Privacy
In short
This site sets no cookies, counts no visits and loads nothing from third-party servers. Fonts and images come from the site itself. What you type into a sample stays in your browser.
Who is responsible
BuntDigital - Püschel
Owner: Fanny Püschel
Im Deepen Bund 23
28876 Oyten
Germany
Email: hello@tapandfill.com
No data protection officer has been appointed, because the law does not require one for a business of this size.
The site is run from Germany, so the EU General Data Protection Regulation (GDPR) applies.
When you open the site
The site is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). To deliver the page to your browser, Cloudflare processes technical data:
- IP address
- date and time of the request
- the address requested
- browser and operating system
- the page you came from, if your browser sends it
The purpose is to deliver the site and protect it against attacks. The legal basis is Art. 6 (1) (f) GDPR: the legitimate interest in a secure and reachable site. Without this data the page cannot reach you.
Cloudflare processes the data on behalf of the operator (Art. 28 GDPR) and, for its own security purposes, also as a controller in its own right.
Tap and Fill keeps no logs of its own about individual requests. Cloudflare shows the operator aggregated figures, such as the number of requests per country, and the requests concerned when an attack is blocked. How long Cloudflare keeps the data is set by Cloudflare according to the purpose, which is delivery and defense against attacks. The operator copies none of it into files of its own.
Cloudflare may also process data in the USA. The company is certified under the EU-US Data Privacy Framework. If the certification lapses, the standard contractual clauses of the European Commission in the data processing agreement apply. More in Cloudflare's privacy policy.
Cookies and browser storage
The site sets no cookies.
The example “Class registration form” keeps your progress in your browser's storage on your device, so nothing is lost when the page reloads. Signatures and bank account numbers are never kept. Progress older than 30 days is deleted the next time the page opens. To delete it right away, use the “Clear all” button or your browser settings.
Keeping your progress starts only once you type something, and it serves only to fill out the form. There is no identifier and nothing is passed on. In the operator's assessment it is strictly necessary for this function and therefore needs no consent (section 25 (2) no. 2 TDDDG, the German law on storage on devices).
Samples and examples
The samples on this site send nothing. What you type does not leave your device. The submit button only shows what the email would look like, and the PDF is created right in your browser.
When you send an email
If you write to hello@tapandfill.com, your email address, your message and your attachments are processed to answer your request and make an offer. The legal basis is Art. 6 (1) (b) GDPR where the request is about an order, otherwise Art. 6 (1) (f) GDPR: the legitimate interest in answering requests.
The mailbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO acts as a processor.
Sending an email is voluntary. Inquiries that do not lead to an order are kept until they are dealt with and then deleted. If an order follows, invoices, receipts and business letters are kept for as long as German tax law requires, six to ten years depending on the document (Art. 6 (1) (c) GDPR).
Please send blank forms only. Completed forms with other people's data do not belong in a request.
Forms built for customers
Pages that Tap and Fill builds for a club or business run at their own addresses. The club or business is responsible for the data you enter there. Tap and Fill works on its behalf (Art. 28 GDPR). What happens to your data there is stated by the club or business on its form.
Your rights
You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).
You can object at any time to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).
For any of these, an informal email to hello@tapandfill.com is enough.
You can also lodge a complaint with a supervisory authority. The one responsible for Tap and Fill is:
Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover
Germany
www.lfd.niedersachsen.de
Language and date
This page is a translation. The German version is the one that counts. Last updated: November 2026.