Privacy Protocol

Privacy Policy

Tovy respects your privacy. This policy describes how Tovy handles data collected through this website, in compliance with the General Data Protection Regulation (GDPR).

Data controller

Tovy is the data controller for personal data collected through this website. For questions, you can contact Tovy via: info@tovy.eu

Data collection and use

Tovy only requests personal data when necessary to provide a service. Tovy collects data lawfully, with your knowledge and explicit consent. The legal grounds for processing are consent, contractual necessity and legitimate interest.

Intake form: Tovy collects names, contact details (email, phone), company information and project details. This data is stored within the European Union and used to assess requests. The basis is the intention to enter into an agreement.
Server logs: The web host automatically records requests such as IP addresses, browser types and visited pages. The basis is the legitimate interest in maintaining a secure website.
Analytics: Tovy measures website use with Umami. Tovy hosts Umami itself, on a server in the EU. Umami uses no cookies and stores no personal data. It doesn't follow you across other websites. The basis is the legitimate interest in improving the website.
Cookies: Tovy uses no tracking cookies. Your choice in the cookie banner is stored only in your own browser.

Data location and transfer

Tovy stores personal data within the European Union. Tovy prefers EU services, but some subcontractors may transfer data internationally. This is done exclusively via legally permitted mechanisms, such as standard contractual clauses.

Retention and security

Tovy only retains personal data as long as necessary for service delivery or as legally required. Tovy protects data with industry-standard security measures to prevent loss, theft and unauthorised access.

Rights under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to information: Knowing how your data is collected and used
Right of access: Requesting a copy of the stored information
Right to rectification: Having incorrect data corrected
Right to erasure: Requesting to have data deleted
Right to restriction: Having processing temporarily paused
Right to portability: Receiving data in a machine-readable format
Right to object: Objecting to the processing of personal data

To exercise these rights, you can contact us via the email address below.

This policy has been in effect since October 9, 2026.

Back