists between you or your company and one or more companies of our group, your data may be processed centrally by one company of the group or jointly by the companies, for example for the central management of customer data, telephone customer service, contract processing, billing purposes as well as collection and disbursement, for direct marketing purposes or for joint mail processing. To safeguard your rights and in consideration of the requirements of the EU General Data Protection Regulation (GDPR), we have concluded an agreement that establishes rules on the processing of your personal data. As so-called joint controllers (under Art. 26 GDPR), we are jointly responsible for the processing of your data. With regard to the processing of your data, you can contact each participating company individually and assert your rights. Further information on data protection and the handling of personal data can be found in the privacy notices of the respective affiliated companies.

Storage period

Your data is stored until the purpose for storing the data no longer applies, you withdraw your consent to storage, or you request us to delete it. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected by this.

What are your rights?

On the basis of Articles 15–20 GDPR, you have the following rights regarding the processing of personal data:

  • You have the right at any time to receive information free of charge about the origin, recipients and purpose of the data stored about you (Art. 15 GDPR).
  • In the event of the processing of incorrect personal data, you have the right to rectification (Art. 16 GDPR).
  • Where the statutory requirements are met, you can request the erasure or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR).
  • If you have provided the data and the data processing is carried out by automated means, you have the right to data portability (Art. 20 GDPR).
  • Furthermore, you have the right to lodge a complaint with a supervisory authority.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. You can find the respective legal basis on which processing is based in this privacy notice. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 (1) GDPR). If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

Profiling

We do not carry out any profiling or automated decision-making.

Cookies

We use exclusively technically necessary cookies. These are required to recognise you after login, to maintain your session and to ensure the security of the platform. We do not use any cookies or external services for analytics, tracking or marketing purposes; a consent banner is therefore not required. Processing is based on our legitimate interest in the secure and functional operation of the platform (Art. 6 (1) (f) GDPR) or on Section 25 (2) TDDDG, as the storage is strictly necessary to provide the service expressly requested by you. You can set your browser to inform you about the setting of cookies; if technically necessary cookies are disabled, the functionality of the platform may be limited.

Hosting

This platform is hosted by an external service provider (hereinafter referred to as the "host"). The personal data collected on this platform is stored on the host's infrastructure. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, platform access and other data generated via the platform. The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). We have concluded the legally required data processing agreement with the host.

We use the following host:

Google Cloud (Google Cloud Platform)

Services in the field of providing information technology infrastructure and related services (e.g. compute, storage and database capacity as well as object storage). Service provider for customers in the European Economic Area: Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. Legal bases: Legitimate interests (Art. 6 (1) (f) GDPR), performance of a contract (Art. 6 (1) (b) GDPR). Privacy policy: https://cloud.google.com/terms/cloud-privacy-notice. Data processing agreement: https://cloud.google.com/terms/data-processing-addendum.

Data processing takes place primarily in data centres within the European Union. A transfer of data to the USA cannot be entirely ruled out. Google LLC holds a certification under the "EU-US Data Privacy Framework" (DPF), which is intended to ensure compliance with European data protection standards for data processing in the USA; in addition, standard contractual clauses pursuant to Art. 46 GDPR are in place.

Last updated: June 2026