Skip to content
RepRisk

Privacy policy

Last updated: 1 October 2026

This policy explains how RepRisk processes personal data when you visit this website, which is used to notify rated entities about their RepRisk ratings under Regulation (EU) 2024/3005 (EU ESG Ratings Regulation). For information about how RepRisk processes personal data across its other websites and services, please see the RepRisk Privacy and Cookie Policy (opens in a new tab).

Who is responsible

RepRisk AG, Stampfenbachstrasse 42, 8006 Zurich, Switzerland, is responsible for the processing described in this policy. For further information about RepRisk’s data protection practices, please see the RepRisk Privacy and Cookie Policy (opens in a new tab).

Server logs

You do not need to provide personal data to use this website. When you visit a page, our servers process technical information such as your IP address, the date and time of your visit, the page requested, and your browser type.

We process this information to operate the website, ensure its security, and maintain its technical functionality. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR).

Analytics, only with your consent

If you allow analytics, we use Matomo to understand how visitors use this website and to improve the experience. Until you select Allow analytics, Matomo is not loaded and no analytics data is collected.

With your consent, Matomo records information such as the pages you visit and when, the website that referred you, links you click to other websites, files you download, your browser, operating system, device type, screen size and language, and your approximate location (country or region). Matomo removes the last two bytes of your IP address before storing it.

Matomo does not set cookies or track you across other websites. The analytics data is not used for advertising or combined with other data.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time through Analytics settings at the bottom of every page. Withdrawing your consent does not affect processing that took place before it was withdrawn.

What we store in your browser

To remember your analytics choice, we store it in your browser’s local storage (analytics-consent). If you close the analytics notice without making a choice, we store this for the duration of your browser session (analytics-notice-dismissed), and analytics remains off.

Neither is used to track you, and this website does not set cookies.

Who receives the data

Matomo Cloud is provided by InnoCraft Ltd, New Zealand, which processes analytics data on our behalf under a data processing agreement. The analytics data is hosted in the EU, in Frankfurt, Germany, with backups in Ireland. New Zealand is recognised by Switzerland and the EU as providing an adequate level of data protection.

We also use service providers to host and operate this website. These providers process data on our behalf where necessary to provide the website. We do not sell your personal data or disclose it to other parties unless required by law.

How long we keep it

We retain server logs and analytics data only for as long as necessary for the purposes described above, after which they are deleted.

Your rights

Under the Swiss Federal Act on Data Protection and, where applicable, the EU General Data Protection Regulation, you may have the right to access, correct or delete your personal data, restrict or object to its processing, receive a copy of your data, or withdraw your consent.

To exercise your rights or contact us about data protection, please use the contact details provided in the RepRisk Privacy and Cookie Policy (opens in a new tab). Because analytics data is stored without direct identifiers, we may not be able to link it to you.

You can also lodge a complaint with a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the competent authority in the country where you live or work, or where an alleged infringement took place.

Links to other websites

This website contains links to other websites and services, including RepRisk’s complaints form and regulatory disclosures. When you follow these links, the privacy practices of the destination website or service apply.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.