Privacy policy

Updated 24 October 2026

1. Controller and contact

RITI ApS, Danish registration no. 42036285, Bjødstrupvej 19, 2610 Rødovre, Denmark, is the controller for riti.dk. Contact mig@riti.dk or +45 60 10 57 57.

2. Enquiries

We use the information you provide, such as your name, email, telephone number, company and message, to answer your enquiry and, where relevant, prepare an offer. The basis is GDPR Article 6(1)(b) for steps towards a contract with you, or Article 6(1)(f), our legitimate interest in responding to other professional enquiries. Contacting us is voluntary; we need relevant contact details to reply. Please do not submit national identification numbers or sensitive information.

We keep enquiries while needed for the discussion or assignment. Further retention is assessed against contractual, documentation and legal-claims needs; accounting information may be subject to separate legal requirements. Form contents are not sent to Google Analytics.

3. Operation and spam prevention

Hosting, support and email providers may process technical data and enquiries on our behalf, including IP address, time, browser and error or security information. Our legitimate interest in a stable and secure website is the basis under Article 6(1)(f).

We use CleanTalk to prevent spam. It may receive IP addresses, email addresses, submitted form content and technical or behavioural signals for spam checks. CleanTalk states that retention is up to 7 or 45 days depending on the subscription. See CleanTalk's privacy policy. Operational and security data are retained according to troubleshooting, abuse-prevention and documentation needs.

4. Google Analytics 4

Only after you accept Statistics do we load Google Analytics 4, provided by Google Ireland Limited and the Google group. We use it to understand visits, traffic sources, popular pages and website use and to improve the website.

Data may include a pseudonymous browser identifier, pages visited, referring website, time, engagement, scrolling, clicks, downloads, video activity, language, browser, device and approximate country, region and city. Google uses the IP address to derive approximate geography and states that GA4 does not log or store individual IP addresses. These reports do not disclose visitors' names, emails or precise addresses. We do not use Google Signals, User-ID or personalised advertising in this setup.

The basis is your consent under GDPR Article 6(1)(a) and consent to statistics cookies. Rejecting does not prevent access to our content or contact options. Analytics is not loaded if rejected. Analytics user and event retention is set to 2 months, without resetting on new activity; deletion follows Google's processing cycle. Aggregated standard reports may remain available longer.

5. Cookies and choices

Choose Accept, Reject or Preferences in the banner. Statistics is optional and is not preselected. Use Cookie settings at the bottom of the page at any time to change or withdraw consent. Withdrawal applies going forward and does not affect the lawfulness of earlier processing.

• Necessary consent choices: Complianz cookies such as cmplz_banner-status, cmplz_consented_services, cmplz_functional, cmplz_statistics, cmplz_preferences, cmplz_marketing and cmplz_policy_id remember your choice and policy version for up to 180 days. A category name alone does not mean marketing is used.
• Statistics, with consent only: Google's first-party cookies _ga and _ga_SKSG955RR1 distinguish browsers and visits. Google's default lifetime is up to 2 years and may renew on visits; browsers may impose shorter limits. Cookie lifetime differs from the retention of detailed Analytics records.
• Other functionality: Local language preferences may remember your chosen language. WordPress login cookies concern logged-in users. You can delete cookies and local storage in your browser.

We do not use these statistics for targeted advertising or automated decisions about you.

6. Google searches

Google Search Console provides aggregated information about search visibility, including queries, clicks and impressions. It does not install a tracking script on the site or identify which named person searched for a particular term. Google withholds some queries for privacy.

7. Recipients and international processing

Recipients include hosting, technical support and email providers, CleanTalk for spam prevention, and Google for statistics with your consent. Google and CleanTalk may process data in the United States. They state that they rely on the EU-US Data Privacy Framework for covered transfers; Google also describes standard contractual clauses where relevant. See Google's transfer safeguards and data processing terms. Contact us for information about specific recipients and transfer safeguards.

8. Your rights

Subject to GDPR conditions, you can request access, rectification, erasure, restriction and portability. You can object to processing based on legitimate interests and withdraw consent. Contact mig@riti.dk. We may need information to locate your records and verify identity; a pseudonymous Analytics visit cannot necessarily be associated with your name.

You may complain to the Danish supervisory authority, Datatilsynet. We update this notice for material changes and request fresh consent where necessary.