Privacy policy

Controller

Tuphar GmbH, Senckenberganlage 15, 60325 Frankfurt am Main, Germany is the controller responsible for the processing described here. You can reach us at ia.sutoll@tcatnoc.

Server logs

When you visit this website, the web server processes technical data such as your IP address, browser type, the page you requested, and the time of the request. We use this data to deliver the site and keep it secure. Legal basis: our legitimate interest in operating a reliable and secure website (Art. 6(1)(f) GDPR). Log data is kept for a short period and is not combined with other data.

Analytics

We use a cookieless web analytics service to understand aggregate traffic on this site. It does not use cookies and does not follow you across other websites. Visits are counted using a short-lived, anonymized identifier. Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

Contact form and email

If you use the form on our contact page or write to us directly, we process the details you provide, such as your name, email address, and message, in order to answer your inquiry. Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to entering into a contract with us, otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). We keep correspondence for as long as needed to handle your inquiry and any follow-up.

Recipients and transfers

We share personal data only with service providers that process it on our behalf under data processing agreements: our hosting and analytics provider, our email delivery service, and our business software provider. Some of these providers are based in the United States; transfers rely on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. We name the specific providers on request.

Cookies

This website does not set tracking cookies.

Your rights

You have the right to access, rectification, erasure, restriction of processing, and data portability, and the right to object to processing based on legitimate interests (Art. 15 to 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

Our product

This policy covers the llotus.ai website only. Data processed in the llotusAI platform on behalf of our customers is governed by the respective customer agreement and our Data Processing Addendum.

Last updated: August 2026