Photo #1 (from left, click to enlarge):
Michaël Vanfleteren (EDPS), Pedro Ibáñez Solaberrieta (Banco Guipuzcoano), Mathias Strand (Microsoft), Kirsten Bock (ULD)

Photo #2 (from left, click to enlarge):
Markus Belke (2B Advice), Michaël Vanfleteren (EDPS), Mathias Strand (Microsoft), Kirsten Bock (ULD),  Stephan DiNunzio (TÜViT), Antonius Sommer (TÜViT)

Three new European Privacy Seals have been awarded at a gala event in Stockholm today. The European Privacy Seal was presented today to the Spanish based Banco Guipuzcoano´s online banking service for individual customers, BGNetPlus, to the Swedish digital photo service DiaDirekt, and to Microsoft Corporation for its Software Protection Platform (SPP), Version 1 for Windows Vista RTM, Windows Vista SP 1 and Windows Server 2008 RTM by Michaël Vanfleteren, legal adviser at the secretariat of the European Data Protection Supervisor Peter Hustinx.

Kiel, November 13th, 2008

EuroPriSe today announces permanent establishment by ULD and awards the European Privacy Seal for IT products and IT-based services to the online banking service BGNetPlus, to the digital photo service DiaDirekt, and to Microsoft Corporation for its Software Protection Platform (SPP) Version 1 for Windows Vista RTM, Windows Vista SP1  and Windows Server 2008 RTM. The seal affirms compliance with the demanding EU laws and regulations on data security and privacy.

Trust in IT solutions is still a delicate issue. Who controls information? Who has access? In today's information-driven society, the issue of access to and control over information is enormously important to modern economy and society. Transparency is essential for consumer and user trust and moreover for a sustainable economic development in the information and communication technologies (ICT) sector. To raise justified trust of consumers and business, they need to know how to choose an IT product or service that protects their privacy. This is where EuroPriSe comes in.

EuroPriSe is funded by the European Commission’s eTEN programme with 1.2 million EUR and implemented by a consortium of nine organisations under the leadership of the Independent Centre for Privacy Protection Schleswig-Holstein (ULD). Under the scheme, IT products and IT-based services are audited in order to see if they can be certified as compliant with European regulations on privacy and data security. EuroPriSe uses a quality-assured procedure: an evaluation of the product or service by trusted legal and IT experts, followed by a cross-checking of the evaluation report by an independent and impartial certification body.

“We are happy to announce the permanent establishment of EuroPriSe to continue this successful project” says Dr. Thilo Weichert, Data Protection Commissioner for Germany’s northernmost state and head of ULD. “The requests for certification exceed our expectations. It shows that the EuroPriSe procedure offering private trusted evaluation and independent, impartial certification provides true added value for companies.” Kirsten Bock, EuroPriSe Project manager, explains: “18 products and services qualified for the pilot phase in January 2008. More than 20 additional evaluations from three continents are ongoing. The product range covers small, medium sized and very large products and service. The three awardees of today give a good example for diversity of applicants. The experience gained from the pilots show that the evaluation process is rigorous and must not be underestimated. The cooperation between skilled evaluators and Data Protection Authorities assure a high standard that is rare in an area where compliance cannot be measured by the scale.”

The three new seals awarded by ULD were presented by Michaël Vanfleteren, legal adviser at the secretariat of the European Data Protection Supervisor Peter Hustinx. “I am especially happy to present the European Privacy Seals to companies for their products and services that have successfully proven to be compliant with European privacy and data protection regulations.”

Peter Hustinx, European Data Protection Supervisor, supports EuroPriSe certification: “I am pleased to hear that EuroPriSe will be established permanently by ULD. It will be an important instrument to foster privacy protection in ICT and I expect fundamental contributions addressing harmonious interpretation of European Data Protection regulations. The excellent response EuroPriSe received worldwide underlines the high value of European Privacy Standards. Companies whose products and services undergo the rigorous EuroPriSe assessment demonstrate that good privacy protection can be a competitive advantage.”

The award winning product and services that were evaluated against the EuroPriSe criteria proved compliance with the demanding European Data Protection Regulations. Online banking is a service which is increasingly offered by banks and used by their customers. BGNetPlus offers transparent online procedures and clear contractual information to their customers. The online service offers users key banking services such as balance checking and money transfer. The DiaDirekt service provided by Tsevnic KB offers personal and professional users to get their 35mm negatives, APS images and 35mm slides transferred to digital media format (JPG). The digitalized pictures are burned to a CD and sent to the customer. The 35mm originals are sent back to the customer or physically destroyed. Microsoft’s Software Protection Platform is a service that provides mechanisms to consumers and institutions that protect them from the risk of counterfeit software and better enables volume license customers to manage their software assets. The overall goal of Software Protection Platform is to bring together new anti-piracy innovations, counterfeit detection practices and tamper resistance.

The public evaluation reports are available at

Three New European Privacy Seals Awarded

© 2008 - 2019 | EuroPriSe GmbH - European Privacy Seal | Handelsregister-Nr. (Commercial Register No.): Bonn HRB 20387

No responsibility for the accuracy of the information. Contact | Privacy Notice | Imprint



v1.5; service function as provided in 05/2018

Qualification: IT product and IT-based service (processor service)

View the REISSWOLF f.i.t. certificate

Version of Certification Criteria


Cert. No.



24/05/2018 - 31/05/2020




Public Report

f.i.t. Short Public Report Image Image 



Im Heegen 13
22113 Oststeinbek


Access policies can be used to restrict system usage to specific times of the day and/or IP addresses to reduce the attack vector for third-party access. A user session is controlled by means of a cross-tab synchronised session countdown.


Regarding the processing of personal data on third persons by means of f.i.t., it must be highlighted that the (usually) corporate users of the service qualify as controllers whereas REISSWOLF Systems GmbH acts as a processor on behalf of the users. Customers are advised that the legitimate use of the service may require the collection of the data subject's consent and/or declaration of release from confidentiality.


REISSWOLF f. i. t. is a web-based archiving system for data storage and access. It serves the purpose of uploading, storing, managing and exchanging data in the sense of a document management system. f.i.t. is a web application that can be used with common internet browsers. 


REISSWOLF f. i. t. is primarily designed for commercial use. It is distributed by REISSWOLF Systems GmbH and operated as Software as a Service (SaaS) in a data center in Germany.

The ToE includes

  • The web-based service REISSWOLF f.i.t. (for details, please cf. the short public report)

It does not include

  • REISSWOLF f.i.t. mobile app
  • REISSWOLF f.i.t. hotfolder
  • Office module
  • Teamviewer
  • Other alternative interfaces to clients

Technical + Legal Evaluator

Ann-Karina Wrede
Innungsstraße 7
21244 Buchholz

Initial Certification: 05/2018

REISSWOLF f.i.t. provides a web-based service that enables companies to upload, store, manage and exchange data in the sense of a document management system. Users of the service are controllers in respect of personal data on third persons that is processed by means of f.i.t.. The service is designed in a way that facilitates the users' compliance with EU data protection law.



This register is kept with the utmost care. However, EuroPriSe does NOT guarantee the accuracy of information found on the Site. Your reliance on information found on the Site is at your own risk.


European Privacy Seal for REISSWOLF f.i.t.