Legal
Privacy policy
Which data this website processes, why and for how long.
1. Controller
Ahmad Matar
Denkstr. 11 b, 12167 Berlin
Email: kontakt@tempoblick.de
2. Overview: what this site processes
This website does not use any advertising networks. To measure reach, we use Google Analytics, but only after you have given your consent (see section 7). Without your consent, none of it is loaded. Fonts are loaded from our own server; nothing is requested from third parties. Only the data listed below is processed.
3. Visiting the website (server log)
When the site is requested, technical access data transmitted by your browser is processed: IP address, time, requested address, amount of data transferred, browser and operating system identifier.
Purpose: delivering the site, operational security, preventing
misuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure
operation).
Storage period: 7 days, then automatic
deletion by a daily rotation on the server.
4. Early sign-up (claim your spot)
When you sign up using the sign-up form, we process your name, your email address, optionally your phone number and fleet size, the preferences you selected, the time of the sign-up and technical access data (IP address, browser identifier) as proof of consent.
The sign-up uses a double opt-in procedure: only when you click the link in the confirmation email does the sign-up become binding, receive a sequential number, and are we allowed to contact you by email. Without confirmation, the address is not used.
Purpose: carrying out the early sign-up, allocating the spots and
getting in touch about Tempoblick.
Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR
(pre-contractual measures).
Storage period: no later than 180 days after
the sign-up, we make your details unrecognisable: name, email address,
phone number and technical access data are removed, the number of
vehicles is grouped into a rough bracket and the time is shortened to the
date. What remains is an anonymous entry that can no longer be linked to
any person and only serves us as statistics. A withdrawal takes effect
immediately and independently of this period. Every email contains a
link you can use to withdraw your sign-up; alternatively, an informal
message to
kontakt@tempoblick.de
is enough.
Required information: name and email address. Without them, we
cannot confirm the sign-up.
5. Contact form
When you use the contact form, we process your name, email address and your message. The details are stored in our database in order to handle the request. We do not store an IP address here.
Immediately after you submit it, we send an acknowledgement of receipt to the address you gave, quoting your message. It only serves as proof that the request has arrived; no confirmation on your part is needed.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or
Art. 6(1)(f) GDPR.
Storage period: no later than 180 days after
receipt, we make the request unrecognisable: name, email address and the
message text are removed, and the time is shortened to the date. What
remains is an anonymous entry without any personal reference. Statutory
retention obligations remain unaffected.
Required information: email address and message. Without them, we
cannot reply.
6. Access for the team
For the protected area, we process email address, name, company, role, the time of the last sign-in and a cryptographic hash of the password. The password itself is not stored (PBKDF2-HMAC-SHA256 with a random salt).
For every active session, we store a random session identifier, the time of creation and expiry, and the IP address and browser identifier of the sign-in, in order to detect unauthorised access.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and
Art. 6(1)(f) GDPR (security of the accounts).
Storage period: for the duration of the account; expired sessions
are deleted automatically.
7. Cookies
This site only sets technically necessary cookies:
| Name | Purpose | Lifetime |
|---|---|---|
| sm_sitzung | keeps you signed in to the protected area | 14 days |
| sm_csrf | protects forms against forged submissions | 8 hours |
No consent is required for technically necessary cookies (Section 25(2) no. 2 TDDDG).
Reach measurement with Google Analytics
We use Google Analytics 4 to see which content is read and how visitors find their way to us. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This only happens with your consent. You are asked on your first visit. As long as you have not agreed, Google Analytics is not loaded: no analytics cookies are set and no request goes to Google. If you decline, that remains the case, and the site works exactly the same.
Data processed: shortened IP address, identifier from the cookie, pages visited, time and duration, referring page, approximate location at city level, device and browser. We do not use any advertising features: storage for advertising purposes, ad personalisation and the sharing of user data for advertising are switched off.
We also record our own events to understand what happens on the site: how far people scroll (25/50/75/90%), which sections came into view, which tab in the diagram was clicked, whether a form was started and then abandoned, and whether a request was submitted. Content from form fields is never transmitted; for an abandoned form, only the fact that it was started, not what was in it.
| Name | Purpose | Lifetime |
|---|---|---|
| _ga | distinguishes visitors from one another | 2 years |
| _ga_1TWNZTZ7Y5 | keeps the session state for the measurement | 2 years |
Legal basis: Section 25(1) TDDDG for storing and reading the cookies and Art. 6(1)(a) GDPR (consent) for the subsequent processing. Transfer to third countries: processing by the parent company Google LLC in the USA cannot be ruled out; the EU standard contractual clauses under Art. 46 GDPR apply to this. Storage period at Google: 14 months. Further information in Google's privacy policy.
You can change your decision at any time with effect for the future. A withdrawal deletes the analytics cookies that have been set.
Loading your current status …
8. Recipients and processors
The website is operated by Hostinger; the server is located in a data centre in Frankfurt am Main. A data processing agreement under Art. 28 GDPR is in place with the provider; it is part of the terms of use and applies once they are accepted (Data Processing Addendum).
Hostinger in turn uses sub-processors, some of which are based outside the European Union. For these cases, Hostinger relies on the standard contractual clauses of the European Commission. The data of this website is stored on the server in Frankfurt am Main mentioned above; we do not carry out any planned transfer to third countries.
Sending emails. We send the confirmation and notification emails of this site via Hostinger's mail server. In doing so, your email address and the content of the respective message are transmitted. The same data processing agreement applies as for operating the website.
Backups. A backup of the database is made daily and kept for 7 days. If you withdraw your sign-up or we make details unrecognisable, this takes effect immediately in live operation; the data only disappears from the backups once the last backup containing it has expired.
9. Data from our customers' operations
When a service partner uses our software, we process the operational and driver data that arises exclusively on behalf of and according to the instructions of that service partner. The controller within the meaning of the GDPR is then the service partner; the details are governed by a data processing agreement. Drivers concerned should please contact their employer with their requests.
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority; as a rule, the authority of your place of residence or of our registered office is responsible: the Berlin Commissioner for Data Protection and Freedom of Information.
11. Data security
We secure the transmission with TLS, store passwords only as a hash, limit sign-in attempts and end all open sessions when a password is changed.
To prevent misuse of the open forms, we remember for a few minutes how many submissions came from an IP address. This only happens in memory, is not stored and is gone after a short time or a restart. The legal basis is Art. 6(1)(f) GDPR.
12. Changes
We adapt this policy when the processing changes. Last updated: 25 September 2026.