Privacy policy

1. Controller

Tim Tiefenbach – TeaFan Media
[Address as in the imprint]
Email: [email protected]

2. Website hosting

This website is served as a static site via Cloudflare Pages (Cloudflare, Inc.). When you access the site, technically necessary data (e.g. IP address, date and time, requested URL, browser and operating system information, referrer) are processed to deliver the site securely and reliably. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in stable, secure and functioning operation).

3. Cookies, tracking and analytics

This website uses no cookies for marketing, analytics or tracking purposes. No analytics tools (e.g. Google Analytics, Matomo, Plausible) are integrated, and no third-party tracking is set.

Only one technically necessary, functional cookie may be set when you actively choose a language via the language switcher (DE/EN): “pref_lang” stores only your language preference (value “de” or “en”) so the homepage greets you in your preferred language on your next visit. This first-party cookie contains no personal identifiers, enables no tracking and expires after at most 12 months. Legal basis: Section 25 (2) TDDDG (necessary for the functionality you explicitly requested) in conjunction with Art. 6 (1) lit. f GDPR. You can delete the cookie in your browser at any time.

4. Fonts and CSS (served locally)

The “Lato” font is served locally from this website; there is no connection to Google Fonts or other external font services. The CSS (Tailwind) is also compiled in advance and served locally – no external CSS CDN is used. A normal page view therefore transmits no data to third parties.

5. Embedded YouTube videos (two-click solution)

Videos are not loaded automatically. Only when you actively click “Load video” is the video loaded from YouTube (Google Ireland Limited / Google LLC, USA). This transmits data – including your IP address – to Google/YouTube and may set cookies; a transfer to the USA is possible. The legal basis is your consent under Art. 6 (1) lit. a GDPR, given by your click. Until then, no connection to YouTube is established. Alternatively, you can watch the video directly on YouTube.

6. Contact

When you use the contact form, the data you enter (name, email address, optionally company, project type, preferred start and message) is processed through a Cloudflare Pages Function and sent by email via my email service provider Migadu to [email protected]. The technical sender is [email protected]; your email address is used only as the reply address (Reply-To). The website does not store form data in a database.

To prevent abuse, the form contains an invisible honeypot field; Cloudflare may also apply a rate limiting rule to the form endpoint. The submitted data is processed solely to handle your inquiry on the basis of Art. 6 (1) lit. b and f GDPR. Data is kept only for as long as necessary to handle your inquiry and any related follow-up, then deleted unless statutory retention obligations apply.

7. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can also lodge a complaint with a supervisory authority (Art. 77).

8. SSL/TLS encryption

For security and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

9. Changes to this privacy policy

This privacy policy will be updated whenever functions, tools or data-processing procedures of this website change. The current version is always available on this page.