Privacy policy
Last updated: 2 August 2026
1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Richard Koch
Untere Dorfstraße 11
97270 Kist
Germany
Email: kontakt@free-bikefitting.com
2. The important part first: your videos
The video analysis on this website runs entirely on your own device. The video you select is processed only in your browser’s memory. It is not transmitted to any server, not stored, not cached and not passed on to third parties. The details you enter about height, weight, age, complaints and bike likewise never leave your device — they are held only in the memory of the open page and discarded when you close the browser tab.
To that extent no processing of personal data by us takes place. The PDF report is likewise generated locally in your browser and downloaded directly.
3. Hosting and server log files
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, Vercel processes technically necessary access data as a processor, in particular:
- the IP address of the requesting device
- date and time of access
- the page or file requested
- volume of data transferred and HTTP status code
- browser and operating system used
- referrer URL
This processing is technically required to deliver the website and serves the security and stability of the service. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing the site free of technical faults).
As Vercel is based in the USA, data may be transferred to a third country. Vercel is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses are additionally in place. Further details in Vercel’s privacy policy: vercel.com/legal/privacy-policy.
A data processing agreement under Art. 28 GDPR is in place with Vercel.
4. External resource: MediaPipe
To detect body landmarks in the video, the MediaPipe Pose library by Google is used. It is loaded from the content delivery network jsDelivr (operated by Prospect One, Kraków, Poland) when you open the analysis page.
For technical reasons this transmits your device’s IP address to jsDelivr. No content from your video is transmitted — the library is a program that then runs locally in your browser. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a functional and performant analysis).
jsDelivr privacy information: jsdelivr.com/terms/privacy-policy-jsdelivr-net.
5. No cookies, no tracking
This website sets no cookies and uses no web analytics services, no advertising networks and no social media plugins. No profiling and no automated decision-making within the meaning of Art. 22 GDPR takes place.
Fonts and images are served entirely from our own server. In particular, no Google Fonts are loaded from external servers.
6. Your rights
You have the following rights in relation to the controller:
- access to the data processed (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
An informal message to the email address above is enough to exercise them. As we store no personal data beyond the server log files, we are generally unable to provide information beyond those logs.
7. Right to lodge a complaint
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.
8. Changes to this policy
We adapt this privacy policy whenever the functions of the website or the legal situation change. The version available here applies.