Privacy
Privacy Policy
Thank you for your interest in Toleo GmbH. Below we explain which personal data is processed when you use this website. The website is deliberately data-minimal: no analytics or marketing cookies are used.
1. Controller
Toleo GmbH
Ritter-Hilprand-Str. 9
82024 Taufkirchen
Germany
Email: info@toleo.biz
2. Hosting and Server Log Data
This website is hosted by Vercel Inc. When the website is accessed, technically necessary data is processed so that the page can be delivered, protected and operated reliably. This may include the IP address, date and time of access, requested URL, referrer URL, browser type, operating system and technical status information.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is the secure, stable and efficient provision of the website. Processing by Vercel is carried out on the basis of a data processing agreement. Where data is transferred to a third country, this is done on the basis of appropriate safeguards, in particular standard contractual clauses.
3. Contact and Contact Form
If you contact us by email or via the contact form, we process the data you provide, especially your name, email address and message text, in order to respond to your request. Required fields in the form are limited to the information we need to process the inquiry. Additional information is provided voluntarily.
The legal basis is Art. 6 (1) lit. b GDPR where your request relates to pre-contractual measures or a contract. In all other cases, the legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest is responding to your request and communicating with prospects and business partners.
4. Email Delivery via Resend
We use Resend, Inc. as an email service provider to deliver messages from the contact form. The contact and content data required for delivery is transmitted to Resend. Resend processes this data as a service provider to the extent necessary for delivery and technical protection of email transmission.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is the reliable delivery of incoming contact requests. Processing is carried out on the basis of a data processing agreement. Where data is transferred to a third country, this is done on the basis of appropriate safeguards, in particular standard contractual clauses.
5. Cookies, Analytics and Tracking
This website does not use analytics or marketing cookies and does not use tracking pixels. If technically necessary cookies or comparable technologies are required for website operation or request security, this is based on § 25 (2) No. 2 TDDDG.
6. Retention Period
Personal data is stored only for as long as necessary for the purposes described above or as required by statutory retention obligations. Contact requests are deleted once they have been finally processed and no statutory retention obligations prevent deletion.
7. Your Rights
Subject to the statutory requirements, you have the following rights:
- access to information about the processing of your personal data,
- rectification of inaccurate data,
- erasure or restriction of processing,
- data portability,
- objection to processing based on legitimate interests,
- complaint to a data protection supervisory authority.
For companies based in Bavaria, the Bavarian State Office for Data Protection Supervision is usually responsible: www.lda.bayern.de
8. No Automated Decision-Making
Automated decision-making, including profiling, does not take place on this website.
Last updated: June 5, 2026
