Privacy Policy (Updated 2026)

1. Privacy at a Glance

General Information
The following information provides an overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to identify you. For detailed information, please see the full privacy policy below.

2. Data Controller

TFU – TechnologieFörderungsUnternehmen GmbH Lise-Meitner-Str. 9 89081 Ulm Phone: +49 (731) 1423-0 Email: info@tfu.de

The controller is the natural or legal person who determines the purposes and means of processing personal data.

3. Data Protection Officer

Data Protection Officer: Ulrike Hudelmaier, B.B.A. TFU – TechnologieFörderungsUnternehmen GmbH Lise-Meitner-Str. 9 89081 Ulm Phone: +49 (731) 1423-0 Email: datenschutz@tfu.de

4. General Information on Data Processing

We treat your personal data confidentially and in accordance with the GDPR and the TTDSG.
Personal data is collected:

if you provide this information to us yourself (e.g., via the contact form)
automatically by IT systems when you visit the website (e.g., technical data, server log files)

5. Your Rights (GDPR)

You have the right at any time to:

Right of Access (Art. 15 of the GDPR)
Rectification (Art. 16 of the GDPR)
Erasure (Art. 17 of the GDPR)
Restriction of Processing (Art. 18 GDPR)
Data Portability (Art. 20 of the GDPR)
Right to Object (Art. 21 of the GDPR)
Withdrawal of Consent (Art. 7(3) of the GDPR)
Filing a Complaint with a Supervisory Authority (Art. 77 of the GDPR)

Competent authority: State Data Protection Commissioner of Baden-Württemberg (LfDI BW).

6. Retention Period

We store personal data only for as long as the purpose of the processing remains valid or as long as we are legally required to do so (e.g., tax retention periods).

7. Legal Basis

We process personal data based on:

Art. 6(1)(a) of the GDPR – Consent
Art. 6(1)(b) of the GDPR – Contract / Precontractual Measures
Art. 6(1)(c) of the GDPR – Legal Obligation
Art. 6(1)(f) of the GDPR – Legitimate Interest
§ 25(1) TTDSG – Consent to Cookies/Tracking
§ 25(2) TTDSG – Technically Necessary Cookies

8. Data Transfer to Third Countries (particularly the United States)

We use tools from providers that may process data outside the EU.

For companies certified under the EU-U.S. Data Privacy Framework, the transfer is based on an adequacy decision by the European Commission (Art. 45 of the GDPR).
In the case of non-certified providers, the transfer is based on the Standard Contractual Clauses (SCCs) of the European Commission (Art. 46 of the GDPR).

You can find a current list of DPF-certified providers at:https://www.dataprivacyframework.gov/

9. Cookies & Consent Management (Real Cookie Banner)

We use Real Cookie Banner (devowl.io GmbH) to manage cookie consent.
Storage:

Consent is stored in technical cookies and local storage.
Data is stored for up to 365 days.

Legal Basis:

Art. 6(1)(a) of the GDPR
§ 25(1) TTDSG
Art. 6(1)(f) of the GDPR (Evidence of Consent)

10. Server Log Files

We process the following data:

Browser type/version
Operating System
Referrer URL
Hostname of the accessing device
Time of the server request
IP address (truncated/anonymized after 7 days)

Legal basis: Art. 6(1)(f) of the GDPR

11. Contact Form / Contacting Us

Data Processed: Name, email address, message.
Legal Basis:

Art. 6(1)(b) of the GDPR (contractual)
Art. 6(1)(f) of the GDPR (Processing of Inquiries)
Art. 6(1)(a) of the GDPR (Consent)

12. Google Forms

We use Google Forms, provider: Google Ireland Limited.
Processing: Transmission to Google servers (including the U.S.).
Legal basis:

Art. 6(1)(a) of the GDPR – solely with consent
§ 25(1) TTDSG

We have a data processing agreement (Art. 28 of the GDPR) with Google.

13. YouTube

We embed videos via YouTube (Google Ireland Limited).
When you visit a page with an embedded video, the following may occur:

Cookies
Device Identifiers
IP addresses

processed.

Legal basis:

Consent: Art. 6(1)(a) of the GDPR, § 25(1) of the TTDSG
DPF or standard contractual clauses, depending on certification

14. Google Web Fonts (local)

The fonts are embedded locally—no data is transmitted to Google.

Privacy Policy