Data Protection Policy

TNG Technology Consulting GmbH (hereinafter referred to as TNG / We) welcomes your visit to our website and your interest in our company. We take the protection of your personal data seriously and want you to feel safe and comfortable when visiting our website.

TNG aims to minimize the use of personal data in the internet services for which we are responsible. All personal data accumulated within the framework of the internet services provided by TNG will be processed and used in accordance with the applicable regulations for the protection of personal data. Under no circumstances will TNG use your personal data for other purposes.

1. Controller

Data processing on this website is the responsibility of the controller, namely:

TNG Technology Consulting GmbH Beta-Straße 13 85774 Unterföhring Germany

2. Data security

TNG Technology Consulting GmbH uses technical and organizational security measures to protect the data made available to TNG Technology Consulting GmbH from accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

Our security measures are continuously updated in line with technological developments.

3. Data Processing

Here we inform you about how we process your personal data. "Personal data" in this context includes all information relating to an identified or identifiable natural person. "Processing" means all operations or series of operations relating to personal data, such as the collection or storage of personal data.

3.1 Login and User Management

We use the Clerk service, provided by Clerk, Inc., for user management (Privacy Policy). For this purpose, the user creates an account with Clerk, for which the following data is mandatory:

  • Email address
  • User identifier
  • Password

The user can delete the account at any time.

Cookies are used as part of the login process.

This data processing is based on our legitimate interest in making our website accessible to users and restricting certain functions pursuant to Art. 6 para. 1 lit. f GDPR.

3.2 Management and Use of Games

After login, an initial user account is created in our backend. The data is stored by:

  • Microsoft Azure (Region: West Europe)

When games are created, the prompts entered are used. The prompts are modified and processed by internal and external services. These are:

  • Microsoft Azure (Region: West Europe)
  • Anthropic PBC (USA, AI text processing) - Privacy Policy
  • Meshy (USA, 3D model generation) - Privacy Policy
  • FAL (Japan, image generation and speech-to-text) - Privacy Policy
  • ElevenLabs (USA/EU, sound effects, music and speech-to-text) - Privacy Policy

Prompts may optionally be dictated instead of typed. In that case the voice recording is transmitted to FAL and ElevenLabs to be transcribed into text. We do not store the recording; only the resulting text is used as the prompt.

In addition, we store prompts until they are deleted by the user.

Games may be published by the user. In this case, the game is published together with the user name. Games may be withdrawn or deleted by the user at any time.

This data processing is based on our legitimate interest in the functioning of the service pursuant to Art. 6 para. 1 lit. f GDPR or on the user's explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.

3.3 Accessing the Imprint

Each time the imprint is accessed, we automatically collect and store the following data using AWS Amplify from Amazon Web Services, Inc.:

  • IP address
  • Date and time of access
  • Information about the browser and operating system used
  • Websites from which you were redirected to this page
  • Websites that you access via our website

This data processing is based on our legitimate interest in making our website accessible to users, identifying any functionality and capacity issues with our website, and reviewing security pursuant to Art. 6 para. 1 lit. f GDPR/UK GDPR.

Since AWS's Content Delivery Network (CDN) is used to ensure optimal availability of the website, content may be provided from a server outside the EU. AWS has committed, in standard contractual clauses pursuant to Art. 46 para. 2 lit. c (GDPR, UK GDPR) and Art. 16 para. 2 lit. d (DSG), to complying with data protection standards in such cases as well; more detailed information can be found here.

5. Rights of Data Subjects

5.1 DS-GVO (EU) / Data Protection Act 2018 & UK GDPR (UK)

You have the right, in accordance with the laws applicable to you and to the extent provided therein, to access your personal data and to require us to update, rectify or erase your personal data. In addition, in accordance with applicable law, you may restrict TNG's processing of your personal data, and you have the right to data portability. Your right to access your personal data includes the right to obtain a copy of all or certain portions of your personal data in our possession, as long as the provision of such data by TNG does not adversely affect the rights and freedoms of other persons.

Right to object: you have the right to object to the processing of your personal data solely on the basis of TNG's legitimate interest. If you exercise your right to object hereto, TNG will no longer process your personal data unless there are compelling legitimate reasons for further processing or the processing is necessary to establish, exercise or defend legal claims.

If the processing is based on your consent, you can revoke this consent at any time. This revocation only affects future processing.

You also have the right to lodge a complaint with the relevant data protection authority if you believe that the processing of your personal data has violated applicable data protection laws.

5.2 Privacy Act (Australia)

You have the right of access to your data and to request rectification of your data. You also have the right to lodge a complaint if you believe that the processing of your personal data has violated applicable data protection laws. In all such cases, please contact our data protection officer (see section 5).

If you wish to lodge a complaint about our handling of your personal information, you can contact our data protection officer. We take all complaints seriously and will investigate your concerns promptly and fairly. We will respond to your complaint within a reasonable timeframe, usually within 30 days, and inform you of the steps we have taken or will take to address your concerns. We may ask you to provide additional relevant details and may discuss your complaint with our internal departments, our service providers, and others where appropriate. If you are not satisfied with our response, you have the right to lodge a complaint with your relevant data protection authority, e.g. the Office of the Australian Information Commissioner at https://www.oaic.gov.au/about-us/contact-us/.

5.3 Privacy Act (New Zealand)

You have the right of access to your data and to request rectification of your data. In such cases, please contact our data protection officer (see section 5).

5.4 California Consumer Privacy Act

You have the right of access to your personal data and to require us to rectify or erase your personal data. You also have the right to data portability and to restrict the use of sensitive personal data. Exercising these rights, such as the erasure of your data, may result in TNG being unable to provide certain services you have requested or being unable to provide them as desired. Exercising your rights does not carry any further negative consequences for you; TNG will not discriminate against you in any way as a result of exercising your data protection rights. To exercise your rights, please contact our data protection officer (see section 5).

6. Data Protection Officer

If you have any questions regarding the processing of your personal data, you can contact our data protection officer directly, who is also available in case of requests for access, inquiries or complaints:

Data Protection Officer Dr. Marcel Lippmann TNG Technology Consulting GmbH Beta-Straße 13 85774 Unterföhring datenschutz@tngtech.com

We can supply our GPG key on request, should you wish to send us your request in encrypted form.

7. Version

This privacy policy was last modified on 16.8.2026. We reserve the right to amend this policy from time to time to reflect changes in our data processing, for example. In the event of changes, we will post the new privacy policy on this website.