Privacy Policy
Your privacy at Tippio.
Last updated: 14 October 2026. This notice explains how personal data is handled when visiting our public website, contacting us, following a Tippio QR/NFC sign or using our customer services.
1. Controller & contact
Boğaç Erden · DEBO (Einzelunternehmen), trading as Tippio
Silbersteinstr. 19, 12051 Berlin, Germany
Email: tippio.info@gmail.com
2. Website access, hosting & security
We use Cloudflare to deliver and protect Tippio services. When pages are requested, technical information such as IP address, request time, requested URL, browser or device information and security-related request data may be processed to provide the service, prevent abuse and maintain security. Our legal basis for necessary operation and protection is Art. 6(1)(f) GDPR (legitimate interests).
3. Fonts
Our website uses Inter and Inter Tight. Cloudflare Fonts is enabled to serve supported Google Fonts resources through our own domain instead of requesting them directly from Google. If rewriting is not applied to a particular request, the browser may still load font resources from Google. Our standalone file preview is not served through Cloudflare Fonts.
4. Contact & inquiries
If you contact us at tippio.info@gmail.com, we process your email address, message and related correspondence to respond and handle your inquiry. Our mailbox is provided through Google (Gmail). The legal bases are Art. 6(1)(b) GDPR for contractual or pre-contractual matters and Art. 6(1)(f) GDPR for other legitimate correspondence. Where statutory retention requirements apply, Art. 6(1)(c) GDPR may also be relevant.
5. Cookies & optional tracking
The public website's own code does not use Google Analytics, Meta Pixel or marketing cookies. Essential security and authentication technology may be used by our infrastructure and customer login. We do not activate optional advertising tracking through this website's HTML. If optional tracking technologies are introduced, we will update this notice and request consent when legally required.
6. QR/NFC scans & redirects
When someone scans or taps a Tippio sign, their device requests our redirect service and may then be sent to the business's chosen destination, such as a Google review page. Our service can count interactions linked to a sign or business and time of interaction to provide customers with usage statistics. Technical request information may be processed for operating and protecting the redirect service. We do not determine from a scan alone whether a person left a review, and we do not receive the contents of Google reviews through the redirect.
7. Customer accounts & dashboard
When customer access is made available, the authentication and dashboard systems process the information needed to verify access, associate signs with business accounts and display sign interaction information. Depending on the processing purpose, the legal basis may be Art. 6(1)(b) or Art. 6(1)(f) GDPR. Specific authentication methods and storage periods will depend on the deployed service configuration.
8. Service providers & data transfers
Cloudflare supports website delivery, security and our application infrastructure; Google provides our email service and, where font rewriting does not apply, may receive font requests. When you leave Tippio for another website such as Google, that third party processes data under its own privacy terms. Transfers outside the European Economic Area, where applicable, are subject to the provider's relevant legal transfer mechanisms and safeguards.
9. Data retention
We keep correspondence and operational data only for as long as needed for their respective purposes, service security, contractual obligations and statutory retention requirements. Retention of technical infrastructure data depends in part on the hosting and security configuration. You can contact us to ask about the criteria applicable to your data.
10. Your data protection rights
Subject to legal conditions, you may request access, rectification, erasure, restriction of processing or portability. You may object to processing based on legitimate interests under Art. 21 GDPR, and withdraw consent where processing relies on it. Contact tippio.info@gmail.com to exercise your rights. You may also complain to a competent data protection supervisory authority, including the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
11. Changes
We will update this notice where our services, processing operations or legal obligations change.