Privacy Policy

Last Updated: December 2025

At Tocnews, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us when you create an account, place an order, subscribe to our newsletter, or contact us. This may include:

  • Name and contact information (email address, phone number)
  • Billing and shipping addresses
  • Payment information (processed securely through our payment providers)
  • Order history and preferences
  • Communication preferences

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Clickstream data

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our use of cookies, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for various purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and account
  • Providing customer support
  • Sending marketing communications (with your consent)
  • Improving our website and services
  • Analyzing usage patterns and trends
  • Preventing fraud and ensuring security
  • Complying with legal obligations

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill our contract with you (order processing and delivery)
  • Legitimate Interests: Processing necessary for our legitimate business interests (fraud prevention, service improvement)
  • Consent: Processing based on your explicit consent (marketing communications, optional cookies)
  • Legal Obligation: Processing required to comply with legal requirements (tax records, consumer protection laws)

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

We work with third-party companies that provide services on our behalf, including payment processing, order fulfillment, shipping, marketing, and analytics. These providers only access information needed to perform their functions and are contractually obligated to protect your data.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data under certain circumstances
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data to another organization
  • Right to Object: Object to processing of your data for certain purposes
  • Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within one month.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication requirements
  • Employee training on data protection
  • Secure payment processing through certified providers

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data and applicable laws.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Germany. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

10. Marketing Communications

With your consent, we may send you promotional emails about new products, special offers, and other information we think you may find interesting. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, or to exercise your rights, please contact us:

Tocnews
Rudower Str. 43
17235 Neustrelitz, Germany
Phone: +49 06563 40 90 37
Email: [email protected]

13. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.