Privacy Policy

1. Controller

The party responsible for the processing of personal data on this website is:

TinyCloud GmbH
Connollystr. 8
80809 Munich
E-mail: agency@tinycloud.io
Phone: +498923780700

2. Executive Summary

This website is intentionally designed to be minimal: it does not set any cookies by default, does not load any third-party content when accessed, and does not create user profiles. We only process personal data to the extent technically necessary for the operation of the website or where you actively provide us with data — for example, via our contact form or newsletter registration.

3. Technical Provision of the Website (Hosting)

This website is operated and hosted by TinyCloud GmbH, Connollystr. 8, 80809 Munich, acting as a data processor pursuant to Art. 28 GDPR (General Data Protection Regulation).

Hosting, server operation, delivery via a content delivery network, protection against automated access, the sending of newsletters, and cookie-free reach measurement are carried out by sub-processors engaged by TinyCloud for these purposes. When you access the website, these providers process your IP address and technical connection data as is technically necessary. Data is processed on servers within the European Union; some service providers are companies based in the USA that are certified under the EU-U.S. Data Privacy Framework, and with whom the EU Commission’s standard contractual clauses are in place.

The current list of service providers used — including name, purpose, location of processing, and privacy policy — can be found at www.tobysite.com/legal/data-processors.

The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6(1)(f) GDPR). Connection data generated during delivery is only kept by the service providers for a short time for security and operational purposes.

4. Reach Statistics Without Personal Data

To understand how often specific pages are visited, we maintain simple access statistics. No cookies are set, no statistics scripts are embedded in the site, and no IP addresses are stored. We only record: the page visited, time of access, country of origin (roughly derived from the network connection), referring website (if available), and technical browser details. Allocation to individual persons is neither intended nor possible; cross-website tracking does not take place.

To the extent that personal data is processed here at all, the legal basis is our legitimate interest in the statistical analysis of the use of our website (Art. 6(1)(f) GDPR).

5. Cookies

This website does not set any cookies itself. Only when you activate embedded third-party content by clicking on it (see section “Embedded Content”) may the respective provider set their own cookies. You provide your consent for this directly by clicking — therefore, a separate cookie banner is not required.

6. Contact Form and Communication

When you contact us via the contact form or by e-mail, we process the data you provide (e.g., name, e-mail address, content of your message) to answer your inquiry. Messages submitted via the form are sent to us directly via e-mail and are stored encrypted on the website platform, so that they are not lost if e-mail delivery fails; they are deleted there automatically after 12 months at the latest. To protect against automated entries, the form uses a cookie-free spam protection check that runs entirely on the platform itself and does not transmit data to third parties.

The legal basis is Art. 6(1)(b) GDPR if your inquiry is aimed at a contract (e.g., appointment request, quote request); otherwise, it is our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). We will delete the correspondence as soon as it is no longer required for processing and no legal retention obligations prevent us from doing so.

7. Newsletter

To receive our newsletter, you must register with your e-mail address. Registration uses the double opt-in procedure: you will first receive a confirmation e-mail and will only be added to the distribution list after clicking the confirmation link. The time of registration and confirmation, as well as the IP address used for confirmation, are logged to provide proof of registration.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in each issue or by sending us a message; the lawfulness of the processing carried out until the withdrawal remains unaffected.

An e-mail service provider engaged by TinyCloud as a sub-processor is used for distribution; processing takes place within the European Union. The respective service provider used is listed in the list linked above under “Technical Provision of the Website”.

8. Embedded Content (Only After Your Click)

This website may offer embedded third-party content in certain places, e.g., videos from external providers. Such content is not loaded automatically. You will initially only see a placeholder; only when you click on “Show content” will a connection to the servers of the respective provider be established. In the process, the provider receives your IP address and may set its own cookies. Depending on the provider, data may be transferred to the USA; the providers mentioned are certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent, which you provide by clicking (Art. 6(1)(a) GDPR). Without a click, no data is transmitted to the providers. Further details are governed by the privacy notices of the respective provider.

9. Your Rights

You have the following rights towards us regarding your personal data:

Right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You may revoke any consent given at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): To the extent that we process data based on legitimate interests, you may object to this processing at any time for reasons arising from your particular situation.

To exercise your rights, a simple message to the contact details provided above under “Controller” is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), such as with the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

10. Retention Period

Unless otherwise stated in this policy, we only store personal data for as long as is necessary for the respective purpose. Thereafter, it will be deleted, unless legal retention obligations (e.g., from commercial or tax law) require longer storage; in this case, processing will be restricted accordingly.

11. Changes to This Policy

We update this privacy policy if the website or the legal situation changes. The version published here at the time applies.