Privacy Policy
Status: April 2026
1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website or use our online shop.
Personal data is any data with which you can be personally identified.
Detailed information on the subject of data protection can be found in our privacy policy below.
Data collection on this website
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the controller" of this privacy policy.
Some data is collected when you provide it to us, e.g. by entering it in the contact form, in your customer account, during the ordering process, when subscribing to the newsletter, or when using the AI cutting data advisor.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data, e.g. browser type, operating system, time of page access, or technical information about your consent.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors.
Other data is used to process enquiries, handle orders, manage customer accounts, send the newsletter, process payments or – with your consent – to analyse user behaviour.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data.
You also have a right to rectification, erasure, restriction of processing and data portability within the framework of the statutory provisions.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
You can revoke consent you have already given at any time with effect for the future.
2. Information about the controller
The controller responsible for data processing on this website is:
TILL TOOLS GmbH
Am Kebigsgraben 19
97616 Salz
Germany
Telephone: +49 (0)9771 1789988
Email: info@tilltools.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Hosting
External hosting
This website is hosted by an external hosting service provider. The provider is Timme Hosting GmbH & Co. KG, Marie-Curie-Straße 5, 21337 Lüneburg, Germany.
Personal data collected on this website is processed on the host's servers. This may include, in particular, IP addresses, meta and communication data, website accesses, contact requests, master data, contract data and other data.
The host is used for the purpose of secure, fast and efficient provision of our online offering as well as for the fulfilment of contracts towards our customers and prospective customers.
The legal basis is Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR.
We have concluded a data processing agreement with the hosting provider.
4. General information and mandatory information
Data protection
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content such as orders, enquiries or registrations, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
Storage period
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies.
If you assert a legitimate request for erasure or revoke your consent, your data will be deleted, provided we have no other legally permissible reasons for storing it.
Mandatory statutory retention periods remain unaffected.
Legal basis for processing
Insofar as you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR.
Insofar as your express consent is required to store information on your end device or to access such information, processing is additionally based on Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act).
If processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR.
Insofar as processing is necessary to fulfil a legal obligation, this is done on the basis of Art. 6 (1) (c) GDPR.
Processing may also take place on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR.
Recipients of personal data
In the course of our business activities, we work with various external bodies.
In some cases, this also requires the transfer of personal data to these external bodies.
We only pass on personal data to external bodies if this is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest in passing it on or if another legal basis permits the transfer.
When using processors, we only pass on personal data of our customers on the basis of a valid data processing agreement.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent.
You can revoke consent you have already given at any time with effect for the future.
The lawfulness of the data processing carried out until the revocation remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing for the purpose of such marketing.
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach.
Information, rectification, erasure and restriction of processing
Within the framework of the applicable statutory provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipients and the purpose of data processing.
You may also have the right to rectification, erasure or restriction of the processing of this data.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or a third party in a common, machine-readable format, insofar as this is technically feasible.
5. Data collection on this website
Cookies and similar technologies
Our website uses cookies and comparable technologies.
Some of these are technically necessary for the website and shop to function properly.
Other technologies are only used with your consent, e.g. for statistical and analysis purposes.
You can revoke or adjust your consent at any time via the cookie settings.
Technically necessary cookies and comparable technologies are used on the basis of Section 25 (2) TDDDG and Art. 6 (1) (f) GDPR, insofar as this is necessary for the technically error-free and optimised provision of our offering.
Where consent is requested, processing takes place exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
Consent can be revoked at any time.
Consent management with Shopware Consent Manager
We use the Shopware Consent Manager to obtain, manage and document the consents you have given for the use of cookies and similar technologies.
In particular, the following data may be processed: consent status, date and time of the decision, browser information, device information and technical log data.
Processing takes place to fulfil our legal obligations and to manage consent in compliance with data protection law.
The legal basis is Art. 6 (1) (c) GDPR, Art. 6 (1) (f) GDPR and Section 25 TDDDG.
Server log files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
These are in particular: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.
This data is collected on the basis of Art. 6 (1) (f) GDPR.
We have a legitimate interest in the technically error-free presentation, stability and security of our website.
The specific storage period of the server log files is governed by the technical and organisational specifications of our hosting provider and is only kept for as long as is necessary for security and stability purposes.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored and processed by us for the purpose of processing the enquiry and in case of follow-up questions.
This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us in accordance with Art. 6 (1) (f) GDPR.
The data you enter in the contact form generally remains with us for up to 6 months after completion of the processing of your enquiry, unless statutory retention periods preclude this.
Enquiry by email or telephone
If you contact us by email or telephone, your enquiry, including all personal data resulting from it, will be stored and processed for the purpose of handling your request.
Processing takes place on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us in accordance with Art. 6 (1) (f) GDPR.
The data accruing in this context will generally be stored by us for up to 6 months after completion of processing, unless statutory retention periods preclude this.
Customer account and guest order
In our online shop you can either create a customer account or order as a guest.
As part of the registration and order processing, we process the data you enter, in particular name, address, contact details, billing and delivery data and order information.
Processing takes place to carry out the user relationship, to provide the customer account, to process orders and to implement pre-contractual measures on the basis of Art. 6 (1) (b) GDPR.
The data collected during registration is stored by us for as long as the customer account exists.
After deletion of the customer account, the data will be deleted, unless statutory retention periods preclude this.
Data from orders is subject to commercial and tax law retention periods.
Processing of customer and contract data
We collect, process and use personal data insofar as this is necessary for the establishment, content design or modification of the contractual relationship.
This is done on the basis of Art. 6 (1) (b) GDPR.
The customer data collected will be deleted after completion of the order or termination of the business relationship, unless statutory retention periods preclude this.
Data transfer upon conclusion of contract for online shop and shipping
In order to process the contract, we pass on personal data to the companies commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered.
These include in particular DHL and DHL Express.
The legal basis for the transfer is Art. 6 (1) (b) GDPR.
Payment processing / PayPal Checkout
Various payment methods are available in our shop, which are predominantly integrated via PayPal Checkout.
The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method provided via PayPal Checkout or via PayPal, the payment, order and contact data required for payment processing will be transmitted to PayPal or to the payment service providers integrated as part of the respective payment method.
Data processing takes place to perform the contract and process the payment on the basis of Art. 6 (1) (b) GDPR.
Please note that the use of PayPal and the payment methods provided via PayPal may also involve data transfers to other recipients and, where applicable, to third countries.
In addition, the data protection provisions of the respective payment service provider apply.
6. Analysis tools
Google Tag Manager
Insofar as you have given your consent, we use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a service for managing website tags. The service itself does not generally create its own user profiles, but can technically integrate and trigger other tags and services.
Insofar as further consent-requiring services are loaded via Google Tag Manager, this is done exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
Google Analytics 4
Insofar as you have given your consent, this website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website.
The information collected by Google Analytics may include, in particular, page views, interactions, technical information about your browser and end device, approximate location data, referrer URLs and usage data.
The use of Google Analytics is based exclusively on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.
You can revoke your consent at any time via the cookie settings.
We use Google Analytics with a privacy-friendly configuration.
Nevertheless, a transfer of data to Google and processing outside the European Union, particularly in the USA, cannot be ruled out.
The storage period of the data processed by Google Analytics is determined by the settings stored in our Google Analytics account.
Insofar as additional functions such as Google Signals or demographic features are activated in Google Analytics, their use is also based exclusively on your consent.
Shopware Analytics
Insofar as you have given your consent, we use Shopware Analytics, an analysis service of shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany.
Shopware Analytics is used to record and evaluate user and purchasing behaviour in our online shop.
In particular, information about visited pages, click paths, date and time of the visit, end device used, browser information, referrer URL and other usage data may be processed.
Insofar as information is stored or read locally on your end device, this is done on the basis of your consent in accordance with Section 25 (1) TDDDG.
The further processing of personal data takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Insofar as Shopware Analytics is operated under joint controllership, the data protection notices of Shopware shall additionally apply.
7. Newsletter
Newsletter data
If you would like to receive the newsletter offered on our website, we require an email address from you, as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
Further data is collected only on a voluntary basis.
We use Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send our newsletter.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Registration takes place using the double opt-in procedure. We log the registration, the confirmation and the times used in each case in order to be able to prove the proper registration.
You can revoke your consent at any time, for example via the unsubscribe link in the newsletter.
With the help of Brevo, we can organise and analyse our newsletter campaigns.
In particular, opens and clicks can be recorded in order to analyse the use and effectiveness of our newsletters.
The data you have entered for the purpose of receiving the newsletter will be stored until you unsubscribe from the newsletter.
After you have unsubscribed, your email address may be stored on a blocklist to prevent future mailings to that address.
The legal basis for this is Art. 6 (1) (f) GDPR.
Brevo Tracker
Insofar as you have given your consent, we use the Brevo Tracker on our website.
The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
The Brevo Tracker can be used to track user behaviour on our website and link it to our newsletter and marketing measures.
Insofar as information is stored or read on your end device in this context, this is done on the basis of your consent in accordance with Section 25 (1) TDDDG.
The further processing of personal data takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time via the cookie settings.
8. AI cutting data advisor
Product advice with AI / OpenAI
On individual product pages, we provide an AI-powered cutting data advisor.
This service is provided via a plugin we have developed ourselves and is connected to the OpenAI API.
Data is only transmitted to OpenAI when you actively click the "Start advice" button.
Before the start, we inform you that your input will be transmitted to an AI service.
In the course of use, the content you enter in the chat will be transmitted to OpenAI in order to provide the requested advice.
Customer data from your customer account will not automatically be transferred to OpenAI in this process.
Please do not enter any sensitive or personal data in the chat unless this is absolutely necessary for your enquiry.
Processing takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
The content you enter in the AI advisor is not permanently stored by us.
Processing by OpenAI as an external service provider as well as transmission to third countries, in particular outside the European Union, cannot be ruled out.
9. Your rights
Within the framework of the statutory provisions, you have the right to information, rectification, erasure, restriction of processing, data portability and objection.
You also have the right to lodge a complaint with a data protection supervisory authority.
10. External data protection notices
Additional information on data processing by individual external service providers can be found in the privacy notices of the respective providers, in particular Google, PayPal, Brevo and OpenAI.