Legal Notice & Privacy Policy

1. Legal Notice in accordance with § 5 DDG

Information pursuant to § 5 German Digital Services Act (DDG):

E-Mail: hochstrate@tuf-international.com

2. Privacy Policy (GDPR)

Introduction

We at TUF-International take the protection of your personal data very seriously. We process your data confidentially and in accordance with the statutory data protection regulations (in particular the EU General Data Protection Regulation – GDPR) as well as this Privacy Policy. Our services are exclusively directed at business customers (B2B); nevertheless, we treat personal data (e.g. of company representatives) with the same care. We collect personal data only for specified purposes and use it solely for those purposes, in compliance with the applicable data protection provisions.

Controller

The controller pursuant to the GDPR for this website is:

The controller decides alone or jointly with others on the purposes and means of processing personal data.

Hosting and Server Log Files

Our website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (“Strato”). When you visit our website, Strato automatically collects various connection data in so-called server log files. This may include your IP address, date and time of access, browser type/version, operating system used, and referrer URL. These data are processed by Strato to provide and secure the website.

We have concluded a Data Processing Agreement (DPA) with Strato pursuant to Art. 28 GDPR to ensure that Strato processes personal data of our website visitors only on our instructions and within the framework of the GDPR. The legal basis for hosting with Strato and the associated data collection is our legitimate interest in a secure and reliable presentation of our online offering (Art. 6(1)(f) GDPR).

Storage period: Log file data are automatically deleted after a customary retention period (e.g. by Strato after a few days), unless longer storage is required for security reasons (such as investigating abuse).

Contact Form and Contacting Us

If you contact us via the contact form on our website, the data you enter will be processed. This includes name, e-mail address, telephone number (if provided), company name (if provided), and the content of your message. We require this information to process your request and to contact you.

• Purpose: Processing is solely for handling your inquiry and possible follow-up questions. We do not use the data for other purposes (e.g. marketing), unless you explicitly consent.
• Legal basis: Depending on the type of inquiry, processing is based on Art. 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract, if your inquiry relates to this) or Art. 6(1)(f) GDPR (our legitimate interest in effectively handling business inquiries). If neither applies, we may request your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
• Storage period: Data remain with us until the purpose of processing no longer applies (your request has been fully handled). If contractual relationships arise, we retain data according to statutory retention obligations (e.g. commercial and tax law). If you request deletion, we will delete the data unless legal obligations or our legitimate interests (e.g. proof of communication) prevent it.
• Disclosure: Data transmitted via the contact form are treated confidentially. Disclosure to third parties only occurs if required to fulfil your request or due to legal obligation.

No Analytics or Tracking Tools

Our website does not use web analytics tools (e.g. Google Analytics, Matomo). We do not create user profiles or conduct tracking. Only technically necessary cookies are used, e.g. session cookies where required for the contact form. These are not used for tracking/advertising and are not shared with third parties. According to current law, such technically necessary cookies do not require consent (Art. 6(1)(f) GDPR in conjunction with § 25(2) TTDSG). As no non-essential cookies are used, we do not display a cookie banner.

No Third-Party Services

We do not embed external third-party content (e.g. Google Maps, Google Fonts, YouTube videos, social media plug-ins). Thus, no personal data are transmitted to third parties simply by visiting our website. If in future we integrate third-party services, we will update this Privacy Policy and, if required, seek prior consent.

Your Rights under GDPR

• Right of access (Art. 15 GDPR): Request free information on personal data stored about you, including processing purposes, categories of data, recipients, and storage duration.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or completion of incomplete personal data.
• Right to erasure (Art. 17 GDPR): Request deletion where legal grounds apply. Legal retention obligations may delay deletion.
• Right to restriction (Art. 18 GDPR): Request restriction in certain cases, e.g. disputing accuracy of data, or pending review of an objection.
• Right to data portability (Art. 20 GDPR): Receive data you provided in a machine-readable format or request transfer to another controller.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interest; we will cease unless we demonstrate compelling legitimate grounds. Direct marketing objection applies at any time.
• Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time with future effect.
• Right to lodge a complaint (Art. 77 GDPR): Lodge a complaint with a supervisory authority (e.g., Hesse: Hessian Commissioner for Data Protection and Freedom of Information).

To exercise these rights, contact us at the details provided above. We recommend sending requests by e-mail.

Data Security

We implement technical and organizational measures to protect your personal data from manipulation, loss, destruction, or unauthorized access. Security measures are continuously improved with technological development. However, data transmission over the internet (e.g. e-mail) can have security gaps; complete protection against third-party access is not possible.

Amendments to this Privacy Policy

We may update this Privacy Policy as needed, e.g. due to changes in our website, technology, or legal requirements. The version current at the time of your visit applies. Significant changes will be clearly indicated on our website.