R Rigora
  • What You Get
  • Sample
  • Pricing
  • FAQ
Submit Your Manuscript

Privacy Policy

Understand SciBridge's commitment to data privacy. This page details SciBridge GmbH's compliance with the GDPR and the principles that shape its privacy policies and practices for Rigora Scientific Editing.

1. Controller

The controller within the meaning of the GDPR is:

SciBridge GmbH
Pestalozzistraße 25
22305 Hamburg, Germany

Phone: +49 40 41188460
Email: info@rigora.net
Web: https://rigora.net

Represented by the Managing Director: Priv.-Doz. Dr. med. Sied Kebir

Data Protection Officer

Due to the size of our company (fewer than 20 employees regularly engaged in automated processing of personal data), we are not legally required to appoint a Data Protection Officer pursuant to § 38 BDSG. For data protection inquiries, please contact us at info@rigora.net.

2. Processing of personal data when visiting the website

2.1 Server log files

When you access our website, the hosting provider automatically records the following data:

  • IP address
  • Date and time of the request
  • Time zone difference to GMT
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred
  • Website from which the request originates (referrer URL)
  • Browser type, version, and operating system

Purpose: Ensuring technical operation, IT security, and error analysis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable provision of the website).
Storage period: Log files are generally deleted after no more than 30 days, unless longer storage is required for evidence purposes (e.g. in case of security incidents).

2.2 Hosting

Our website is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus). The servers used are located within the European Union (Germany). Hostinger processes personal data on our behalf as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of our website).

3. Cookies and similar technologies

We only use technically necessary cookies or comparable technologies (e.g. local storage).

Technically necessary cookies are required for the operation of the site (e.g. language settings, login sessions).

First-party analytics & attribution (cookieless). To understand which channels lead researchers to us, we operate our own first-party, cookieless website analytics. We log only the page visited, the referring source (e.g. a search engine or a link) and a timestamp — no cookies, no IP addresses, and no information that identifies you personally. We also store a single attribution marker (the channel you arrived from) in your browser's local storage and may attach it to an order so we can measure which channels work. Legal basis: our legitimate interest in measuring and improving our service (Art. 6(1)(f) GDPR).

Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 25(2) TTDSG.

You can withdraw any consent you have given at any time with effect for the future via your browser settings.

4. Contacting us (email / contact form)

If you contact us by email or via a contact form, we process:

  • Name
  • Email address
  • Phone number (if provided)
  • Content of your message

Purpose: Handling your enquiry and any follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (contract initiation or performance) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Storage period: We delete your enquiries once they have been fully processed and no statutory retention obligations prevent deletion.

5. Manuscript review service, intake, and payment

When you order a manuscript review, we process the following data:

  • Name, title
  • Billing address
  • Email address
  • Institution / company (if applicable)
  • Selected package and order details
  • Manuscript content provided by you
  • Payment information (see below regarding payment service providers)

Purpose: Contract performance, invoicing, and provision of the editing service (including delivery of annotated manuscripts and reports).
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

5.1 Payment service providers (Stripe)

For payment processing we use the external payment service provider Stripe. Payment data is transmitted directly to the provider; we do not receive complete credit card details.

Purpose: Secure processing of payments.
Legal basis: Art. 6(1)(b) GDPR (contract performance) and, where applicable, Art. 6(1)(f) GDPR (legitimate interest in efficient payment processing).

The payment service provider processes data under its own responsibility (e.g. for fraud prevention and legal retention obligations). For details, please refer to the privacy policy of the provider.

Data transferred to Stripe: Name, email address, billing address, payment instrument type, transaction amount, and IP address.

Note on third countries: Stripe, Inc. is based in the United States. Data transfers to the USA are safeguarded by EU Standard Contractual Clauses (EU Commission Decision 2021/914). Stripe may use sub-processors for fraud prevention and payment processing. For details, see Stripe's Privacy Policy and Data Processing Agreement.

5.2 Fonts

This website uses locally hosted web fonts (Inter and Source Serif 4). The font files are served from our own domain. No requests are made to external font services such as Google Fonts. No personal data is transmitted to third parties for the purpose of loading fonts.

6. Newsletter / lead-magnet downloads

If you submit your email address to receive a sample report or other free download, we process:

  • Email address
  • Name (if provided)
  • Date and time of your request (and, where available, IP address), to document your consent

We use a single opt-in process: your email address is added when you submit the form and is used to send the requested download and, where you have consented, occasional information about our services. There is no separate confirmation e-mail.
Purpose: Delivery of the requested download and, with your consent, occasional information about our services.
Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time via the link in every e-mail.

You can withdraw your consent at any time by using the unsubscribe link in each email or by contacting us directly. The lawfulness of processing carried out prior to withdrawal remains unaffected.

Service provider: MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland. MailerLite may process data on servers in the United States. Data transfers are safeguarded by EU Standard Contractual Clauses. For details, see MailerLite's Privacy Policy.

7. Overview of legal bases

We process personal data on the basis of:

  • Art. 6(1)(a) GDPR — consent
  • Art. 6(1)(b) GDPR — contract / contract initiation
  • Art. 6(1)(c) GDPR — legal obligation (e.g. statutory retention under tax and commercial law)
  • Art. 6(1)(f) GDPR — legitimate interests (e.g. IT security, efficient communication, economic operation of our website)

8. Storage period

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention periods. Specific retention periods:

  • Order and invoice data: 10 years (German tax law, § 147 AO, § 257 HGB)
  • Manuscript files: deleted within 30 days after project completion
  • Server logs: 30 days
  • Newsletter subscriber data: until withdrawal of consent (unsubscribe)
  • Consent records: retained for the duration of consent plus 3 years for evidence purposes

After the purposes cease to apply or the retention periods expire, the data is deleted or anonymised.

9. Your rights as a data subject

Under the GDPR, you have in particular the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, a simple email to info@rigora.net is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, for example with our competent authority:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg, Germany
https://datenschutz-hamburg.de

10. Updates to this Privacy Policy

This Privacy Policy was last updated on 29 May 2026 and applies from that date onward. We reserve the right to adapt it in the event of changes to our processing activities or to the legal situation. The current version is always available on this page.

© 2026 Rigora Scientific Editing — a service of SciBridge GmbH. All rights reserved.

Privacy Policy Terms & Conditions Impressum