Privacy policy and cookie Statement

Data Privacy Policy

Definitions and terminology follows the Regulation (EU) 2016/679 (General Data Protection Regulation).

We take all appropriate steps to protect your information both online and off-line. We have internal policies and procedures to ensure that all Risk Information Alliance staff are aware of responsibilities related to handling of personal data. As part of our risk management programme we regularly assess risks impact related to data security and apply risk mitigation measures accordingly.

Risk Information Alliance has implemented and is continuously implementing a number of technical and organisational measures to ensure the most complete protection of personal data processed. 

Effect of Policy

This policy does not form a contract between an individual and Risk Information Alliance. The policy may also be subject to change. Whenever you need to refer to this policy you can find it on our website.

Information collection and use as part of delivering services 

In a continued effort ensure data privacy, personal as well as business data, is stored under role based access privileges. Endpoints are secured with two-factor authentication and regular password change schema. Data processing agreements with key data infrastructure service providers have been secured. 

As part of the certification schemes we work with, we may be obliged to share personal data ie certificate holder contact (business name, address and email) with the certification scheme owners. In these cases that will be clear from the certification agreement document. 

In the role of Certification Body we are considered a data controller in the relation with clients and the personal data collected in connection with the certification process. Roles and responsibilities are guided by the GDPR and are described in detail in the Data Controller Addendum that also describes data retention times as they vary with the certification scheme.

Information collection and use through our website

The use of the Internet pages is possible without any indication of personal data; however, if you want to use special services via our website; i.e. submitting a job application, requesting a quote or signing up for one of our news services, processing of personal data is necessary. 

You do not have to give us any personal information in order to use most of this website. However, if you wish to take advantage of some of the more special, personalised services that we make available, or apply for a job you will need to provide certain information.

Risk Information Alliance is the sole controller of the information collected on this website. We do not sell, share, or transfer this information, except as set out in this statement.

We use your information to improve our marketing, for administration and to provide our services. If necessary, we may pass your information between our offices. Our offices are listed on this website and the list is updated as appropriate. The types of information we collect through our website are described below.

Have you at some point submitted data through our website, either as applicant for a job, registering for an event or signing up for one or more newsletters, then you can review that data or revoke the registration by filling out the form on page. 

As Internet-based data transmissions may in principle have security gaps. For this reason, every data subject is free to transfer personal data to us via alternative means. Please contact our focal point on email, or the relevant staff contact, if you wish to exercise that right.

By accepting the terms, you consent to the collection and use of any personal information in the manner described.

Information collection and use via email

We may store emails associated with services offered or as part of documentation of work. In this regard we store the email headers, content and subject line will be saved for future reference or documentation.


To subscribe for newsletters and news updates please register by completing our subscription form. To unsubscribe, either update your details via the opt-out form or use the links provided in the email. The information that you submit, name and email address, will be used solely to send you the content that you have indicated your interest in and to personalise those messages for a better experience.  

For marketing or compliance purposes, we may monitor whether you open and/or click on URLs in our newsletters.

Events registration

To register as a participant at an event you must complete a registration form. During registration you are required to give your contact and possibly billing information (such as name, address, phone number and email address). This information enables us to process and fullfil your enrolment so that we can contact you about the events for which you have expressed interest.

Recruitment and job applications

To give uniform and universal access to career opportunities we offer that job applicants can apply for open positions via our website. The form asks you to enter information about name and contact email and for you to upload an application and CV. This allows our recruitment personnel to make an informed decision as to whether to proceed with your application.

Any information you send us for the purpose of a job application, will be treated with the greatest care and for that purpose only. Unless otherwise agreed, the applications submitted, and the information herein will be deleted from our system shortly after the recruitment process for a given position has ended. 


This website contains links to other websites. Please note that we are not responsible for the privacy practices of other websites. This privacy statement applies solely to information collected by this website.

IP addresses

We use IP addresses to analyse trends, administer the website, track users’ movements, and gather broad demographic information for aggregate use. For this purpose, we use Google Analytics. IP addresses are not linked to personally identifiable information.

Children’s Personal Information

We do not knowingly collect personal information from children under 13 without prior verifiable parental consent. If we learn that a child under the age of 13 has submitted personally identifiable information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others).

If you believe that a child under the age of 13 has provided us with personal information without verification of parental consent, please contact us at

Cookie statement

About cookies

A cookie is a piece of data stored on a user’s hard drive containing information about the user. The information below explains the cookies we use on our website and why we use them:

We are using the service of Google Analytics to gather information about where our website users come from and what pages they are accessing. This is done to monitor and improve the site configuration so that we best support the needs of the users to the site. The same information is also used within the organisation to support strategic decisions. 

Google Analytics depends on the so called cookies. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. 

We are using cookies in order to provide you with the best user experience. When you first visit our site you will be asked if you will accept cookies for a full website experience. If you accept this, that is one of the things that we store in a cookie for the next time you visit. 

We also use some non-essential cookies to collect information for making reports and to help us improve the site. The cookies collect information in an anonymous form. To control third party cookies, you can also change the cookie settings. 

How do you change your cookie settings?

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit or

To opt out of being tracked by Google Analytics across all websites visit

Contact us

In case you would like to access the personal information we hold about you, or you believe that information we hold about you is incorrect, or have any questions in relation to the information concerning privacy and personal information, we ask that you contact us on or fill in the form here: and we will take reasonable steps to resolve those concerns as soon as practicable.

In some cases, we may not be able to give you access to personal information we hold regarding you if making such a disclosure would breach our legal obligations to our client or if prevented by any applicable law or regulation.