Privacy⁠

1. Introduction and controller

This privacy policy applies to the website tini-studio.de. It describes which personal data is processed when you visit the site, for what purposes, and what rights you have.

The controller within the meaning of the GDPR is Niklas Wieser (TiNi Studio). You can find the postal address and email address in the legal notice.

No data protection officer has been appointed.

2. The key points

• Website visitors receive no cookies. There are no user accounts and no contact form.
• We measure reach with Umami on our own server. Your IP address is not stored in the process.
• We serve all parts of the website, such as fonts, icons and styling, from our own server. We do not use external services such as CDNs or Google Fonts.
• Our apps have their own privacy policies (section 7).

3. Hosting, domain and server logs

The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany. We operate it ourselves in Docker containers, managed with Coolify. Hetzner processes the data as a processor under Art. 28 GDPR.

The domain tini-studio.de is registered with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The website content is not stored at IONOS.

With every request, your browser technically has to send data to the server:

• IP address
• Date and time of the request
• Page requested and amount of data transferred
• Browser, operating system and the previously visited page (referrer), if sent

We need this data to deliver the site, find errors and fend off attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Server logs are deleted after three months.

Providing this data is not required by law or contract. Without it, however, the website cannot be accessed.

4. Cookies

We do not set cookies when you visit the public pages, and our reach measurement works without them too. That is why there is no cookie banner here.

The one exception is the operator's login area: a session cookie is set there, which is strictly necessary for logging in (Section 25(2) no. 2 TDDDG). Regular visitors are not affected.

If you switch between light and dark mode by hand, your browser remembers that choice locally. It is not sent to us, and you can delete it with your browser data.

5. Reach measurement with Umami

To understand which pages are read, we use the open-source tool Umami. We run it ourselves on our server at Hetzner (stats.tini-studio.de). The data does not go to any third party.

It records the page visited, the previously visited page, browser, operating system, device type, screen size, language and the country derived from the IP address. The IP address itself is not stored. Umami sets no cookies. We also count clicks on the Google Play buttons. To count visits, it creates a hash from technical characteristics that changes daily, so you are not recognised across several days. We store the recorded data for a maximum of 14 months and delete it afterwards.

The legal basis is our legitimate interest in understanding how the website is used and improving it (Art. 6(1)(f) GDPR). You can object to this at any time. You can also prevent the measurement by blocking stats.tini-studio.de with a content blocker.

6. Contact by email

If you write to us, we process your email address and the content of your message to answer your request. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We delete the message once your request has been dealt with, unless statutory retention periods apply.

7. Our apps

This policy applies only to the website. What our apps process is set out in their own privacy policies in the overview.

8. Your rights

Under the GDPR you have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.

An email to the address in the legal notice is all it takes. Requests are free of charge, and we answer them within one month.

9. Changes to this policy

We update this policy when the website or the law changes. The date at the bottom of the page shows the current version.