Privacy policy

The controller responsible for your data is:

RadMoo UG (haftungsbeschränkt)
Donaustraße 44, 12043 Berlin, Germany
Managing Director: Gaurav Anand
Email: contact@radmoo.de

We haven’t appointed a data protection officer, because we aren’t legally required to. Send any privacy question or request to the email above.

• Account: your name, email address and password. We store the password only as a secure hash, never in readable form.
• Plan sign-up: phone number and home address (with its map position), so we can collect your bike and reach you.
• Your bikes: bike type, brand, model, colour, frame number and up to 5 photos, so the workshop can check it’s your bike.
• Repairs: the problem you describe, up to 5 photos, pickup and delivery addresses, chosen times, the workshop’s quote, your decision on it, and the repair’s status.
• Bookings without an account: your name, email address and phone number, so the workshop can reach you and you can track the repair.
• Location: only when you press “Your location” or “My location”. Your browser asks for permission first, and the position is used to place the pin on the map. We store it only if you then use it as an address.
• Technical data: when you visit the site, our host processes your IP address, browser type and the pages requested, to deliver the site and keep it secure. To stop abuse, we store a one-way hash of your IP address for at most an hour.

• To provide the service (account, plans, bookings, SOS pickups, quotes and tracking): Art. 6(1)(b) GDPR, as it’s needed for our contract with you.
• To send service emails such as password-reset links and notices that your password was changed: Art. 6(1)(b) GDPR.
• Security and preventing abuse (for example limiting sign-in attempts): Art. 6(1)(f) GDPR, our legitimate interest in a safe service.
• Your location, when you choose to share it: Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time in your browser settings.
• Keeping records required by tax and commercial law: Art. 6(1)(c) GDPR.

When you book a repair or send an SOS request, the partner workshop that RadMoo assigns receives what it needs to do the job: your name and phone number, your bike’s details and photos, the problem and its photos, and the pickup and delivery addresses. Workshops are independent businesses. They use this data to repair your bike and to contact you about it.

We use these providers to run RadMoo. They process data only on our instructions or for the purpose described:

• Vercel Inc. (USA): hosts the website. Our app server runs in Vercel’s Frankfurt region.
• Neon Inc. (USA): runs our database.
• Resend (Plus Five Five, Inc., USA): sends our emails, such as password-reset links.
• OpenStreetMap Foundation (UK): provides the map images. Your browser loads them directly, which shares your IP address with them.
• komoot GmbH (Germany): the Photon address search, which suggests addresses as you type and finds the address for a point on the map.
• FOSSGIS e.V. (Germany): calculates bike routes on the workshops map. We send only rounded positions (to about 100 m).
• Google Ireland Ltd.: only if you choose “Sign in with Google”. Google then shares your name and email address with us.

Where a provider is outside the EU, the transfer is covered by an adequacy decision (such as the EU–US Data Privacy Framework) or by the EU Standard Contractual Clauses.

• Account, garage and plan data: until you delete your account or ask us to.
• Repairs and their photos: as long as your account exists, so you can see your history. Bookings without an account: up to 12 months after the repair.
• Records required for tax and accounting: as long as the law requires, usually 6 to 10 years.
• Password-reset links: expire after 60 minutes and are deleted after use. Abuse-prevention data: at most an hour.

You have the right to:

• get a copy of your data (Art. 15 GDPR) and have it corrected (Art. 16)
• have it deleted (Art. 17) or its use restricted (Art. 18)
• receive it in a portable format (Art. 20)
• object to uses based on our legitimate interest (Art. 21)
• withdraw your consent at any time, for the future (Art. 7(3))

To use any of these rights, email contact@radmoo.de.

You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

We use only what’s needed to sign you in, remember tickets you looked up and remember your cookie choice. We use no tracking or advertising cookies, and any we add later will only run if you choose “Accept all” in the cookie banner. The details are on our Cookies page.

We update this page when our service or the law changes. The date at the top shows the latest version.