GDPRLegal
Privacy Policy
As of October 2026
1. Controller
Can Tulay (CT-AGENCY), Menterschwaigstr. 11, 81545 Munich, Germany. Email: can@ct-agency.co
2. Visiting the website and hosting
When you visit this website, the hosting provider processes technically necessary data, in particular IP address, date and time, the page requested and browser information (server log files). This serves the delivery and the secure, stable operation of the website (Art. 6(1)(f) GDPR). This website is delivered through OpenAI Sites and Cloudflare infrastructure. Technical processing and retention are governed by the hosting providers’ applicable service and privacy terms. Contact us for information about the processors used for this website.
3. No cookies, no tracking
The agency website does not use analytics or tracking tools. When you submit a document, the Google upload service is loaded; Google may process technical identifiers under its applicable service terms. Fonts and code libraries are served with this website. The site does not load Google Fonts or third-party analytics. Technical data needed for delivery is processed by the hosting infrastructure described above.
4. Offer and contract feature
Offer and signed PDFs are generated in your browser. When you choose to submit an offer or signed document and confirm submission, the PDF and its embedded campaign details—including company, contact and billing details, deliverables, fees, campaign dates and, where supplied, signatory name and signature image—are transferred through Google Apps Script and stored in CT-AGENCY’s designated Google Drive folder and Google Sheets deal register. The upload connection is opened only when you submit. Google processes technical connection data for this service. You can also send your PDF by email. We process submitted data to review your enquiry and prepare and perform the contract (Art. 6(1)(b) GDPR). We retain contract and invoice records for the statutory periods (§ 257 HGB, § 147 AO; up to 10 years; Art. 6(1)(c) GDPR).
5. Contact by email
If you email us, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete the data once it is no longer needed and no retention obligations apply. Email is provided through GoDaddy / Microsoft 365.
6. Recipients
We only pass on data from contract enquiries where necessary for performance, in particular to the respective talent as contracting party and to tax advisers and authorities under statutory obligations.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal email to can@ct-agency.co is sufficient.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
← Back