Legal

Privacy policy

1. Controller

Tim Tiefenbach – TeaFan Media
Address as listed in the legal notice
Email: hello@teafan.media

2. Website hosting

This website is served as a static site via Cloudflare Pages (Cloudflare, Inc.). When you access the site, technical data required for operation (e.g. IP address, date and time, requested URL, browser and operating system information, referrer) is processed to deliver the site securely and reliably. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in operating a stable, secure and functional website).

Cloudflare may also process technical network error reports via Network Error Logging (NEL/Report-To), if this feature is enabled for the domain. These reports are used to detect and resolve technical connectivity issues and are not used for marketing, analytics or tracking purposes.

3. Cookies, tracking and analytics

This website does not use cookies for marketing, analytics or tracking purposes. No analytics tools (e.g. Google Analytics, Matomo, Plausible) are integrated, and no third-party tracking is used.

A single technically necessary functional cookie may be set when you actively choose a language via the language switcher (DE/EN): “pref_lang” stores only your language preference (value “de” or “en”) so the homepage can open in your preferred language on your next visit. This first-party cookie contains no personal identifiers, does not enable tracking and expires within 12 months at the latest. Legal basis: Section 25 (2) TDDDG (necessary for the functionality you explicitly requested) in conjunction with Art. 6 (1) lit. f GDPR. You can delete the cookie in your browser at any time.

4. Fonts and CSS (served locally)

The “Lato” font is served locally by this website; there is no connection to Google Fonts or other external font services. The CSS (Tailwind) is also precompiled and served locallyno external CSS CDN is used. Fonts and CSS therefore do not create additional connections to external font or CSS services.

5. Embedded YouTube videos (two-click consent)

Videos are not loaded automatically. The video is loaded from YouTube (Google Ireland Limited / Google LLC, USA) only after you actively click “Load video”. Data, including your IP address, is then transmitted to Google/YouTube and cookies may be set; a transfer to the USA is possible. The legal basis is your consent under Art. 6 (1) lit. a GDPR, which you give by clicking the button. Until then, no connection to YouTube is established. Alternatively, you can watch the video directly on YouTube.

6. Contact

When you use the contact form, the data you enter (name, email address, company if provided, project type, preferred start date and message) is processed through a Cloudflare Pages Function and sent to me by email via my email service provider Migadu so I can handle your inquiry. Your email address is used to reply to your inquiry and to send you an automatic confirmation of receipt or, if a technical forwarding problem occurs, a notice about that issue. The website does not store form data in a database.

To protect against abuse and automated spam submissions, the contact form uses Cloudflare Turnstile. Technically necessary verification data and request metadata may be processed by Cloudflare to determine whether the request is likely made by a human or automated. This processing is used solely to protect the form and is based on Art. 6 (1) lit. f GDPR. I process the submitted form data solely to handle your inquiry on the basis of Art. 6 (1) lit. b and f GDPR. The data is retained only for as long as necessary to handle your inquiry and any related follow-up communication, then deleted unless statutory retention obligations apply.

7. Your rights

You have the right of access (Art. 15 GDPR), the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can also lodge a complaint with a supervisory authority (Art. 77).

8. SSL/TLS encryption

For security and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

9. Changes to this privacy policy

This privacy policy will be updated whenever features, tools or data processing procedures used by this website change. The current version is always available on this page.

← Back to homepage