Privacy Protocol

Privacy Policy

Tovy respects your privacy. This policy describes how Tovy handles data collected through this website, in compliance with the General Data Protection Regulation (GDPR).

Data controller

Tovy is the data controller for personal data collected through this website. For questions, you can contact Tovy via: info@tovy.eu

Data collection and use

Tovy only requests personal data when necessary to provide a service. Tovy collects data lawfully, with your knowledge and explicit consent. The legal grounds for processing are consent, contractual necessity and legitimate interest.

Intake form: Tovy collects names, contact details (email, phone), company information and project details. This data is stored in Google Cloud Firestore and used to assess requests. The basis is the intention to enter into an agreement.
Server logs: The web server, hosted by Firebase Hosting, automatically records requests such as IP addresses, browser types and visited pages. The basis is the legitimate interest in maintaining a secure website.
Cookies: Tovy uses necessary cookies to manage your consent preferences. Tovy does not use tracking cookies without your explicit prior consent via the cookie banner.

Data location and transfer

The primary database (Cloud Firestore) is located within the European Union (region 'eur3'). Tovy prefers EU services, but some subcontractors may transfer data internationally. This is done exclusively via legally permitted mechanisms, such as standard contractual clauses.

Retention and security

Tovy only retains personal data as long as necessary for service delivery or as legally required. Tovy protects data with industry-standard security measures to prevent loss, theft and unauthorised access.

Rights under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to information: Knowing how your data is collected and used
Right of access: Requesting a copy of the stored information
Right to rectification: Having incorrect data corrected
Right to erasure: Requesting to have data deleted
Right to restriction: Having processing temporarily paused
Right to portability: Receiving data in a machine-readable format
Right to object: Objecting to the processing of personal data

To exercise these rights, you can contact us via the email address below.

This policy has been in effect since July 30, 2024.

Back