RIDING BYTES

Privacy Policy

Last updated: 2026-06-04.

This is a plain static website. It runs no analytics, no advertising, no tracking pixels, no third-party tracking, no session cookies, and no remarketing. The only personal data we ever receive from this site is what you voluntarily type into our contact form.

Data controller

RIDING BYTES GmbH, Würzburger Straße 81, 90766 Fürth, Germany. Managing Director: Ramon Bartl. Contact: rb@ridingbytes.com, +49 911 974 930 90. Full details in the imprint.

What we collect

When you submit the contact form on /contact/, we receive:

  • The name you provide.
  • The email address you provide.
  • The message you write.

That is the entire set. We do not collect your IP address, browser type, referrer, location, or any other metadata about your visit.

We process the data you submit to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering a contract at your request) and, where the message is unrelated to a contract, Art. 6(1)(f) GDPR (legitimate interest in answering business correspondence).

How long we keep it

Contact-form messages live in our business inbox like any other business email. We retain them as long as the conversation may plausibly require a follow-up, and at most for the German tax / commercial-law retention periods for business correspondence (typically 6 to 10 years under §§ 257 HGB, 147 AO when the message forms part of a contractual relationship). When neither applies, we delete on request.

Processors

The contact form is delivered via Formspree (Formspree Inc., 2261 Market Street #4067, San Francisco, CA 94114, USA), which receives the form contents from your browser and forwards them to our inbox. A Data Processing Agreement is in place. Formspree’s privacy policy: https://formspree.io/legal/privacy-policy/

The website is hosted in the EU on infrastructure operated by Hostinger (Hostinger International Ltd.). Hostinger only sees the traffic required to serve the static files; we do not keep logs that identify individual visitors.

What we do not do

  • We do not use Google Analytics, Plausible, Matomo, or any other analytics product.
  • We do not run advertising or remarketing pixels.
  • We do not sell anything through this website.
  • We do not share contact-form contents with anyone other than the processors named above.

Webfont

We load the Nunito Sans webfont from Google Fonts. Google receives your IP address when the font is loaded. If you’d rather avoid that, any browser extension that blocks third-party requests (uBlock Origin, NoScript, etc.) prevents it; the site renders fine with a system fallback font.

Map on the contact page

The contact page embeds a map tile served by OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When the page loads, your browser fetches the map tiles directly from openstreetmap.org. The foundation receives your IP address in the standard web-server log. No cookies are set, no tracking pixels are loaded.

Embedded YouTube videos

A few blog posts include a YouTube video. We do not load the video automatically. You see a static preview image hosted on our own server, and the YouTube player only loads after you click the play button.

When you click play, your browser connects to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google receives your IP address, the URL you came from, and may set cookies. We use the privacy-enhanced youtube-nocookie.com domain, which suppresses tracking cookies until you interact with the player, but the IP transfer cannot be avoided.

  • Legal basis: your consent under Art. 6 (1) (a) GDPR, expressed by clicking the play button.
  • Transfer to a third country: Google LLC participates in the EU-US Data Privacy Framework. Standard Contractual Clauses remain in place as an additional safeguard.
  • Google’s privacy policy: https://policies.google.com/privacy
  • YouTube’s terms: https://www.youtube.com/t/terms

You can revoke consent at any time by reloading the page; no YouTube connection will be made again until you click play.

Your rights

Under the GDPR you have the right to:

  • Access the data we hold about you (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Lodge a complaint with a supervisory authority (Art. 77). Our competent authority is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.

To exercise any of these rights, email rb@ridingbytes.com. We respond within one month, free of charge.

Changes to this policy

If we change this policy materially, we update the “Last updated” date at the top. Past versions are not archived publicly; ask if you need one.