The General Data Protection Regulation (EU 2016/679 of 27 April 2016) and The Danish Act on the Processing of Personal Data

The Customer is in every respect data controller and RIB A/S is in every respect data processor as RIB A/S acts solely on instructions from the Customer. The Customer is aware that the RIB solution is run in an externally hosted IT environment at one of the sub-suppliers of RIB A/S and hereby consents to this. RIB A/S uses only sub-suppliers who have undertaken to comply with current personal data legislation and RIB A/S has concluded data processing agreements with these sub-suppliers.


RIB A/S handles the following data

RIB A/S is processor in accordance with the General Data Protection Regulation and collects personal data only to be able to guarantee correct and documented use of the RIB products. RIB A/S collects the following personal data:

  • Full name
  • Name of organisation/enterprise
  • E-mail address

In that connection, RIB A/S has taken the necessary technical and organisational security measures against accidental or unlawful destruction, loss or impairment of data and against unauthorised access, abuse or other processing of data contrary to The Danish Act on the Processing of Personal Datathe Danish Data Protection Act.

RIB A/S does not disclose data collected on you to any third party (by either sale or indirectly). Nor do we use or disclose the content that you might place in our products (e.g. in the form of files).


Communication to end users

The products of RIB A/S are intended for use by enterprises and are therefore in practice administered for you by the organisation (the enterprise you represent). Thus, the use of the products of RIB A/S is a transaction between enterprises and the agreement on use has been concluded as a business agreement. Therefore, your enterprise has to a certain extent the possibility of administering personal data within the framework of a data processing agreement that should be concluded between your enterprise as data controller and RIB as data processor.

You can always find RIB’s data processing agreement here:

You can contact your company administrator if you have questions concerning the protection of personal data. RIB A/S is not responsible for the personal data of customers, the security policies or practice of organisations that may deviate from the ones that appear from this confidentiality agreement.


You can view and administer your data yourself

In your capacity as user, you can both view and edit your personal data in RIB’s products yourself. On acceptance of these conditions, you accept that the traces your user has left (your log information) are not deleted as they serve the purposes of the platform and are a condition for the correct and documented use of the RIB products by others.