# Privacy Policy Last updated: August 5, 2026 ## 1. Controller The party responsible for the processing of personal data on this website is: TinyCloud GmbH\ Connollystr. 8\ 80809 Munich\ E-mail: agency@tinycloud.io\ Phone: [+498923780700](tel:+498923780700) ## 2. Executive Summary This website is designed with data minimization in mind: it uses **no cookies**, does **not embed third-party content** when visited, and creates **no usage profiles**. We only process personal data insofar as it is technically necessary for the operation of the website or as you actively provide us with data — such as through the contact form or newsletter subscription. ## 3. Technical Provision of the Website (Hosting) This website is operated via the TOBY platform by TinyCloud GmbH, Connollystr. 8, 80809 Munich. In this context, TinyCloud processes data on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. For the delivery of the website, TinyCloud utilizes the following service providers: - **Cloudflare, Inc.** (USA) — Content Delivery Network and website security. When the website is accessed, Cloudflare processes your IP address and technical connection data for technical necessity. Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, the standard contractual clauses of the EU Commission are in place. - **Hetzner Online GmbH** (Germany) — Server operations. The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6 (1) (f) GDPR). Connection data generated during delivery is retained by the service providers only briefly for security and operational purposes. ## 4. Reach Statistics Without Personal Reference To understand how often specific pages are accessed, a simple access statistic is maintained. **No cookies are set, no statistics scripts are embedded in the site, and no IP addresses are stored**. We only record: the page accessed, the time, the country of origin (roughly, derived from the network connection), the referring website (if available), and technical browser details. It is neither intended nor possible to link this data to individual persons; tracking across multiple websites does not take place. To the extent that personal data is processed here at all, the legal basis is our legitimate interest in the statistical evaluation of the usage of our website (Art. 6 (1) (f) GDPR). ## 5. Cookies This website does not use cookies. Therefore, you will not find a cookie banner here. ## 6. Contact Form and Communication If you contact us via the contact form or by e-mail, we process the data you provide (e.g., name, e-mail address, content of your message) in order to respond to your inquiry. Messages submitted via the form are sent to us directly by e-mail and are **not permanently stored on the website platform**; only a content-free delivery receipt remains there. To protect against automated inputs, the form performs a cookieless spam protection check that runs entirely on the platform itself and transmits no data to third parties. The legal basis is Art. 6 (1) (b) GDPR insofar as your inquiry relates to a contract (e.g., appointment request, quote request), and otherwise our legitimate interest in responding to inquiries (Art. 6 (1) (f) GDPR). We delete the correspondence as soon as it is no longer required for processing and no statutory retention obligations prevent its deletion. ## 7. Newsletter To receive our newsletter, you must subscribe with your e-mail address. Registration follows a double opt-in procedure: you will first receive a confirmation e-mail and will only be added to the distribution list after clicking the confirmation link. The time of registration and confirmation, as well as the IP address used for confirmation, are logged to provide proof of registration. The legal basis is your consent (Art. 6 (1) (a) GDPR). You may unsubscribe from the newsletter at any time via the unsubscribe link in every issue or by sending us a message; the lawfulness of the processing performed until the withdrawal remains unaffected. For delivery, Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg; service: Amazon SES) is used, with processing in the EU-Frankfurt region. AWS is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses are in place. ## 8. Your Rights You have the following rights toward us regarding personal data concerning you: Right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You may withdraw consent at any time with effect for the future (Art. 7 (3) GDPR). **Right to object (Art. 21 GDPR):** To the extent that we process data based on legitimate interests, you may object to this processing at any time for reasons arising from your particular situation. To exercise your rights, an informal message to the contact details provided above under "Controller" is sufficient. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), such as the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach. ## 9. Retention Period Unless otherwise stated in this policy, we store personal data only as long as necessary for the respective purpose. Afterward, they are deleted unless statutory retention obligations (e.g., under commercial or tax law) require longer storage; in such cases, processing will be restricted accordingly. ## 10. Changes to This Policy We will update this privacy policy if the website or the legal situation changes. The version published here at the time applies.