Privacy Policy

Last updated: 2026-05-10

We, Tubach L.L.C-FZ, are pleased about your visit to our website. As an IT company, the secure handling of your data is particularly important to us. With this Privacy Policy, we inform you in detail about how we handle personal data collected in connection with your visit to tubach.io or when using our services.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Tubach L.L.C-FZ The Meydan Hotel, Grandstand, 6th floor Meydan Road, Nad Al Sheba Dubai, U.A.E

Tax Reg.-No.: 104213472400001

2. Definitions

This Privacy Policy is based on the terms of the GDPR. We aim to make our Privacy Policy easy to read and understand for the public as well as for our customers and business partners. We explain the central terms in advance:

Personal data: any information relating to an identified or identifiable natural person (“data subject”).
Data subject: any identified or identifiable natural person whose personal data is processed.
Processing: any operation related to personal data, such as collection, recording, storage, adaptation, retrieval, use, disclosure, deletion or destruction.
Pseudonymisation: the processing of personal data in such a way that it can no longer be attributed to a specific person without additional information.
Processor: a natural or legal person that processes personal data on our behalf.
Recipient: a natural or legal person to whom personal data is disclosed.
Consent: any freely given, specific, informed expression of the data subject’s wishes.

3. Server Log Files

When our website is accessed, data is automatically stored in the server’s log files. This involves:

browser types and versions used,
operating system of the accessing system,
referrer (previously visited page),
subpages accessed,
date and time of access,
IP address,
internet service provider of the accessing system,
further similar data for the defence against attacks on our information technology systems.

This data is evaluated exclusively in anonymised form and is required in order to:

correctly deliver the contents of our website,
optimise content and advertising,
ensure the permanent functioning of our systems, and
provide law enforcement authorities with the necessary information in the event of a cyber attack.

This data is stored separately from all other personal data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in error-free operation of the website).

4. Hosting

Our website is operated by a German cloud hosting provider with data centres within the Federal Republic of Germany. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR. We are happy to provide the specific provider on request.

5. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

6. Cookies and Local Storage in the Browser

We use exclusively technically necessary cookies or cookies actively chosen by you, as well as local storage values. No tracking, no profiling and no advertising use takes place. All values are stored exclusively on your own end device and are not transmitted to us or to third parties.

Cookies:

tubach_lang: stores the language actively selected in the language switcher so that the website is automatically displayed to you in the previously selected language on your next visit. Only set on explicit language choice, lifetime one year, SameSite=Lax.

Local browser storage (localStorage and sessionStorage):

Test system tokens (tubach.test-system.<ID>, localStorage): cancel and status tokens for your test system request, so that you can later cancel them or query their status without re-verifying yourself.
AI chat inputs (tubach.ai.*, sessionStorage): your most recently entered message and selected persona, so that the chat history is retained between page changes within the same session. Automatically deleted when the browser tab is closed.

In addition, the website stores small technical UI state and cache values (e.g. dismissed hints, locally cached responses of public API endpoints). These do not contain any personal data and are not transmitted to us or to third parties.

You can view, block or delete all this data at any time via the settings of your browser. The legal basis is § 25(2) No. 2 TTDSG (German Telecommunications Telemedia Data Protection Act; strictly necessary in order to provide a telemedia service expressly requested by the user) in conjunction with Art. 6(1)(f) GDPR (legitimate interest in correct technical functioning and in convenience when revisiting the website). Consent is therefore not required; a cookie banner is accordingly not used.

If you would like to subscribe to our newsletter, we need your email address as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter (double opt-in). Further data is not collected or only on a voluntary basis.

The processing of the data takes place exclusively for the dispatch of the requested information. You can revoke your consent to the storage of the data and its use for sending the newsletter at any time, for example via the “Unsubscribe” link in every newsletter. The legal basis is Art. 6(1)(a) GDPR.

8. Contact

On our website you will find information that enables quick electronic contact, including a general email address. If you contact us by email or via a contact form, the personal data transmitted will be automatically stored. We process such voluntarily transmitted data exclusively for processing your request. It is not passed on to third parties. The legal basis is Art. 6(1)(b) GDPR (initiation of contract) and Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry).

9. Necessity of Providing Personal Data

The provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual regulations (e.g. information on the contracting party). Failure to provide the personal data could result in the contract not being concluded. Before any provision, you can contact us at any time to clarify whether the provision is required by law or contract or is necessary for the conclusion of the contract.

10. Storage Duration and Deletion

We process and store personal data only for the period necessary to achieve the storage purpose or where provided by laws or regulations. If the storage purpose ceases to apply or a prescribed storage period expires, the data is routinely blocked or deleted in accordance with the legal provisions.

11. Rights of the Data Subject

As a data subject, you have the following rights vis-à-vis us:

Right to confirmation (Art. 15 GDPR): whether personal data relating to you is being processed.
Right of access (Art. 15 GDPR) to the data stored about you and, if applicable, its recipients as well as the purpose of storage.
Right to rectification (Art. 16 GDPR) of inaccurate personal data.
Right to erasure (“right to be forgotten”, Art. 17 GDPR).
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR) to the processing of your personal data.
Right to withdraw a data protection consent with effect for the future.

To exercise your rights, you can contact us at any time via the contact form on tubach.io.

12. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

13. Changes to this Privacy Policy

Changes in the law or changes in our internal processes may require an adjustment of this Privacy Policy. Please note that the current version of the Privacy Policy is always valid.