The German version is legally binding.
Controller
MakIT e.U., Inhaber Markus Stadtmann
Pfandwiesengasse 38E, 2630 Ternitz
Email: markus@stadtmann.at
We only process personal data as far as necessary to run this community, on the basis of the GDPR and the Austrian Data Protection Act.
Server and access data
The website runs on our own server at Hetzner Online GmbH in Germany (EU). Whenever a page is requested, the web server processes technically necessary access data: IP address, time, requested address, browser and operating system. This serves the secure and error-free delivery of the site (Art. 6(1)(f) GDPR); it is not analysed for advertising or analytics.
Cookies
We do not use analytics, advertising or tracking cookies. Only when you log in, WordPress sets technically necessary login cookies (e.g. wordpress_logged_in_…, wordpress_test_cookie); with “stay logged in” they last 14 days, otherwise until you close the browser or log out. If you choose the language at the top, the site remembers it in a cookie fa_lang (one year); otherwise your browser language applies. If you put something in the shop cart, it is kept in the cookie fa_korb (only product numbers and quantities, 30 days, deleted when empty).
Member account
For registration we store your name, email address and your password (only as an encrypted hash that nobody can read). Optionally you can add your town or state and your club in your profile and choose whether other members see you in the rider list. Others see your club next to your name in the rider list and the standings; if you choose Float Austria, the administrators see this and confirm your membership – only then does Float Austria appear next to your name. The purpose is taking part in the community (Art. 6(1)(b) GDPR). We delete your account at any time on request – a short email is enough.
Tours, news and rider list
Tours and news you create, and your participation in tours, are visible to logged-in members together with your name. You can delete your own tours and posts yourself.
Rides (Floaty, Float Control, VESC Tool, GPX)
Your browser analyses uploaded files; the file itself never reaches our server. We only store key figures (date, duration, distance, speed, climbing, battery, consumption, temperatures) and the simplified route. If you wish, the browser removes the start and end within 500 m beforehand so that, for example, your home address does not appear on the map. Speeds are only shown to logged-in members. You decide whether a ride including your name is visible to all visitors, only to logged-in members or only to your friends, and you can delete it at any time (Art. 6(1)(a) and (b) GDPR).
Entry lists and results of events
For races at Float Austria events we store the entry list (member or name, category, start number), the times of the timed runs and heats and the places; administrators enter them, members sign up and withdraw themselves. Places and names are public – members appear as chosen under “show in leaderboard”, otherwise as “Member” –, times are only visible to logged-in members. An administrator uploads event courses from Floaty or as GPX; they are analysed in the browser and only length, climbing and the simplified route are stored. If you upload a recording from Floaty or Float Control for the time comparison of an event, your browser reads the file and only sends its header line plus time and GPS position of the sections over the course to our server, which calculates the time and discards the points right away. We store the course, time, splits, date, start of the run, the app and your member account; rank, name (as above) and date are public, the time is only visible to logged-in members. You can delete your times there yourself; with your account they disappear from the ranking. Children are not ranked. The legal basis is running the event (Art. 6(1)(b) GDPR); riders without an account can request deletion at any time.
Live timing at events
At some events we measure times with a timing device (transponder on the board or rider). The RFID Tracker of the organisers (a small computer, Raspberry Pi, with a reader) sends our server only the transponder ID and the time of day for every pass at the start, a split or the finish; the connection is encrypted and protected with a key. Who a transponder belongs to is set at the event (assigned for that event only) or follows from the start number in the entry list. The live view on the event page shows rank and names publicly (members as chosen under “Show in leaderboard”, otherwise as “Member”), times only to logged-in members. Only logged-in, confirmed Float Austria members can start and stop the timing. Live times stay stored with the event until an administrator deletes them; they do not count for points. The legal basis is running the event (Art. 6(1)(b) GDPR); on request we delete your times right away.
Boards and config files
When you add a board, we store its details (name, type, status, year, odometer, range, weight, controller, motor, battery, BMS, firmware, tyre and accessories, setup note), a photo if you upload one, and uploaded config files (e.g. from the VESC Tool). We store the photo resized and without metadata – including the location that phones write into photos. Depending on your choice the board is visible to all visitors or only to members; config files only to logged-in members; the photo is stored under a random address on our server. The analysis on a board’s page (kilometres, consumption, battery, temperatures, routes, milestones) is calculated from the rides the visitor may see anyway. In the maintenance log you voluntarily enter the date, odometer reading, type and a note; logged-in members see it, your reminders only you. The image to share is created in your browser and is not uploaded. You can delete boards, files and entries at any time (Art. 6(1)(a) and (b) GDPR).
Leaderboard and points
From your rides (distance, climbing, meeting points a ride passes), tours and posts the site calculates points, level and badges; speeds do not count. In your profile you choose whether you appear in the leaderboard for all visitors, only for members or not at all (default: members only). If you voluntarily enter your name in the European Onewheel League or on RideHermes, your results there count too, your name here appears next to your entry in those standings and your placings there on your card in the rider list – as you chose under “Show in leaderboard” (Art. 6(1)(a) GDPR).
Messages, notifications and friends
We store messages to other members with sender, recipient, time and read status on our server so that you can read them; they are not end-to-end encrypted. You can delete your own messages, and deleting your account deletes your messages too. Friendships, requests and blocked members are stored in your account. The site shows you notifications (new message, request, tour, a friend’s ride, badge); by email you only receive new messages and friend requests, only with a link and without the text, and you can switch this off in your account. For this the site remembers your language. In your profile you choose who may write to you (all members or friends only) (Art. 6(1)(b) GDPR).
League standings
The leaderboard shows public standings of the European Onewheel League (published spreadsheets) and of a season on RideHermes (ridehermes.app) with the names riders compete under there. Our server fetches these pages once a day; no visitor data is transmitted. We do not take over weight or speeds, times are only visible to logged-in members, and we do not show the standings of children and teenagers (groms). If you are listed there and do not want to be named here, just write to us.
Sign-up and contact
With the sign-up form you send us your name, email address, optionally your town and a message. We store the details in WordPress and receive them by email in order to contact you (Art. 6(1)(a) GDPR, your consent in the form). We delete them at any time on request.
Event registration
When you register for an event, we store your name, email address, number of people, time, language and whether you are registered or on the waiting list. If you register with your member account, we take your name and email address from the account and link the registration to it (for races also to the category). If the event has an entry fee, we add the amount, the payment reference and whether, when and how (online, bank transfer, cash) it was paid. Only the organisers (administrators of the site) see the list; publicly the site only shows how many places are left. You receive a confirmation by email and further ones if you move up from the waiting list or your entry fee has been paid. The purpose is organising the event (Art. 6(1)(a) and (b) GDPR); registrations are deleted automatically one month after the event, or immediately on request.
Entry fees, Stripe and PayPal
If you pay an entry fee online, we forward you to the Stripe checkout page (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). For this we send Stripe the amount, the name of the event, your name, your email address and the number of your registration. You enter card or account details directly at Stripe; we never receive them – Stripe only tells us whether the payment went through. Stripe also processes the data as an independent controller (e.g. against fraud and because of legal obligations) and may transfer it to the USA (EU-US Data Privacy Framework); more at stripe.com/at/privacy. If you choose PayPal, we forward you to PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) and send the same details without your email address; you log in and pay directly at PayPal, and we only learn whether the payment went through and its transaction number. PayPal is also responsible for its own processing; more at paypal.com/at/legalhub/privacy-full. If an event offers a PayPal.me link or another payment link (such as SumUp or Revolut), the button opens that provider’s page; whatever you enter there is processed by the provider under its own privacy policy, and we only pass on the amount (for PayPal.me in the address). If you then report “I have paid” (also for a bank transfer), we store which method you used and when, and the organisers match it against the incoming payment. For a bank transfer the page shows our bank details and a QR code for your banking app; the code is created on our server and nothing is sent to third parties. The legal basis is processing your registration (Art. 6(1)(b) GDPR). Payment records (amount, date, name, payment reference) are kept at Stripe or our bank and in our accounts, which we keep as long as the law requires (seven years in Austria, Section 132 BAO; Art. 6(1)(c) GDPR).
Shop
The cart is only kept in your browser (cookie fa_korb); we do not store anything about it on the server. Paying and ordering is not possible yet; before a payment provider is added, we will update this policy.
Maps from OpenStreetMap
The maps load map images from tile.openstreetmap.org (OpenStreetMap Foundation, United Kingdom; an EU adequacy decision applies to the UK). The map server receives your IP address and the map area shown. The legal basis is our legitimate interest in a usable map (Art. 6(1)(f) GDPR). See the privacy policy of the OpenStreetMap Foundation.
Fonts, images and videos
Fonts, the map library, images and videos are hosted on our own server – no content from Google, Instagram, YouTube or other platforms is embedded, and profile pictures from Gravatar and emoji graphics from WordPress.org are switched off. Links to social networks are plain links; you only leave this site when you click them.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Just write to markus@stadtmann.at. If you believe we are not processing your data correctly, you can complain to the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).
Last updated: November 2026