Privacy Policy

    Last updated: January 2026

    The protection of your personal data is important to us. This privacy policy informs you in accordance with the General Data Protection Regulation (GDPR) about how we collect, process and protect your data.

    1. Data Controller

    The data controller within the meaning of the GDPR is:

    TIKI Projektentwicklungsgesellschaft mbH

    Große Weinmeisterstraße 14, 14469 Potsdam, Germany

    Commercial Register: Local Court Potsdam, HRB 38619 P

    Managing Director: Steven Bredow

    VAT ID: DE339152885

    E-Mail: hello@tiki-share.com

    2. Overview of Data Processing

    This website processes the following categories of personal data:

    • Contact data (name, email, phone, company) when using the contact form
    • Technical data (IP address, browser, device, timestamp) when visiting the website
    • Usage data (visited pages, time spent) for website analysis

    Data subjects are website visitors and contact inquirers.

    3. Legal Basis for Processing

    We process your data based on the following legal grounds:

    • Consent (Art. 6 para. 1 lit. a GDPR)
      Where you have given us explicit consent for processing.
    • Contract Initiation (Art. 6 para. 1 lit. b GDPR)
      For processing contact inquiries and business initiation.
    • Legitimate Interests (Art. 6 para. 1 lit. f GDPR)
      To ensure IT security, website optimization and fraud prevention.

    4. Website Provision

    Each time you access our website, the following data is automatically collected:

    Server Log Files

    IP address (anonymized), browser type and version, operating system, referrer URL, pages accessed, date and time of access

    This data is technically necessary for website provision and serves IT security.

    • Storage period: 7 days
    • Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR)

    SSL/TLS Encryption

    This website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by "https://" in your browser's address bar.

    Hosting Provider

    The website is hosted by GPT Engineer AB, a company based in the EU (Sweden).

    5. Local Storage (instead of Cookies)

    This website does not use cookies requiring consent.

    Language Preference

    We store your language setting (German/English) in your browser's local storage (localStorage) to display the website in your preferred language.

    Legal basis: Technically necessary for website use – no consent required.

    6. Service Providers

    We use the following service providers for website operation:

    DienstleisterZweckStandort
    Supabase Inc.Backend infrastructure and databaseLocation: USA
    GPT Engineer ABWebsite hosting and analyticsLocation: EU (Sweden)

    7. Third Country Transfer (USA)

    Some of our service providers are based in the USA. The transfer of personal data to the USA is based on:

    • EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR)
    • For certified US companies: EU-US Data Privacy Framework (adequacy decision)

    ⚠️ Hinweis: Note: The USA has a lower level of data protection than the EU. US authorities may access your data under certain circumstances. We have concluded appropriate agreements with all service providers to ensure an adequate level of protection.

    8. Storage Periods

    We store personal data only as long as necessary for the respective purposes:

    • Server log files: 7 days
    • Contact inquiries: 3 years after completion
    • Contract data: 10 years (§ 257 German Commercial Code)

    After expiration of storage periods, data is deleted or anonymized.

    9. Your Rights

    Under the GDPR, you have the following rights:

    • Right of access (Art. 15 GDPR): You can request information about your data stored with us.
    • Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
    • Right to erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention obligations exist.
    • Right to restriction (Art. 18 GDPR): You can request restriction of processing of your data.
    • Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
    • Right to object (Art. 21 GDPR): You can object to processing of your data based on legitimate interests.
    • Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw consent at any time with effect for the future.
    • Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority.

    To exercise your rights, please contact: partners@tiki-share.com

    10. Supervisory Authority

    You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

    State Commissioner for Data Protection and Right of Access to Files Brandenburg

    Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany

    www.lda.brandenburg.de

    11. Automated Decision-Making

    No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

    12. Changes to Privacy Policy

    We reserve the right to adapt this privacy policy as needed to comply with changed legal requirements or changes to our services. The current version can be found on our website.

    13. Contact

    For questions about data protection or to exercise your rights, please contact us at: