This page explains which data we process when you visit this website or sign up for updates. Status: October 2026. The German version is the original.
Controller
Peter Rinauer, Wackerstraße 61, 88131 Lindau (Bodensee), Germany. Email: peter.rinauer@pleacorp.com
The organiser is currently Peter Rinauer. In future, Plea Corp (in formation) is meant to take over. The controller will then change. If you are on our update list, we will tell you by email beforehand.
Hosting and server logs
The website runs with a hosting provider in Germany (INWX GmbH & Co. KG). When pages are requested, the server processes technically necessary connection data, for example IP address, time, requested file, amount of data, status code and browser identifier. This is needed to deliver the site, find errors and fend off attacks (legitimate interest, Art. 6(1)(f) GDPR). The host deletes these logs automatically after a fixed, short period. A data processing agreement (Art. 28 GDPR) is in place with the host.
Visitor counting only with your consent
We would like to know whether the site is useful. So on your first visit we ask in a notice whether we may count you in. Without your consent nothing is counted and nothing is sent to us. There are no cookies for visitors, and we do not store IP addresses.
If you accept, we measure pseudonymously: the page and language, the time, the tag of the link you came through (for example ?src=flyer), the referring page (only the address of the website you come from), the time zone of your device (from which we derive the country roughly, without location and without an IP lookup), whether your device supports touch input (only to recognise tablets), how long the page is open and visible, how far you scroll, which sections of the home page you see and which buttons you click. Device type, rough operating system, browser and the browser language setting are taken by the server from the normal page request, plus a hint about in-app browsers (for example Instagram). We also store a short code formed from your IP address, browser identifier, the date and a secret random value that changes daily and is then deleted. It only serves to add up several views from the same day. The IP address itself is not stored, and we do not recognise you across several days.
The legal basis is your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG), because a script reads information from your device and sends it to our server. The choice is voluntary: “Accept” and “Decline” are equal, and the site works either way. If your browser sends “Do Not Track”, we do not count. Counting data is deleted after 13 months and not passed on to third parties.
Storage in your browser
We store your choice about visitor counting in your browser’s local storage (entry “ss_consent”). This is technically necessary so that we respect your choice and do not ask on every visit (section 25(2) no. 2 TDDDG). After 12 months we ask again. You can change the choice at any time via “Statistics settings” in the footer of every page. A withdrawal applies for the future. We set no cookies for visitors. Only the internal area for us as operators uses a technically necessary session cookie.
Update list (email)
Data: When you sign up, we store your email address, your role (for example rider or sponsorship enquiry), an optional message, the optional answer on how you heard about us, the tag of the link you came through (if any), the language and the times of sign-up, sending of the confirmation email and confirmation. As proof of your consent we also store which version of the consent text you confirmed. Please do not enter health data or data of other people in the message field.
Process: You first receive a confirmation email (double opt-in). The sign-up only becomes effective once you click the button there.
Legal basis: your consent (Art. 6(1)(a) GDPR). Proof of consent rests on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
Recipients: Emails are sent through the server of our host INWX. Replies to our emails arrive in our mailbox at mailbox.org (Heinlein Support GmbH, Berlin). A data processing agreement is in place with both.
Retention: Unconfirmed entries are deleted after 7 days. Confirmed entries are deleted when you unsubscribe, at the latest 12 months after the end of the event (6 June 2027), unless you have confirmed again beforehand that you want to keep receiving news. Unsubscribing deletes your entry completely.
Withdrawal: at any time with effect for the future, via the unsubscribe link or by writing to us. Providing your email address is voluntary, but without it we cannot add you to the list.
Sponsorship enquiries: If you send a sponsorship enquiry, we process your details to answer it (Art. 6(1)(b) or (f) GDPR). We delete them when the enquiry is settled and no cooperation results, at the latest after 12 months.
Abuse protection: So nobody can flood other people’s addresses with emails through our form, we store, for at most one hour, an unreadable short value formed from your IP address and a secret value that changes daily, and use it to count attempts (legitimate interest, Art. 6(1)(f) GDPR). We also keep anonymous daily counters (for example how many sign-ups were confirmed) that are not linked to persons.
Phone notification to us: We receive new confirmed sign-ups as a pure count message (“New sign-up, total N”) on our phone via the service ntfy.sh. The message contains no personal data.
Email communication
If you write to us or reply to one of our emails, we process your address and the content to handle your request (Art. 6(1)(b) or (f) GDPR). The mailbox is hosted at mailbox.org (Heinlein Support GmbH, Berlin). We delete requests once they are settled and no legal retention duty applies, at the latest after 24 months.
Image from Wikimedia Commons
The home page loads one image directly from servers of the Wikimedia Foundation, Inc. (USA): an aerial view of Lake Constance. Your IP address, the time and your browser identifier are transmitted to Wikimedia. We have no influence on this, and Wikimedia may process the data in the USA. The legal basis is our legitimate interest in an appealing presentation (Art. 6(1)(f) GDPR). You can object by blocking the image in your browser or by writing to us. Source and licence are shown directly below the image.
Recipients, third countries, required information
We only pass your data on to the service providers named above who work on our behalf (hosting, email). A transfer to countries outside the EU and EEA only takes place where expressly stated above (Wikimedia image). You are not obliged to provide data. There is no automated decision-making, including profiling. We have not appointed a data protection officer.
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to withdraw consent. Just write to the email address above.
Right to object under Art. 21 GDPR: Where we process data based on legitimate interests, you may object at any time on grounds relating to your particular situation. Write to the email address above.
You can also lodge a complaint with a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.