Privacy Policy

This Privacy Policy explains which personal data is processed when you use myrig-online.wiki (the "Website"): the product database and price comparison, the rig builder, the wishlist and the contact form. The Website has no user accounts: there is no registration and no login.

1) Controller

Jannik Henke
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany
Email: info@myrig-online.wiki
Contact form: myrig-online.wiki/contact

2) In short

We do not use analytics, tracking or advertising services. All scripts, styles, fonts and images are served from our own server; your browser does not contact any third party while you browse. A third party only receives data if you actively choose it, by following a link to another website (section 8). The prices in the price comparison are retrieved by our server from retailer and manufacturer websites; no data about you is transmitted in the process.

3) Hosting

The Website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Helsinki (Finland, EU). Hetzner processes data on our behalf under a data processing agreement (Art. 28 GDPR). Hosting involves no transfer to countries outside the EU.

4) Server log files

For every request, our web server (reverse proxy) writes an access log entry containing:

• IP address,
• date and time,
• the request line, i.e. method and requested address including parameters (for example a search term in /search?q=…),
• status code and amount of data transferred.

The previously visited page (referrer) and the browser identification (user agent) are not logged, and neither is the content of forms you submit. The application itself keeps no access log of its own.

Purposes: delivering the Website, troubleshooting and defending against attacks.
Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a secure and stable service.
Retention: the logs are deleted after 7 days.

5) Protection against attacks (CrowdSec)

To protect the Website we use the security software CrowdSec. It checks the IP address of every request against a block list (IP reputation) and analyses the access log for attack patterns. If an IP address is flagged, it is blocked temporarily and a signal (IP address, time, type of the detected pattern) is shared with CrowdSec SAS, France (EU), which uses such signals to maintain a shared block list.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is protecting the Website against attacks.
Retention: local alerts and decisions are deleted after 7 days.

6) Cookies and local storage

We only use storage on your device that is strictly necessary for the functions you use:

• Session cookie and XSRF-TOKEN cookie: keep your session and protect forms against cross-site request forgery. They expire with the session. On our server the session record contains the session ID, the session data and the time of last activity, but no IP address and no user agent; it is deleted automatically after the session expires.
• Local storage (localStorage) in your browser: that you dismissed the cookie notice, the IDs of the products on your wishlist, and the build you put together in the rig builder (build name and product selection). It stays in your browser until you delete it; we do not store it on our server. To show your wishlist, your browser sends these product IDs to our server and receives the public product details; to restore your build, it loads the product lists of the categories concerned (such requests appear in the server log like any other request, see section 4). A wishlist cookie set by an earlier version of the Website is moved into local storage and deleted on your next visit.

Legal basis: storage on and access to your device is strictly necessary to provide the service you request (§ 25(2) No. 2 TDDDG); the related processing is based on Art. 6(1)(b) and (f) GDPR. You can delete cookies and local storage in your browser settings at any time.

7) Contact form and email

If you write to us via the contact form or by email, we process the information you provide (via the form: your name if given, your email address and your message) in order to answer your request.

A message sent via the form is delivered as an email to our own mailbox on our own mail server and is not stored on the Website. We do not include your IP address or user agent in that email. Spam protection works without third parties: a hidden field, a signed time stamp and a limit on the number of messages; for this limit your IP address is kept only as a hashed value in the server-side cache for at most one hour.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in answering requests); for requests about a contract, Art. 6(1)(b) GDPR.
Retention: we delete the correspondence once your request has been dealt with, unless statutory retention obligations apply.

8) Links to other websites

The Website links to shops, manufacturers and other websites (for example the "Where to buy" links). Nothing is transmitted before you click. When you follow a link, you leave our Website; your browser may send the address of our website as referrer, and the operator of the target site is responsible for its own processing. Links to shops are normal links without affiliate or commission tracking and without tracking parameters.

9) Recipients and international transfers

Recipients are Hetzner Online GmbH (hosting, processor), CrowdSec SAS (attack signals, see section 5), and authorities where we are legally obliged. We do not transfer personal data to countries outside the EU/EEA.

10) Security

We use appropriate technical and organisational measures, including TLS encryption in transit, access controls, rate limits and the attack protection described above.

11) No automated decision-making

We do not use automated decision-making, including profiling (Art. 22 GDPR).

12) Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). To exercise your rights, write to info@myrig-online.wiki or use the contact form.

13) Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is:

The State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen)
Prinzenstraße 5, 30159 Hannover, Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de

14) Children

The Website is not directed at children. If you believe that a child has provided personal data, please contact us so we can delete it.

15) Changes to this Privacy Policy

We update this Privacy Policy when legal, technical or operational changes require it. The "Last updated" date indicates the current version.