Privacy Policy

1. Controller

The party responsible for the processing of personal data on this website is:

TinyCloud GmbH
Connollystraße 8
80809 Munich
Email: domains@tinycloud.io
Phone: +498923780700

2. Executive Summary

This website has been built with intentional restraint: it sets no cookies by default, embeds no third-party content upon loading, and creates no user profiles. We only process personal data to the extent technically necessary for the operation of the website or if you actively transmit data to us—for example, via the contact form or newsletter subscription.

3. Technical Provision of the Website (Hosting)

This website is operated and hosted by TinyCloud GmbH, Connollystr. 8, 80809 Munich, acting as a data processor within the meaning of Art. 28 GDPR.

Hosting, server operation, delivery via a content delivery network, protection against automated access, sending of newsletter emails, and cookie-free reach measurement are performed via sub-processors engaged by TinyCloud for this purpose. When you access the website, these providers process your IP address and technical connection data as is technically necessary. The data is processed on servers within the European Union; some service providers are companies headquartered in the USA that are certified under the EU-U.S. Data Privacy Framework and with whom standard contractual clauses of the European Commission are in place.

The current list of the service providers used—including their name, purpose, processing location, and privacy policy—can be found at www.tobysite.com/legal/data-processors.

The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6 (1) (f) GDPR). Connection data generated during delivery is only kept by the service providers for a short time for security and operational purposes.

4. Reach Statistics Without Personal Identification

To understand how often specific pages are visited, we maintain simple access statistics. In this process, no cookies are set, no statistics scripts are embedded on the page, and no IP addresses are stored. Only the following are recorded: the page accessed, the time, the country of origin (broadly derived from the network connection), the referring website (if available), and technical browser information. Identifying individual persons is neither intended nor possible; cross-site tracking does not occur.

To the extent that personal data is processed here at all, the legal basis is our legitimate interest in the statistical analysis of the use of our website (Art. 6 (1) (f) GDPR).

5. Cookies

This website does not set any cookies itself. Only when you click to activate embedded content from third-party providers (see the “Embedded Content” section) can the respective provider set its own cookies. You provide your consent for this directly via this click; a separate cookie banner is therefore not required.

6. Contact Form and Communication

If you contact us via the contact form or by email, we process the data you provide (e.g., name, email address, the content of your message) in order to answer your inquiry. Messages transmitted via the form are sent to us directly by email and are not permanently stored on the website platform; only a content-free delivery receipt remains there. To protect against automated entries, the form performs a cookie-less spam protection check, which runs entirely on the platform itself and transmits no data to third parties.

The legal basis is Art. 6 (1) (b) GDPR if your inquiry is aimed at a contract (e.g., appointment request, quote inquiry), otherwise our legitimate interest in responding to inquiries (Art. 6 (1) (f) GDPR). We delete the correspondence once it is no longer required for processing and no legal retention obligations conflict with this.

7. Newsletter

To receive our newsletter, you register with your email address. The registration uses the double opt-in procedure: you first receive a confirmation email and are only added to the distribution list after clicking the confirmation link. The time of registration and confirmation, as well as the IP address used during confirmation, are logged in order to prove the registration.

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in each issue or by sending us a message; the legality of the processing performed until the withdrawal remains unaffected.

An email delivery service provider is used for distribution, which TinyCloud has commissioned as a sub-processor; the processing takes place within the European Union. The service provider currently in use is listed in the link provided above under “Technical Provision of the Website.”

8. Embedded Content (Only After Your Click)

This website may offer embedded content from third-party providers in individual places, e.g., videos from external providers. Such content is not automatically loaded. You will first see a placeholder; only when you click on “Show Content” is a connection to the servers of the respective provider established. In the process, the provider receives your IP address and may potentially set its own cookies. Depending on the provider, data may be transferred to the USA; the providers mentioned are certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent, which you grant by clicking (Art. 6 (1) (a) GDPR). Without clicking, no data is transmitted to the providers. Further details are governed by the privacy policy of the respective provider.

9. Your Rights

You have the following rights towards us regarding the personal data concerning you:

Right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): To the extent that we process data based on legitimate interests, you may object to this processing at any time for reasons arising from your particular situation.

To exercise your rights, an informal message to the contact details listed above under “Controller” is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), such as the authority responsible for us: Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach.

10. Retention Period

Unless stated otherwise in this policy, we store personal data only for as long as it is necessary for the respective purpose. Thereafter, it is deleted, unless legal retention obligations (e.g., from commercial or tax law) require longer storage; in this case, the processing will be restricted accordingly.

11. Changes to This Policy

We adjust this privacy policy if the website or the legal situation changes. The version published here at the time applies.