Legal

Privacy Policy

Last updated: June 2026

1. Data Controller

Christopher Richter
Kirchweg 7a
21244 Buchholz
E-Mail: support@trovu.de

Trovu is a service of NordheideStudios.de.

2. Hosting

This website is hosted by:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin

The servers are located in Germany. Your data is processed and stored exclusively on German servers.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of the website).

3. Data Collected & Purpose

  • Registration data (name, e-mail address, password in encrypted form) — for the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR.
  • Project data & uploaded files — for the provision of the contractually agreed service pursuant to Art. 6 para. 1 lit. b GDPR.
  • Payment data — processed exclusively via our payment service provider Stripe (separate data processor). We do not store complete payment details.
  • Server log files (IP address, browser type, access time, URL accessed) — to ensure secure operation pursuant to Art. 6 para. 1 lit. f GDPR; storage period maximum 7 days.

4. Cookies & Sessions

  • We use only technically necessary session cookies to maintain the login session.
  • No tracking cookies, analytics tools, or advertising networks are used.
  • Separate consent is not required as only technically strictly necessary cookies are used pursuant to § 25 para. 2 TTDSG.

A cookie banner is therefore not displayed.

5. Data Disclosure

  • Data is disclosed exclusively to Strato AG (hosting) and — once payments are activated — to Stripe Payments Europe, Ltd. (payment processing).
  • We do not sell personal data.
  • No transfer to third countries outside the European Union takes place.

6. Retention Period

  • Account data: until deletion of the account by the user or upon request.
  • Uploaded files: until manual deletion by the user within the platform.
  • Server log files: maximum 7 days.

7. Rights of Data Subjects

You have the following rights with regard to us:

  • Right of access to your stored data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure ("right to be forgotten", Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to lodge a complaint with the competent data protection supervisory authority (for Hamburg: Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit)

To exercise your rights please contact: support@trovu.de

8. Data Security

  • The transmission between your browser and our servers is exclusively encrypted via SSL/TLS.
  • Passwords are never stored in plain text, but exclusively as a bcrypt hash.
  • Uploaded files are not publicly accessible. Access is exclusively via authenticated endpoints.

9. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if the scope of the service or the legal requirements change. The current version is always available at trovu.de/datenschutz.php. The status of the current version is indicated at the top of this page.