Privacy Policy
This policy explains what personal data Toyokra GmbH collects, why, and how it is handled. We are based in Germany and this policy is written to comply with the General Data Protection Regulation (GDPR) and applicable German data protection law.
1. Controller
The data controller for this website is:
Toyokra GmbH
Im Gleisdreieck 19
23566 St. Gertrud (Lübeck), Germany
Phone: +49 451 58608321
Email: [email protected]
2. What data we collect and why
Contact form submissions
When you send us a message through the contact form on this website, we collect your name, email address, and the content of your message. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR), or, where the enquiry relates to a potential contract, the performance of pre-contractual measures (Art. 6(1)(b) GDPR). We keep this data for as long as necessary to handle your enquiry and any resulting correspondence, typically no longer than three years.
Server logs
Our web host automatically records standard technical data when you visit the site: your IP address (anonymised after 24 hours), browser type, pages visited, and timestamps. This is processed under our legitimate interest in maintaining a functional and secure website (Art. 6(1)(f) GDPR). Log data is deleted after 30 days.
Cookies
We use a single essential cookie to remember your cookie consent choice. We do not use advertising or tracking cookies unless you explicitly consent. See our Cookie Policy for the full list.
3. Who we share data with
We do not sell or rent your personal data. We may share it with:
- Web hosting provider — servers located within the European Union, processing data on our behalf under a data processing agreement.
- Email service provider — used to receive and send messages, EU-based or operating under Standard Contractual Clauses.
We will not transfer your data outside the EEA without appropriate safeguards in place.
4. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Have inaccurate data corrected (Art. 16)
- Request erasure of your data ("right to be forgotten") (Art. 17)
- Restrict the processing of your data (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the supervisory authority responsible for Lübeck: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), www.datenschutzzentrum.de.
5. Data security
We implement appropriate technical and organisational measures to protect your data against accidental loss, unauthorised access or disclosure. Our website is served over HTTPS. Access to contact data is restricted to the two founders.
6. Third-party links
This site may contain links to external websites. We have no control over those sites and are not responsible for their privacy practices. We recommend reviewing the privacy policy of any site you visit.
7. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above. We encourage you to review this page periodically.
8. Contact
For any questions about this policy or your personal data, write to [email protected] or by post to the address in section 1.