This policy explains how we process personal data when you visit tideforce.de, contact us or request information about TIDEFORCE. For the management app and booking portals, please read the app privacy notice.
Controller and privacy contact
TIDEFORCE UG (haftungsbeschränkt)
Sterzingerstraße 34, 83024 Rosenheim, Germany
Email: info@tideforce.de
Telephone: +49 172 411 78 11
Data protection officer: Eva Ranner, eranner@tideforce.de. You may also write to her at the address above, marked “Data protection officer”.
Website hosting and access logs
The website is hosted using Google Cloud and Firebase App Hosting. When a page or file is requested, technical data can be processed, including IP address, date and time, requested URL, response status, referrer and browser or device information. We process these data to deliver the site, maintain availability, diagnose errors and protect against misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are secure and reliable website operation.
Technical logs are retained only for as long as needed for operation, security and incident investigation, subject to the hosting provider’s technical retention cycles. Longer retention occurs only where required by law or needed to establish, exercise or defend legal claims.
Contact, demo and quote requests
Our contact form collects name and email address and may collect school name, main activity, location and a message. The service also records a server timestamp, user agent and the forwarded IP address for security and abuse prevention. Submissions are stored in Google Cloud Firestore so we can answer and manage the request. For a quote request, we collect your name, school name, email address and selected services and options, together with any optional phone, website and message details. The receipt confirmation and internal notification are sent through Amazon SES; we store delivery status and technical message identifiers for these messages. To protect the quote form against misuse, we use pseudonymised counters rather than storing the raw IP address or user agent in the enquiry record.
The legal basis is Article 6(1)(b) GDPR where your request concerns a possible contract, and Article 6(1)(f) GDPR for other business enquiries and abuse prevention. Our legitimate interest is responding to genuine enquiries and securing the form. Required fields are marked in the form; without them we cannot respond.
We keep the correspondence while the enquiry or business relationship is active and then delete or restrict it when it is no longer needed, unless commercial, tax or legal retention duties or legal claims require longer storage.
PDF guides and email capture
When you request a PDF guide, we collect your email address, the guide and its version, form language, article page, request time and the version of the notice shown. We store the request in Google Cloud Firestore and link it to a contact in our CRM, Attio, using the email address. The guide request is documented in a note. This process does not verify ownership of the email address.
The guide is available to download directly on the website and is sent once as a PDF attachment to the supplied address through Amazon Simple Email Service (SES). Our team receives an internal notification containing the email address and requested guide. We store each delivery status and technical message identifier. No newsletter consent is collected. A protected download link is valid for 30 minutes; you can keep the email attachment. An email address is required for this process. To access, correct or delete your guide request, please contact info@tideforce.de.
Product updates and email
Automated newsletter registration is currently unavailable on this website. If you email us to request product updates, we first process that email as correspondence. We do not add the address to marketing distribution until separate confirmation has been completed. You can object to or withdraw marketing permission at any time by emailing us.
Consent management
We store your analytics choice in local storage under tf_cookie_consent. The record contains the choice, policy version and timestamp. It is necessary to remember and respect your choice and is processed under Article 6(1)(f) GDPR. It is not used for cross-site tracking. You can reopen the settings from the footer. The choice remains valid for up to 180 days; we ask again after that period or when the notice version changes. Necessary device access is based on section 25(2)(2) TDDDG.
Google Analytics 4
If you consent, we load Firebase Analytics / Google Analytics 4, provided by Google Ireland Limited. It processes page views, navigation, device and browser information, approximate location derived from network information, and referral data. We also classify identifiable referrals from AI assistants so we can understand how visitors discover TIDEFORCE. Google Analytics may set cookies described in our Cookie Policy.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Analytics does not load through our consent component before acceptance. You may withdraw consent at any time through Cookie settings; withdrawal does not affect earlier lawful processing.
Media and external content
Some images and logos are delivered through Framer’s media CDN. Raster images are mainly retrieved through our server-side image optimisation; some external SVG logos are requested directly. For direct requests, Framer receives technical data such as IP address, requested file, referrer and browser information. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable website presentation.
The homepage video, customer statement and captions are served through our website. The homepage video may start automatically with muted sound; the customer statement starts when you select play. These components do not embed a YouTube player. Links to YouTube and other social networks lead to the respective provider’s website, where its privacy information applies.
Recipients and processors
Depending on the feature used, personal data may be available to:
- Google Cloud / Firebase for hosting, Firestore and infrastructure;
- Attio to link and document requests for PDF guides;
- Google Ireland Limited for consented Google Analytics;
- Framer for externally delivered website media; and
- service providers supporting secure website operation where required.
Providers acting on our behalf are bound by appropriate data processing terms. We disclose data to public authorities only where legally required.
International data transfers
Some providers may process data outside the European Economic Area. Where this occurs, transfers rely on an applicable adequacy decision, including an active EU–US Data Privacy Framework certification where available, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You may request further information from us.
Your rights
Subject to the legal requirements, you may request access, rectification, erasure, restriction, data portability and, where processing is based on consent, withdraw consent at any time. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your situation. You may object to direct marketing at any time without giving reasons.
To exercise a right, email info@tideforce.de. We may need to verify your identity. You also have the right to lodge a complaint with a supervisory authority. Our competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).
Security and automated decisions
We use proportionate technical and organisational measures to protect personal data. Internet transmission can nevertheless not be guaranteed completely secure. Website enquiries are not subject to solely automated decisions that produce legal or similarly significant effects.
Changes to this policy
We update this policy when our services, providers or legal requirements change. The date above identifies the current version. Company information is also available in our Legal Notice.