Toleo Holding
Back to homeDeutsch

Privacy

Privacy Policy

Thank you for your interest in Toleo GmbH. Below we explain which personal data is processed when you use this website. The website is deliberately data-minimal: no analytics or marketing cookies are used.

1. Controller

Toleo GmbH
Ritter-Hilprand-Str. 9
82024 Taufkirchen
Germany
Email: info@toleo.biz

2. Hosting and Server Log Data

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the website is accessed, technically necessary data is processed so that the page can be delivered, protected and operated reliably. This may include the IP address, date and time of access, requested URL, referrer URL, browser type, operating system and technical status information. Vercel processes requests from the contact form in a data centre in Frankfurt am Main.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is the secure, stable and efficient provision of the website. Processing by Vercel is carried out on the basis of a data processing agreement. Vercel is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are based on the adequacy decision of the European Commission (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 (2) lit. c GDPR). Vercel deletes log data automatically; runtime logs are kept for at most 30 days, depending on the plan.

3. Contact and Contact Form

If you contact us by email or via the contact form, we process the data you provide, especially your name, email address and message text, in order to respond to your request. All fields in the form are required because we need this information to process and answer your request. Requests by email and from the contact form arrive in our mailbox, which IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, operates on our behalf.

The legal basis is Art. 6 (1) lit. b GDPR where your request relates to pre-contractual measures or a contract. In all other cases, the legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest is responding to your request and communicating with prospects and business partners.

4. Email Delivery via Resend

We use the email service Resend, operated by Plus Five Five, Inc., USA, to deliver messages from the contact form. The contact and content data required for delivery is transmitted to Resend. Resend processes this data as a service provider to the extent necessary for delivery and technical protection of email transmission. Resend stores message content and delivery logs in the USA and deletes them after 30 days.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is the reliable delivery of incoming contact requests. Processing is carried out on the basis of a data processing agreement. Resend participates in the EU-U.S. Data Privacy Framework; transfers to the USA are based on the adequacy decision of the European Commission (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 (2) lit. c GDPR).

5. Cookies, Analytics and Tracking

This website does not use analytics or marketing cookies and does not use tracking pixels. If technically necessary cookies or comparable technologies are required for website operation or request security, this is based on § 25 (2) No. 2 TDDDG.

6. Retention Period

Personal data is stored only for as long as necessary for the purposes described above or as required by statutory retention obligations. Contact requests are deleted once they have been finally processed and no statutory retention obligations prevent deletion.

7. Your Rights

Subject to the statutory requirements, you have the following rights:

  • access to information about the processing of your personal data,
  • rectification of inaccurate data,
  • erasure or restriction of processing,
  • data portability,
  • objection to processing based on legitimate interests,
  • complaint to a data protection supervisory authority.

For companies based in Bavaria, the Bavarian State Office for Data Protection Supervision is usually responsible: www.lda.bayern.de

8. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 (1) lit. f GDPR (Art. 21 GDPR). We will then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection by email to info@toleo.biz is sufficient.

9. No Automated Decision-Making

Automated decision-making, including profiling, does not take place on this website.

Last updated: September 29, 2026