Privacy Policy
1. Scope of This Privacy Policy
This Privacy Policy explains how TemplinTech processes personal data when you use our websites, digital platforms, customer and educational services, software products and interactive features, as well as our official communication channels.
Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), applicable German data protection law, including the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG), and other applicable legal requirements.
This Privacy Policy applies to templintech.com and its subdomains, including go.templintech.com with TemplinTech Connect and academy.templintech.com with TemplinTech Academy.
It also applies to other websites, digital services, or projects operated by TemplinTech where they refer to this Privacy Policy and no separate privacy information is provided for the respective service.
This Privacy Policy also covers personal data processing by us in connection with TemplinTech's official profiles and channels on LinkedIn, Instagram, and YouTube.
TemplinTech Software Products on Third-Party Websites
TemplinTech develops Joomla extensions and other software products, including TemplinTech Comments, TemplinTech Polls, and TemplinTech Podcasts.
Where such a product is installed and operated by an independent third party on its own website or infrastructure, the operator of that website generally determines the purposes and means of processing carried out through that installation and is responsible for providing its own privacy information.
This Privacy Policy describes processing by TemplinTech and the use of these features within digital services operated by us. It does not automatically become the privacy policy of independent websites that use TemplinTech software.
The standard self-hosted architecture of these Joomla extensions does not require comment content, poll votes, or podcast content to be transmitted to TemplinTech solely because the respective extension has been installed, unless expressly stated otherwise for a particular service or configuration.
2. Data Controller
The data controller within the meaning of Article 4(7) GDPR is:
Dr. Yordan Balabanov
Frankfurter Str. 37
70376 Stuttgart
Germany
Phone: +49 176 376 708 10
Email:
The controller determines the purposes and means of processing personal data in connection with TemplinTech's activities, websites, and digital services, unless otherwise stated for a specific processing activity.
3. Legal Bases, Data Minimization, Retention Periods, and Recipients
Legal Bases for Processing
We process personal data only for specified and lawful purposes and where an applicable legal basis exists.
Depending on the specific circumstances, processing may be based on:
- Article 6(1)(a) GDPR - where you have provided consent to a specific processing activity;
- Article 6(1)(b) GDPR - where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract;
- Article 6(1)(c) GDPR - where processing is necessary to comply with a legal obligation;
- Article 6(1)(f) GDPR - where processing is necessary for our legitimate interests or the legitimate interests of a third party and those interests are not overridden by your interests, fundamental rights, and freedoms.
Where a technology stores information on a user's terminal device or accesses information already stored on that device, Section 25 TDDDG also applies.
Where such storage or access is strictly necessary to provide a digital service expressly requested by the user, prior consent is not required under the conditions set out in Section 25(2) TDDDG.
Data Minimization
TemplinTech follows the principle of data minimization. Where technically and functionally feasible, our digital services and proprietary software products are designed to avoid unnecessary collection of personal data, persistent tracking, browser fingerprinting, unnecessary persistent identifiers, and individual profiling.
Retention Periods
Personal data is retained only for as long as necessary to fulfill the purpose for which it is processed.
Once the relevant purpose no longer applies, the data is deleted or anonymized unless further retention is required by applicable law or is necessary for the establishment, exercise, or defense of legal claims.
Statutory retention periods may apply to contractual, accounting, tax, and commercial records and may take precedence over the general principle of deletion once the original purpose no longer applies.
Recipients of Personal Data
Personal data is disclosed to external recipients only where necessary and where an applicable legal basis exists.
Depending on the relevant process, such recipients may include hosting and technical service providers, payment service providers, competent public authorities, tax or accounting advisors, and other parties whose involvement is necessary to provide the respective service, perform a contract, or comply with a legal obligation.
Where an external organization processes personal data on our behalf and in accordance with our instructions, the processing is governed by Article 28 GDPR where applicable.
Transfers Outside the European Economic Area
When certain international services are used, such as Stripe, WhatsApp, or social media platforms, personal data may also be processed in countries outside the European Union and the European Economic Area.
Where additional safeguards are required for such transfers, permissible mechanisms under the GDPR are used, such as an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework for participating certified organizations, Standard Contractual Clauses, or another applicable legal mechanism.
4. Visits to Our Websites and Hosting
STRATO
The technical infrastructure for our websites and platforms is hosted by:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When a website is accessed, technical data required to establish the connection and deliver the requested content is exchanged between your device and the hosting infrastructure.
This may include, in particular:
- IP address;
- date and time of the request;
- requested page, file, or resource;
- browser type and version;
- operating system used;
- referrer URL, where transmitted;
- technical information relating to the request and server response.
This data is used to technically provide the services, maintain system stability, diagnose technical issues, and protect against misuse and attacks.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest consists of providing secure, reliable, and technically functioning infrastructure.
STRATO states that full visitor IP addresses processed for the purpose of identifying and preventing attacks are retained for up to seven days. Log files made available to STRATO customers for hosting analysis and administration contain anonymized IP addresses.
Additional information about data protection at STRATO: https://www.strato.de/datenschutz/
5. Cookies and Technical Browser Storage
TemplinTech follows a principle of minimizing the use of cookies and similar technologies.
templintech.com and Joomla
During a standard visit to templintech.com, Joomla uses a first-party session cookie to manage the current technical session and related website functions.
It is set by our own domain, is limited to the current browser session, and is not used by TemplinTech for advertising, marketing, behavioral analytics, creation of advertising profiles, or tracking across different websites.
Language functionality may use information within the current session where necessary to provide the language version selected by the user.
go.templintech.com and TemplinTech Connect
When using go.templintech.com, user accounts and TemplinTech Connect may use additional technically necessary session and authentication mechanisms required for secure login and provision of the requested customer functions.
If the user expressly activates a persistent login feature, such as "Remember Me," a persistent authentication cookie may be used to the extent necessary to provide that specifically requested function.
academy.templintech.com and Moodle
When using academy.templintech.com, the Moodle platform uses the technical session cookie MoodleSession.
MoodleSession maintains the current session and allows the platform to recognize the relevant session when the user moves between pages. Where a user account is used, it is necessary to maintain the authenticated session.
MoodleSession is not used by TemplinTech for advertising, marketing, or tracking user behavior across different websites.
Moodle's persistent username remembering function is disabled. TemplinTech therefore does not use the persistent MoodleID cookie to remember usernames.
TemplinTech Comments and TemplinTech Polls
Where TemplinTech Comments or TemplinTech Polls is used within our Joomla environment, certain functions may use the current Joomla session for technical management of visitor actions, for example to limit repeated reactions or repeated voting within the current session.
For these functions, we do not use persistent voter or reaction identifiers, browser fingerprinting, or cross-site tracking.
TemplinTech Podcasts
TemplinTech Podcasts does not require a separate advertising or tracking cookie to provide its own standard podcast functionality. Where audio content is delivered through our own infrastructure, the standard technical mechanisms and server logs described in this Privacy Policy apply.
Other Technical Mechanisms
Depending on the particular service, browser mechanisms such as caching, session storage, or web application functionality may be used where necessary to technically provide or optimize the respective service.
TemplinTech does not use these mechanisms for advertising tracking or behavioral profiling.
Detailed information about cookies and applicable rules is available at: https://templintech.com/en/cookie-consent.
6. Communication With TemplinTech
Contact Forms
If you send a message through a form on one of our websites, we process the information you provide in order to review your inquiry, respond to you, and conduct follow-up communication where necessary.
Depending on the particular form, the processed data may include your name, email address, telephone number, organization, and message content.
Where the inquiry relates to a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
For other inquiries, processing is based on Article 6(1)(f) GDPR and our legitimate interest in communicating effectively with individuals who contact us.
Email and Telephone
When you contact us by email or telephone, we process the data you voluntarily provide as well as information necessary to review and follow up on your inquiry.
Contractual and pre-contractual communications are processed under Article 6(1)(b) GDPR. In other cases, processing is generally based on Article 6(1)(f) GDPR.
Standard email is generally not an end-to-end encrypted communication channel. We therefore recommend that particularly sensitive information not be sent by ordinary email unless appropriate additional security measures have been taken.
TemplinTech also offers communication through WhatsApp. For users in the European Region, the service is provided by:
WhatsApp Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
If you choose to contact us through WhatsApp, we may process your telephone number, name or profile information, message content, files sent, and other information you voluntarily provide as part of the communication.
WhatsApp states that personal messages and calls are protected by end-to-end encryption. The service provider itself nevertheless processes certain account, technical, and communication metadata in accordance with its own policies.
Where the communication relates to a contract or preparation of a contract, processing by us is based on Article 6(1)(b) GDPR.
In other cases, the legal basis is Article 6(1)(f) GDPR and our legitimate interest in providing a convenient and effective communication channel.
Use of WhatsApp is voluntary. You may instead contact us by email or telephone.
Additional information: https://www.whatsapp.com/legal/privacy-policy-eea/
7. User Accounts and TemplinTech Connect
Through go.templintech.com, customer accounts and access to TemplinTech Connect and related digital services are or may be provided.
When an account is registered and managed, the following data may be processed, for example:
- first and last name;
- email address;
- username;
- company or organization;
- contact and billing information;
- selected services or subscriptions;
- order and payment information;
- contractual status;
- settings and actions required to administer the account.
Mandatory fields are limited to the data necessary to create the account, securely identify the user, or provide the respective service.
Passwords are not stored in plain text but are protected using appropriate cryptographic mechanisms for credential storage.
Processing necessary for registration, account administration, and provision of contracted services is based on Article 6(1)(b) GDPR.
Data necessary to protect accounts, prevent and detect misuse, diagnose technical issues, and ensure system security may be processed under Article 6(1)(f) GDPR.
Where consent is required for a particular function, information concerning the consent provided and the time it was given may be stored to the extent necessary to demonstrate lawful processing.
After an account is closed, related data is deleted when it is no longer required unless statutory retention requirements, ongoing contractual relationships, or the establishment, exercise, or defense of legal claims require longer retention.
8. TemplinTech Academy and Moodle
At academy.templintech.com, we operate TemplinTech Academy using the Moodle learning management platform.
Moodle is used to provide and manage online training, learning content, user accounts, course enrollment, learning activities, and related functions.
Personal data processed through TemplinTech Academy is used to provide, administer, secure, and document the respective educational services.
TemplinTech Academy Account
A user account is required to use certain courses and functions within TemplinTech Academy.
Depending on the functionality used, the following data may be processed in particular:
- first and last name;
- email address;
- username;
- language and other account settings;
- course enrollment information;
- role and access permissions;
- information relating to creation and use of the account;
- technical data relating to login and use of the platform.
The data is processed to the extent necessary to create and administer the account and provide the selected educational services.
Where TemplinTech Academy is used as part of a contractual or pre-contractual service, the legal basis is Article 6(1)(b) GDPR.
Processing necessary to protect the platform, prevent misuse, and ensure information security may be based on Article 6(1)(f) GDPR.
Learning Activity and Progress
When participating in a course, Moodle may process information relating to course use and learning progress.
Depending on the structure and functionality of the particular course, this may include:
- course enrollment and participation;
- access to learning resources and activities;
- activity and course completion status;
- date and time of actions performed;
- submitted assignments, text, or files;
- answers to quizzes, tasks, or other forms of assessment;
- results, scores, and grades where used;
- feedback from an instructor or evaluator;
- posts and interactions in forums or other communication features where enabled;
- information concerning completion of training and certificates or confirmations issued where such functionality is used.
This data is processed to provide the relevant course, track learning progress, carry out planned learning and assessment activities, document completion, and provide related course services.
Where training is provided as part of a contractual service, the primary legal basis is Article 6(1)(b) GDPR.
Technical and Activity Logs
Moodle records certain technical and user actions necessary for operation, administration, security, and, where applicable, documentation of platform use.
These records may include, for example:
- user identifier;
- IP address;
- date and time of the action;
- type of action performed or resource accessed;
- information concerning the course, activity, or component in which the action occurred;
- other technical data necessary to trace system events.
Technical and activity logs may be used for administration and diagnostics, protection of user accounts and the platform, detection and prevention of misuse, and, where required for the relevant course, documentation of learning activities.
Where processing is necessary to provide and document the contracted educational service, the legal basis is Article 6(1)(b) GDPR.
Where data is processed for technical and information security purposes, the legal basis is Article 6(1)(f) GDPR.
Assignments and Uploaded Files
If a course allows submission of assignments, documents, or other files, the submitted content is stored within the learning platform and processed for performance and assessment of the relevant learning activity.
Users are encouraged to provide only the information necessary for the particular course and not to include third-party personal data or particularly sensitive information unless expressly required.
Communication Within the Academy
If Moodle messaging, forums, comments, or other communication functions are used, we process the relevant content and associated data necessary to provide the communication function.
The legal basis is generally Article 6(1)(b) GDPR where communication forms part of delivery of the course, or Article 6(1)(f) GDPR where processing is necessary for administration and normal operation of the platform.
Retention of TemplinTech Academy Data
Data within TemplinTech Academy is retained for as long as necessary to provide and administer the relevant training, manage the user account, and fulfill related contractual and legal obligations.
Different categories of learning data may be subject to different retention periods.
Information necessary to demonstrate participation, course completion, results achieved, certificates issued, or services provided may be retained for longer where necessary to document the training, comply with legal obligations, or protect legal claims.
Once the relevant purpose no longer applies, the data is deleted or anonymized unless applicable law or another permissible legal basis requires further retention.
Rights Relating to Academy Data
The data subject rights described below also apply to personal data processed through TemplinTech Academy.
Moodle provides technical mechanisms for identifying and exporting the personal data of a particular user and for deleting such data where the applicable legal and technical conditions permit.
Requests relating to data within TemplinTech Academy may be sent to:
9. Customer, Order, and Contractual Data
When you express interest in a paid service, place an order, or become a TemplinTech customer, we process data necessary to prepare, enter into, administer, and perform the contractual relationship.
This may include:
- identification and contact data;
- company or organizational information;
- address and billing information;
- information concerning ordered services, subscriptions, software products, or digital content;
- contractual status;
- correspondence;
- payment information.
The primary legal basis is Article 6(1)(b) GDPR.
Where certain information must be retained to comply with accounting, tax, commercial, or other statutory requirements, processing is additionally based on Article 6(1)(c) GDPR.
If mandatory information necessary to perform a contract is not provided, the relevant order or service may not be capable of being fulfilled.
Services, Subscriptions, Software, and Digital Content
When you order a service, subscription, Joomla extension, other software product, or digital content, we use the necessary contractual data to process the order, provide access or download availability, perform the service, issue invoices, communicate with customers, and provide support.
10. Payments Through Stripe Checkout
TemplinTech uses Stripe Checkout for electronic payments.
When a payment process is initiated through Stripe Checkout, your browser establishes a connection with Stripe's payment infrastructure. Information necessary to process and secure the payment is provided to and processed within Stripe's systems.
For the European Economic Area, depending on the particular payment product and processing role, different Stripe group companies may be involved, including:
- Stripe Payments Europe, Limited;
- Stripe Technology Company, Limited;
- Stripe Technology Europe, Limited, where the relevant regulated payment services are provided.
These companies are established in Ireland. The particular Stripe entity and its role depend on the product used and the specific processing activity.
In connection with a payment transaction, Stripe may process, for example:
- name;
- email address;
- billing address;
- payment method information;
- payment amount and currency;
- transaction and merchant information;
- IP address;
- browser and device information;
- information necessary for payment authentication, fraud prevention, and risk management.
Depending on the particular processing activity, Stripe may act as a processor on our behalf and/or as an independent controller for certain purposes of its own, particularly security, fraud prevention, and compliance with financial and regulatory obligations.
Where payment card information is entered directly through Stripe Checkout, TemplinTech does not receive or store the full payment card number.
We receive information necessary to determine the result of the payment, fulfill the order, issue invoices, process any refunds, and manage the contractual relationship.
Processing by us that is necessary for payment and performance of the contract is based on Article 6(1)(b) GDPR.
Processing and retention necessary to comply with accounting, tax, or other legal obligations is based on Article 6(1)(c) GDPR.
Stripe pages and infrastructure may use Stripe's own cookies and similar technologies in accordance with its policies, including for security, fraud prevention, and proper processing of payments.
Additional information: https://stripe.com/de/privacy
Protection of Payment Traffic
Communication between the browser and the participating web and payment systems takes place using encrypted HTTPS/TLS connections.
This is intended to protect transmitted data against unauthorized reading or alteration during transmission within the technical capabilities of the cryptographic protocols used.
11. Newsletter
AcyMailing
We use AcyMailing to organize and distribute newsletters. The component is installed within TemplinTech's Joomla environment, and subscriber data is managed within our hosting infrastructure.
An email address is required to subscribe. If the form contains additional fields, such as a name, providing this information is voluntary unless expressly indicated otherwise.
Processing for newsletter purposes is based on your consent under Article 6(1)(a) GDPR.
To document registration and consent, technical information concerning registration and confirmation may be stored, such as the date and time and, where recorded by the system for this purpose, the IP address.
Where a Double Opt-In procedure is used, the newsletter subscription is activated only after additional confirmation by the owner of the respective email address.
Under the current configuration, TemplinTech does not use Google Analytics in connection with the newsletter and does not use AcyMailing to create individual behavioral or marketing profiles of recipients.
You may unsubscribe from the newsletter at any time with effect for the future by using the unsubscribe link contained in each newsletter.
After unsubscribing, the email address is removed from the active distribution list.
Where necessary, minimal information may be retained on a suppression list to ensure that the unsubscribe request is respected.
For this limited purpose, processing is based on Article 6(1)(f) GDPR and our legitimate interest in implementing and documenting the requested unsubscribe action.
If the same email address is independently processed for another lawful purpose, such as an ongoing customer or contractual relationship, unsubscribing from the newsletter does not affect that separate processing.
12. TemplinTech Comments
TemplinTech Comments is a Joomla extension developed to provide reader and user commenting functionality while minimizing the processing of personal data.
Where TemplinTech Comments is used on a website operated by TemplinTech, the following data may be processed depending on the enabled functions:
- name or chosen display name;
- email address where required for the respective function;
- content of a comment or reply;
- date and time of submission;
- moderation status;
- information necessary to manage reactions or reports relating to comments.
The email address is not published with the comment and is not used for advertising or marketing.
Where a guest commenter's email address is used solely to send a scheduled notification concerning publication of the comment, it is removed from the relevant record after the notification has been sent unless another applicable legal basis requires or permits further retention.
TemplinTech Comments may provide moderation, replies, reactions, comment reporting, and guest self-deletion functions where the respective functionality is enabled.
The current Joomla session may be used for guest reactions without creating a persistent individual reaction history.
TemplinTech Comments does not use persistent visitor identifiers, browser fingerprinting, or cross-site tracking for its standard functionality.
Technical anti-bot mechanisms may use, for example, a minimum period between loading and submitting a form without requiring the creation of an advertising or behavioral profile.
Comments may be moderated before publication and may be rejected, hidden, or removed where necessary, for example in cases of spam, abuse, unlawful content, or violations of applicable commenting rules.
Processing for the provision, administration, moderation, and protection of the commenting function is generally based on Article 6(1)(f) GDPR and our legitimate interest in providing a controlled interactive communication function. Where a particular processing activity is based on consent, Article 6(1)(a) GDPR applies.
13. TemplinTech Polls
TemplinTech Polls is a Joomla extension for conducting online polls using a privacy-by-design architecture and data minimization.
Where TemplinTech Polls is used on a website operated by TemplinTech, participation in a standard poll does not require the provision of a name, email address, or user account.
TemplinTech Polls does not store the following as part of an individual vote:
- IP address;
- email address;
- Joomla user ID;
- browser fingerprint;
- persistent voter hash;
- persistent unique tracking token;
- individual voting history.
Poll results are stored on an aggregated basis, for example as the total number of votes for the respective answer, poll, and, where applicable, language version.
The technical Joomla session may be used to limit repeated voting within the current browser session.
This session functionality is not used to create a persistent participant profile or to track users across different websites.
Aggregated results may be used to display poll results, conduct statistical or editorial analysis, and present general trends without identifying an individual participant.
14. TemplinTech Podcasts
TemplinTech Podcasts is a Joomla extension for publishing, organizing, and playing podcast and other audio content.
Where TemplinTech Podcasts is used on a website operated by TemplinTech, technical data necessary to provide the page, audio file, and player functionality is processed when the page is loaded and audio content is played.
Where audio content is delivered from our own hosting infrastructure, the server logs and technical processing described in the hosting section of this Privacy Policy apply.
TemplinTech Podcasts does not use its standard proprietary functionality for cross-site tracking, advertising profiling, or browser fingerprinting.
Podcast content may contain links to related articles or external podcast and media platforms.
Where such an external platform is connected only through a standard hyperlink, the mere presence of the link does not automatically establish a connection with the respective provider. A connection is established when the user voluntarily follows the link.
If content from an external provider is directly embedded on a particular page, the respective provider may receive technical information when that content is loaded or activated. Where applicable law requires prior consent, such content should be activated only in accordance with the user's choice.
15. Official Social Media Profiles
TemplinTech maintains the following official profiles and channels:
LinkedIn: https://www.linkedin.com/company/templintech
Instagram: https://www.instagram.com/templintech
YouTube: https://www.youtube.com/@templintech
On our websites, these platforms are linked through standard hyperlinks. During a standard visit to templintech.com, we do not automatically load embedded LinkedIn, Instagram, or YouTube components that would establish a connection with the respective platform.
A connection with the respective external platform is established when you voluntarily follow the corresponding link or use the social media platform itself.
When you visit a TemplinTech profile on a social platform, the operator of the respective platform processes personal data in accordance with its own policies. We do not have full control over processing independently carried out by the platform for its own purposes.
When you interact directly with TemplinTech through a platform, for example by commenting or sending a message, we process information available to us for communication, profile administration, and responding to your inquiry.
Processing by us is generally based on Article 6(1)(f) GDPR and our legitimate interest in maintaining a professional presence and communicating through the respective platform.
If the interaction relates to a contract or pre-contractual relationship, Article 6(1)(b) GDPR applies.
For users and organizations in the European Union, European Economic Area, and Switzerland, the relevant LinkedIn entity is:
LinkedIn Ireland Unlimited Company
Gardner House, Wilton Plaza
Wilton Place
Dublin 2
Ireland
LinkedIn provides administrators of company pages with statistical information through Page Insights.
For processing of personal data used to generate Page Insights for members in the European Economic Area or Switzerland, LinkedIn and the administrator of the respective page act as joint controllers in accordance with LinkedIn's Page Insights Joint Controller Addendum.
Page Insights provided by LinkedIn to TemplinTech are aggregated and do not allow us to associate statistical metrics with a particular LinkedIn member.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Page Insights Joint Controller Addendum: https://www.linkedin.com/legal/l/page-joint-controller-addendum
For users in the European Region, Instagram is provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
When you visit or interact with our Instagram profile, Meta processes information in accordance with its own policies.
TemplinTech may have access to publicly posted information, comments, direct messages, reactions, and statistical information provided for the professional profile.
Additional information: https://www.facebook.com/privacy/policy/
YouTube
YouTube is a Google service. For users in the European Economic Area, the relevant Google consumer services are generally provided by Google Ireland Limited.
When you visit our YouTube channel or interact with content directly on YouTube, Google processes data in accordance with its own policies.
TemplinTech may receive information concerning public interactions and aggregated channel statistics.
This processing takes place within the YouTube platform. TemplinTech does not automatically load YouTube content on its own websites during a standard visit.
Google Privacy Policy: https://policies.google.com/privacy?hl=en
16. No Advertising or Behavioral Tracking on Our Websites
On our own websites, TemplinTech does not use Google Analytics, Meta Pixel, or other systems for advertising or marketing tracking, retargeting, or creation of behavioral advertising profiles of visitors.
We do not use advertising or analytics cookies for the purpose of tracking visitor behavior across different websites.
Based on technical checks of the current TemplinTech Academy configuration, Google Analytics, Google Fonts, and Google reCAPTCHA are not used as part of the platform's standard loading process.
TemplinTech Comments, TemplinTech Polls, and TemplinTech Podcasts are not used by us as tools for advertising or cross-site behavioral tracking.
The existence of a user account, customer profile, or learning profile within TemplinTech Connect or TemplinTech Academy does not in itself constitute behavioral profiling within the meaning of the GDPR.
17. Locally Hosted Fonts and Icons
Font Awesome
We use Font Awesome to display certain icons.
The required files are hosted locally within our infrastructure. When they are loaded in the standard manner, no connection is established with Fonticons, Inc. servers and the visitor's IP address is not transmitted to Fonticons solely because Font Awesome is used.
18. Data Transmission Security and Information Security
Our websites and platforms use HTTPS and SSL/TLS encryption.
This helps protect information transmitted between your browser and the respective server against unauthorized reading or alteration during transmission within the technical capabilities of the cryptographic protocols used.
In addition to transmission security, we implement appropriate technical and organizational measures taking into account the nature, scope, context, and risks of the relevant processing.
Despite the measures taken, absolute security of information systems cannot be guaranteed.
19. Automated Decision-Making and Profiling
TemplinTech does not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
We do not use personal data of visitors to our own websites for advertising or marketing behavioral profiling.
Administration of user, customer, or learning accounts and storage of information required to provide an agreed service or training do not in themselves constitute automated profiling within the meaning of Article 22 GDPR.
Aggregated results from TemplinTech Polls and standard use of TemplinTech Comments or TemplinTech Podcasts are not used by TemplinTech for automated decisions producing significant legal or similar effects on users.
20. Your Data Protection Rights
Subject to the conditions set out in the GDPR, you have the following rights:
- right of access to personal data processed about you under Article 15 GDPR;
- right to rectification of inaccurate or incomplete data under Article 16 GDPR;
- right to erasure where the legal requirements are met under Article 17 GDPR;
- right to restriction of processing under Article 18 GDPR;
- right to data portability subject to the conditions of Article 20 GDPR;
- right to object to certain processing activities under Article 21 GDPR;
- right to withdraw consent at any time with effect for the future where processing is based on consent;
- right to lodge a complaint with a competent supervisory authority under Article 77 GDPR.
Withdrawal of Consent
Where a particular processing activity is based on your consent, you may withdraw that consent at any time.
The withdrawal applies for the future and does not affect the lawfulness of processing carried out before the withdrawal.
Right to Object to Processing Based on Legitimate Interests
Where we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Following a justified objection, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for the establishment, exercise, or defense of legal claims.
Direct Marketing
Where personal data is processed by us for direct marketing purposes, you have the right to object to such processing at any time.
Once this right is exercised, we will no longer use the relevant personal data for direct marketing.
How to Exercise Your Rights
You may submit a request or question relating to the protection of your personal data to:
Where necessary to protect personal data against unauthorized disclosure, we may request additional information necessary to verify the identity of the person exercising the respective right.
21. Right to Lodge a Complaint With a Supervisory Authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
The supervisory authority responsible for our establishment in Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW).
The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
22. Unsolicited Advertising Communications
Contact information published in the Legal Notice, Privacy Policy, or other legally required pages does not constitute consent to receive unsolicited advertising communications.
We object to the use of this information for sending unsolicited advertising or informational materials and reserve the right to take legally permissible action in cases of unlawful or abusive use of such contact information.
23. Changes to This Privacy Policy
This Privacy Policy may be updated when our services, software products, technical infrastructure, service providers, processing activities, or applicable legal requirements change.
The current version is published on templintech.com.
Additional privacy notices may be provided for individual services, products, or projects involving specific processing activities and will supplement this Privacy Policy where applicable.
Last updated: October 5, 2026