Privacy Policy

The controller responsible for data processing on this website within the meaning of the GDPR is:

thapps UG (haftungsbeschränkt)
Clara-Schumann-Straße 20
64347 Griesheim
Germany

Managing Director: Thomas Höfer
Telephone: +49 6155 8283359
Email: info@thapps.de

We take the protection of your personal data seriously and process it exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

This website is a purely static site. We deliberately keep data processing to the minimum technically required to deliver the website and to respond to enquiries. We do not use tracking, analytics, advertising or profiling.

"Personal data" means any information relating to an identified or identifiable natural person, such as your IP address.

Where we process personal data, the following legal bases under Art. 6 (1) GDPR may apply:

Art. 6 (1) (b) GDPR — processing for the performance of a contract or pre-contractual measures (e.g. handling your enquiry).

Art. 6 (1) (f) GDPR — processing based on our legitimate interest in the secure, stable and efficient operation of the website.

Art. 6 (1) (c) GDPR — processing to comply with a legal obligation to which we are subject.

This website is hosted on Firebase Hosting, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When you access the website, the hosting provider automatically collects and stores information in server log files that your browser transmits. This may include: the (where applicable, shortened) IP address, date and time of the request, the requested file/page, the referrer URL, the browser type and version, and the operating system.

This data is processed to ensure a secure, stable connection, the security of our systems, and the delivery of the website. The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Google may process data in third countries, in particular the USA. Google is certified under the EU-U.S. Data Privacy Framework; in addition, data transfers are safeguarded by the EU Standard Contractual Clauses. We have concluded a data processing agreement (DPA) with Google pursuant to Art. 28 GDPR.

This website uses the "Inter" font, which is hosted locally on our server. The font files are delivered from our own hosting; no connection to Google servers is established for this purpose and no data is transferred to Google when fonts are loaded.

The contact form on this website does not transmit any data to a server. When you submit the form, it opens a pre-filled message in your own email program; the message is only sent once you send it yourself. The processing of the resulting email is subject to the terms of your email provider.

If you contact us by email, we process the data you provide (e.g. your name, email address and the content of your message) solely to handle your enquiry.

Recipients are the people within our company responsible for handling your enquiry and the email service providers we use. Providing your data is voluntary; however, we cannot handle your enquiry without the required information.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (our legitimate interest in responding to enquiries).

This website does not set any cookies of its own and does not store information on your device (no local or session storage) for the purpose of recognition or tracking.

We do not use any analytics, advertising, social-media or other tracking services. For this reason, no consent banner is required.

For security reasons, this website uses TLS/SSL encryption for all connections. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.

We store personal data only for as long as necessary to achieve the purposes described here or as required by statutory retention obligations.

According to Google, Firebase Hosting retains IP data for a few months. Email correspondence is deleted once the respective enquiry has been dealt with in full and no statutory retention periods prevent deletion.

You have the following rights regarding your personal data: the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21 GDPR).

Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to that processing at any time on grounds relating to your particular situation.

Where processing is based on consent, you have the right to withdraw that consent at any time with effect for the future.

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

To exercise your rights, you can contact us at any time at: privacy@thapps.de

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany

We may amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The current version applies to your next visit.