Last updated: August 2026
Protecting your personal data is important to us. We process your data exclusively on the basis of the applicable statutory provisions (GDPR, BDSG, TDDDG). This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data on this website.
It applies to the website tg-ai.de. Our Shopify apps are covered by their own privacy policies (see the section "Data Protection in Our Shopify Apps").
The controller within the meaning of Art. 4(7) GDPR is:
Timmgard GmbH
Kurhausstraße 78a
53773 Hennef
Germany
Commercial Register: HRB 17527 (Amtsgericht Siegburg)
VAT ID: DE359202464
Authorized representative: S. Timm
Email: [email protected]
Contact form: https://tg-ai.de/en/kontakt
We have not appointed a data protection officer because the legal requirements for doing so are not met: we do not permanently employ at least 20 people in the automated processing of personal data (Section 38(1) of the German Federal Data Protection Act, BDSG), and we do not carry out any processing that would require an appointment under Art. 37(1) GDPR.
For all data protection matters and to exercise your data subject rights, you can reach us at: [email protected]
For security reasons, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in your browser bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Encryption forms part of the technical and organizational measures pursuant to Art. 32 GDPR.
This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, Vercel automatically stores information in server log files that your browser transmits automatically. These are:
• Browser type and version
• Operating system used
• Referrer URL
• IP address of the accessing device
• Time of the server request
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of our website). This data is not merged with other data sources and is not used to identify individuals or to build usage profiles. Log data is deleted once it is no longer required to ensure operation and to investigate faults or security incidents.
A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023); the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914) apply in addition.
Our website is delivered via the content delivery network and security infrastructure of Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare sits technically in front of our hosting. Every request to our website therefore passes through Cloudflare, which necessarily involves processing your device's IP address and technical connection data (requested address, time, volume of data transferred, browser type and operating system).
The purpose is the fast and reliable delivery of our content and protection against attacks, in particular denial-of-service (DDoS) attacks and automated attacks on our forms. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure, available and performant operation of our website).
Cloudflare may set technically necessary identifiers for attack detection. Your browser may also send technical network error reports (Network Error Logging) to Cloudflare endpoints; these do not contain the content of your entries.
A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914) apply in addition. For further information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
This website uses Google Fonts for a consistent presentation of typefaces. The fonts are embedded locally via the Next.js font optimization and served directly from our own server. No connection to Google servers is established, and no data is transmitted to Google.
If you send us inquiries via one of our contact forms or by email, we process the information you provide in order to handle your inquiry and in case of follow-up questions. We collect:
• Name
• Email address
• Company (optional)
• Subject (on the contact page)
• Your message
To protect against mass automated submissions, we additionally process your IP address when the form is submitted in order to briefly limit the number of requests per sender. The IP address is held only transiently in memory, is not stored permanently, is not linked to your message and is not transmitted to third parties. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interest in preventing misuse).
For sending email we use the service Resend (Resend Inc., 2261 Market Street, San Francisco, CA 94114, USA). Your data is transmitted to Resend exclusively for the purpose of email delivery. Delivery takes place via EU infrastructure (Ireland); account metadata and sending logs may be processed on US infrastructure. Resend Inc. is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914) apply in addition. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend.
The legal basis for processing your inquiry is Art. 6(1)(b) GDPR where your inquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries efficiently).
Providing your data is neither required by law nor by contract. You are not obliged to provide us with your data; however, without the information marked as mandatory we cannot process your inquiry.
We delete your inquiry once the purpose of storage ceases to apply - typically when the underlying matter has been concluded and no follow-up questions are to be expected - or when you ask us to delete it, unless statutory retention obligations prevent deletion.
This website does not set any tracking, analytics or advertising cookies. We use only technically necessary storage on your device:
• Cookie "NEXT_LOCALE": stores the language version you selected (German or English). This is a session cookie that is deleted when you close your browser.
• Local storage entry "theme": stores your choice between light and dark appearance. The entry remains stored until you delete it via your browser.
This storage is strictly necessary for us to provide the service you have expressly requested in the language and appearance you selected. It is therefore exempt from consent under Section 25(2) no. 2 TDDDG; a consent banner is not required for it. The associated processing is based on Art. 6(1)(f) GDPR (legitimate interest in a functional and user-friendly website).
You can delete cookies and locally stored entries at any time via your browser settings, or prevent them from being stored at all. In that case you will need to select language and appearance again on each visit.
This website deliberately uses no analytics tools (such as Google Analytics), no audience measurement, no advertising trackers (such as Facebook Pixel or Google Ads), no session recording tools and no social media plugins that transmit data to third parties. No profiling and no cross-device recognition takes place.
Links to external platforms (e.g. LinkedIn or the Shopify App Store) are plain references without embedded tracking functionality. Data is exchanged with the respective provider only once you actively click the link and open their site.
This privacy policy applies to the website tg-ai.de and the processing described here (hosting with Vercel, delivery via Cloudflare, contact form). Our Shopify apps are covered by their own privacy policies, as different data is processed there and different service providers are involved (in particular Render Services Inc. with servers located in Frankfurt for app hosting):
• PackFlow - Returns & Tracking: https://tg-ai.de/en/apps/packflow-returns/privacy-policy
• Retractly - EU Withdrawal Button: https://tg-ai.de/en/apps/retractly/privacy-policy
• EU-Gewährleistungslabel: https://tg-ai.de/en/apps/eu-gewaehrleistungslabel/privacy-policy
• GiftLink - Influencer Gifting: https://tg-ai.de/en/apps/gift-link/privacy-policy
Where we process personal data on behalf of merchants, our Data Processing Agreement (DPA) applies in addition: https://tg-ai.de/en/dpa
Under the GDPR you have the following rights:
• Right of access (Art. 15 GDPR) - you may request information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR) - you may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) - you may request the deletion of your data, unless statutory retention obligations prevent it.
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR), where processing is based on your consent
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), see the following section
Special note on the right to object: where we process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
To exercise your rights, please contact: [email protected]. We will respond within the period set out in Art. 12(3) GDPR, that is generally within one month of receipt.
No automated decision-making in individual cases, including profiling within the meaning of Art. 22 GDPR, takes place on this website. We do not take any decisions concerning you that are based solely on automated processing.
If you believe that the processing of your personal data infringes the GDPR, you have the right, without prejudice to any other remedy, to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. You may contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.
The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
We are not willing or obligated to participate in dispute resolution proceedings before a consumer arbitration board.