LEGAL INFORMATION · 9 SEPTEMBER 2026
Privacy
1. Controller
RSites GmbH, Am Herrnberg 5, 93158 Teublitz, Germany, represented by Simon Röhrl, is responsible for account, billing and website data. Contact simon@rsites.net or +49 160 97585670 for privacy enquiries.
2. Website and service hosting
The website is served by Cloudflare Pages; account, relay and billing endpoints run on Cloudflare Workers with Workers KV, all provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Requests involve IP addresses, request URLs, timestamps, browser information and technical logs for delivery, security and troubleshooting. The legal basis is our legitimate interest in secure service operation under Article 6(1)(f) GDPR.
Cloudflare may process data outside the EU and EEA. See its privacy policy and data processing terms for recipients, transfer safeguards and retention information.
3. Checkout and payments
Stripe Managed Payments operates checkout and billing, with Link as merchant of record. Stripe independently processes payment, billing address, business name, tax and transaction information for the sale. For EEA customers, Stripe’s privacy policy identifies the responsible Stripe entities, including Stripe Payments Europe, Limited, Ireland. We receive customer and subscription identifiers, subscription status and billing information. Card details are handled by Stripe and are not stored by the BlitzFrames application.
Processing is necessary for the contract under Article 6(1)(b) GDPR and legal accounting or tax obligations under Article 6(1)(c) GDPR. For representatives of a business customer, our legitimate interest in providing and administering the service under Article 6(1)(f) GDPR also applies. See Stripe’s privacy policy for its processing and international transfers.
4. Account access and cookies
A necessary, signed cookie named bf_checkout links your browser to the checkout session for relay access and billing management. It expires after 30 days. The service also stores customer and subscription references, access status and the access token in Cloudflare KV. These are used to provide and secure the requested account features. The website does not use marketing or analytics cookies.
5. Rendering and usage
The integration sends render instructions, bundle references, input properties and signed URLs needed to process a render to the selected render server. Bundle assets and inputs may be cached for rendering. Usage reports contain an attempt identifier, elapsed duration and render references. Failure reports contain technical error and server information. We use these for delivery, billing and troubleshooting; billing endpoints do not need your video content.
You decide which content you submit. Where we process personal data in that content on your behalf, the roles, subprocessors, processing locations, safeguards and deletion arrangements must be established in a data processing agreement before submission. Contact us to arrange this.
6. Support and retention
Support enquiries include the contact details and information you provide. We use them to respond and administer the service. Account and operational data are retained for the service, security and resolution of enquiries or disputes, then deleted or anonymized when no longer required. Billing and business records subject to legal retention are kept for the applicable statutory periods. Content retention arrangements are set out in the applicable service and data processing agreement.
7. Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction and portability. You may withdraw consent prospectively where processing is based on consent. You may object to processing based on legitimate interests on grounds relating to your particular situation.
Contact simon@rsites.net to exercise your rights. You may complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision. We do not make automated decisions with legal or similarly significant effects. Providing account and billing information is necessary to enter and perform the subscription contract; browsing the public website does not require an account.