Privacy policy
This site collects as little as possible. It sets no cookies of its own and uses no analytics, tracking or advertising tools. Fonts and images are served from this site, so loading a page does not contact any third party. This policy explains the little data that is still processed, as required by Art. 13 GDPR.
Controller
Fynn van Rießen, see the legal notice for the postal address. Email: info@indoorcycling.bike
Hosting
This site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser necessarily sends data that Cloudflare records in server logs: your IP address, the date and time, the page requested, the referring page and your browser’s user agent. Cloudflare uses this data to deliver the site and to protect it against attacks and abuse, and keeps it only as long as needed for those purposes.
If Cloudflare has to check whether a visitor is a bot, it can set a strictly necessary security cookie (such as __cf_bm or cf_clearance). These cookies don’t require consent under § 25 (2) no. 2 TDDDG.
The legal basis is Art. 6 (1) (f) GDPR: my legitimate interest in delivering the site securely and reliably. Cloudflare processes the data on my behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA rely on the European Commission’s adequacy decision (Art. 45 GDPR). More in Cloudflare’s privacy policy.
If you write to me, I process your email address, your name if you give it, and your message in order to reply. The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in answering your message. My email provider processes the messages on my behalf. I delete the correspondence once your request is dealt with, unless statutory retention periods apply.
Links to other sites
This site links to apps, manufacturers and publishers. Nothing is sent to them until you click a link. From then on, their own privacy policies apply.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). To use these rights, email me. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live, work or where the alleged infringement took place.
Right to object
Where I process your data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then stop processing it unless I can show compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
Other information
You are not obliged to provide any personal data. Without the technical data described under Hosting, however, the site can’t be delivered to you. There is no automated decision-making or profiling. All pages are served over an encrypted connection (HTTPS).
Last updated: 30 September 2026