Privacy Policy

Preamble

Protecting your data is important to us. This privacy policy explains how TTI GmbH collects, uses, stores and protects personal data in connection with the website www.relionos.com and which rights you have as a data subject.

We treat personal data confidentially and in accordance with applicable data protection law and this privacy policy. This policy applies exclusively to www.relionos.com and the functions currently offered on this website.

1. Name and Contact Details of the Controller and Data Protection Officer

The controller within the meaning of the General Data Protection Regulation, other national data protection laws of the EU member states and other data protection provisions is:

The data protection officer of TTI can be reached at the address above or by email at datenschutz@tti-stuttgart.de.

For Relionos inquiries, you can also contact us at info@relionos.com.

2. General Information on Data Processing

We collect and use personal data only insofar as this is necessary to provide a functional website and our content and services. Where personal data is requested directly on the website, providing it is voluntary or is based on the legal basis stated for the relevant function.

In particular, the following legal bases may apply:

• Art. 6(1)(a) GDPR where you have given consent;
• Art. 6(1)(b) GDPR for the performance of a contract or steps prior to entering into a contract;
• Art. 6(1)(c) GDPR for compliance with a legal obligation;
• Art. 6(1)(d) GDPR to protect vital interests; and
• Art. 6(1)(f) GDPR for legitimate interests, provided that your interests, fundamental rights and freedoms do not override those interests.

Personal data is erased or blocked once the purpose of storage no longer applies. Further storage takes place only where required by European or national law or where the data is needed for the establishment, exercise or defence of legal claims.

No decision based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

Please note that data transmission over the internet, for example communication by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.

3. Provision of the Website and Log Files

When you access our website, the browser used on your device automatically sends information to our website server. The following information may be processed:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Website from which access takes place
• Browser used, browser version and operating system
• Whether the request was successful and the amount of data transferred

The processing is carried out to enable a smooth connection and delivery of the website, to ensure the functionality of the website and to protect the security of our information technology systems. The legal basis is Art. 6(1)(f) GDPR.

The website is provided through Cloudflare Pages and other Cloudflare services. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes technically required access data in a globally distributed network to deliver content and ensure availability and security. Processing may take place in the United States or other third countries.

Log data is processed only for as long as necessary for delivery, troubleshooting and security; the applicable criteria are the Cloudflare service configuration, contractual requirements and statutory obligations. The source code of this website does not create separate permanent storage of general page requests. Further information is available in Cloudflare's privacy policy.

4. Contact by Email

If you contact us by email, we process your email address, the content of your message and any information you provide voluntarily in order to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR; if the enquiry is aimed at entering into a contract, Art. 6(1)(b) GDPR also applies.

The data is erased once your enquiry has been dealt with conclusively and there are no statutory retention obligations or legitimate reasons for further storage.

5. Call Booking with Microsoft Bookings

Our website links to an external Microsoft Bookings page where you can arrange a call with us. Microsoft Bookings content and scripts are not embedded in this website. Data is transmitted to Microsoft only when you follow the link and the booking page loads. Microsoft may use cookies or similar technologies on that external page in accordance with its own settings and policies.

For a booking, the information processed may include your name and contact details, the selected service, date and time, time zone, notes or answers you provide, and technical access data. We process this information to arrange and manage the call and to send booking confirmations, changes or reminders. The legal basis is Art. 6(1)(b) GDPR where the call concerns steps prior to entering into a contract; otherwise it is our legitimate interest in efficient appointment scheduling pursuant to Art. 6(1)(f) GDPR.

Microsoft Bookings is a Microsoft 365 service. The provider for users in the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Booking data is stored in Microsoft 365, including Exchange Online, and retained in accordance with our Microsoft 365 retention settings and applicable statutory obligations. Microsoft may process service and diagnostic data and may involve recipients in third countries; the safeguards described in Section 10 apply. Further information is available in Microsoft's privacy statement.

6. Newsletter and Brevo

If you subscribe to the Relionos newsletter, we process your email address, the consent you have given, your selected language and the source of the registration, as well as technical information required for registration and form protection. Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

We use a double opt-in process. After you submit the form, Brevo sends a confirmation email. The newsletter subscription is completed only after you click the confirmation link in that email.

We use Brevo to manage the recipient list, document registration and send emails. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Technical delivery, opening and link information may be processed in connection with sending messages where this is enabled for the relevant message and Brevo configuration.

The data is stored until you withdraw your consent or unsubscribe. Information required to ensure that an unsubscribe request is permanently observed or to demonstrate valid consent may be blocked and retained beyond that point for the duration of statutory obligations or limitation periods. You may withdraw your consent at any time with effect for the future using the unsubscribe link in each newsletter email or by contacting info@relionos.com.

Brevo may use subprocessors to provide its services. Where data is processed outside the European Economic Area, the safeguards described in Section 10 apply. Further information is available in Brevo's privacy policy.

7. Cloudflare Turnstile

We use Cloudflare Turnstile to protect the newsletter form against abusive automated use. When the widget is loaded and used, the data transmitted to Cloudflare may include the IP address, date and time, browser and device information, referrer, interaction data and a single-use verification token. Our server transmits the verification token and requesting IP address to Cloudflare for server-side validation.

Depending on the Cloudflare configuration and the security challenge flow, technically necessary cookies or comparable storage technologies may be used. They are used for the security check, not for our advertising analytics. Our newsletter function does not permanently store the verification token. Cloudflare processes further technical data in accordance with the retention and security requirements applicable to Turnstile.

The legal basis is our legitimate interest in the security and functionality of our website pursuant to Art. 6(1)(f) GDPR. The provider and information on third-country transfers are the same as the Cloudflare information in Section 3.

8. Web Analytics with PostHog

We use PostHog to better understand the use of our website and improve our offering. The provider is PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. Integration takes place via the domain p.relionos.com.

The data processed may include requested URLs and page titles, referrers, timestamps, page interactions and technical information concerning the browser, operating system, device and screen size. The IP address is technically processed during transmission. We do not transmit names or email addresses to PostHog through this website and do not call any function to identify visitors.

PostHog is configured on this website in permanent cookieless mode. The PostHog code therefore does not use cookies or persistent local storage or session storage to recognize visitors. Session recording is expressly disabled. Data is retained only for as long as required for analysis under the retention period configured in the PostHog project and is then erased or aggregated.

The legal basis is our legitimate interest in measuring reach and analyzing and improving our website pursuant to Art. 6(1)(f) GDPR. PostHog is a US provider; information on third-country transfers is provided in Section 10. Further information is available in PostHog's privacy policy.

9. Cookies and Similar Technologies

Our website does not use analytics cookies. As described in Section 8, PostHog is configured without persistent browser storage. Technically necessary cookies or comparable storage technologies may be used, in particular by Cloudflare or Turnstile, where required for security functions.

You can configure your browser to block, restrict or delete cookies. In that case, newsletter registration in particular may be limited.

10. Recipients, Disclosure and Third-Country Transfers

Personal data is disclosed to third parties only where described in this privacy policy, where you have given consent, where disclosure is necessary to provide a service you requested, where a legal obligation applies, or where this is necessary for the establishment, exercise or defence of legal claims.

Recipients or processors include in particular Cloudflare for hosting and security, Microsoft for call booking and Microsoft 365 services, Brevo for newsletter management and PostHog for web analytics. Where service providers process personal data in countries outside the European Economic Area, transfers take place in accordance with Art. 44 et seq. GDPR. Depending on the recipient, the safeguards used may include an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission together with supplementary safeguards.

11. Rights of Data Subjects

Subject to the statutory requirements, you have in particular the right:

• to obtain access to your personal data processed by us pursuant to Art. 15 GDPR;
• to obtain without undue delay the rectification of inaccurate or completion of incomplete data pursuant to Art. 16 GDPR;
• to obtain erasure of your data pursuant to Art. 17 GDPR, unless a statutory exception applies;
• to obtain restriction of processing pursuant to Art. 18 GDPR;
• to receive data you provided in a structured, commonly used and machine-readable format or have it transmitted to another controller pursuant to Art. 20 GDPR;
• to withdraw consent at any time with effect for the future pursuant to Art. 7(3) GDPR; and
• to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, phone: +49 711 615541-0, email: poststelle@lfdi.bwl.de, www.baden-wuerttemberg.datenschutz.de.

To exercise your rights, please contact datenschutz@tti-stuttgart.de or write to the data protection officer of TTI GmbH at the postal address stated in Section 1.

12. Right to Object

Where personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to processing at any time for reasons arising from your particular situation. Where the objection concerns direct marketing, you have a general right to object without stating reasons arising from a particular situation.

To exercise your right of withdrawal or objection, an email to datenschutz@tti-stuttgart.de or a postal letter to the address above is sufficient.

13. Data Security

The website is transmitted in encrypted form using HTTPS. We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. The security measures are regularly reviewed and improved in line with technological developments.

14. Current Version and Changes to this Privacy Policy

This privacy policy is currently valid and was last updated on 20 July 2026. It may need to be amended as the website develops, the services used change, or legal or regulatory requirements are updated. The current version is always available at relionos.com/privacy/.

15. Objection to Unsolicited Advertising and Information Material

We object to the use of contact details published as part of the legal notice obligation for sending unsolicited advertising and information material. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, including spam email.