Privacy Policy
Last updated: 2026-06-04.
This is a plain static website. It runs no analytics, no advertising, no tracking pixels, no third-party tracking, no session cookies, and no remarketing. The only personal data we ever receive from this site is what you voluntarily type into our contact form.
Data controller
RIDING BYTES GmbH, Würzburger Straße 81, 90766 Fürth, Germany. Managing Director: Ramon Bartl. Contact: rb@ridingbytes.com, +49 911 974 930 90. Full details in the imprint.
What we collect
When you submit the contact form on /contact/, we receive:
- The name you provide.
- The email address you provide.
- The message you write.
That is the entire set. We do not collect your IP address, browser type, referrer, location, or any other metadata about your visit.
Why and on what legal basis
We process the data you submit to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering a contract at your request) and, where the message is unrelated to a contract, Art. 6(1)(f) GDPR (legitimate interest in answering business correspondence).
How long we keep it
Contact-form messages live in our business inbox like any other business email. We retain them as long as the conversation may plausibly require a follow-up, and at most for the German tax / commercial-law retention periods for business correspondence (typically 6 to 10 years under §§ 257 HGB, 147 AO when the message forms part of a contractual relationship). When neither applies, we delete on request.
Processors
The contact form is delivered via Formspree (Formspree Inc., 2261 Market Street #4067, San Francisco, CA 94114, USA), which receives the form contents from your browser and forwards them to our inbox. A Data Processing Agreement is in place. Formspree’s privacy policy: https://formspree.io/legal/privacy-policy/
The website is hosted in the EU on infrastructure operated by Hostinger (Hostinger International Ltd.). Hostinger only sees the traffic required to serve the static files; we do not keep logs that identify individual visitors.
What we do not do
- We do not use Google Analytics, Plausible, Matomo, or any other analytics product.
- We do not run advertising or remarketing pixels.
- We do not sell anything through this website.
- We do not share contact-form contents with anyone other than the processors named above.
Webfont
We load the Nunito Sans webfont from Google Fonts. Google receives your IP address when the font is loaded. If you’d rather avoid that, any browser extension that blocks third-party requests (uBlock Origin, NoScript, etc.) prevents it; the site renders fine with a system fallback font.
Map on the contact page
The contact page embeds a map tile served by OpenStreetMap
Foundation (St John’s Innovation Centre, Cowley Road, Cambridge,
CB4 0WS, United Kingdom). When the page loads, your browser
fetches the map tiles directly from openstreetmap.org. The
foundation receives your IP address in the standard web-server
log. No cookies are set, no tracking pixels are loaded.
- Legal basis: legitimate interest under Art. 6 (1) (f) GDPR in showing visitors where our office is.
- OSM Foundation privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
Embedded YouTube videos
A few blog posts include a YouTube video. We do not load the video automatically. You see a static preview image hosted on our own server, and the YouTube player only loads after you click the play button.
When you click play, your browser connects to YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain
View, CA 94043, USA). Google receives your IP address, the URL you
came from, and may set cookies. We use the privacy-enhanced
youtube-nocookie.com domain, which suppresses tracking cookies
until you interact with the player, but the IP transfer cannot be
avoided.
- Legal basis: your consent under Art. 6 (1) (a) GDPR, expressed by clicking the play button.
- Transfer to a third country: Google LLC participates in the EU-US Data Privacy Framework. Standard Contractual Clauses remain in place as an additional safeguard.
- Google’s privacy policy: https://policies.google.com/privacy
- YouTube’s terms: https://www.youtube.com/t/terms
You can revoke consent at any time by reloading the page; no YouTube connection will be made again until you click play.
Your rights
Under the GDPR you have the right to:
- Access the data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77). Our competent authority is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.
To exercise any of these rights, email rb@ridingbytes.com. We respond within one month, free of charge.
Changes to this policy
If we change this policy materially, we update the “Last updated” date at the top. Past versions are not archived publicly; ask if you need one.