Tomu, go to home page

The German version is legally binding. Go to the German version

Privacy policy

Controller

LukeZ Development
Owner: Luca Hentschel
Schneeberger Str. 31
08112 Wilkau-Haßlau
Email: contact@tomu.foo

What we store

When you sign up for news about Tomu, we store:

  • your email address,
  • the time of your sign-up and the time you confirmed it,
  • the version of the consent text you agreed to,
  • the language of the page you signed up on (German or English), so we can write to you in that language,
  • the time and number of the most recent confirmation emails, so nobody can use your address to trigger a flood of emails.

We do not store IP addresses in our database. We do not set cookies, and we do not use analytics or tracking tools.

What we use the data for

Only to send you occasional emails about Tomu's progress. The legal basis is your consent (Art. 6(1)(a) GDPR).

Double opt-in

After you sign up, we send you an email with a confirmation link. You are only signed up once you confirm it. The time of confirmation and the version of the consent text serve as proof of your consent.

Retention

  • We automatically delete sign-ups that have not been confirmed after 7 days.
  • We keep confirmed sign-ups until you unsubscribe.
  • If you unsubscribe, we delete your data immediately. Every email contains an unsubscribe link.

Service providers

This site runs on Cloudflare as a processor. We use:

  • Cloudflare Workers to serve this site. On every request, Cloudflare processes technically necessary data such as your IP address to deliver the site and protect it against attacks. The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR),
  • Cloudflare D1 to store sign-ups, with data stored in the EU,
  • Cloudflare Email Sending to send the emails,
  • Cloudflare Turnstile, a check against automated sign-ups. For this, your browser loads a script from challenges.cloudflare.com. Technical data (for example your IP address) may be transmitted to Cloudflare in the process. The legal basis is our legitimate interest in preventing abuse of the sign-up form (Art. 6(1)(f) GDPR). Where information is stored on or read from your device, this is strictly necessary for the sign-up you requested (Section 25(2) No. 2 TDDDG).

We have a data processing agreement with Cloudflare.

Transfers to third countries

Cloudflare, Inc. is based in the USA. Hosting, email sending and Turnstile may therefore involve processing outside the EU. Cloudflare is certified under the EU-US Data Privacy Framework. Transfers are based on the European Commission's adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46(2)(c) GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email. You can also lodge a complaint with a data protection supervisory authority.

To exercise your rights, write to us at contact@tomu.foo.