TITOFF Industriedesign GmbH
Last updated: 29 October 2026
1. Privacy at a Glance
General Information
Protecting your personal data is important to us. This Privacy Policy explains what personal data we process when you visit our website, submit a product enquiry or otherwise contact us, the purposes for which we process this data and the rights available to you.
Personal data means any information relating to an identified or identifiable natural person.
Data Collection on Our Website
When you use our website, certain technical data is processed to ensure the secure operation and availability of the website.
If you submit a product enquiry, we process the information you provide as well as the technical data associated with your enquiry.
If you contact us by email or telephone, we process the information necessary to handle your request.
We also use technically necessary functions for language selection and the management of cookie preferences.
Data Controller
TITOFF Industriedesign GmbH is responsible for processing personal data on this website. Our contact details are provided in the following section.
2. Data Controller
TITOFF Industriedesign GmbH
Schaumainkai 101
60596 Frankfurt am Main
Germany
Telephone: +49 6173 3919868
Email: info@titoff.de
Represented by Managing Director Claudia Orben-Mäckler.
If you have any questions regarding the processing of your personal data or wish to exercise your data protection rights, you may contact us at any time.
3. General Information on the Processing of Personal Data
Legal Bases for Processing
We process personal data only where there is a lawful basis for doing so.
Depending on the nature and purpose of the processing, the following legal bases may apply:
- Article 6(1)(a) GDPR: Processing based on your consent.
- Article 6(1)(b) GDPR: Processing necessary for the performance of a contract or for taking steps at your request prior to entering into a contract.
- Article 6(1)(c) GDPR: Processing necessary to comply with a legal obligation.
- Article 6(1)(f) GDPR: Processing necessary for the purposes of legitimate interests, provided that these interests are not overridden by your interests, fundamental rights or freedoms.
Where technologies access or store information on your device, we also comply with the applicable provisions of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG).
Data Retention
We generally retain personal data only for as long as necessary to fulfil the purposes for which it is processed.
Where statutory retention obligations apply, the relevant data will be stored for the legally required period.
Specific retention and deletion periods for server logs, product enquiries, IP addresses and backups are described in the following sections.
Recipients of Personal Data
We use technical service providers to operate our website and manage our business communications. These include:
- ALL-INKL.COM for website hosting;
- ManageWP, a service of the GoDaddy group, for website maintenance and backups;
- Google Workspace for business email communications;
- Appointed technical service providers responsible for setting up, maintaining and supporting our website.
Where necessary, these service providers may access the personal data required to perform their respective services.
Data Processing Outside the European Union
When using internationally operating service providers, particularly Google Workspace and ManageWP, personal data may also be processed outside the European Union or the European Economic Area, or may be accessed from those jurisdictions.
Where personal data is transferred to third countries, such transfers are carried out in accordance with the requirements of Articles 44 et seq. GDPR.
Depending on the processing activity and recipient, the relevant safeguards may include adequacy decisions issued by the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Further information about the service providers we use is provided in the following sections.
4. Website Hosting, Server Logs and Encrypted Data Transmission
Hosting by ALL-INKL.COM
Our website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Proprietor: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
Website: https://all-inkl.com
The hosting provider supplies the technical infrastructure necessary to make our website available.
In connection with the operation of our website, technical connection data, server logs and information required for the website’s functionality may be processed.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, stable and reliable website.
Where the hosting provider processes personal data on our behalf, the relevant contractual arrangements for data processing pursuant to Article 28 GDPR apply.
Server Log Files
When you access our website, certain technical information is processed automatically.
This may include:
- Truncated IP address;
- Date and time of access;
- Page or file requested;
- Browser and browser version;
- Operating system;
- Technical information relating to the request and server status;
- The previously visited website, where applicable (referrer).
This information is processed to make our website available, monitor its technical functionality, analyse errors and detect or prevent misuse and security threats.
IP addresses stored in server logs are truncated. Server log files are deleted after seven days.
The legal basis for this processing is Article 6(1)(f) GDPR.
SSL and TLS Encryption
Our website uses SSL or TLS encryption.
This protects data transmitted between your browser and our website while it is being transferred.
You can identify an encrypted connection by the use of “https” in your browser’s address bar.
5. Contact and Product Enquiries
Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide in order to handle your enquiry.
This may include:
- Your name;
- Your email address;
- Your telephone number, if provided;
- Your company affiliation, if provided;
- The content of your enquiry and any documents you submit.
Processing is based on Article 6(1)(b) GDPR where it is necessary to take steps prior to entering into a contract or to perform a contract with you.
For other enquiries and when processing the contact details of representatives of business customers, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is to respond to business enquiries and maintain appropriate business communications.
We retain the relevant data only for as long as necessary to process your enquiry and conduct any subsequent business communication. Statutory retention obligations remain unaffected.
Product Enquiry Form
You can submit a non-binding enquiry about individual products through the product pages on our website.
We process the following information:
- Name (required);
- Email address (required);
- Company name (optional);
- Message (optional);
- Name of the product being enquired about, which is automatically included in the enquiry.
In addition, your IP address is collected as part of the technical processing of the form.
The submitted information is stored in our WordPress installation and forwarded to our business email inbox for further processing.
We use this information to respond to your enquiry, check product availability, prepare an individual quotation and, where applicable, communicate with you regarding a potential order.
Submitting a product enquiry is non-binding and does not constitute an order.
The legal basis for processing is Article 6(1)(b) GDPR where your enquiry concerns entering into a contract with us. Where this provision does not directly apply, processing is based on Article 6(1)(f) GDPR.
Data Retention and Automatic Deletion
Product enquiries are stored in WordPress for as long as they are required for processing.
Open enquiries remain stored until their processing has been completed. An automated deletion process is in place for completed enquiries after 183 days.
IP addresses collected in connection with form submissions are deleted after seven days.
Where statutory retention obligations apply to certain information, or where retention is necessary for the establishment, exercise or defence of legal claims, the relevant legal obligations and rights remain unaffected.
Data that has already been deleted may temporarily remain in existing technical backups until the applicable backup retention period expires.
Automatic deletion within WordPress does not automatically delete messages that have already been forwarded to our email inbox. These messages are managed separately and deleted when they are no longer required, provided that no statutory retention obligations apply.
Protection Against Automated Enquiries
We use a technical spam protection function known as a honeypot to protect our enquiry forms against automated submissions and misuse.
This function is designed to identify automated form submissions without using Google reCAPTCHA.
Processing is based on our legitimate interest in protecting our website and enquiry forms pursuant to Article 6(1)(f) GDPR.
Contact Page
Our contact page provides information on how to contact TITOFF. It does not contain a separate contact form.
6. Business Email Communications via Google Workspace
We use Google Workspace, a service provided by Google, for our business email communications.
If you send us an email or submit a product enquiry that is forwarded to our email inbox, the relevant personal data may be processed within our Google Workspace environment.
This may include sender and recipient addresses, names, message content, timestamps, technical email metadata and any attachments.
We process this information to communicate with prospective customers, customers and business partners, respond to product enquiries and prepare or fulfil contractual relationships.
The legal basis is Article 6(1)(b) GDPR or, for other business communications, Article 6(1)(f) GDPR.
Where statutory retention obligations apply, further storage is based on Article 6(1)(c) GDPR.
Google Workspace operates using an international technical infrastructure. Depending on contractual arrangements and technical settings, data may be processed outside the European Union or accessed from other jurisdictions.
International data transfers are subject to the requirements of Articles 44 et seq. GDPR.
Further information:
https://workspace.google.com
https://policies.google.com/privacy
7. Cookies and Consent Management
General Information About Cookies
Our website uses cookies and similar technical storage technologies where necessary for its operation and intended functions.
Cookies are small pieces of information that may be stored on your device.
Strictly Necessary Cookies
Our website uses a technically necessary language cookie to support the German and English versions of the website.
This cookie allows the website to take your selected language into account and provide a consistent browsing experience.
According to the website’s technical configuration, no advertising or analytics cookies are set before any required consent has been given.
Strictly necessary cookies may be used without prior consent where the conditions of Section 25(2) TDDDG are met.
Any associated processing of personal data is based on Article 6(1)(f) GDPR, unless another legal basis applies.
Cookie Settings with Complianz
We use Complianz to manage cookie information and any consent that may be required.
You can access, review and, where applicable, change the available cookie settings at any time through the cookie settings link in the footer of our website.
Where consent is required for the use of certain technologies, their use is based on Section 25(1) TDDDG and the associated processing of personal data is based on Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
Further details about the cookies actually used, their purposes and retention periods can be found in our Cookie Policy.
8. WordPress, Technical Extensions and Backups
WordPress
Our website is built using the WordPress content management system.
We use various extensions to design, manage and technically provide our website’s content and functions.
These include Elementor Pro, WPML, WooCommerce and Complianz.
Elementor Pro
Elementor Pro is used to design our website and provide the technical functionality of our product enquiry forms.
Information submitted through these forms is processed as described in Section 5.
WPML
WPML is used to provide our website in German and English.
It enables visitors to select and view their preferred language version.
A technically necessary language cookie is used for this purpose.
WooCommerce
We use WooCommerce to manage and display our products.
Our website is intended for product presentation and non-binding enquiries about individual products.
Purchases cannot be completed directly through an online shopping cart or checkout on our website.
Website Maintenance and Backups with ManageWP
We use ManageWP, a service of the GoDaddy group, for the technical maintenance and backup of our WordPress website.
In particular, the service is used to perform and monitor website updates and create technical backups.
In providing these services, ManageWP may process website files, database contents and, where applicable, personal data stored within our WordPress installation.
This may include information contained in product enquiries.
According to our technical service provider, backups created through ManageWP are stored in Europe.
According to the service provider’s published information, the standard retention period for ManageWP backups is 90 days. Shorter retention periods may apply if the backup function is disabled or a website is removed from ManageWP.
Information that has already been deleted from the active website database may remain in existing backups until the relevant backup retention period expires.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to maintain a secure, reliable and technically up-to-date website and to be able to restore it following technical problems.
As ManageWP forms part of the internationally operating GoDaddy group, international data processing or access may occur even where backups are stored in Europe.
Further information:
https://managewp.com/privacy-policy/
https://www.godaddy.com/legal/agreements/data-processing-addendum
9. Newsletter
Our website includes a field intended for registration for a future newsletter.
Through this newsletter, we intend to share information about new products, developments, design projects, references and events.
The technical newsletter registration system, including double opt-in, documentation of consent and an unsubscribe function, is currently being prepared.
If email addresses are already submitted through the existing field, they are initially forwarded to TITOFF as incoming messages. Entering an email address in this field does not currently result in a technically confirmed newsletter subscription or automatic inclusion in an active mailing list.
Before regular newsletter emails are sent, a separate registration process will be introduced requiring explicit consent and confirmation through a double opt-in procedure.
Only the data necessary to send the newsletter and document consent is intended to be processed, in particular the email address and the corresponding registration and confirmation information.
The legal basis for future newsletter communications will be Article 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future. In particular, newsletters will include an unsubscribe option.
Individual-level tracking of email opens or link clicks is not planned.
Once the newsletter function has been fully configured and activated, the information in this section will be updated to reflect the actual technical implementation.
10. Links to Social Networks
Our website contains links to our profiles on Instagram and LinkedIn.
These are ordinary external links. We do not use embedded social media feeds from these platforms on our website.
Merely visiting our website does not establish a direct connection to these platforms through these links.
If you click on one of these links, you will leave our website and be directed to the relevant platform.
The platform operator may then process personal data in accordance with its own privacy policy.
Further information:
Instagram: https://privacycenter.instagram.com/policy/
LinkedIn: https://www.linkedin.com/legal/privacy-policy
11. Your Rights as a Data Subject
Subject to the applicable legal requirements, you have the following rights:
Right of Access
Under Article 15 GDPR, you have the right to request confirmation of whether we process your personal data and to obtain information about that processing.
Right to Rectification
Under Article 16 GDPR, you may request that inaccurate personal data be corrected or incomplete personal data be completed.
Right to Erasure
Under Article 17 GDPR, you may request the deletion of your personal data where the applicable legal conditions are met.
Right to Restriction of Processing
Under Article 18 GDPR, you may request that the processing of your personal data be restricted under certain circumstances.
Right to Data Portability
Under Article 20 GDPR, you may, where the applicable legal requirements are met, request to receive certain personal data in a structured, commonly used and machine-readable format or have it transferred to another controller.
Right to Withdraw Consent
Where we process personal data on the basis of your consent, you may withdraw that consent at any time with effect for the future in accordance with Article 7(3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object to that processing under Article 21 GDPR on grounds relating to your particular situation.
We will then cease processing the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
Right to Lodge a Complaint with a Supervisory Authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for our registered office is:
The Hessian Commissioner for Data Protection and Freedom of Information
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de
Contact for Exercising Your Rights
You may contact us at any time to exercise your data protection rights:
TITOFF Industriedesign GmbH
Schaumainkai 101
60596 Frankfurt am Main
Germany
Email: info@titoff.de
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if legal requirements, the technical configuration of our website or the service providers we use change.
The version published on our website at the relevant time shall apply.
