GDPR — information for data subjects
Last updated: June 2026
This page summarises your rights under the GDPR when using Tentaco.
The full privacy policy is available at Privacy Policy.
Controller
Daniel Kuhlbarsch
Olvenstedter Grund 2, 39104 Magdeburg
Email: daniel.kuhlbarsch@outlook.de
Phone: 0173 8080835
Legal bases
Where we process personal data, we rely on Art. 6(1)(b) GDPR (service use), (f) GDPR (legitimate interest in operation and security) or (a) GDPR (consent, e.g. optional cloud assistant).
Data processed
Most tools process data only locally in your browser. Server-side processing may occur for optional file exchange (metadata and file). With cloud assistant enabled, queries are sent to OpenAI (USA).
Retention
Locally stored data remains on your device until you delete it. Shared files are deleted after at most 6 hours.
Recipients & third countries
Recipients may include hosting providers, optionally OpenAI (cloud assistant) and analytics services if enabled. Transfers to third countries (e.g. USA) may rely on EU standard contractual clauses.
Your rights
You may contact Daniel Kuhlbarsch at any time (daniel.kuhlbarsch@outlook.de, 0173 8080835):
- Right of access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)