Back

Privacy Policy

This is a courtesy translation. The legally binding version is the German privacy policy.

Controller

EH-Productions, Emir Hadhri, Rohlederstraße 3, 60435 Frankfurt am Main, Germany
Email: info@emirshark.de

Overview

This website is essentially an information and link page. Personal data is only processed to the extent described below: for cookieless analytics, for the voluntary sign-up to the RoadShark newsletter, for the public RoadShark profile card at /u/, and, where the site is temporarily closed, for preview access. No advertising or tracking cookies are set. We do not use third-party analytics services; all statistics run on our own servers.

Preview access (strictly necessary cookie, not currently active)

The site is currently freely accessible; no access code is requested and the cookie described below is not set. We reserve the right to place the site back into a closed preview from time to time. Where that is the case, entering the access code sets a strictly necessary cookie (name: sharkpass) that keeps you logged in for up to 60 days. It serves access control only, contains no profile data, and is not used for analytics or advertising. The legal basis is § 25 (2) no. 2 TDDDG (strictly necessary cookie) and Art. 6 (1) (f) GDPR.

While the preview is closed, to protect the access code against automated guessing, we briefly store (for a maximum of one hour) a pseudonymous hash of your IP address when the code is entered; the IP address itself is not stored. The legal basis is Art. 6 (1) (f) GDPR.

Analytics (cookieless)

For a rough measurement of page views we run our own cookieless statistics. Only aggregated figures (page views, distinct visitors, clicked links, requested page paths, a coarse device type [desktop/tablet/mobile] and the domain of the referring page) are stored. To distinguish returning visitors, a daily-rotating, non-reversible hash value is generated. Your IP address and browser identifier are only used transiently to form this hash and are not stored. No IP addresses, no cookies and no persistent device identifiers are stored; identification of individual persons is not possible. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly reach measurement).

RoadShark newsletter

You can voluntarily sign up for the newsletter for our upcoming app RoadShark to receive news and the launch notification by email.

• Data processed: your email address, the time and confirmation of your consent, the page from which the sign-up originated, and a daily-rotating, non-reversible hash derived from your IP address (your IP address itself is not stored) for abuse and spam prevention.
• Purpose: regular information and news about RoadShark (newsletter), including the launch notification.
• Legal basis: your consent pursuant to Art. 6 (1) (a) GDPR.
• Double opt-in: After signing up you receive an email with a confirmation link. Your sign-up only becomes effective after you click it. Unconfirmed sign-ups are not used and are deleted after 60 days at the latest.
• Unsubscribe / withdrawal: You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or informally by email to info@emirshark.de. You will then receive no further emails. We keep your email address on a minimal suppression list for three years so that the unsubscribe takes effect (legal basis Art. 6 (1) (f) GDPR; legitimate interest: to honour your unsubscribe and not accidentally email you again). We delete the hash value and the source page immediately in this case. To document your earlier consent, we retain the time and version of the consent as well as the confirmation time for three years after unsubscribing (Art. 6 (1) (f) in conjunction with Art. 17 (3) (e) GDPR); after that, these are deleted too. You can request complete deletion at any time.
• Storage period: until you unsubscribe; after that, your email address stays on the suppression list and the consent record (time, version, confirmation) is kept for three years, so that the unsubscribe takes effect and we can prove the earlier consent. The entry is then deleted in full. You can request complete deletion at any time.
• Recipients: Emails are sent via our host STRATO. No disclosure to other third parties and no use for other purposes takes place.

Hosting and server log files

The website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the site is accessed, the host automatically processes technical data transmitted by your browser in so-called server log files:

• IP address
• date and time of access
• file / page accessed
• browser and operating system used
• referrer URL

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). These log files are automatically deleted by the host as soon as they are no longer required for these purposes (usually after a few days to weeks). This data is not merged with other data sources.

Fonts

Fonts (Space Grotesk, Inter) are loaded locally from our own server. There is no connection to Google Fonts or other external servers.

External links

This page links to external platforms (Instagram and TikTok of the Meta and TikTok providers, YouTube of Google Ireland Ltd.). Only when you click a link are you redirected to the respective platform. From that point on, the privacy policy of the respective provider applies, over whose data processing we have no influence.

Retrieval of public social media statistics (Apify)

To display our follower and reach figures, only publicly visible profile data of our own social media channels is retrieved server-side via the Apify service. The retrieval is triggered by page views, but runs exclusively on our own server and is heavily throttled (usually at most every six hours). Your IP address or any other visitor data is not transmitted to Apify.

Public RoadShark profile card (/u/)

At emirshark.de/u/ we display the public profile card of a RoadShark user. You only reach this page by following a shared profile link or a QR code. Your browser loads the profile data directly from our database provider Supabase. For technical reasons your IP address is transmitted to Supabase; without it the request cannot be answered. Only the fields the respective user has made public are returned.

• Provider: Supabase, Inc.
• Data processed: IP address, time of access, technical details of your browser, the requested profile ID
• Purpose: displaying the requested profile card
• Legal basis: Art. 6 (1) (f) GDPR, legitimate interest in providing this feature
• Basis of processing: data processing agreement with Supabase. Where data is processed outside the EU, this is based on the EU Standard Contractual Clauses.
• Storage period: we do not store these accesses ourselves. In Supabase's system logs they are deleted automatically after a short time.

No cookies are set for this feature and no profile about you is created. If you do not open a profile card, no data is transmitted to Supabase.

RoadShark app: error reports and usage measurement

In the RoadShark app we collect two kinds of technical data to keep the app stable and to improve it. Both are tied to the consent you give on first launch and are described there; without that consent, neither collection takes place.

• Error reports: when an error occurs in the app we store the error message, the place in the program, the app version and the platform. Before a report is stored, the app strips known personal details and credentials from the text. The same report is also sent to the service Sentry, which alerts us to crashes; transmitted there are the error message, the place in the program, the app version, the device model and, for technical reasons, your IP address. No locations, no chat content, no screen recordings. Retention: 30 days in our database, deleted at Sentry after 90 days at the latest.
• Usage measurement: we count which core features are used — for example "start ride opened", "ride too short to save" or "route saved". Only the name of the feature and the point in time are stored. No location, no content, no names, no free text. Retention: 90 days.

• Purpose: finding and fixing errors, recognising which features get in the way or are not found at all
• Legal basis: Art. 6(1)(a) GDPR (your consent on first launch), revocable with effect for the future
• Attribution: pseudonymous, via your account identifier — needed to tell whether a feature blocks many people once or one person often. If you delete your account, this data is deleted with it.
• Recipient: our database provider Supabase, Inc. and, for crash and error reports, the service Sentry (Functional Software, Inc., USA), each under a data processing agreement. Sentry processes the reports in the EU region; the ingest server is located in Germany. No data is passed to advertising networks, and no cross-app or cross-device tracking takes place.

Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Postfach 3163, 65021 Wiesbaden, Germany. To exercise your rights, please use the contact details above.

Right to object

Insofar as we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object at any time for reasons arising from your particular situation (Art. 21 GDPR). This applies in particular to the server log files, the analytics, the preview cookie and the suppression list. Please address your objection to info@emirshark.de.

Imprint