Legal
Privacy notice
Short version: no cookies, no analytics or advertising scripts, nothing loaded from other servers. The fit tool runs in your browser and sends nothing. The server keeps a short log with a shortened IP address so we can count visits and clicks.
1. Who is responsible
The controller under the General Data Protection Regulation (GDPR) is:
Dr. Michael Niestroj
Otto-Boll-Str. 12, 79576 Weil am Rhein, Germany
E-mail: hello@ebikefitguide.com
The same details are in the imprint.
2. Visiting the website
When you open a page, your browser sends technical data to our web server: your IP address, the address of the page (including parameters such as sub or pos), the time, the referring page, and the browser's user-agent string. The website is hosted by Cloudi NextGen S.L. (clouding.io), Ronda General Mitre 25, bajos, 08017 Barcelona, Spain.
The server writes this to an access log. Before anything is written, the IP address is shortened (IPv4 to the first three blocks, e.g. 203.0.113.0; IPv6 to the first 48 bits), so the log cannot point to a single connection. We use the log to keep the site running and secure, and to count page views and clicks on our /go/ links (for example: how many visitors who arrived from one ad clicked through to a shop). The log is deleted automatically after 30 days. We keep only counts, which contain no personal data.
Separately, error messages of the web server software (for example about failed encrypted connections) can contain the full IP address. They go to the server's system journal (journald), are used only to fix technical problems, and are deleted automatically after 30 days at the latest (the journal is kept in memory, so a server restart deletes it sooner).
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a working, secure website and in knowing which pages and ads are useful.
3. No cookies, no third-party scripts
This site sets no cookies and uses no analytics, advertising or social-media scripts. It loads no fonts, images or scripts from other servers. A small script on the page copies the sub parameter from the page address into our /go/ links and our links to other pages of this site. The fit tool and fit checks work entirely in your browser; what you enter is not sent to us or stored.
If you arrive from a Google ad, Google adds a click identifier (gclid, gbraid or wbraid) to the page address. Before the log is written, we remove these from the logged address and blank them out in the logged referring page.
4. Links to shops (paid links)
When you click a link marked paid link, our server sends you on to the shop's website (currently Velotric). Once Velotric approves us, the link passes through its affiliate network, Impact. From that moment the shop and its network are responsible for your data. They may set cookies to record that you came from us, so that we receive a commission if you buy. With the click we pass on a short code for the ad and search keyword that brought you (the sub parameter) and the time of the click, so that sales can be matched to ads. The code identifies an ad, not a person. Please read their privacy notices. We receive only reports of sales and commissions, not your name or contact details.
5. E-mail
If you e-mail us, we use your address and message only to answer you (Art. 6(1)(b) and (f) GDPR) and delete them when the matter is closed, unless the law requires us to keep them.
6. Our Google Ads tool
We run ads for this site on Google. To manage them we use our own tool. Signed in with our own Google account, it uses the Google Ads API to read and change our own Google Ads account (campaigns, keywords, ads, budgets and reports). It does not offer accounts to anyone else, and it does not access data of visitors to this site.
The tool stores its sign-in token only on our own computer and does not share data received from Google APIs with anyone. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Because the log contains only shortened IP addresses, we usually cannot link an entry to you. Write to hello@ebikefitguide.com.
You can complain to a data protection supervisory authority, in particular in the EU member state where you live, work or where you think the infringement happened (Art. 77 GDPR). The authority responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany.