Product/Version

Registry Information Service on European Residents (RISER Service)

Function as provided in February 2016

Qualification: IT-based service

View the RISER certificate

Cert. No.

EP-S-0LQQW2

Validity

01/03/2016 - 31/03/2018

Recertification No. 1: 02/2014

Initial Certification: 02/2011

Monitoring

10/2014 (O.K.)

06/2015 (O.K.)

11/2016

07/2017

Public Report

Recert2016 Short Public Report RISER Image

Recert2016 Short Public Report RISER Image

Recert2014_Short Public Report RISER Image

Recert2014_Short Public Report RISER Image

RISER Public Report [PDF] Image

RISER Public Report [PDF] Image

Manufacturer/Provider

RISER ID Services GmbH
Charlottenstraße 80
10117 Berlin
Germany

BEST

RISER processes a minimum of data. RISER does not use the data-results for own purposes such as "address pooling".

ATTENTION:

RISER ID Services GmbH processes query and result data on behalf of its customers. Even though RISER facilitates its privacy-compliant use, customers must ensure that processing of query/result data is backed by a legal basis and privacy compliant processes.

Summary

RISER ID Services GmbH offers a central online service that enables customers to request and verify address information in several European countries. Customers can request this information through single inquiries or through bulk inquiries. RISER can adapt to the customers' needs in terms of data format and the required interfaces. The result of the inquiry returns the full name and full address as listed in the respective official register.

Address inquiries for different countries or communities are submitted via a central web portal. RISER distributes the request(s) to the respective register office(s). The register(s) process(es) the request(s) and send(s) the result(s) back to RISER. Following this, the result(s) can be downloaded from the web portal by the customer.

Details

Recertification 02/2016:

The main changes since the last recertification in 2014 are listed below:

  • Customers of RISER may request information from official registers in Germany, Austria and Switzerland (Estonia, Finland, Italy and Sweden have been removed from the service).
  • Information regarding "without a permanent residence" and information bans is not provided any more.
  • The update of the database containing information on deceased persons has been suspended since 11/2015.
  • Customers who lack sufficient information to perform a successful enquiry regarding a person are provided with the possibility to collect the person's date of birth via German credit agency Schufa Holding GmbH. This optional functionality does not form part of the target of evaluation, but the respective interface between RISER and Schufa does.
  • The optional service to enrich personal data with phone numbers taken from publicly available phone directories was ceased.
  • Further changes to the service and the underlying contractual clauses have been made (e.g., customers must assert that they will not use the information received via RISER for the purpose of advertising and address trade). These changes ensure RISER's compliance with a new sector-specific law in Germany (please cf. the Short Public Report for details).
  • For the encryption of passwords, SHA1 was replaced with SHA2. 
  • For the encryption of harddrives, Truecrypt was replaced with Veracrypt.

Recertification 02/2014:

The following new components have been added to the ToE:

  • eMA Monitoring
  • Enhanced registry information
  • Database containing information on deceased persons
  • Archiving

eMA Monitoring:

This new feature allows notification of a customer who already performed an inquiry on a specific person if another customer conducts an inquriy on said person and receives a different (new) result. The customer is informed about the fact that it may be useful to perform another inquiry. For this purpose, RISER makes use of hash values of inquiry and disclosure data. On the contrary, RISER does not operate a "shadow" database with information on residents.

Enhanced registry information:

RISER is now capable of processing enhanced inquiries on registry information ("erweiterte Melderegisterauskunft").

Database with information on deceased persons:

RISER operates a database containing information on deceased persons. Inquiry data is matched with the data in this database in order to filter out inquiries on dead persons prior to the inquiry being forwarded to the competent registration authority.

Archiving:

A mullti step archiving concept has been implemented.

Currently, RISER is capable of forwarding inquiries to registration authorities in the following countries:

  • Austria
  • Estonia
  • Germany
  • Italy
  • Lithuania
  • Sweden
  • Switzerland

The evaluation demonstrated that RISER still complies with EU data protection law. For details, cf. the Short Public Report.

Initial Certification (02/2011):

RISER ID Services GmbH requests registry information on behalf of the customers. Thus, RISER qualifies as data processor in the sense of Article 2(e) of Directive 95/46/EC when processing inquiry and result data.

The Target of Evaluation (ToE) is the Registry Information Service on European Residents (RISER Service).

It includes

  • RISER Internal Client
  • RISER Customer Portal
  • RISER Supplier Portal
  • RISER Registration-Authorities-Portal
  • Interfaces with customers and suppliers

It does not include

  • Public area of the RISER website
  • RISER Pre-Sales Web-Client
  • RISER-Newsletter
  • Realtime-ID-Check
  • Realtime-Age-Check
  • Movers database hosted by third party supplier

Through a central web portal, address verification can be performed against official population registers inquiring into Austria, Estonia, Germany, Hungary, Ireland (electoral roll), Italy, Lithuania, Sweden, Switzerland and United Kingdom (electoral roll).

Technical Evaluator (since monitoring in 10/2014)

Dipl. Math. Ralf von Rahden
datenschutz cert GmbH
Konsul-Smidt-Str. 88a
28217 Bremen

Legal Evaluator (since monitoring in 10/2014)

Dr. Irene Karper LL.M.Eur.
datenschutz cert GmbH
Konsul-Smidt-Str. 88a
28217 Bremen
Germany

Technical and Legal Evaluator (until recert in 02/2014)

Prof. Dr. Friedrich Holl
Hektorstraße 7
10711 Berlin
Germany

Recertification: 02/2016

RISER ID Services GmbH provides an online service that enables companies to request address information from official population registries. Users of the service are controllers in respect of personal data that is delivered to them via RISER. The service is designed in a way that facilitates users' compliance with EU data protection law.  

Press Release (initial certification 02/2011) Image

Image

Disclaimer:

This register is kept with the utmost care. However, EuroPriSe does NOT guarantee the accuracy of information found on the Site. Your reliance on information found on the Site is at your own risk. For more information please go to EuroPriSe Terms & Conditions.

Image

European Privacy Seal for RISER Service

© 2008 - 2016 | EuroPriSe GmbH - European Privacy Seal | Handelsregister-Nr. (Commercial Register No.): Bonn HRB 20387

No responsibility for the accuracy of the information. Contact | Privacy Notice | Imprint