Privacy Policy
How personal data is processed when you visit tivoli.tech, send an enquiry or book a call. Effective date: 2 November 2026.
1. Controller
The controller responsible for this website is TIVOLI TECH MICHAEL SCHULZ, ul. L. Waryńskiego 7 unit 6, 15-860 Białystok, Poland. Contact: info@tivoli.tech, phone +49 170 1429715.
2. Hosting / server logs
This website is hosted on Amazon Web Services (S3 and CloudFront). When you visit, technical log data such as your IP address, time of access and requested URL is processed to deliver the site and keep it secure (legal basis: legitimate interest, Art. 6(1)(f) GDPR). Log data is deleted after 1 week.
3. Contact form
When you submit the contact form, we process your name, email address, company, topic and message. The data is transmitted via Amazon Web Services (API Gateway/Lambda, region eu-central-1 Frankfurt) and delivered to our mailbox; it is not stored permanently on AWS. We use it solely to handle your enquiry (Art. 6(1)(b)/(f) GDPR) and keep the resulting correspondence for as long as needed to deal with your request.
4. Appointment booking
When you book a call, we process your name, email address, company and the selected time slot. The calendar checks current availability, and you receive a calendar invitation with a Microsoft Teams link via Microsoft 365 (Art. 6(1)(b) GDPR). The appointment remains in our calendar and mail system for as long as needed for the business relationship; Microsoft may process data in third countries under the EU-US Data Privacy Framework.
5. Cloudflare Turnstile
The contact and booking forms are protected against bots with Cloudflare Turnstile. Cloudflare processes IP and browser data for this purpose (legal basis: legitimate interest, Art. 6(1)(f) GDPR). Data may be processed in the USA under the EU-US Data Privacy Framework.
6. Microsoft Teams chat, email and phone
If you contact us via the Microsoft Teams chat link, by email or by phone, we process the contact details and content you provide in order to handle your request (Art. 6(1)(b)/(f) GDPR). Teams and our mailboxes are operated with Microsoft 365 (Microsoft Ireland).
7. Consent management / cookie settings
Analytics and advertising tags load only after you accept the cookie banner. Your choice is stored in your browser’s localStorage (key tivoli-consent-v2). You can change or withdraw it at any time via the “Cookie settings” link in the footer; on withdrawal the relevant cookies are deleted.
8. Google Analytics 4
With your consent (Art. 6(1)(a) GDPR) we use Google Analytics 4 (measurement ID G-H6D2L1YZHV) to understand how this site is used. Google sets _ga* cookies with a lifetime of up to 2 years. Analytics event data is retained in Google Analytics according to its data-retention setting. Data may be processed in the USA under the EU-US Data Privacy Framework. You can withdraw consent at any time via “Cookie settings”.
9. Google Ads conversion tracking and Consent Mode v2
With your consent we use Google Ads conversion tracking to measure whether our ads lead to enquiries and bookings. Google sets _gcl_* cookies for this purpose. We use Google Consent Mode v2: all storage categories are denied by default and granted only after you accept. Enhanced conversions (hashed email addresses) are not used.
10. Google Fonts
Website fonts (Manrope, Space Grotesk) are loaded from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). The visitor’s IP address is transmitted to Google. Fonts are not self-hosted.
11. Recipients / processors
We use the following processors and recipients: Google Ireland Ltd. (Analytics, Ads, Fonts), Amazon Web Services EMEA SARL (hosting, forms), Cloudflare (bot protection) and Microsoft Ireland / Microsoft 365 (Outlook, Teams, calendar).
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and to withdraw any consent with effect for the future. To exercise these rights, contact info@tivoli.tech.
13. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Polish UODO (Urząd Ochrony Danych Osobowych); you may also contact the authority of your own country.
14. Effective date
Effective date of this policy: 2 November 2026.