Privacy Policy

Under Articles 13 and 14 of the GDPR, this policy explains what personal data I process, for what purposes and on what legal basis. It applies to this website and the FsRdp server operated by me.

1. Controller

2. Accessing This Website (Server Logs)

When you access these pages, your browser transmits technically necessary data that my web server logs: browser type and version, operating system, referrer URL, hostname of the accessing computer, IP address and time of the request.

The purpose is to operate the website and ensure its stability and security. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is in a functioning website protected against attacks. These data are not combined with other data sources. The logs are deleted within 30 days unless a specific security incident requires longer retention to preserve evidence.

3. Cookies

This website uses a session cookie for session-related functions, particularly the security check in the license order form. It contains a random session identifier and is set as a session cookie without a fixed expiry date.

When you select a language using the flags, your choice (“de” or “en”) is stored in the “FsRdpLanguage” cookie for up to one year. This allows your explicit language preference to be taken into account in entry links on later visits. The language of a specific page continues to be determined by its URL.

No analytics, tracking or advertising services are embedded. In particular, there is no audience measurement or profiling. You can delete stored cookies in your browser settings.

4. Map Display (OpenStreetMap)

You can display a map on the legal notice page. The map is loaded only after you explicitly click the “Load Map” button, rather than automatically when the page opens. Only then are map tiles retrieved from servers of the OpenStreetMap Foundation, St Johns Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; your IP address is transmitted to the Foundation in the process.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You give this consent by clicking and may withdraw it at any time with effect for the future by reloading the page without clicking again. The European Commission has issued an adequacy decision for the United Kingdom. The OpenStreetMap Foundation's privacy policy is available at osmfoundation.org/wiki/Privacy_Policy.

The Leaflet map library is served from my own server. No third-party content delivery network is contacted for this purpose.

5. Contacting Me

If you provide data to me by email, phone or another means, I store them to handle your inquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR where the inquiry concerns entering into or performing a contract, and otherwise Article 6(1)(f) GDPR. I do not disclose these data to third parties without your consent. I delete them once your inquiry has been fully resolved, provided no statutory retention periods apply, particularly under commercial and tax law, generally 6 to 10 years.

6. Ordering an FSRdp License

You can order an FSRdp server license using the form at /FsRdp/en/Order.aspx . The following information applies only to this process; use of the software itself is described in Section 7.

6.1 Data I Collect

• Billing address: company (optional), first and last name, street, postal code, city, country and, if provided, your VAT identification number.
• Contact details: your email address and at least one phone or mobile number. I need the phone number because I call you before issuing the license: the server name for which the license is issued cannot be changed later.
• License details: the DNS name of your future server, its operating system, the number of user licenses and your notes.
• Accompanying technical data: the time of the order and the IP address from which it was submitted.

Without the information marked as required, I cannot issue the license or prepare an invoice. There is no automated decision-making or profiling.

6.2 Purposes and Legal Basis

I process these data to handle your order, confirm the details with you by phone before issuing the license, issue the license file, send it to you and prepare the invoice. The legal basis is Article 6(1)(b) GDPR (entering into and performing a contract). Where I must retain records for commercial and tax law purposes, I rely on Article 6(1)(c) GDPR in conjunction with Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB).

The IP address and security check (CAPTCHA) serve solely to prevent automated orders. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is in protecting the form against abuse. The security check is generated on my own server; there is no third-party service involved. It requires only the session cookie mentioned in Section 3.

6.3 Where the Data Go

On submission, your details are transmitted to me by email; a confirmation containing the same details is sent to the address you provide. The email is sent with transport encryption through my own mail server. The order is also recorded in a log file on the web server so it is not lost if email delivery fails; this file cannot be accessed from the internet.

Payment: for bank transfers, my bank receives the information accompanying any transfer. If you choose the PayPal link instead, you leave my website; PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, is responsible for the payment and its privacy policy applies. I receive payment confirmation containing your name and the amount. The order page embeds no PayPal content ; data are transmitted to PayPal only when you click the link.

Beyond this, I disclose the data only to my tax adviser and the tax office where required for accounting purposes.

6.4 Retention Periods

I delete the log file on the web server once the order has been processed. I delete orders that do not result in a contract within six months. If a contract is formed, I retain the contractual and invoice documents for the statutory periods, generally ten years, and restrict further processing to that purpose.

7. Using the FsRdp Server

FsRdp is software for screen sharing, remote support, voice transmission and file exchange. You can use it through an installed application or your browser. The following information applies to the server operated by me . If your employer or service provider operates its own FsRdp server, that operator is the controller, rather than me.

7.1 Data Processed During Use

• IP address of your connection
• Your display name and room number
• Transmitted screen content and camera images
• Room audio (speech)
• Chat messages and exchanged files
• During remote control: your mouse and keyboard input and clipboard content

The server acts as a relay: it forwards this content between participants in a room. Image, audio, chat and file content are not stored permanently; they exist only as long as they are held in memory for forwarding. They are gone when the room ends. The legal basis is Article 6(1)(b) GDPR; without this processing, the session you requested cannot take place.

7.2 Security Logs and IP Blocking

In security-related incidents, such as repeated login attempts with invalid room numbers, the server logs the incident with the IP address and blocks that address for one hour. The block exists only in memory and ends no later than when the service restarts. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in preventing abusive access.

7.3 Session Recording

The room owner can record a session as a video file. Recording takes place exclusively on the owner's own computer; no copy is created on my server. All participants see a clearly visible notice in the application window for as long as recording continues. The person who starts the recording is responsible for it.

7.4 Live Captions and Translation

The room owner can enable live captions. When this feature is active, room audio is transmitted to an external speech recognition service that recognizes and translates the spoken text. The provider used is OpenAI, L.L.C., 1960 Bryant Street, San Francisco, CA 94110, USA. This constitutes a transfer to a third country ; it relies on the EU-US Data Privacy Framework or standard contractual clauses under Article 46(2)(c) GDPR. A data processing agreement under Article 28 GDPR is in place with the provider.

The feature is disabled by default. When enabled, all participants see a clearly visible notice in the application window for as long as it is active. Only sections containing speech are transmitted; silence is filtered out on my server. The recognized text is neither logged nor stored.

7.5 Browser Access

Browser access sets no cookies and loads no third-party resources. The following information is stored in your browser's local storage:

• an identifier for your communication permissions in the room and your chosen spoken language; both are necessary for the service you explicitly request and therefore do not require consent under Section 25(2), point 2, TDDDG;
• your display name, only ifyou select “Remember my name on this device”. The legal basis is your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Unchecking the box immediately deletes the stored name.

These details remain in your browser and are not transmitted to me.

8. Hosting

This website is hosted by Host Europe GmbH, Hansestraße 111, 51149 Cologne. The provider processes the data listed in Section 2 on my behalf; a data processing agreement under Article 28 GDPR is in place.

9. Recipients and Transfers to Third Countries

Except in the cases described in Sections 4, 6, 7.4 and 8, I do not disclose personal data to third parties. The recipients are the map service (Section 4); for license orders, my bank or PayPal, my tax adviser and the tax office (Section 6); the transcription/translation service when live captions are enabled (Section 7.4); and my hosting provider (Section 8). A transfer to a third country takes place exclusively in connection with live captions (Section 7.4), and only when that feature is enabled.

10. Your Rights

You have the following rights in relation to me:

• access to your stored personal data (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• objection to processing based on a legitimate interest (Article 21 GDPR)
• withdrawal of consent with effect for the future (Article 7(3) GDPR)

To exercise these rights, use the contact details listed in Section 1.

Right to Lodge a Complaint with a Supervisory Authority: Under Article 77 GDPR, you may also lodge a complaint with a data protection supervisory authority at any time. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach (www.lda.bayern.de).

11. Encryption and Security

This website and connections to the FsRdp server are encrypted with TLS. Nevertheless, data transmission over the internet may have security vulnerabilities; complete protection against access by third parties is not possible.

12. Objection to Advertising

I expressly object to the use of the contact details published as part of the mandatory legal notice to send advertising and informational materials that have not been explicitly requested. I reserve the right to take legal action in the event of unsolicited advertising.

13. Last Updated

This privacy policy was last updated in September 2026. I will update it when my services change.