Privacy Policy

Last updated: 13 October 2026

1. Controller

Konstantin Timochin (TimSoft Solutions)
Am Schierbrunnen 21,
21337 Lüneburg
Germany
Email: info@timsoftsolutions.de
Phone: +49 4131 7065660

This privacy policy applies to https://timsoftsolutions.de. Further provider details are available in the legal notice. Visiting the website does not constitute consent to data processing.

2. Hosting and technical access data

The website, enquiry data and email are operated on a VPS hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Access may involve processing and logging your IP address, timestamp, requested URL, referrer, browser information and technical status messages. This serves website delivery, troubleshooting and protection against abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, reliable operation. Hosting provider information: STRATO privacy policy.

Fonts and the libraries needed for display and cookie settings are loaded from our own web server. This does not generate additional requests to Google Fonts or jsDelivr.

3. Enquiries, appointments and files

For enquiries, we process the contact and business details you enter, device or project information, description of your request, budget and appointment preferences, chosen contact channel, and submitted files and links. Records also include a ticket number, processing status, correspondence and, where relevant, appointment, PDF and calendar data. Files are temporarily stored on the server when uploaded, before final submission.

We use this data to respond to your enquiry, prepare offers, arrange appointments and provide agreed services. Article 6(1)(b) GDPR applies to steps taken at your request before entering a contract and to contracts. Other business communication relies on Article 6(1)(f) GDPR and our interest in responding to enquiries; statutory retention obligations rely on Article 6(1)(c) GDPR. Information needed to respond is necessary; without it, we may be unable to process your enquiry. Analytics consent is not required.

4. Communication

When you contact us by email or phone, we process the information you provide and the communication content for your enquiry on the grounds stated in section 3. Automated acknowledgements may include a summary and calendar file. If you choose or use a messenger as your contact channel, its provider processes the communication under its own privacy terms. Alternatively, you can contact us by email or phone.

5. Google Analytics 4

On public pages, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for statistical analysis of website use. The Analytics script is loaded only after explicit consent through “Cookie settings”. The legal basis is Article 6(1)(a) GDPR; optional storage access is subject to section 25(1) TDDDG. Rejecting Analytics does not prevent use of the website or enquiry form.

Data includes pseudonymous cookie identifiers, device and browser information, page views, traffic source and approximate region, and enquiry-form interactions such as completed steps or submission status. The IP address is processed for transmission and regional attribution; Google states that GA4 does not log or store it. Google Signals and advertising personalisation are disabled in our website integration.

You can withdraw consent at any time through “Cookie settings” for future processing. This does not affect the lawfulness of earlier processing. You can also delete existing Analytics cookies in your browser. Retention of user and event details depends on the setting applicable in the Analytics account and Google’s deletion rules; the regular options are 2 or 14 months. New activity may restart retention of a user identifier. Aggregated reports do not have the same retention limit. Cookie lifetimes are separate. Further information: Google privacy policy and Analytics data retention.

6. Recipients and international transfers

We and the providers used for hosting, email and, where applicable, Analytics receive access as necessary for the relevant purpose. Other recipients may include authorities or professional advisers if required by a legal obligation or the handling of legal claims. Legal grounds depend on the purpose, particularly Article 6(1)(c) or (f) GDPR.

Google Analytics and an external communication service you choose may process data outside the EU/EEA, particularly in the USA. Such transfers are also subject to Articles 44 et seq. GDPR. Safeguards may include adequacy decisions and standard contractual clauses where applicable. You can request information about the applicable safeguards and copies from us; Google’s terms are available under data processing terms. Agreement with this policy does not replace a legal basis for an international transfer.

7. Retention and security

There is currently no uniform automatic deletion period for enquiries and operational logs. Permitted retention depends on the duration of enquiry handling, delivery of agreed services, statutory commercial and tax retention duties, and any necessary investigation of security incidents or legal claims. Retention beyond those needs without a necessary purpose is not permitted. You can request information about retention of your data or deletion under your statutory rights.

Unassigned temporary uploads are scheduled for daily cleanup once they are more than 48 hours old. Assigned files and generated documents form part of the relevant enquiry. Browser drafts and cookies are described below. Enquiry data is protected through restricted access; document links are signed. Completely risk-free operation cannot be guaranteed.

8. Your rights

Subject to statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20). Under Article 7(3) GDPR, you may withdraw consent at any time for future processing.

For processing based on legitimate interests, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to direct marketing at any time.

Contact info@timsoftsolutions.de to exercise your rights. You also have the right to complain to a data protection authority, particularly where you live, work or believe a breach occurred. Our supervisory authority is the Lower Saxony Commissioner for Data Protection.

9. Automated decisions and updates

We do not make solely automated decisions with legal or similarly significant effects under Article 22 GDPR. We update this policy when processing practices or legal requirements change; the update date appears at the top of this page.

Technically necessary storage

For sessions and form protection, we use cookies including timsoft_solutions_session and XSRF-TOKEN. The configured session duration is 120 minutes; browser settings may limit it. cookieconsent_status stores your cookie choice for 365 days by default. Necessary storage access relies on section 25(2)(2) TDDDG; associated personal-data processing relies on Article 6(1)(f) GDPR for secure operation and respect for your choice.

Local enquiry draft

While you use the enquiry form, a draft including entered contact and enquiry data and file references is saved as request_wizard_draft_v2 in your browser’s Local Storage so you can continue later. This draft has no fixed expiry. It is removed after successful submission, when you choose “Start over” for a saved draft, or when you delete website data in your browser. Already uploaded files are temporarily stored on the server separately, as described above. The basis is provision of the requested enquiry function under section 25(2)(2) TDDDG and Article 6(1)(b) GDPR, or Article 6(1)(f) for other enquiries.

Optional Analytics cookies

Only after your Analytics consent are Google Analytics cookies such as _ga and _ga_* used to distinguish browsers and sessions. Google specifies a default lifetime of two years; browsers may shorten it and return visits may extend it. This lifetime is separate from retention of Analytics events. The bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. Our Analytics configuration does not grant permission for advertising cookies.

Changing your choice and deleting browser data

Through “Cookie settings”, you can reject Analytics or withdraw consent. The website and enquiry form remain usable if you reject it. You can also delete cookies and local drafts in your browser. Blocking technically necessary storage may affect sessions, form protection or resuming a draft.