Privacy Policy

This website uses no cookies, no analytics tools and no embedded third-party services. Below we explain which data is nevertheless processed when you visit and how we handle it.

1. Controller

timap GmbH
Müggelbergallee 8
12557 Berlin, Germany
Phone: +49 30 639 058 75
Email: office@timap.de

Represented by the Managing Director Kostakis Andreu.

2. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. A data processing agreement in accordance with Art. 28 GDPR is in place with STRATO; STRATO processes data exclusively on our instructions.

3. Server log files

When you access the website, your browser automatically transmits information that is stored in server log files:

Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free provision and security of the website. The data is not merged with other data sources. Log files are deleted after seven days at the latest unless a security-related analysis is required.

4. Contact by email or phone

If you contact us by email or phone, we process the data you provide (name, contact details, content of the request) in order to handle your inquiry. The legal basis is Art. 6 (1) (b) GDPR where the inquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries). We delete the data as soon as it is no longer required for this purpose and no statutory retention obligations apply.

5. Fault reports via service.timap.de

Machines we deliver carry a label with a QR code through which you can report a fault to us. In doing so, we process the information you enter in the form: company (optional), name, telephone number and email address, the description of the fault, whether the machine is at a standstill, and up to three photos if you upload any. Photos are reduced in size in your browser and stripped of metadata such as the location where they were taken. We also store which machine the report relates to and the time of the report.

The purpose is to process the fault and to contact you. The legal basis is Art. 6 (1) (b) GDPR where the report concerns the performance of a contract with us (e.g. service or warranty), otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in the fast and reliable handling of faults on our machines. Name, telephone number and email address are mandatory; without them we cannot process the report.

The data is stored on a server of Hetzner Online GmbH in Germany, with which a data processing agreement is in place. Only employees of timap GmbH have access. After submitting the report you receive a confirmation by email, and the report is sent to our mailbox service@timap.de. For sending emails we use Microsoft 365 (Microsoft Ireland Operations Ltd.), also on the basis of a data processing agreement. To protect against misuse, your IP address is evaluated briefly in memory to limit the number of reports; it is not stored. No cookies are set on service.timap.de.

We delete contact details and photos 365 days after the report has been closed. The description of the fault and the processing history are retained without reference to you as the maintenance history of the machine. Clearly abusive reports are deleted completely after 30 days. Emails in the mailbox service@timap.de are deleted after 365 days. Backups are overwritten after 14 days.

6. Use of an AI-based voice assistant for incoming calls

For the automated handling of telephone enquiries we use the STRATO Smart Telephone Assistant. It processes call content on our behalf in order to record, forward or answer your request. This involves automatic speech recognition (speech-to-text), semantic analysis (natural language processing) and, where applicable, text generation (text-to-speech). Call content may be recorded, transcribed or documented. This only happens if you have been informed accordingly at the start of the call and continue the call. You can end the connection at any time to avoid processing.

The data processed includes in particular what you say during the call, technical connection data (date, time, duration) and, where applicable, voluntarily provided master data such as name or telephone number. Interaction data is also processed, for example for call handling or in the event of aborted calls. The legal bases are Art. 6(1)(b) GDPR (for initiating or performing a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient and scalable communication).

For the technical implementation we use sub-processors, in particular for hosting, speech recognition and semantic analysis. In doing so, personal data may also be transferred by the sub-processor to the USA. As a rule this takes place on the basis of an adequacy decision pursuant to Art. 45 GDPR, as the service providers are certified under the EU-U.S. Data Privacy Framework. Where no such decision exists, the transfer is based on standard contractual clauses pursuant to Art. 46(2)(c) GDPR and supplementary safeguards. The requirements of Art. 44 GDPR are complied with.

Pseudonymised data may be used for training purposes to improve speech processing. Tracing back to individual persons is excluded or made considerably more difficult. No automated decision-making within the meaning of Art. 22 GDPR takes place.

Data is stored only for as long as necessary for the stated purposes. It is then automatically deleted or anonymised.

7. Applications

Application documents you send us by email are processed solely for the purpose of the application procedure (Art. 6 (1) (b) GDPR, Section 26 of the German Federal Data Protection Act). If no employment relationship is established, we delete the documents no later than six months after the procedure has been completed, unless you have consented to longer storage.

8. AI chat (assistant)

You can voluntarily use an AI-based chat assistant on our website. The chat only opens when you click the chat button; no data is processed before that. The messages you enter and the previous conversation are transmitted via our server to Anthropic PBC (USA), which operates the language model and generates the reply. Only the chat texts are transmitted; your IP address is not passed on to Anthropic. Anthropic processes the data on our instructions under a data processing agreement with EU standard contractual clauses and does not use the content to train its models.

We do not store conversation contents. The conversation history is kept only in your browser (session storage) and is deleted when you close the browser. To prevent abuse we store a hashed value of your IP address together with the number of requests for one hour. If you send an inquiry to us via the chat, this happens only after your explicit confirmation; we then receive the data you provided (name, company, email, phone, request) by email and handle it as described in section 4.

The legal basis is Art. 6(1)(a) GDPR (consent through active use of the chat) and Art. 6(1)(f) GDPR (legitimate interest in preventing abuse). Please do not enter confidential or sensitive data in the chat. Replies are generated automatically and may contain errors; they do not constitute binding offers.

9. Use of Webmetic

This website uses Webmetic for marketing, market research and optimisation purposes. In accordance with Art. 6(1)(f) GDPR, company-related data is collected and pseudonymised. For this purpose, a special code is implemented that collects relevant data securely. The data is encrypted from the point of collection onwards to ensure its integrity.

The collected data is processed exclusively in pseudonymised form and is not used to personally identify individual visitors to this website, which is neither permitted nor part of our processes. The data is deleted as soon as the purpose of processing has been fulfilled and there are no longer any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by opening the opt-out link. There you can activate an opt-out.

10. No cookies, no analytics, no external content

This website does not set cookies. Apart from the visitor identification described in section 9 (Webmetic), we do not use analytics or tracking services. Fonts are served locally from our server; apart from the Webmetic script and the kununu widget on the careers page, no third-party content is loaded. The kununu widget is an image loaded from the servers of New Work SE (kununu), Am Strandkai 1, 20457 Hamburg, Germany, when the careers page is opened; your IP address is transmitted to kununu in the process (Art. 6(1)(f) GDPR, legitimate interest in displaying our employer rating). Further information: New Work SE privacy policy. Personal data is transferred to third countries only within the AI telephone assistant (section 6) and the AI chat (section 8).

11. Your rights

With regard to your personal data you have the following rights against us:

To exercise your rights, an informal message to office@timap.de is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

13. Currency

This privacy policy is valid as of October 2026. We will update it if the website or legal requirements change.