Privacy Policy
1. Controller
RICE Consulting GmbH
Adersstr. 43
40215 Düsseldorf, Germany
Email for contact and privacy requests: hello@rice-consulting.de
2. This website
RICE Consulting presents its European market strategy, market-entry, brand and corporate reputation, commercialization and local operations services on this website. Visitors can read company information and send consultation inquiries. No customer account or online payment is required to send an inquiry.
3. Website operation
The website is hosted on servers in Germany by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, technical connection data such as your IP address, requested URL, time of access and browser information are processed to deliver the website and protect its availability. Hetzner receives the data necessary for hosting and operates as a processor on our behalf. Server log data are deleted or anonymized after the period required for operation and security, unless a security incident or legal obligation requires longer storage. The basis is our legitimate interest in a functioning and secure website under Article 6(1)(f) GDPR. Further information is available in Hetzner's privacy policy.
Fonts, icons and website images are served from our own website. The interface supports English, German and Chinese.
4. Contact and consultation inquiries
The contact form processes your name, email address, selected service and message, together with company and telephone details if you supply them. We use these details to respond and discuss possible cooperation. Inquiries are delivered to RICE Consulting by email using IONOS email services. Your email address is used as the reply address.
The optional multistep inquiry form also asks for company profile, market-entry plans, business readiness, timing, role and preferred contact method. Intermediate answers are held in the browser session so you can move between steps. An internal qualification score helps organize the consultation; it does not itself conclude a contract or make a decision with legal or similarly significant effects.
The basis is Article 6(1)(b) GDPR where the inquiry concerns a contract with you or steps at your request before such a contract. Other business inquiries are handled on the basis of our legitimate interest in responding to business correspondence under Article 6(1)(f) GDPR. Submitting an inquiry does not subscribe you to a newsletter.
5. Form security and Cloudflare Turnstile
We use session-based CSRF protection, a hidden spam-detection field and Cloudflare Turnstile to protect contact forms from automated misuse. When Turnstile is enabled, your browser communicates directly with Cloudflare. Cloudflare processes technical signals, including IP address and browser information, to assess whether a request is automated. The verification token is checked on our server before an inquiry can be sent. We do not add your IP address as a separate field to that server verification request.
This protection serves our legitimate interest in preventing spam and keeping the contact service available, under Article 6(1)(f) GDPR. It is separate from optional analytics. Information about Cloudflare's processing and international operations is available in the Turnstile Privacy Addendum.
6. Optional Google Analytics
With your consent we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand website usage. Data may include visited pages, interactions, device/browser information and identifiers stored in analytics cookies. We do not use Google advertising functions, Google Signals or advertising personalization on this website. Advertising storage, advertising user data and advertising personalization are denied in the website's consent configuration. Google services can involve processing outside the European Economic Area, including in the United States. Details are provided in Google's privacy information and its international data-transfer information.
The Google tag is loaded only after you choose “Allow analytics”. The basis is Article 6(1)(a) GDPR and, for optional storage/access on your device, Section 25(1) TDDDG. You can change your choice at any time through “Cookie settings” in the footer. Withdrawing consent disables further Analytics collection through this website and removes accessible Analytics cookies. Withdrawal does not affect the lawfulness of earlier processing.
7. Storage and retention
We retain inquiry correspondence for as long as necessary to handle the request and any resulting business relationship. Applicable statutory retention obligations and the establishment, exercise or defence of legal claims may require longer retention. Technical data are retained only as needed for operation, security and investigation of incidents.
Session and consent storage are described in our Cookie Policy. Analytics cookie lifetime is distinct from the retention of analytics data in Google's service.
In Google Analytics, retention for user-level and event-level data associated with cookies or other identifiers is configured to two months. The retention period for user-level data is not reset when a user becomes active again. This setting does not affect the aggregated standard reports provided by Google Analytics.
8. Recipients and international processing
Authorized personnel at RICE Consulting and technical providers involved in website operation, email delivery, spam prevention and consented analytics may process relevant data. Where processing takes place outside the EEA, the applicable GDPR requirements for international transfers must be met, such as an applicable adequacy decision or appropriate safeguards. Provider privacy information is linked above. You can contact us for information about the safeguards applicable to your data.
9. Your rights
Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction, portability and objection under Articles 15–21 GDPR. In particular, you may object on grounds relating to your situation to processing based on Article 6(1)(f). You may withdraw consent at any time with effect for the future.
You may lodge a complaint with a data protection supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
Last updated: October 13, 2026