1. Controller
The controller responsible for data processing on bss01.de and bss01.com is the provider named in the Imprint:
Sebastian Schneider, W.-Busch-Str. 16, 98527 Suhl, E-Mail: kontakt@bss01.de
This privacy policy applies to both domains: bss01.de (German) and bss01.com (English). Both are the same website, a private, non-commercial archive about the BSS01 device. There is no advertising, no audience measurement and no tracking.
2. Hosting
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
With every request, the server automatically stores: the shortened IP address (the last two blocks are set to 0), date and time, the requested address, status code, amount of data transferred, referrer and browser identification. These log files are deleted after 14 days. From them, the provider generates non-public access statistics that do not relate to any person.
All requests are routed through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the pages, encrypts the connection and fends off attacks and automated access (bots). In doing so, Cloudflare processes your IP address, the requested address, browser identification and technical connection data.
Cloudflare may transfer data to the USA. A data processing agreement is in place with Cloudflare (Data Processing Addendum, part of its terms of service). Data transfers are based on Cloudflare's certification under the EU-U.S. Data Privacy Framework and, as a fallback, on the EU Standard Contractual Clauses.
The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in a secure and available website.
3. Cookies and local storage
The website does not set any cookies. For bot detection, Cloudflare may briefly set a technically necessary cookie.
If you change whether the navigation stays visible while scrolling, your browser remembers this setting in its local storage for up to six hours. Older browsers also store there whether they support the WebP image format. Neither contains personal data.
The legal basis is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); no consent is required for this.
4. Registering devices
Using the "Register my BSS01" form, you can add a device without an account. Every entry is checked manually before it is published.
|
Information |
Required |
Public |
|---|---|---|
|
Device data (serial number, colours, condition, accessories, special features, history) |
partly |
yes, after review |
|
Location (city, region or country only) |
no |
yes, after review |
|
Photos |
no |
yes, after review |
|
Your contact as the owner (email, phone or website) |
no |
no, visible to the operator only |
When you upload photos, we automatically remove their metadata, such as the location where they were taken and the camera model. Please only upload your own photos, and only provide your own contact details, never those of third parties. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by email. Entries remain stored until you request their deletion or the archive is discontinued.
5. Contact and backups
If you write to us by email, we use your details only to answer your request and delete them once it has been dealt with (Art. 6(1)(f) GDPR).
To protect against data loss, we back up the website regularly. The backups are encrypted and stored on our own storage in Germany. Deleted data only disappears from the backups when they are replaced in the regular cycle; until then, we use them only for restoration.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You can object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR), and you can withdraw your consent at any time with effect for the future. A message to kontakt@bss01.de is sufficient.
You can also lodge a complaint with a data protection supervisory authority, for example the one for your place of residence or the one responsible for us: Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI, Thuringian State Commissioner for Data Protection and Freedom of Information), Häßlerstraße 8, 99096 Erfurt, Germany, www.tlfdi.de. No automated decision-making takes place.
Last updated: 9 November 2026