Last updated: 22 October 2026
This policy explains how we process your personal data when you visit our website, send us enquiries or apply for a job.
Controller and data protection officer
TUTIMA Glashütte GmbH & Co. KG
Altenberger Straße 6
01768 Glashütte/Sa., Germany
Email: info@tutima.com
Telephone: +49 (0)35053 320-20
You can contact our data protection officer at:
Kerstin Baltz · viernullvier GmbH
Von-Dorgelo-Straße 6
49393 Lohne, Germany
Email: info@404.gmbh
Telephone: +49 (0)4442 888 54 0
Website, hosting and security
When you visit our website, we process your IP address and details of the content requested, access time, browser and device. We also process any search terms you enter. This enables us to provide and secure the website, including its search function. The legal basis is our legitimate interest in reliable and secure website operation (Article 6(1)(f) GDPR).
The website is hosted by Vultr in Frankfurt am Main. Cloudflare, Inc., USA, delivers content and protects the website, processing connection and request data for these purposes. Tutima (HK) Ltd., Hong Kong, assists with technical maintenance and may access personal data in doing so. Further information: Vultr · Cloudflare.
Regular access logs on the Vultr server contain the time, HTTP status and data volume. Separate security and error logs may contain additional connection and request data to detect and investigate disruptions and attacks. Archived access logs are limited to 14 days and archived PHP error logs to 30 days. Retention of other security logs depends on the security purpose, completion of incident investigations and resolution of specific legal claims. Providers’ logs follow their respective retention criteria.
Language and cookies
We use the following cookies to display your preferred language:
wp-wpml_current_language: current language, 24 hours.preferred_lang: language you expressly select, 360 days.
Storage is based on section 25(2), point 2 TDDDG. Where personal data is processed, this is based on our legitimate interest in providing your preferred language version (Article 6(1)(f) GDPR). Cloudflare may use security cookies for necessary security checks. Cloudflare’s cookie information explains their purposes and durations. You can manage and delete cookies in your browser settings.
YouTube videos
With your consent, we load the individual YouTube player in privacy-enhanced mode via youtube-nocookie.com. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You make a new choice for each player and on each new page load.
YouTube processes your IP address, browser and device details, and information about the referring website and video usage, among other data. The player may load other Google services, display advertising and use cookies or similar technologies. According to Google, the controller for users in the EEA and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC in the USA may also receive data. Further information about processing and retention: Google Privacy Policy.
Use “Stop YouTube videos” at the bottom of the page to withdraw consent and remove loaded players. Withdrawal takes effect for the future and does not affect the lawfulness of earlier processing.
Contact by email
When you contact info@tutima.com, we process your email address, message and any other contact details to handle your enquiry. Where this is necessary to perform a contract with you or take pre-contractual steps at your request, Article 6(1)(b) GDPR applies. We handle other enquiries based on our legitimate interest in answering them (Article 6(1)(f) GDPR).
Recipients are the responsible employees and service providers operating our email service. We retain the data to handle your enquiry and necessary follow-up questions. Longer retention may be necessary for business correspondence subject to statutory retention requirements or to resolve specific legal claims; the legal bases are Article 6(1)(c) or (f) GDPR, respectively. You decide what information to send; we need the information necessary to handle your enquiry.
Catalogues and dealer enquiries
The information under “Website, hosting and security” applies to catalogue downloads. We handle catalogue and dealer enquiries as described under “Contact by email”. If you request a catalogue by post, we use your delivery address and necessary contact details for shipping. Any delivery service used receives the delivery data it needs.
Job applications
Send applications and enquiries about working at Tutima to personal@tutima.com. We process your contact details, professional information, application documents and information from the selection process to decide whether to hire you (section 26(1) BDSG). Access is granted to those involved in selection and service providers necessary for the technical operation of email.
Retention depends on the conclusion of selection and the periods relevant to asserting or defending possible claims. In a specific dispute, we retain the documents concerned until it is resolved (Article 6(1)(f) GDPR). If you are hired, we continue to process the information necessary for employment. Providing information is voluntary; without the information needed to assess an application, we cannot evaluate it.
Backups
We back up the website’s files and database to restore them after disruptions or data loss. This is our legitimate interest under Article 6(1)(f) GDPR. Backups may contain personal data. Only authorised persons have access.
Backups are stored in a private EU storage area of Cloudflare R2. We back up the database daily and files weekly, retaining up to 31 successful database backup generations and seven file backup generations. Vultr in Frankfurt retains the two latest automatic server backups, scheduled for every other day. Older generations are replaced. Failed backup runs may extend retention. Deleted data may remain in older backups until they are replaced. We reapply necessary deletions when restoring a backup.
Processing outside the EEA
The services described may involve processing personal data outside the European Economic Area (EEA). For covered transfers to Cloudflare in the USA, the Cloudflare Data Processing Addendum provides for the EU-US Data Privacy Framework and, for other covered transfers to third countries, EU Standard Contractual Clauses where required.
Google LLC is certified under the EU-US Data Privacy Framework. Transfers to the USA covered by that certification are subject to the European Commission’s adequacy decision under Article 45 GDPR. For other transfers, Google refers to Standard Contractual Clauses where required. Details and contact information for requesting a copy are available under Google’s data transfer frameworks. You can request information and copies of the transfer safeguards agreed with us at info@tutima.com.
Your rights
Subject to the statutory conditions, you have the right of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may withdraw consent at any time with effect for the future. To exercise these rights, contact info@tutima.com or our data protection officer.
Right to object
Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will stop the processing concerned unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (Article 21 GDPR).
You may also lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is the Saxon Commissioner for Data Protection and Transparency.