Privacy policy

Last updated: 3 August 2026

This is a courtesy translation. The German version is the legally authoritative one.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Richard Koch
Untere Dorfstraße 11
97270 Kist
Germany
Email: kontakt@free-bikefitting.com

2. The important part first: your videos

The video analysis on this website runs entirely on your own device. The video you select is processed only in your browser’s memory. It is not transmitted to any server, not stored, not cached and not passed on to third parties. The details you enter about height, weight, age, complaints and bike likewise never leave your device — they are held only in the memory of the open page and discarded when you close the browser tab.

To that extent no processing of personal data by us takes place. The PDF report is likewise generated locally in your browser and downloaded directly.

3. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, Vercel processes technically necessary access data as a processor, in particular:

This processing is technically required to deliver the website and serves the security and stability of the service. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing the site free of technical faults).

As Vercel is based in the USA, data may be transferred to a third country. Vercel is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses are additionally in place. Further details in Vercel’s privacy policy: vercel.com/legal/privacy-policy.

A data processing agreement under Art. 28 GDPR is in place with Vercel.

4. External resource: MediaPipe

To detect body landmarks in the video, the MediaPipe Pose library by Google is used. It is loaded from the content delivery network jsDelivr (operated by Prospect One, Kraków, Poland) when you open the analysis page.

For technical reasons this transmits your device’s IP address to jsDelivr. No content from your video is transmitted — the library is a program that then runs locally in your browser. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a functional and performant analysis).

jsDelivr privacy information: jsdelivr.com/terms/privacy-policy-jsdelivr-net.

5. Audience measurement: Vercel Web Analytics and Speed Insights

We use Vercel Web Analytics and Vercel Speed Insights to see which pages are visited and how quickly they load. Both services are operated by our host, Vercel Inc., and run as part of this website; no connection to an outside provider is established.

Both services work without cookies. No information is stored on or read from your device, and no recognition across sites or devices takes place. To distinguish visits, a hash is derived from the incoming request and discarded after 24 hours. Your IP address is not stored in the process.

The following is collected per page view:

The evaluation is exclusively aggregated. In our assessment no personal reference can therefore be established. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in designing this website to suit demand and in optimising it technically). As nothing is stored on or read from your device, no consent under § 25 TDDDG is required and no cookie banner is needed.

Further details on the data processing: Vercel Web Analytics and Vercel Speed Insights.

6. No advertising, no cross-device tracking

Beyond the audience measurement described above, this website sets no cookies. No advertising networks and no social media plugins are embedded. No profiling and no automated decision-making within the meaning of Art. 22 GDPR takes place.

Fonts and images are served entirely from our own server. In particular, no Google Fonts are loaded from external servers.

7. Your rights

You have the following rights in relation to the controller:

An informal message to the email address above is enough to exercise them. As we store no personal data beyond the server log files, we are generally unable to provide information beyond those logs.

8. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

9. Changes to this policy

We adapt this privacy policy whenever the functions of the website or the legal situation change. The version available here applies.