Last updated: 2026-06-04.
This is a plain static website. It runs no analytics, no
advertising, no tracking pixels, no third-party tracking, no
session cookies, and no remarketing. The only personal data we
ever receive from this site is what you voluntarily type into our
contact form.
Data controller
RIDING BYTES GmbH, Würzburger Straße 81, 90766 Fürth, Germany.
Managing Director: Ramon Bartl. Contact: rb@ridingbytes.com,
+49 911 974 930 90. Full details in the imprint.
What we collect
When you submit the contact form on /contact/, we receive:
- The name you provide.
- The email address you provide.
- The message you write.
That is the entire set. We do not collect your IP address, browser
type, referrer, location, or any other metadata about your visit.
Why and on what legal basis
We process the data you submit to answer your enquiry. The legal
basis is Art. 6(1)(b) GDPR (steps prior to entering a contract at
your request) and, where the message is unrelated to a contract,
Art. 6(1)(f) GDPR (legitimate interest in answering business
correspondence).
How long we keep it
Contact-form messages live in our business inbox like any other
business email. We retain them as long as the conversation may
plausibly require a follow-up, and at most for the German tax /
commercial-law retention periods for business correspondence
(typically 6 to 10 years under §§ 257 HGB, 147 AO when the
message forms part of a contractual relationship). When neither
applies, we delete on request.
Processors
The contact form is delivered via Formspree (Formspree Inc.,
2261 Market Street #4067, San Francisco, CA 94114, USA), which
receives the form contents from your browser and forwards them to
our inbox. A Data Processing Agreement is in place. Formspree’s
privacy policy: https://formspree.io/legal/privacy-policy/
The website is hosted in the EU on infrastructure operated by
Hostinger (Hostinger International Ltd.). Hostinger only sees
the traffic required to serve the static files; we do not keep
logs that identify individual visitors.
What we do not do
- We do not use Google Analytics, Plausible, Matomo, or any
other analytics product.
- We do not run advertising or remarketing pixels.
- We do not sell anything through this website.
- We do not share contact-form contents with anyone other
than the processors named above.
Webfont
We load the Nunito Sans webfont from Google Fonts. Google receives
your IP address when the font is loaded. If you’d rather avoid that,
any browser extension that blocks third-party requests (uBlock
Origin, NoScript, etc.) prevents it; the site renders fine with a
system fallback font.
Map on the contact page
The contact page embeds a map tile served by OpenStreetMap
Foundation (St John’s Innovation Centre, Cowley Road, Cambridge,
CB4 0WS, United Kingdom). When the page loads, your browser
fetches the map tiles directly from openstreetmap.org. The
foundation receives your IP address in the standard web-server
log. No cookies are set, no tracking pixels are loaded.
Embedded YouTube videos
A few blog posts include a YouTube video. We do not load the
video automatically. You see a static preview image hosted on our
own server, and the YouTube player only loads after you click the
play button.
When you click play, your browser connects to YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain
View, CA 94043, USA). Google receives your IP address, the URL you
came from, and may set cookies. We use the privacy-enhanced
youtube-nocookie.com domain, which suppresses tracking cookies
until you interact with the player, but the IP transfer cannot be
avoided.
- Legal basis: your consent under Art. 6 (1) (a) GDPR,
expressed by clicking the play button.
- Transfer to a third country: Google LLC participates in the
EU-US Data Privacy Framework. Standard Contractual Clauses
remain in place as an additional safeguard.
- Google’s privacy policy:
https://policies.google.com/privacy
- YouTube’s terms: https://www.youtube.com/t/terms
You can revoke consent at any time by reloading the page; no
YouTube connection will be made again until you click play.
Your rights
Under the GDPR you have the right to:
- Access the data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77).
Our competent authority is the Bayerisches Landesamt für
Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.
To exercise any of these rights, email rb@ridingbytes.com. We
respond within one month, free of charge.
Changes to this policy
If we change this policy materially, we update the “Last updated”
date at the top. Past versions are not archived publicly; ask if
you need one.
