Last updated: [date]
This privacy policy applies to the website bike-maintainer.de including the forum and to the app app.bike-maintainer.de. We only process the data a feature actually needs. There is no tracking, no analytics or advertising services and no third-party content: fonts, icons and scripts are served exclusively from our own server.
This is a translation for your convenience. In case of doubt, the German version applies.
1. Controller
Chris Wohlbrecht
Auf dem Wiesenberg 7
04828 Altenbach
Germany
Email: support@bike-maintainer.de
We have not appointed a data protection officer because we are not required to. If you have questions about data protection, write to the address above.
2. Hosting and server logs
The website and the app run on a server operated by Netcup. We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
With every request, the server processes technically necessary data: IP address, time, requested address, status code, amount of data transferred, referrer and browser identification.
- Access logs of the web server (reverse proxy): with the full IP address, deleted after [number] days.
- Logs of the website and the app: Before they are stored, we shorten IP addresses (IPv4: last byte, IPv6: to the /48 prefix) so that they can no longer be linked to a person. Email addresses and links from account emails are masked as well. These logs are deleted automatically after 14 days.
The purpose is secure and stable operation (troubleshooting, defending against attacks). The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. The data is not combined with other data and not passed on to third parties.
3. Cookies and local storage
We only use technically necessary cookies. These do not require consent (Section 25(2) no. 2 of the German TDDDG), which is why there is no cookie banner.
| Name | Where | Purpose | Duration |
|---|---|---|---|
wordpress_test_cookie | Website, login page only | checks whether cookies are possible | session |
wordpress_logged_in_…, wordpress_sec_… | Website, logged-in members only | login | session, or up to 14 days with “Remember me” |
wp-settings-… | Website, admin area only | settings of the interface | 1 year |
JSESSIONID | App | login (session) | session, expires after 8 hours of inactivity |
XSRF-TOKEN | App | protection against forged requests | session |
Visitors of the website who do not log in receive no cookie. The language of the website follows from the address (/ German, /en/ English); on the first visit we only evaluate the language setting your browser sends with that request and store nothing. The app remembers the language you chose in your browser’s local storage (bm.language); this value never leaves your device.
4. Account in the app
You need an account to use the app. We process:
- Account data: email address, password (only as a hash, never in plain text), language, currency, role, time of registration, verification status of the email address;
- Content you create: vehicles, maintenance tasks, completed maintenance with mileage, date, notes, materials and costs. Reports and checklists as PDF are generated by the server on request.
The purpose is to provide the app; the legal basis is the contract of use (Art. 6(1)(b) GDPR). An account is not possible without an email address. Your content is visible only to you; we do not analyse it and do not pass it on.
Retention: until the account is deleted. An account whose email address is not verified within 7 days is deleted automatically. Verification links are valid for 24 hours, password reset links for 1 hour; expired links are deleted daily.
Deleting your account: Write to support@bike-maintainer.de; we will delete your account with all vehicles and maintenance records.
5. Forum and account on the website
You can create an account on the website for the forum (independent of your account in the app). We process:
| Data | Purpose | Visibility / duration |
|---|---|---|
| Username, email address, password (only as a hash) | account; the email is used for verification, password reset and optional notifications | until the account is deleted |
| Posts and topics with username and time | forum | publicly visible, until deleted |
| Reactions (thumbs up/down) | forum | visible with username |
| Profile and member list | – | visible to logged-in members only |
| Subscriptions | notification of new posts, only if you turn them on | until you unsubscribe |
| Reports of posts | moderation | until processed |
Online status, “last seen”, Gravatar profile pictures, file uploads and RSS are disabled. The legal basis is the contract of use (Art. 6(1)(b) GDPR).
Deleting your account: Write to support@bike-maintainer.de. On request, we will also delete your posts.
6. Protection against abuse
- Captcha (ALTCHA): When you register or reset your password, your browser solves a small computational task. This runs entirely on our server, without any external service, without a cookie and without characteristics of your device. Only the signature of a solved task is stored, for at most 5 minutes, so that it cannot be used twice.
- Limiting login attempts: We count failed logins per IP address (website: stored only as a hash; app: in memory only). The counters expire after 15 minutes. After 10 failed attempts, an app account is locked for 15 minutes.
The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
7. Sending emails
We send emails for verifying your address, resetting your password and (if turned on) forum notifications via the mail servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR. The data is processed in the EU.
If you email us, we use your address and message only to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed.
8. Recipients and third countries
Apart from us, personal data is only received by the processors named above (hosting provider, IONOS for sending emails). No data is transferred to countries outside the EU. There is no automated decision-making and no profiling.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to support@bike-maintainer.de.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).