Privacy policy

Last updated: 11 September 2026

We are delighted that you are interested in our company. Protecting your personal data is important to us. This policy explains which data we process when you visit this Website, for what purpose, and on what legal basis.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, as the statutory requirements for doing so do not apply to us. For any data protection questions, please contact us directly using the details above.

2. Your rights at a glance

You have the right, at any time, to request information about the personal data we hold about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). Where you have given consent to a processing activity, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR).

An informal email to info@tortoris.com is sufficient.

Right to lodge a complaint. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

3. Hosting and server log files

This Website is hosted by an external provider in Germany (ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf). Personal data collected in this context is stored on the provider’s servers. We have a data processing agreement with the provider under Art. 28 GDPR. Processing takes place exclusively in Germany.

When you access this Website, the server automatically records information transmitted by your browser: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, the file retrieved and the amount of data transferred, and the IP address. This data is not combined with other data sources.

Purpose: technically error-free provision and optimisation of the Website, and the detection and investigation of attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention period: 60 days, after which the data is automatically deleted. This period allows attacks to be recognised and investigated, as they often only become apparent as a pattern over a longer period; in the event of a specific security incident, we process the affected entries until it has been resolved.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this Website uses SSL/TLS encryption. You can recognise an encrypted connection by the prefix https:// in your browser’s address bar. When encryption is active, the data you transmit to us cannot be read by third parties.

5. Cookies, tracking and analytics

This Website does not use cookies, and it does not embed any analytics, advertising or tracking service — no Google Analytics, no Google Tag Manager, no tracking pixel of any kind. No consent banner is shown because none is required.

6. Fonts

The fonts used on this Website are served locally from our own server. No connection to Google or any other third-party font service is made, and no data is transmitted to third parties for this purpose.

7. Contact

This Website does not contain a contact form. If you contact us by email or telephone using the details on the Contact page, we process the information you provide in order to handle your enquiry and any follow-up questions. We do not pass this data on without your consent.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to, or is preparing, a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Retention period: until your enquiry has been fully dealt with, unless statutory retention periods apply.

8. International data transfers

We do not use any third-party service on this Website that would transfer your data outside the European Economic Area.

9. Automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

10. Retention period

Unless a different period is expressly stated in this policy, we process and store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Once the purpose no longer applies and any retention periods have expired, the data is routinely deleted or blocked.

11. Changes to this privacy policy

We will update this privacy policy whenever the legal situation or the services we use change. The version published on this page applies.