Privacy policy

1. Controller

The controller under the General Data Protection Regulation (GDPR) is TINYTREE OHG, Obere Wank 9, 87484 Nesselwang, Germany, represented by Emanuel Kössel and Stefan Füßinger. For privacy enquiries, contact info@tinytree.de or call +49 (0) 8361 20 20 200.

2. Website delivery and hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Your IP address is technically processed to deliver the requested pages. IONOS also processes access data such as the requested file, access time, referrer, browser, operating system and device type. According to IONOS, visitor data is anonymised upon collection and retained for eight weeks. This supports secure and stable operation based on Article 6(1)(f) GDPR. IONOS processes hosting data as a service provider; according to the provider, this does not involve transfers to countries outside the EU. IONOS web hosting information.

3. Hosting statistics

IONOS describes WebAnalytics as a standard component of its web hosting. It provides statistical analysis of page requests and technical optimisation. According to IONOS, WebAnalytics does not use cookies and anonymises IP addresses immediately after transmission. This website does not embed an additional analytics pixel; server-side statistics use access data. Where personal data is processed, the basis is our legitimate interest in technically reliable operation under Article 6(1)(f) GDPR. IONOS analytics information.

4. Light/dark mode and local storage

When you switch the display mode, we save your choice under the key tinytree-theme in your browser’s local storage. The value contains only “light” or “dark”, is not sent to us and remains until you delete this website’s browser data. Without a saved choice, the display follows your system preference. Storage serves only to remember the display setting you expressly requested (section 25(2), point 2 of the German TDDDG). You can change it using the switch or remove it by clearing the website’s browser data. The language is determined by the page address and is not stored separately.

5. Contact by email or telephone

If you contact us, we process your contact details and the content of your enquiry to respond to it. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Article 6(1)(f) GDPR, reflecting our interest in responding to enquiries. Providing information is voluntary; without the information needed to deal with your request, we may be unable to respond. Recipients may include communication and IT service providers where necessary to handle your enquiry. We delete the data once the matter is closed and no statutory retention duties or legitimate grounds, such as establishing or defending legal claims, remain.

6. Fonts, media and external links

Fonts, logos and images are loaded from this website’s server. No external font services, embedded maps, social media plugins or advertising tracking scripts are integrated. Links to LinkedIn, client projects, EXA3D or TINYBOOTH lead to other providers’ websites. A connection to the destination is made when you follow the link; the destination’s own privacy policy then applies. This website uses an encrypted HTTPS connection.

7. Your rights

Subject to the statutory conditions, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw any consent at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal. To exercise your rights, contact info@tinytree.de.

8. Right to object

Where we process data based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will then stop processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves legal claims. You may object to processing for direct marketing at any time without giving a reason.

9. Complaints to a supervisory authority

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly where you habitually live, work or where the alleged infringement occurred. The Bavarian State Office for Data Protection Supervision (BayLDA) supervises private companies in Bavaria. Submit a complaint to BayLDA.

10. Automated decisions

Operating this website does not involve automated decision-making, including profiling, within the meaning of Article 22 GDPR.

11. Project enquiries through HubSpot

We use HubSpot (HubSpot Ireland Limited, Ireland, and affiliated companies) for project enquiries and customer contact management. The embedded form loads only after you actively consent by selecting “Load enquiry form”. HubSpot then receives technical data such as your IP address, browser data and page address; depending on the form configuration, cookies or similar technologies may be used. Loading is based on Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, section 25(1) TDDDG. Activation is not stored permanently. Selecting “Disable form” reloads the page without reactivating HubSpot. Existing cookies can be deleted in your browser settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

When you submit the form, the information you enter is sent to HubSpot and managed in the CRM to handle your enquiry. Article 6(1)(b) GDPR applies to contractual enquiries; other enquiries are handled based on our legitimate interest in responding under Article 6(1)(f) GDPR. Providing information is voluntary; fields marked as required must be completed to submit the form. A newsletter subscription is not required for a project enquiry. The retention criteria in the contact section apply. HubSpot may process data outside the EU, particularly in the USA. HubSpot’s Data Processing Agreement includes standard contractual clauses for international transfers. Further information: HubSpot Privacy Policy.