Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

TinyCloud GmbH
Connollystr. 8
80809 Munich
Email: agency@tinycloud.io
Phone: +498923780700

2. In a Nutshell

This website is built with a focus on minimalism: It does not set cookies by default, does not embed content from third-party providers upon loading, and does not create user profiles. We only process personal data to the extent technically necessary for the operation of the website or if you actively provide us with data — such as via the contact form or newsletter subscription.

3. Technical Provision of the Website (Hosting)

This website is operated and hosted by TinyCloud GmbH, Connollystr. 8, 80809 Munich, acting as a data processor in accordance with Art. 28 GDPR (General Data Protection Regulation).

Hosting, server operation, delivery via a content delivery network, protection against automated access, the dispatch of newsletter emails, and cookie-free reach measurement are carried out via sub-processors engaged by TinyCloud for this purpose. When you access the website, these providers technically process your IP address as well as technical connection data. Data is processed on servers within the European Union; some service providers are companies based in the USA that are certified under the EU-U.S. Data Privacy Framework and with whom standard contractual clauses of the EU Commission are additionally in place.

The current list of the service providers used — including name, purpose, processing location, and privacy policy — can be found at www.tobysite.com/legal/data-processors.

The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6 (1) (f) GDPR). Connection data generated during delivery is only stored by the service providers for a short time for security and operational purposes.

4. Reach Statistics Without Personal Reference

To understand how often which pages are accessed, simple access statistics are maintained. No cookies are set, no statistics scripts are integrated into the site, and no IP addresses are stored. Only the following are recorded: page accessed, time, country of origin (broadly derived from the network connection), referring website (if available), as well as technical information from the browser. An attribution to individual persons is neither intended nor possible; tracking across multiple websites does not take place.

Insofar as personal data is processed here at all, the legal basis is our legitimate interest in the statistical evaluation of the usage of our website (Art. 6 (1) (f) GDPR).

5. Cookies

This website does not set any cookies itself. Only when you activate embedded content from third-party providers by clicking on it (see section “Embedded Content”) can the respective provider set its own cookies. You provide your consent for this directly via that click — a separate cookie banner is therefore not required.

6. Contact Form and Establishing Contact

When you contact us via the contact form or by email, we process the data provided by you (e.g., name, email address, content of your message) in order to respond to your inquiry. Messages transmitted via the form are sent to us immediately by email and are not stored permanently on the website platform; only a content-free delivery receipt remains there. For protection against automated submissions, the form performs a cookie-less spam protection check, which runs entirely on the platform itself and transmits no data to third parties.

The legal basis is Art. 6 (1) (b) GDPR insofar as your inquiry is aimed at a contract (e.g., appointment request, quote request), otherwise our legitimate interest in responding to inquiries (Art. 6 (1) (f) GDPR). We delete the correspondence as soon as it is no longer required for processing and no legal retention obligations stand in the way.

7. Newsletter

To receive our newsletter, you register with your email address. Registration takes place via the double opt-in procedure: you first receive a confirmation email and are only added to the distribution list after clicking the confirmation link. The time of registration and confirmation as well as the IP address used during confirmation are logged in order to be able to verify the registration.

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time using the unsubscribe link in every issue or by sending us a message; the lawfulness of the processing carried out until the revocation remains unaffected.

For dispatch, an email service provider is used, which TinyCloud has commissioned as a sub-processor; the processing takes place in the European Union. The service provider used is listed in the list linked above under “Technical Provision of the Website”.

8. Embedded Content (Only After Your Click)

This website may offer embedded content from third-party providers in certain places, e.g., videos from external providers. Such content is not loaded automatically. You will initially only see a placeholder; only when you click on “Show content” will a connection be established to the servers of the respective provider. During this process, the provider receives your IP address and may set its own cookies. Depending on the provider, data may be transmitted to the USA; the mentioned providers are certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent, which you grant by clicking (Art. 6 (1) (a) GDPR). Without a click, no data is transmitted to the providers. Further details are governed by the privacy policy of the respective provider.

9. Your Rights

Regarding the personal data concerning you, you have the following rights against us:

Right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You can revoke any consent given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): Insofar as we process data on the basis of legitimate interests, you may object to this processing at any time for reasons arising from your particular situation.

To exercise your rights, an informal message to the contact details mentioned above under “Controller” is sufficient.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

10. Storage Duration

Unless otherwise stated in this declaration, we only store personal data for as long as is necessary for the respective purpose. Afterwards, they will be deleted, unless statutory retention obligations (e.g., from commercial or tax law) require longer storage; in this case, the processing will be restricted accordingly.

11. Changes to This Declaration

We adjust this privacy policy when the website or the legal situation changes. The version published here applies.