Privacy policy

This policy explains which personal data is processed when you visit the Tyll website, why, and what rights you have. It covers this website only. The interactive Tyll demo is a separate application with its own information.

Who is responsible

The controller under Art. 4(7) GDPR is:

Legal bases

Depending on the purpose, we process personal data on these legal bases:

• Art. 6(1)(a) GDPR: your consent, which you can withdraw at any time with effect for the future.
• Art. 6(1)(b) GDPR: steps taken at your request before a possible contract, such as arranging a call.
• Art. 6(1)(c) GDPR: legal obligations, such as retention duties under commercial and tax law.
• Art. 6(1)(f) GDPR: our legitimate interest in running a secure and reliable website and answering enquiries.

Storing information on your device or reading it from there is governed additionally by § 25 TDDDG (German Telecommunications Digital Services Data Protection Act): it requires your consent unless it is strictly necessary for a service you have requested.

Hosting and server log files

This website is hosted by Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in the USA. This transfer to a country outside the EU is based on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR), which are part of Railway’s data processing agreement.

Each time a page is requested, the server automatically records technical data: IP address, date and time, the page requested, the referring page, and browser and operating system information. We use this only to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The log files are kept only as long as the hosting provider needs them for these purposes.

Fonts, images and video

Fonts, images and the video on this website are served from our own hosting. Loading a page does not connect your browser to font services, video platforms or other third parties.

Cookies and your consent choices

This website currently sets no cookies and uses no analytics or advertising services, so there is nothing to consent to when you browse it. If we add such a service, we will update this policy and ask for your consent before it starts.

Booking a call (Calendly)

Our booking calendar is provided by Calendly, LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. It is not loaded automatically: only when you click “Open the booking calendar” does your browser connect to Calendly (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Calendly may then set cookies and receives technical data such as your IP address.

If you book a call, Calendly processes the details you enter, such as your name, email address, hotel or company and your answers, together with the chosen time, so that we can hold the call (Art. 6(1)(b) GDPR). Calendly participates in the EU-U.S. Data Privacy Framework, which is the basis for the transfer to the USA (Art. 45 GDPR).

Calendly’s booking page also uses services that Calendly chooses itself, for example for statistics, payment handling and spam protection, and may ask for your consent to its own optional cookies. Calendly is responsible for that processing; details are in Calendly’s privacy notice.

The free report form

When you request the free purchasing report, the details you enter (name, email address, phone, hotel or restaurant, role, country and POS system) are sent to us through Formspree, a form service based in the USA, which forwards them to us by email. We use them to prepare your report and contact you about it (Art. 6(1)(b) GDPR). Formspree’s privacy policy

Contacting us by email

If you email us, we process your email address and the content of your message to answer your enquiry (Art. 6(1)(b) or (f) GDPR).

Retention: We delete your enquiry and our correspondence 12 months after our last contact, unless the law requires us to keep it longer.

Links to our social media profiles

Our footer links to our profiles on LinkedIn and Instagram. These are plain links: nothing is loaded from these networks until you click one. After that, the respective network’s privacy policy applies.

The interactive demo

The “Explore demo” buttons open our interactive demo, a separate application. It uses fictional demo accounts and data; please do not enter real personal or hotel information there. The demo’s own privacy information applies.

Tyll’s product and hotel data

This policy covers visits to this website. It does not describe how data would be handled when a hotel uses Tyll. Tyll is being developed to work with information from hotel systems. Before any hotel’s data is connected, how it is processed, where it is stored and how it is protected is set out with that hotel in a separate agreement. The interactive demo uses only fictional data.

Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15)
• have it corrected (Art. 16) or deleted (Art. 17)
• restrict its processing (Art. 18)
• receive it in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7(3))

To exercise these rights, email info@tyll.ai. You can also lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, or where you believe an infringement took place (Art. 77 GDPR).

Changes to this policy

We update this policy when the website or the services it uses change. The date at the top shows the current version.