Skip to content
MRISMythos-Resistant Information Security
Analysis Implementation Method MHC catalog Publications About MRIS
DEEN

Privacy Policy

As of: October 2026 · pursuant to Art. 13 GDPR · This is a translation; the German version is legally binding.

Thank you for visiting. Protecting your personal data is important to us. Below we explain which data we process when you visit this website and download the documents.

1. Controller

Richard Peddi

c/o Autorenglück #40198

Albert-Einstein-Str. 47

02977 Hoyerswerda

E-Mail: webmaster@mris.info

2. Hosting and server log files

Legal basis: Art. 6 (1) (f) GDPR

When you access this website, your browser automatically transmits information to our host's server, which is temporarily stored in what are known as log files:

  • shortened or anonymized IP address
  • date and time of access
  • page or file requested
  • amount of data transferred and notification of successful retrieval
  • referrer URL as well as browser type and operating system

Processing serves the secure, stable operation of the website and the prevention of misuse. Our legitimate interest lies in a functional and secure service. The log files are deleted after 7 days.

Hosting is provided by ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. The provider processes the data as a processor strictly on our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place. Further information: all-inkl.com/datenschutzinformationen.

3. Analytics and download statistics

Legal basis: Art. 6 (1) (f) GDPR · no consent required under § 25 TDDDG

We measure the use of this website in aggregated form to understand reach and download figures. We record page views as well as triggered downloads of the PDF documents offered.

Measurement is cookieless: no cookies are set and no information is stored on or read from your device. No merging with other data sources and no identification of individuals takes place; the IP address is not stored. As no access to your device occurs, no consent under § 25 TDDDG is required for this.

Tool used: GoatCounter (goatcounter.com), a cookieless, data-minimizing analytics service. GoatCounter sets no cookies and stores no IP addresses. Only aggregated data is recorded, such as the page requested, the referrer URL, browser type, screen size and the country derived from the IP address. Triggering a PDF download is counted as an anonymous event. The provider's privacy information is available at goatcounter.com.

GoatCounter processes this data as a processor (Art. 28 GDPR).

4. Downloading the documents

The documents are freely available for download. No registration, no email address and no user account are required. During the download, only the server log data mentioned in section 2 and the aggregated count under section 3 are collected.

5. Contact form

If you contact us via the contact form, we process the data you provide (name, email address, selected subject, message text) solely to handle your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your inquiry serves to prepare a contract (e.g. a consulting inquiry), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries addressed to us).

The data is transmitted directly by email to our mailbox; it is not stored in a database. Your data is deleted once your inquiry has been fully handled and the circumstances give no reason for longer retention (e.g. a resulting business relationship, for which different retention obligations may apply).

To protect against automated abuse (spam), an invisible technical feature and the time elapsed since the page was loaded are also checked on submission. No personal data beyond the form input is collected or transmitted to third parties in this process.

6. Cookies

This website uses no tracking or marketing cookies. Technically necessary cookies are used only to the extent required for the operation of the site; no consent is required for these.

7. SSL/TLS encryption

For security reasons, this website uses TLS encryption. You can recognize an encrypted connection by the padlock symbol in your browser's address bar.

8. Your rights as a data subject

You have the following rights regarding your personal data vis-à-vis the controller:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).

9. Right to object

Where we process data on the basis of legitimate interests under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. Please address your objection to the contact details listed in section 1.

10. Changes to this privacy policy

We update this privacy policy as changes to the website or the legal situation require. The version published on this page at any given time applies.

← Back to home

MRIS analyzes established security standards against AI-enabled attacks and names targeted hardening measures.

Legal noticePrivacy policyUsage noteContact
Mythos readinessSeven gaps in ISO/IEC 27002TISAX® finding patternsNIS2, DORA, CRA, AI ActRoadmap P0–P2GlossaryWhat's new

© 2026 Richard Peddi. TISAX® is a registered trademark of the ENX Association. BSI and IT-Grundschutz are designations of the German Federal Office for Information Security. ISO, NIST, DORA, NIS2, C5, MITRE ATT&CK and ATLAS, CIS, CSA, OWASP and CISA are trademarks of their respective owners.