Legal notice & privacy — Willi Server

Operator

Name: William Riegler
Service address: Hochstrass 79, 4312 Ried in der Riedmark, Austria
Legal contact: [email protected]
Privacy requests: [email protected]

These are privately operated, non-commercial projects. No paid product, regulated professional service, or consumer contract is offered. There is no commercial-register entry or VAT identification number for these private projects.

Responsibility and scope

William Riegler is responsible for the content of these services and is the controller for personal data processed directly by them. Each linked third-party website is responsible for its own content and data processing.

This notice must be reviewed whenever a service adds commercial activity, providers, analytics, advertising, new data uses, or materially different account and upload features.

Hosting and connection data

The services are self-hosted on privately operated hardware in Austria. Cloudflare provides DNS and reverse-proxy services. When a service is opened, the server and Cloudflare may process the IP address, date and time, requested address, response status, browser information, and similar connection metadata.

This data is used to deliver the requested pages, maintain security, prevent abuse, and diagnose faults. Processing relies on the operator's legitimate interests in secure and reliable operation under Article 6(1)(f) GDPR. Technical logs are deleted or rotated when no longer needed for those purposes, subject to provider settings and legal obligations.

Willi Server project hub

The hub is a static directory of projects and external links. It has no accounts, forms, analytics, advertising, trackers, or non-essential cookies. Its JavaScript handles the loading screen, project filtering, card interactions, the displayed year, and combined public download totals for two projects.

When the hub opens and once per minute while it remains open, the visitor's browser requests public download figures from Modrinth and Shields.io. Those providers receive ordinary connection data, such as the visitor's IP address and browser information. The hub only displays the combined totals and does not store the figures or use them to profile visitors.

My Website Archive

The archive landing page is static and does not use analytics or advertising cookies. Its ASKÖ and MuscleOn demonstrations accept temporary demo accounts and demonstration entries. All entries and accounts in those demonstrations are erased every day. Do not enter sensitive information or real personal data. APWD pump actions are simulated and do not control hardware.

Temporary demo data is processed only to provide the requested demonstration and keep it secure, under Article 6(1)(b) and (f) GDPR. It is not sold or used for advertising.

Willi Plant Systems

The plant service processes account names, email addresses, password hashes, email-verification and password-reset state, session data, language and display preferences, notification choices, household membership, and per-system permissions. The central server also keeps encrypted Raspberry Pi routes and keys and temporary encrypted working caches.

This information is used to create and secure accounts, authenticate sessions, route authorized requests, preserve user preferences, provide requested notifications, prevent abuse, diagnose failures, and operate backups and recovery. Account and routing processing needed to provide the service relies on Article 6(1)(b) GDPR. Security, diagnostics, abuse prevention, and reliable operation rely on Article 6(1)(f). Optional notification channels and external services are enabled by the user and can be disabled again.

Permanent garden state, schedules, sensor history, and uploaded experiment images remain on the selected user-owned Raspberry Pi. Authorized household members can access only the systems and content granted to them. The central server sends authorized requests to the relevant Raspberry Pi and does not sell personal data.

Recipients and external services

Data may be processed by Cloudflare, a configured email-delivery provider, and the operator's self-hosted systems where necessary to provide and protect the services. Raspberry Pis may send configured coordinates to Open-Meteo for forecasts. Opening Plant of the Week may contact Wikimedia and disclose ordinary connection metadata. The project hub contacts Modrinth and Shields.io to load its public download counters. Opening any GitHub, Modrinth, CurseForge, Nextcloud, or other external link transfers the visitor to that provider.

No automated decision-making or profiling is used.

Retention and deletion

Plant account data is retained while the account exists and is removed through account deletion, subject to necessary backup rotation and legal obligations. Sessions and single-use links expire. Temporary central Raspberry Pi caches are removed under the service lifecycle rules. Garden data and images stored on a user's Raspberry Pi follow that Pi's configured deletion and backup-retention settings. Archive demonstration accounts and entries are erased daily.

Cookies and browser storage

The project hub and archive landing page do not use cookies or browser storage. Willi Plant Systems uses a strictly necessary HttpOnly session cookie to keep an account signed in. Local and session storage retain interface choices such as theme, language, dismissed hints, documentation progress, and tab-scoped navigation state. No advertising or analytics cookies are used.

Your data-protection rights

Subject to the GDPR, you may request access, correction, deletion, restriction, or portability of your personal data, object to processing, and withdraw consent for future processing. Identity may need to be verified before account information is disclosed or changed. Send requests to the privacy contact above.

You may lodge a complaint with the Austrian Data Protection Authority or another competent supervisory authority.

Terms of use

These projects are provided without charge for personal, demonstration, and development use. Do not attempt to disrupt the services, bypass access controls, access another person's data, or upload unlawful or harmful material. Use only accounts, Raspberry Pis, systems, and content that you are authorized to use.

Archive demonstrations are temporary and must not be used for real records. Keep independent backups of important plant data. While reasonable security and availability measures are used, an uninterrupted or error-free service cannot be guaranteed. These terms do not limit rights or liability that cannot legally be excluded.

Security and changes

HTTPS, hashed passwords, encrypted Raspberry Pi credentials, permission checks, and data minimization reduce risk, but no online system can promise absolute security. This page will be updated when the services' providers, purposes, retention, or behavior materially changes.