{"id":13591,"date":"2026-04-15T11:09:56","date_gmt":"2026-04-15T09:09:56","guid":{"rendered":"https:\/\/www.tfu.de\/privacy-policy\/"},"modified":"2026-07-23T15:37:22","modified_gmt":"2026-07-23T13:37:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.tfu.de\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<div class=\"header alignfull header-connect\">\n<h1 class=\"gb-text max-width-800 header-title header-title-small\">Privacy Policy<\/h1>\n\n\n\n<p class=\"gb-text max-width-800 header-text\">Protecting your data is important to us. On this page, we\u2019ll explain what personal data we collect, how we use it, and what rights you have regarding your data. <\/p>\n<\/div>\n\n<div class=\"wrap-section\">\n<div>\n<div class=\"link legal-text-wrap\">\n<h2 class=\"gb-text h2\">Privacy Policy (Updated 2026)<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Privacy at a Glance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">General Information<br\/>The following information provides an overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to identify you. For detailed information, please see the full privacy policy below.  <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Data Controller<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TFU \u2013 TechnologieF\u00f6rderungsUnternehmen GmbH\u2028Lise-Meitner-Str. 9\u202889081 Ulm\u2028Phone: +49 (731) 1423-0\u2028Email: <a href=\"mailto:info@tfu.de\" target=\"_blank\" rel=\"noreferrer noopener\">info@tfu.de<\/a> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The controller is the natural or legal person who determines the purposes and means of processing personal data.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Data Protection Officer<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Data Protection Officer:\u2028Ulrike Hudelmaier, B.B.A.\u2028TFU \u2013 TechnologieF\u00f6rderungsUnternehmen GmbH\u2028Lise-Meitner-Str. 9\u202889081 Ulm\u2028Phone: +49 (731) 1423-0\u2028Email: <a href=\"mailto:datenschutz@tfu.de\" target=\"_blank\" rel=\"noreferrer noopener\">datenschutz@tfu.de<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. General Information on Data Processing<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We treat your personal data confidentially and in accordance with the GDPR and the TTDSG.<br\/>Personal data is collected:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>if you provide this information to us yourself (e.g., via the contact form)<\/li>\n\n\n\n<li>automatically by IT systems when you visit the website (e.g., technical data, server log files)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">5. Your Rights (GDPR)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right at any time to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right of Access (Art. 15 of the GDPR)<\/li>\n\n\n\n<li>Rectification (Art. 16 of the GDPR)<\/li>\n\n\n\n<li>Erasure (Art. 17 of the GDPR)<\/li>\n\n\n\n<li>Restriction of Processing (Art. 18 GDPR)<\/li>\n\n\n\n<li>Data Portability (Art. 20 of the GDPR)<\/li>\n\n\n\n<li>Right to Object (Art. 21 of the GDPR)<\/li>\n\n\n\n<li>Withdrawal of Consent (Art. 7(3) of the GDPR)<\/li>\n\n\n\n<li>Filing a Complaint with a Supervisory Authority (Art. 77 of the GDPR)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Competent authority: State Data Protection Commissioner of Baden-W\u00fcrttemberg (LfDI BW).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Retention Period<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We store personal data only for as long as the purpose of the processing remains valid or as long as we are legally required to do so (e.g., tax retention periods).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Legal Basis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process personal data based on:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Art. 6(1)(a) of the GDPR \u2013 Consent  <\/li>\n\n\n\n<li>Art. 6(1)(b) of the GDPR \u2013 Contract \/ Precontractual Measures  <\/li>\n\n\n\n<li>Art. 6(1)(c) of the GDPR \u2013 Legal Obligation  <\/li>\n\n\n\n<li>Art. 6(1)(f) of the GDPR \u2013 Legitimate Interest  <\/li>\n\n\n\n<li>\u00a7 25(1) TTDSG \u2013 Consent to Cookies\/Tracking <\/li>\n\n\n\n<li>\u00a7 25(2) TTDSG \u2013 Technically Necessary Cookies <\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">8. Data Transfer to Third Countries (particularly the United States)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We use tools from providers that may process data outside the EU.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>For companies certified under the EU-U.S. Data Privacy Framework, the transfer is based on an adequacy decision by the European Commission (Art. 45 of the GDPR).<\/li>\n\n\n\n<li>In the case of non-certified providers, the transfer is based on the Standard Contractual Clauses (SCCs) of the European Commission (Art. 46 of the GDPR).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can find a current list of DPF-certified providers at:<a href=\"https:\/\/www.dataprivacyframework.gov\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">https:\/\/www.dataprivacyframework.gov\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">9. Cookies &amp; Consent Management (Real Cookie Banner)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We use Real Cookie Banner (devowl.io GmbH) to manage cookie consent.<br\/>Storage:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Consent is stored in technical cookies and local storage.<\/li>\n\n\n\n<li>Data is stored for up to 365 days.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Legal Basis:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Art. 6(1)(a) of the GDPR  <\/li>\n\n\n\n<li>\u00a7 25(1) TTDSG <\/li>\n\n\n\n<li>Art. 6(1)(f) of the GDPR (Evidence of Consent)  <\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">10. Server Log Files<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We process the following data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Browser type\/version<\/li>\n\n\n\n<li>Operating System<\/li>\n\n\n\n<li>Referrer URL<\/li>\n\n\n\n<li>Hostname of the accessing device<\/li>\n\n\n\n<li>Time of the server request<\/li>\n\n\n\n<li>IP address (truncated\/anonymized after 7 days)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Legal basis: Art. 6(1)(f) of the GDPR  <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">11. Contact Form \/ Contacting Us<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Data Processed: Name, email address, message.<br\/>Legal Basis:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Art. 6(1)(b) of the GDPR (contractual)  <\/li>\n\n\n\n<li>Art. 6(1)(f) of the GDPR (Processing of Inquiries)  <\/li>\n\n\n\n<li>Art. 6(1)(a) of the GDPR (Consent)  <\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">12. Google Forms<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We use Google Forms, provider: Google Ireland Limited.<br\/>Processing: Transmission to Google servers (including the U.S.).<br\/>Legal basis:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Art. 6(1)(a) of the GDPR \u2013 solely with consent  <\/li>\n\n\n\n<li>\u00a7 25(1) TTDSG <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We have a data processing agreement (Art. 28 of the GDPR) with Google.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">13. YouTube<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We embed videos via YouTube (Google Ireland Limited).<br\/>When you visit a page with an embedded video, the following may occur:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cookies<\/li>\n\n\n\n<li>Device Identifiers<\/li>\n\n\n\n<li>IP addresses<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">processed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Legal basis:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Consent: Art. 6(1)(a) of the GDPR, \u00a7 25(1) of the TTDSG   <\/li>\n\n\n\n<li>DPF or standard contractual clauses, depending on certification<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">14. Google Web Fonts (local)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The fonts are embedded locally\u2014no data is transmitted to Google.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Protecting your data is important to us. &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Privacy Policy\" class=\"read-more button\" href=\"https:\/\/www.tfu.de\/en\/privacy-policy\/#more-13591\" aria-label=\"Read more about Privacy Policy\">weiterlesen &#8230;<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":102,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"tfu-kategorie":[],"class_list":["post-13591","page","type-page","status-publish","tfu-privacy-policy"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/pages\/13591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/comments?post=13591"}],"version-history":[{"count":3,"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/pages\/13591\/revisions"}],"predecessor-version":[{"id":15105,"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/pages\/13591\/revisions\/15105"}],"wp:attachment":[{"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/media?parent=13591"}],"wp:term":[{"taxonomy":"tfu-kategorie","embeddable":true,"href":"https:\/\/www.tfu.de\/en\/wp-json\/wp\/v2\/tfu-kategorie?post=13591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}