Privacy Policy

Protecting your personal data is important to us. We process your personal data confidentially and in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This Privacy Policy explains what personal data we collect when you visit our website, how we use it, the legal basis for processing, and your rights as a data subject.


1. Data Controller

A. Tafreshi
Tafreshi Communication & AI Solutions
Postfach 27 01 19
45352 Essen
Germany

Email: info@tafreshi.de
Phone: +49 176 80862974


2. General Information on Data Processing

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, email address, IP address, or any other information that can be linked to you directly or indirectly.

We process personal data only where necessary to provide a functional website, respond to enquiries, ensure the security of our systems, or where you have given your explicit consent.

Your personal data will only be shared with third parties where required by law, where you have expressly consented, or where such processing is necessary to fulfil contractual or legal obligations.


3. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

For the purpose of providing this website securely and reliably, our hosting provider processes personal data on our behalf. A Data Processing Agreement pursuant to Article 28 GDPR has been concluded.

Further information is available at:
https://www.strato.de/datenschutz/


4. Server Log Files

Whenever you access our website, our hosting provider automatically collects information and stores it in server log files. These logs are necessary to ensure the secure operation of the website, maintain system stability and detect security incidents.

The information collected may include:

  • IP address (where applicable, shortened or anonymised)
  • Date and time of access
  • Pages and files accessed
  • Browser type and version
  • Operating system
  • Referrer URL (if transmitted)
  • Internet service provider

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure and reliable operation of this website.


5. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that contain certain information.

Some cookies are technically necessary for the operation of the website. Other cookies are used solely for statistical purposes and are only stored with your explicit consent.

You may change your cookie preferences or withdraw your consent at any time with future effect.


6. Consent Management

We use a cookie consent system to obtain and manage your consent.

When visiting our website for the first time, you will be asked whether you wish to allow statistical cookies and the processing of personal data for analytical purposes.

Your decision is stored locally in your browser and can be changed at any time.

Without your explicit consent, no analytics cookies are placed and no personal data is processed for analytical purposes.


7. Google Consent Mode v2

This website uses Google Consent Mode v2 to ensure that Google services only process personal data for analytics after your explicit consent.

If you decline consent, Google Analytics remains disabled and no personal data is processed for analytics.

The Google Analytics script is loaded only after your consent has been given.


8. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website and enables us to improve our services.

Google Analytics is activated only after you have provided your explicit consent. The legal basis is Article 6(1)(a) GDPR.

We use Google Analytics with IP anonymisation enabled wherever technically possible.

Data may be transferred to Google servers in the United States. Google relies on the EU-US Data Privacy Framework and, where necessary, the Standard Contractual Clauses approved by the European Commission.

Further information:

Analytics data is retained for a maximum of 14 months, depending on our Google Analytics settings.

You may withdraw your consent at any time by changing your cookie preferences.


9. Contact Form

When using our contact form, we process the information you voluntarily provide solely for responding to your enquiry.

  • Name
  • Email address
  • Subject
  • Message

Depending on the nature of your enquiry, processing is based on Article 6(1)(b), Article 6(1)(f) or Article 6(1)(a) GDPR.


10. Contact by Email

If you contact us by email, we process your information solely to respond to your enquiry and any related correspondence.


11. Data Retention

Personal data is stored only for as long as necessary to fulfil the purposes described in this Privacy Policy or where required by law.


12. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise your rights, please contact:

info@tafreshi.de


13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority if you believe your personal data has been processed unlawfully.


14. Data Security

We implement appropriate technical and organisational measures to protect your personal data.

This website uses SSL/TLS encryption to ensure secure transmission of data.


15. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy whenever necessary due to legal, technical or operational changes.

The latest version published on this website shall always apply.


Last updated: August 2026