Back-up / alternating / parallel operation of two RO systems with a common permeate tank. Normally, one unit is in operation and one unit is in standby. The circuit controls the alternating operation of the RO units for each level-dependent demand, the level-controlled connection of the second RO unit in the event of increased permeate consumption, the automatic switchover to the second RO unit in the event of a malfunction and the automatic shutdown of both units in the event of overfill.