Privacy Policy

1. Controller and privacy contact

The controller under the General Data Protection Regulation (GDPR) is TMP-SYSTEM-SERVICE GmbH, Lüdersdorfer Straße 27, 36179 Bebra, Germany.

Phone: +49 (0) 6622 9034997. Email: info@tmp-networks.de. You may also use this email address for privacy requests.

This policy applies in particular to ww2.tmp-networks.de, including the customer portal, shop, support, monitoring, Public IP and other online services offered there.

2. Hosting, delivery and server logs

When you access the website, technically necessary connection data is processed. This may include IP address, date and time, requested URL, HTTP status, amount of data transferred, browser/device information and referrer. Processing is necessary to deliver the website, diagnose faults and protect our systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log data is deleted when it is no longer required for operation, troubleshooting and abuse prevention unless a legal obligation or specific security incident requires longer retention.

Additional page-view auditing of unauthenticated visitors with visitor IP addresses is disabled by default in the current version. External Geo-IP lookups are likewise not performed by default.

3. Strictly necessary cookies and local storage

Strictly necessary cookies or browser storage may be used for functions you expressly request. These include session information for customer and administration areas, security functions and local shopping-cart storage.

These technologies are used solely to provide the requested function and, where personal data is involved, for contract performance or system security under Art. 6(1)(b) or (f) GDPR. Strictly necessary storage does not require consent under Section 25(2) TDDDG.

The current website version does not use optional analytics or marketing cookies. If services requiring consent are added later, they will be activated only after the relevant consent.

4. Customer account, registration, login and profile

When you register for and use the customer portal, we process the master/contact data you provide as well as technical account and security data. This may include name, company, email address, telephone number, billing email, address, VAT ID, password hash, two-factor status and session information.

Processing is carried out for contract initiation/performance under Art. 6(1)(b) GDPR, where necessary to comply with legal obligations under Art. 6(1)(c) GDPR and to secure accounts under Art. 6(1)(f) GDPR.

Account data is generally processed for the duration of the contractual relationship and is then deleted or restricted unless statutory retention obligations or legitimate reasons require continued storage.

5. Contact, support and callback requests

If you use contact, support or callback forms, we process the information you submit, in particular name, company, email address, telephone number, message and technical information relating to the request. Support requests may additionally involve confirmation and status data.

The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual steps; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling your request.

Data is deleted once the request has been fully handled unless statutory retention, contract documentation or other legitimate reasons require continued storage.

6. Shop, orders and invoices

For orders, we process the data required for quotation, ordering, delivery, service provision, invoicing and customer communication. This may include contact, billing and delivery details, ordered products/services, prices, payment status and transaction references.

The legal basis is Art. 6(1)(b) GDPR. Commercial and tax records are retained for the applicable statutory periods under Art. 6(1)(c) GDPR.

7. Payment providers Stripe and PayPal

If you select Stripe or PayPal as a payment method, the order, contact, payment and transaction data required for payment processing is transmitted to the selected payment provider. Processing of the payment instrument itself is carried out by the respective provider under its own privacy responsibility insofar as it determines the purposes and means of processing.

Processing is necessary for contract performance under Art. 6(1)(b) GDPR. Depending on the provider and payment method, data may be processed outside the EU/EEA. Such transfers are subject to the requirements of Art. 44 et seq. GDPR.

8. TMP Monitoring

When TMP Monitoring is used, we process customer, device and measurement data required to provide, manage and display the service. This may include device identifiers/names, hostname, platform and agent version, IP address, heartbeats, availability, CPU, memory, storage and network metrics, event/log data, notification settings and voluntarily stored hardware photos and location details.

Processing is necessary for contract performance under Art. 6(1)(b) GDPR and service security under Art. 6(1)(f) GDPR. Measurement history is retained according to the booked plan; current public plans provide in particular for 7, 30 or 90 days of history. Contract and billing data may be retained longer where required by law.

9. Location display and OpenStreetMap/Nominatim

Location data is processed only if you provide it in the customer or monitoring area or explicitly trigger an address lookup. For geocoding, the entered address may be sent server-side to the OpenStreetMap Nominatim service. The request is made by our server, so the service does not automatically receive your browser IP as the requesting address.

Map tiles are delivered through our own server-side map proxy in the current website version. This prevents your browser IP from being sent directly to the OpenStreetMap tile service merely by displaying a map. If you follow an external OpenStreetMap link, the privacy terms of that provider apply.

The legal basis is Art. 6(1)(b) GDPR where the feature is part of a service you use; otherwise Art. 6(1)(f) GDPR based on our interest in user-friendly location management.

10. TMP Public IP and WireGuard provisioning

For Public IP and WireGuard services, we process contractual and technical data required for provisioning, assignment, billing and troubleshooting. This may include assigned public IP addresses, technical tunnel/service identifiers, provisioning status, configuration data and diagnostic data required for fault analysis.

The legal basis is Art. 6(1)(b) GDPR and, for security and abuse prevention, Art. 6(1)(f) GDPR.

11. WHOIS, RDAP, blacklist and diagnostic tools

If you expressly use a diagnostic tool, the domain, IP address or technical identifier you enter may be sent server-side to public registries, RDAP/WHOIS services or security/blacklist services required to perform the requested lookup.

The legal basis is Art. 6(1)(b) GDPR where the lookup is part of a contracted service, otherwise Art. 6(1)(f) GDPR based on our interest in providing the explicitly requested diagnostic function.

12. Email delivery and notifications

For confirmations, support communication, contractual information and notifications configured by you, we process email address, message content and technical delivery information using our mail systems or configured SMTP providers.

The legal basis is generally Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR may apply to security and service notices.

13. Recipients and processors

Personal data is disclosed only to recipients who need it for the purposes described. These may include hosting/IT providers, email providers, payment providers, delivery/service partners and public registries or technical services where you trigger a corresponding function.

Where providers process data on our behalf, we conclude the agreements required by Art. 28 GDPR. Where a recipient processes data under its own responsibility, its own privacy information also applies.

14. Transfers to third countries

We do not claim that all data is processed exclusively in Germany. Individual payment, registry, diagnostic or other external services may involve processing outside the EU/EEA.

Where a third-country transfer occurs, it takes place only under the conditions of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision, appropriate safeguards such as standard contractual clauses, or an applicable statutory derogation.

15. Retention

We retain personal data only for as long as required for the respective purpose. It is then deleted or processing is restricted unless statutory retention periods, establishment/exercise/defence of legal claims, security incidents or other legally permitted reasons require continued storage.

Contractual, accounting and invoice documents are subject in particular to the applicable commercial and tax retention requirements. Monitoring measurement data is additionally subject to the history period of the booked plan.

16. Your rights

Subject to statutory requirements, you have rights including access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Consent may be withdrawn at any time with future effect under Art. 7(3) GDPR.

You may exercise these rights using the contact details above. Any identity verification required by law remains reserved.

17. Right to complain to a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent authority for us is: The Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wilhelmstraße 7, 65185 Wiesbaden, Germany, phone +49 611 1408-0, email poststelle@datenschutz.hessen.de.

Your right to contact any other supervisory authority competent under Art. 77 GDPR remains unaffected.

18. Changes to this privacy policy

We update this privacy policy when website functions, providers or legal requirements change. The current version published on this website is authoritative.

Authoritative Version

This English translation is provided for convenience. In case of differences or questions of interpretation, the German version is authoritative.