Privacy policy

1. Controller

Barlas Atalay
Tallmint Studio
c/o COCENTER

Koppoldstr. 1

86551 Aichach

Germany

Email: partners@tallmint.com

2. Hosting

This website runs on Cloudflare, Inc., USA, as our processor. When you open a page, Cloudflare processes connection data to deliver the page and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR; our interest is a secure and reachable website. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Retention: at most 30 days.

3. Visit counter

We count per day how often a page was opened, which of our channel links or which website (its domain only) visitors came from, from which country (derived by Cloudflare from the IP address) and how the pages are used, for example which sections were seen or whether a short was played. We store only daily totals. The legal basis is Art. 6(1)(f) GDPR; our interest is knowing which channels bring visitors and which content works.

4. Requests by form and email

When you write to us, we process your details to answer your request and to see which channels bring requests. The legal basis for answering is Art. 6(1)(b) GDPR where you are seeking a contract with us yourself, otherwise and for the analysis Art. 6(1)(f) GDPR; our interest is answering business requests and knowing which channels bring them. The message is forwarded through Cloudflare to our mailbox at Proton AG, Switzerland (adequacy decision, Art. 45 GDPR). We delete it once the request is closed; if an order follows, once no claims can arise from it. Statutory retention obligations take precedence.

5. Contacting businesses

We write to businesses to offer our services. For this we process business contact details (name, role, email address) from publicly available sources such as company websites. The legal basis is Art. 6(1)(f) GDPR; our interest is winning clients. If you open a link from our email, we record that your company opened it and how the website was used, so we can follow up at the right time. We delete the data when you object, at the latest two years after the last contact. You can object to processing for direct marketing at any time without giving reasons (Art. 21(2) GDPR).

6. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR), and you can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

You are not legally or contractually required to provide data. Without connection data we cannot deliver the website; without the details marked as required we cannot answer your request.

Right to object (Art. 21 GDPR): You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.

Last updated: November 2026. The German version is legally binding.