Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:

Vegvísir GmbH
Ballindamm 27
20095 Hamburg
Germany
Managing Director: Mark C. Reinold
Email: support@rike.club

2. General Information

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data is any information relating to an identified or identifiable natural person.

3. Data Collected When Visiting the Website (Server Log Files)

When you access our website, our hosting provider automatically stores information transmitted by your browser in so-called server log files. This includes:

• Anonymized IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Referrer URL
• Browser type, browser version, and operating system used

This data is processed to ensure the trouble-free operation of the website and to maintain system security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The log files are deleted after no more than 30 days.

4. Hosting

Our website and application are hosted by the following service providers:

• Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA – for web hosting and edge delivery. Processing takes place predominantly in EU data centers (Frankfurt). Legal basis: Art. 6(1)(f) GDPR. Standard Contractual Clauses pursuant to Art. 46 GDPR are in place for transfers to third countries.
• Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992 – for database hosting, authentication, and file storage. Processing takes place in EU data centers (Frankfurt). Legal basis: Art. 6(1)(b) and (f) GDPR.

We have concluded data processing agreements pursuant to Art. 28 GDPR with both providers.

5. Registration and User Account

Registration is required in order to use our platform. The following mandatory information is collected:

• Name
• Email address
• Password (stored in encrypted form)
• Affiliation with a club/tenant

Optional information (e.g. profile picture, phone number, motorcycle details) may be added voluntarily. The processing is carried out for the performance of the user agreement pursuant to Art. 6(1)(b) GDPR. The data is stored until the account is deleted or in accordance with statutory retention periods.

6. Demo Access

When you use our free demo access, we create a temporary tenant with test data. This data is deleted automatically and irrevocably no later than 14 days after creation. Legal basis: Art. 6(1)(b) GDPR.

7. Contacting Us

When you contact us by email, the details you provide are stored for the purpose of processing the inquiry and in case of follow-up questions. Legal basis: Art. 6(1)(b) or (f) GDPR.

8. Payment Processing (Stripe)

For processing paid subscriptions we use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When a subscription is taken out, payment data (name, billing address, payment method) is transmitted directly to Stripe and processed there. We ourselves do not receive or store any credit card or bank account data. Legal basis: Art. 6(1)(b) GDPR. Stripe's privacy policy: https://stripe.com/privacy.

9. Transactional Emails (Resend)

To send transactional emails (e.g. sign-up confirmations, password resets, event notifications) we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The transfer is based on Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR.

10. Push Notifications

If you enable push notifications, we store the push endpoint provided by your browser as well as the cryptographic keys required for delivery. Enabling them is voluntary and can be revoked at any time in your profile settings. Legal basis: Art. 6(1)(a) GDPR (consent).

11. AI Assistant

In the Platin plan we offer an AI assistant. Input sent to the assistant is transmitted to Anthropic PBC (548 Market Street PMB 90375, San Francisco, CA 94104, USA) in order to answer your request. According to its own statements, Anthropic does not process this data for training purposes. Transfers are based on Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR.

12. Cookies

Our website only uses technically necessary cookies that are required for the operation of the website (e.g. session cookies for authentication, consent status, tenant selection, language selection). No consent is required for these cookies (§ 25 Abs. 2 Nr. 2 TDDDG – German Telecommunications Digital Services Data Protection Act). We currently do not use any tracking, analytics, or marketing cookies.

An overview and the option to withdraw your consent are available at any time via the “Cookie settings” button in the footer.

13. Your Rights

You have the right at any time to:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent you have given (Art. 7(3) GDPR)
• Lodging a complaint with a supervisory authority – the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information

To exercise your rights, an informal message to support@rike.club is sufficient.

14. Data Security

During website visits and within the application we use the widely adopted TLS (Transport Layer Security) protocol in combination with the highest level of encryption supported by your browser. Passwords are stored exclusively in hashed form.

15. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services in the privacy policy.