Privacy policy
This page explains what data is collected when you visit HoldMyTee, why it is collected, and what choices you have.
1. Who is responsible (controller)
The data controller within the meaning of Art. 4 (7) GDPR is:
Tobias Rostalsky
c/o Autorenglück #26458
Albert-Einstein-Straße 47
02977 Hoyerswerda, Germany
Email: contact@holdmytee.com
2. Hosting + server logs
The site is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit a page, Cloudflare automatically receives your IP address, user-agent string, requested URL, referrer, and timestamp. The legal basis for this processing is our legitimate interest in operating a stable, secure website (Art. 6 (1) (f) GDPR). Cloudflare retains edge logs for approximately four hours; aggregated traffic statistics may be kept for up to six months. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, providing an adequate level of protection for transfers to the USA. Cloudflare may set a short-lived security cookie (e.g. __cf_bm) to distinguish real visitors from automated bots. This cookie is strictly necessary under § 25 (2) TTDSG and the ePrivacy Directive and does not require consent.
3. Cloudflare Web Analytics
Aggregated visitor analytics are collected via Cloudflare Web Analytics, a privacy-first service that does not use cookies, does not fingerprint visitors, and does not track individuals across sites. We see only aggregated metrics (pageviews, top pages, referring domains, country-level location). The legal basis for this processing is our legitimate interest in understanding how the site is used (Art. 6 (1) (f) GDPR). No personal identifiers are stored, and no cookie-banner is required under § 25 TTDSG because no information is stored on or read from your device.
4. Cookies
HoldMyTee itself does not set any tracking cookies. The only cookie that may appear is the Cloudflare bot-management cookie described in section 2.
5. Outbound links to Amazon
Every product link on this site points to Amazon.com. When you click such a link, Amazon's own privacy policy applies — we have no control over what Amazon collects from that point onward. For details, see Amazon's privacy notice.
6. Amazon Associates tracking
If the Amazon Associates Program is active (see Disclosure), outbound links carry an affiliate tag. Amazon uses this to attribute resulting purchases to HoldMyTee. No personal information is transmitted from this site to Amazon beyond the tag identifier.
7. Pinterest “Save” button
Detail pages contain a link to Pinterest's Pin-It page. The link only opens Pinterest in a new tab if you click it; we do not embed the Pinterest tracking pixel and we do not transmit any data to Pinterest until you actively click that link. Once on Pinterest, their privacy policy applies.
8. Your rights under the GDPR
Under the General Data Protection Regulation, you have the right to access (Art. 15), correct (Art. 16), erase (Art. 17), restrict processing (Art. 18), object to processing (Art. 21), and data portability (Art. 20). To exercise these rights, contact the controller at contact@holdmytee.com. You may withdraw any consent you have given at any time, with effect for the future.
9. Right to lodge a complaint
You have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The competent authority for the controller is the Sächsischer Datenschutzbeauftragter (Saxon Data Protection Commissioner), Devrientstraße 5, 01067 Dresden, Germany, www.saechsdsb.de.
10. Encryption (SSL/TLS)
This site uses SSL/TLS encryption (HTTPS) for every connection between your browser and our hosting infrastructure. You can verify this by looking for the lock icon in your browser’s address bar. Encryption protects the data transmitted between you and the site against interception by third parties.
11. Changes
Updates to this policy are published on this page. The effective date is the date of the latest deployment of this site.