We have written this privacy policy (version 11.08.2025-113040690) to provide you with the information you need in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, to explain which personal data (hereinafter referred to as "data") we as the controller – and the processors we have commissioned (e.g., providers) – process, will process in the future, and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We will provide you with comprehensive information about the data we process about you.
Privacy policies usually sound very technical and use legal jargon. This privacy policy, however, aims to describe the most important things to you as simply and transparently as possible. Where it promotes transparency, technical Terms explained in a reader-friendly manner, links to further information are provided and Graphics used. We hereby inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible if one provides the briefest, most unclear, and legally technical explanations possible, as is often the norm on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps you will find some information there that you weren't previously aware of.
If you still have any questions, please contact the responsible office listed below or in the imprint, follow the links provided, and view further information on third-party websites. Our contact details can also be found in the imprint.
This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (contract processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, email address, and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:
In short: This privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the aforementioned channels. Should we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.
In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal basis of the General Data Protection Regulation, that enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. This EU General Data Protection Regulation can of course be consulted online on EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read more.
We only process your data if at least one of the following conditions applies:
We generally do not apply other conditions, such as the processing of recordings in the public interest, the exercise of official authority, or the protection of vital interests. Should such a legal basis be applicable, it will be indicated at the appropriate point.
In addition to the EU regulation, national laws also apply:
If other regional or national laws apply, we will inform you about them in the following sections.
If you have any questions regarding data protection or the processing of personal data, you will find the contact details of the controller in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR) below:
Nagler Attorneys at Law GmbH
Mag. Paul Nagler, BSc, LL.M. (UCLA)
Sonnenallee 28/402
1220 Vienna
Phone: +43 – 1 – 280 26 31
E-mail: office@ra-nagler.at
Our general principle is that we only store personal data for as long as it is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing it no longer exists. In some cases, we are legally obligated to retain certain data even after the original purpose no longer applies, for example, for accounting purposes.
If you wish to have your data deleted or withdraw your consent to data processing, the data will be deleted as quickly as possible and unless there is an obligation to store it.
We will inform you below about the specific duration of the respective data processing, provided we have further information on this.
In accordance with Articles 13 and 14 of the GDPR, we inform you of the following rights to which you are entitled to ensure fair and transparent data processing:
In short: You have rights – do not hesitate to contact the responsible body listed above!
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/ In Germany, there is a data protection officer for each federal state. For further information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) The following local data protection authority is responsible for our company:
In this section, we would like to explain what a data processing agreement is and why it is necessary. Because the term "data processing agreement" is quite a tongue twister, we will often use the acronym DPA in this text. Like most companies, we do not work alone; we also use the services of other companies or individuals. By involving various companies or service providers, we may share personal data for processing. These partners then act as data processors, with whom we conclude a contract, the so-called data processing agreement (DPA). The most important thing for you to know is that the processing of your personal data is carried out exclusively in accordance with our instructions and must be regulated by the DPA.
As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person that processes personal data on our behalf. More precisely, and according to the GDPR definition: any natural or legal person, public authority, agency, or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
To better understand the terminology, here is an overview of the three roles in the GDPR:
Affected person (You as a customer or interested party) → Person responsible (we as a company and client) → Processor (Service providers such as web hosts or cloud providers)
As mentioned above, we have concluded a Data Processing Agreement (DPA) with our partners who act as data processors. This agreement stipulates, above all, that the data processor will process the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing; however, electronic contract conclusion is also considered "written" in this context. Personal data will only be processed on the basis of the contract. The contract must contain the following:
Furthermore, the contract contains all obligations of the processor. The most important obligations are:
You can find out what such an AVV looks like in concrete terms at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html A sample contract is presented here.
| Cookies Summary 👥 Affected: Visitors to the website 🤝 Purpose: Depends on the specific cookie. You can find more details below or contact the software manufacturer that sets the cookie. 📓 Data processed: Depends on the cookie used. Further details can be found below or from the manufacturer of the software that sets the cookie. 📅 Storage period: depends on the cookie, can vary from hours to years ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interests) |
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you surf the internet, you use a browser. Common browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing is undeniable: cookies are truly useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other purposes as well. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal site settings. When you visit our site again, your browser transmits the "user-related" information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. The web browser requests a website and receives a cookie from the server, which the browser reuses whenever another page is requested.
There are both first-party and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies, from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans, or other "malware." Cookies also cannot access information on your PC.
For example, cookie data can look like this:
Name: _ga
Value: GA1.2.1326744211.152113040690-9
Purpose of use: Differentiation of website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
The specific cookies we use depend on the services used and are explained in the following sections of this privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
There are four types of cookies:
Essential cookies
These cookies are necessary to ensure basic website functions. For example, these cookies are needed when a user adds a product to their shopping cart, then continues browsing to other pages, and only later proceeds to checkout. These cookies ensure that the shopping cart is not deleted, even when the user closes their browser window.
Functional cookies
These cookies collect information about user behavior and whether the user receives any error messages. These cookies also measure the loading time and behavior of the website in different browsers.
Targeted cookies
These cookies improve user experience. For example, entered locations, font sizes, or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very useful, but also very annoying.
Typically, when you first visit a website, you'll be asked which of these cookie types you'd like to allow. And, of course, this decision will also be saved in a cookie.
If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.
The purpose ultimately depends on the cookie in question. You can find more details below or contact the manufacturer of the software that sets the cookie.
Cookies are small helpers for a variety of tasks. Unfortunately, it's not possible to generalize what data is stored in cookies, but we will inform you about the data processed and stored in the following privacy policy.
The storage period depends on the respective cookie and is further specified below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.
You also have control over the storage period. You can manually delete all cookies via your browser at any time (see also "Right of Objection" below). Furthermore, cookies based on consent will be deleted at the latest after you revoke your consent, although the legality of their storage remains unaffected until then.
You decide how and whether you want to use cookies. Regardless of the service or website from which the cookies originate, you always have the option to delete, deactivate, or only partially accept cookies. For example, you can block third-party cookies but allow all other cookies.
If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, enable, and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Clear cookies to remove data that websites have stored on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Delete and manage cookies
If you don't want cookies at all, you can set your browser to always notify you when a cookie is about to be set. This allows you to decide for each individual cookie whether or not to accept it. The process varies depending on your browser. The best way to find instructions is to search for "delete cookies in Chrome" or "disable cookies in Chrome" in the case of a Chrome browser.
The so-called “Cookie Guidelines” have been in existence since 2009. They state that the storage of cookies is a consent (Article 6 (1) (a) GDPR). However, reactions to these guidelines vary considerably across EU countries. In Austria, however, this directive was implemented in Section 165 (3) of the Telecommunications Act (2021). In Germany, the cookie guidelines were not implemented as national law. Instead, this directive was largely implemented in Section 15 (3) of the Telemedia Act (TMG), which was replaced by the Digital Services Act (DDG) in May 2024.
For absolutely necessary cookies, even if no consent has been given, legitimate interests (Article 6 (1) (f) GDPR), which in most cases are of an economic nature. We want to provide website visitors with a pleasant user experience, and for this, certain cookies are often absolutely necessary.
If non-essential cookies are used, this only happens with your consent. The legal basis for this is Art. 6 (1) (a) GDPR.
In the following sections you will be informed in more detail about the use of cookies, if the software used uses cookies.
| Contact details summary 👥 Affected: Website visitors who enter data into a contact form 🤝 Purpose: Processing of inquiries and communication within the framework of pre-contractual measures or in case of existing interest in our services 📓 Data processed: Name, email address, telephone number (if provided), message content, IP address, technical metadata (e.g. timestamp, browser information) 📅 Storage period: The data will be deleted as soon as it is no longer required to process the request and there is no legal obligation to retain it. ⚖️ Legal basis: Consent (Art. 6 (1) (a) GDPR), legitimate interest (Art. 6 (1) (f) GDPR), contract or pre-contractual measures (Art. 6 (1) (b) GDPR) |
A contact form is a web form that you can fill out on our website to easily get in touch with us. Personal data such as your name, email address, and message are usually transmitted to us. This information helps us process your inquiries specifically and get in touch with you.
We offer a contact form so you can communicate with us quickly and easily. Whether you have questions about our services, feedback, or other concerns, you can reach us directly using the contact form. We will use the data you enter exclusively to process your request and to contact you. If the contact results in further steps, such as a quote or a contractual relationship, we will also use the data for this purpose.
Which data is processed depends on the information you provide in the contact form. Typically, this includes:
This information helps us to better classify and answer your request.
We only store data from the contact form for as long as necessary to process your request. If a business relationship arises, the corresponding retention periods apply as for customer data. In special cases (e.g., legal disputes), longer retention periods may apply. Of course, we will not share your data with third parties without your consent.
The legal basis for processing your data via the contact form is Art. 6 (1) (a) GDPR (consent - by submitting the form), Art. 6 (1) (b) GDPR (pre-contractual measures), and Art. 6 (1) (f) GDPR (legitimate interest - efficient communication and organization of inquiries). If you voluntarily provide special categories of personal data, the processing will be carried out in accordance with Art. 9 (2) (a) GDPR (consent).
| Web hosting summary 👥 Affected: Visitors to the website 🤝 Purpose: professional hosting of the website and securing its operation 📓 Data processed: IP address, time of website visit, browser used, and other data. Further details can be found below or from the respective web hosting provider. 📅 Storage period: depends on the respective provider, but usually 2 weeks ⚖️ Legal basis: Art. 6 (1) (f) GDPR (legitimate interests) |
When you visit websites these days, certain information—including personal data—is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By "website," we mean the entirety of all web pages on a domain, i.e., everything from the home page to the very last subpage (like this one). By "domain," we mean, for example, example.de or sampleexample.com.
If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply refer to them as "browsers" or "web browsers."
To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complex and time-consuming task, which is why it's usually handled by professional providers. They offer web hosting and thus ensure reliable and error-free storage of website data. A lot of technical terms, but please stay tuned, it gets even better!
When the browser connects to your computer (desktop, laptop, tablet, or smartphone) and during data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data, and on the other hand, the web server must also store data for a period of time to ensure proper operation.
A picture is worth a thousand words, so the following graphic illustrates the interaction between the browser, the Internet and the hosting provider.
The purposes of data processing are:
Even while you are currently visiting our website, our web server, which is the computer on which this website is stored, usually automatically saves data such as
As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not share this data, but cannot rule out the possibility that it may be viewed by authorities in the event of illegal activity.
In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we will not share your data without your consent!
The legality of the processing of personal data within the framework of web hosting arises from Art. 6 (1) (f) GDPR (protection of legitimate interests), because the use of professional hosting with a provider is necessary in order to present the company securely and user-friendly on the Internet and to be able to pursue attacks and claims arising from this if necessary.
As a rule, there is a contract for order processing between us and the hosting provider in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.
We use Hetzner, among other web hosting providers, for our website. The service provider is the German company Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
You can find out more about the data processed through the use of Hetzner in the privacy policy on https://www.hetzner.com/de/legal/privacy-policy.
We have entered into a data processing agreement (DPA) with Hetzner pursuant to Article 28 of the General Data Protection Regulation (GDPR). You can find out more about what a DPA is and, above all, what must be included in a DPA in our general section "DPA".
This agreement is required by law because Hetzner processes personal data on our behalf. It clarifies that Hetzner may only process data it receives from us according to our instructions and must comply with the GDPR. The link to the Data Processing Agreement (DPA) can be found at https://docs.hetzner.com/de/general/general-terms-and-conditions/data-privacy-faq/.
| Web Analytics Privacy Policy Summary 👥 Affected: Visitors to the website 🤝 Purpose: Evaluation of visitor information to optimize the website. 📓 Processed data: Access statistics, which include data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Further details can be found in the respective web analytics tool used. 📅 Storage period: depends on the web analytics tool used ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interests) |
We use software on our website to evaluate the behavior of website visitors, known as web analytics or web analysis for short. This data is collected and stored, managed and processed by the respective analytics tool provider (also known as a tracking tool). This data is used to create analyses of user behavior on our website and make them available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are most popular with our visitors. To do this, we show you two different offers for a limited period of time. After the test (a so-called A/B test), we know which product or content our website visitors find more interesting. For such testing procedures, as for other analytics procedures, user profiles can be created and the data stored in cookies.
We have a clear goal in mind with our website: to provide the best web offering on the market for our industry. To achieve this goal, we want to offer the best and most interesting offering on the market, while also ensuring that you feel completely at home on our website. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our website accordingly for you and us. For example, we can determine the average age of our visitors, where they come from, when our website is most frequently visited, or which content or products are particularly popular. All of this information helps us optimize the website and thus adapt it to your needs, interests, and wishes.
Exactly which data is stored depends, of course, on the analysis tools used. However, as a general rule, we store information such as the content you view on our website, the buttons or links you click, the time you access a page, the browser you use, the device (PC, tablet, smartphone, etc.) you use to visit the website, and the computer system you use. If you have consented to the collection of location data, this may also be processed by the web analysis tool provider.
Your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is generally stored pseudonymously (i.e., in an unrecognizable and abbreviated form). For the purposes of testing, web analysis, and web optimization, no direct data such as your name, age, address, or email address is stored. All of this data, if collected, is stored pseudonymously. This means that you cannot be identified as an individual.
The following example shows schematically how Google Analytics works as an example of client-based web tracking with JavaScript code.
How long the respective data is stored always depends on the provider. Some cookies only store data for a few minutes or until you leave the website again; other cookies can store data for several years.
We will inform you below about the duration of data processing, as soon as we have further information. Generally, we only process personal data for as long as it is absolutely necessary to provide our services and products. If required by law, such as in the case of accounting, this retention period may be exceeded.
You also have the right and option to revoke your consent to the use of cookies or third-party services at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, deactivating, or deleting cookies in your browser.
The use of web analytics requires your consent, which we have obtained with our cookie popup. This consent is, according to Art. 6 (1) (a) GDPR (consent) the legal basis for the processing of personal data, as may occur when collected by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of web analytics, we can detect website errors, identify attacks, and improve efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests)However, we only use these tools if you have given your consent.
Since web analytics tools use cookies, we also recommend reading our general privacy policy on cookies. To learn exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.
Information on specific web analytics tools, if available, can be found in the following sections.
| Google Analytics Privacy Policy Summary 👥 Affected: Visitors to the website 🤝 Purpose: Evaluation of visitor information to optimize the website. 📓 Data processed: Access statistics, which include data such as access locations, device data, access duration and time, navigation behavior, and click behavior. You can find more details about this further down in this privacy policy. 📅 Storage period: individually adjustable, by default Google Analytics 4 stores data for 14 months ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interests) |
We use the analysis tracking tool Google Analytics, version Google Analytics 4 (GA4) from the American company Google Inc., on our website. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services in Europe. Google Analytics collects data about your actions on our website. Through a combination of various technologies such as cookies, device IDs, and login information, you as a user can be identified across different devices. This also allows your actions to be analyzed across platforms.
For example, if you click on a link, this event is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us better tailor our website and service to your needs. Below, we'll go into more detail about the tracking tool and, above all, inform you about which data is processed and how you can prevent this.
Google Analytics is a tracking tool used to analyze our website's traffic. These measurements and analyses are based on a pseudonymous user identification number. This number does not contain any personal data such as name or address, but is used to assign events to a device. GA4 uses an event-based model that records detailed information on user interactions such as page views, clicks, scrolling, and conversion events. GA4 also incorporates various machine learning functions to better understand user behavior and certain trends. GA4 uses machine learning functions to model. This means that, based on the collected data, even missing data can be extrapolated to optimize the analysis and also to provide forecasts.
For Google Analytics to work, a tracking code is embedded in our website code. When you visit our website, this code records various events that you perform on our website. With GA4's event-based data model, we as website operators can define and track specific events to obtain analytics of user interactions. This allows us to track not only general information such as clicks or page views, but also specific events that are important to our business. Such special events can include, for example, submitting a contact form or purchasing a product.
As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.
Google processes the data, and we receive reports about your user behavior. These reports may include, among others, the following:
In addition to the analysis reports mentioned above, Google Analytics 4 also offers the following features:
Our goal with this website is clear: to provide you with the best possible service. The statistics and data from Google Analytics help us achieve this goal.
The statistically analyzed data provides us with a clear picture of our website's strengths and weaknesses. On the one hand, we can optimize our site so that it's easier for interested people to find on Google. On the other hand, the data helps us better understand you as a visitor. This allows us to know exactly what we need to improve on our website to provide you with the best possible service. The data also helps us implement our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.
Google Analytics uses a tracking code to create a random, unique ID linked to your browser cookie. This allows Google Analytics to recognize you as a new user and assign you a user ID. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles.
To analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. The Google Analytics 4 property is the default for every newly created property. Data is stored for different lengths of time depending on the property used.
Using identifiers such as cookies, app instance IDs, user IDs, or custom event parameters, your interactions are measured across platforms, provided you have consented. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google Account), data generated through Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize this. Exceptions may apply if required by law.
According to Google, no IP addresses are logged or stored in Google Analytics 4. However, Google uses the IP address data to derive location data and deletes it immediately afterward. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data center or on a server.
Because Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies than previous versions (such as Google Universal Analytics). However, there are some specific cookies used by GA4. These include:
Name: _ga
Value: 2.1326744211.152113040690-5
Purpose of use: By default, analytics.js uses the _ga cookie to store the user ID. It is primarily used to distinguish website visitors.
Expiry date: after 2 years
Name: _gid
Value: 2.1687193234.152113040690-1
Purpose of use: The cookie is also used to distinguish website visitors
Expiry date: after 24 hours
Name: _gat_gtag_UA_
Value: 1
Purpose of use: Used to reduce the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ .
Expiry date: after 1 minute
Note: This list cannot claim to be exhaustive, as Google continually changes its cookie choices. GA4 also aims to improve data protection. Therefore, the tool offers several options for controlling data collection. For example, we can specify the storage period ourselves and also control data collection.
Here we show you an overview of the most important types of data collected with Google Analytics:
Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas you click on. This gives us information about where you are on our site.
Session duration: Google defines the session duration as the time you spend on our site without leaving the site. If you have been inactive for 20 minutes, the session ends automatically.
Bounce rate Bounce rate: A bounce occurs when you only view one page on our website and then leave our website again.
Account creation: When you create an account or place an order on our website, Google Analytics collects this data.
Location: IP addresses are not logged or stored in Google Analytics. However, derivatives are used for location data shortly before the IP address is deleted.
Technical information: Technical information includes, among other things, your browser type, your internet provider or your screen resolution.
Source: Google Analytics, or rather we, are of course also interested in which website or advertisement you came to our site from.
Other data includes contact information, any ratings, media playback (e.g., when you play a video on our site), sharing content via social media, or adding content to your favorites. This list is not exhaustive and serves only as a general guide to data storage by Google Analytics.
Google has distributed its servers all over the world. Here you can find out exactly where Google's data centers are located: https://datacenters.google/
Your data is distributed across multiple physical storage devices. This has the advantage of being faster to access and better protected against tampering. Every Google data center has appropriate emergency backup programs for your data. If, for example, Google's hardware fails or natural disasters cripple servers, the risk of service interruption at Google remains low.
The retention period for data depends on the properties used. The retention period is always determined individually for each property. Google Analytics offers us four options for controlling the retention period:
Additionally, you can choose to have data deleted only if you no longer visit our website within the period we select. In this case, the retention period will be reset each time you visit our website again within the specified period.
Once the specified period has expired, the data is deleted once a month. This retention period applies to your data linked to cookies, user recognition, and advertising IDs (e.g., cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is the merging of individual pieces of data into a larger unit.
Under European Union data protection law, you have the right to access, update, delete, or restrict your data. You can prevent Google Analytics 4 from using your data by using the Google Analytics JavaScript opt-out browser add-on (analytics.js, gtag.js). You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de Download and install. Please note that this add-on only disables data collection by Google Analytics.
If you generally want to deactivate, delete or manage cookies, you will find the relevant links to the instructions for the most popular browsers in the “Cookies” section.
The use of Google Analytics requires your consent, which we have obtained with our cookie popup. This consent is, according to Art. 6 (1) (a) GDPR (consent) the legal basis for the processing of personal data, as may occur when collected by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of Google Analytics, we can detect errors on the website, identify attacks, and improve efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests)However, we only use Google Analytics if you have given your consent.
Google processes your data, among other places, in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Google uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard contractual clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.
We hope we've been able to provide you with the most important information about Google Analytics' data processing. If you'd like to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.
If you want to learn more about data processing, please use the Google Privacy Policy on https://policies.google.com/privacy?hl=de.
We have entered into a data processing agreement (DPA) with Google pursuant to Article 28 of the General Data Protection Regulation (GDPR). You can find out exactly what a DPA is and, above all, what must be included in a DPA in our general section "Data Processing Agreement (DPA)."
This agreement is required by law because Google processes personal data on our behalf. It clarifies that Google may only process data it receives from us according to our instructions and must comply with the GDPR. The link to the data processing conditions can be found at https://business.safety.google/intl/de/adsprocessorterms/
| Matomo On-Premise Privacy Policy Summary 👥 Affected: Visitors to the website 🤝 Purpose: Evaluation of visitor information to optimize the website. 📓 Data processed: Data such as the number of visitors to the website, page views, length of stay, or search terms used. Further details can be found below and in the Matomo On-Premise privacy policy. 📅 Storage period: In principle, we store the data for as long as required for business purposes. ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interests) |
We use the privacy-friendly analytics program Matomo On-Premise on our website. With the on-premise version, Matomo is installed on our own server. This means we act as the operator of the software, and any data we may collect from you is stored directly with us. Data processing therefore remains entirely under our control. The tool is manufactured by the New Zealand company InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand.
Matomo On-Premise is a web analytics platform that takes data protection very seriously, yet still provides us, as the website operator, with accurate statistics about your behavior on our website. A major difference from other analytics programs is the ability to store data on our own server. Matomo On-Premise also offers various options for anonymizing our website visitors' IP addresses and deactivating cookies.
Many of the common analytics tools collect vast amounts of personal data and can also share it with third parties. This makes it very difficult to maintain control over your data. Data protection is very important to us, which is why we chose Matomo On-Premise, a significantly more privacy-friendly alternative. However, we don't want to forgo web analytics entirely. After all, with the help of statistics on website behavior, we can optimize our service and adapt it to your individual needs.
In addition to personal data such as your IP address or personal information (e.g., name, address, date of birth) that you actively transmit to us, information about your visitor behavior is primarily stored. This is usually not personal data, but rather information such as the number of visitors to the website, page views, length of stay, or search terms used. Furthermore, technical data such as browser type, your operating system, and your screen resolution may also be stored. Matomo On-Premise can also collect information about the website you came to us from. The collected data is stored by us and is not shared or sold to third parties.
Matomo On-Premise is a self-hosted analytics platform, meaning we store all collected data directly on our own servers. Our server is located in Europe, so data is not processed in third countries, i.e., countries outside the scope of the GDPR.
Generally, we store data for as long as our business purposes require. Unfortunately, we cannot provide precise retention periods at this point, as these depend heavily on our individual configurations. If you would like to learn more about our data retention periods and our configurations, please do not hesitate to contact us.
You have the right and opportunity to access your personal data at any time and to object to the use and processing of it. You can also file a complaint with a government supervisory authority or simply with us at any time.
You also have the option to individually manage, delete, or deactivate cookies in your browser. Please be aware, however, that deactivated or deleted cookies may have a negative impact on the functionality of our website. Managing cookies may vary depending on the browser you use. Under the "Cookies" section, you will find links to the relevant instructions for the most popular browsers. If you would like to request the deletion of your data, please feel free to contact us.
The use of Matomo On-Premise requires your consent, which we have obtained using our consent management tool (pop-up). According to Art. 6 (1) (a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when data is collected using web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of Matomo On-Premise, we identify optimization potential for our website and can improve its economic efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (legitimate interests). However, we only use Matomo On-Premise if you have given your consent.
If you would like to know more about data processing by Matomo On-Premise, please feel free to contact us. We also recommend reading Matomo's privacy policy on https://matomo.org/privacy-policy/.
We use the privacy-friendly analytics program Matomo On-Premise on our website without the use of cookies. With the on-premise version, Matomo is installed on our own server. We therefore act as the operator of the software, and any data we may collect from you is stored directly with us. Data processing therefore remains entirely under our control. The tool is manufactured by the New Zealand company InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand.
Matomo On-Premise is a web analytics platform that takes data protection very seriously, yet still provides us, as the website operator, with accurate statistics about your behavior on our website. A major difference from other analytics programs is the ability to store data on our own server. Matomo On-Premise also offers various options for anonymizing our website visitors' IP addresses and deactivating cookies. We have also opted to deactivate cookies. This means that we use Matomo On-Premise for our website without the use of cookies.
Many of the common analytics tools collect vast amounts of personal data and can also share it with third parties. This makes it very difficult to maintain control over your data. Data protection is very important to us, which is why we opted for Matomo On-Premise without the use of cookies. However, we don't want to forgo web analytics entirely. After all, with the help of statistics on website behavior, we can optimize our service and adapt it to your individual needs.
Primarily, information about your visitor behavior is stored. This is not personal data, but rather information such as the number of visitors to the website, page views, length of stay, or search terms used. Furthermore, technical data such as browser type, your operating system, and your screen resolution may also be stored. Matomo On-Premise can also collect information about the website you came to us from. The collected data is stored by us and is not shared or sold to third parties.
Matomo On-Premise is a self-hosted analytics platform, meaning we store all collected data directly on our own servers. Our server is located in Europe, so data is not processed in third countries, i.e., countries outside the scope of the GDPR.
Generally, we store data for as long as our business purposes require. Unfortunately, we cannot provide precise retention periods at this point, as these depend heavily on our individual configurations. If you would like to learn more about our data retention periods and our configurations, please do not hesitate to contact us.
You have the right and opportunity to access your personal data at any time and to object to the use and processing of it. You can also file a complaint with a government supervisory authority or simply with us at any time.
We have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of Matomo On-Premise, we identify optimization potential for our website and can improve its economic efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (legitimate interests).
If you would like to know more about data processing by Matomo On-Premise without cookies, please feel free to contact us. We also recommend reading Matomo's privacy policy on https://matomo.org/privacy-policy/.
We use the SEO plugin Rank Math. The service provider is the Indian company One.com India Private Limited, Office No. 2, Floor 5, Tower A, Building 9, DLF Cyber City Complex, Phase III, Haryana, Gurgaon, India.
The service may transfer data to India. Please note that India is a third country outside the scope of the GDPR. This may result in restrictions on data protection and data security.
You can find out more about the data processed through the use of Rank Math in the privacy policy on https://rankmath.com/privacy-policy/.
We always strive to make our privacy policy as clear and understandable as possible. However, this is not always easy, especially when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical expressions (such as cookies, IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used that we may not have sufficiently addressed in the previous privacy policy. If these terms are taken from the GDPR and are definitions, we will also cite the GDPR texts here and add our own explanations if necessary.
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
“Processor” a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or individual that processes personal data on our behalf. Processors can therefore include, in addition to service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
"Consent" any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Explanation: Typically, such consent is obtained on websites via a cookie consent tool. You're probably familiar with this. Whenever you visit a website for the first time, you'll usually be asked via a banner whether you agree to data processing. You can usually also configure individual settings and decide for yourself which data processing you allow and which you don't. If you do not consent, no personal data may be processed. In principle, consent can of course also be given in writing, i.e., not via a tool.
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
“personal data” any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Explanation: Personal data is all data that can identify you as an individual. This is usually data such as:
According to the European Court of Justice (ECJ), your IP address for personal data. IT experts can use your IP address to determine at least the approximate location of your device and subsequently you as the connection owner. Therefore, storing an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called “special categories” of personal data that are also particularly worthy of protection. These include:
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
“Profiling” any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
Explanation: Profiling involves compiling various information about a person in order to learn more about them. Profiling is often used online for advertising purposes or for credit checks. Web or advertising analysis programs, for example, collect data about your behavior and interests on a website. This results in a specific user profile that can be used to target advertising to a specific audience.
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
“person responsible” the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Explanation: In our case, we are responsible for the processing of your personal data and are therefore the "controller." If we forward collected data to other service providers for processing, these are "processors." A "processing agreement" (DPA) must be signed for this purpose.
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the following definitions shall apply:
"Processing" any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Note: When we refer to processing in our privacy policy, we mean any type of data processing. As mentioned above in the original GDPR statement, this includes not only the collection but also the storage and processing of data.
All texts are protected by copyright.
Contact us with any legal questions or for personal advice – by phone, email, or contact form. We are at your side with our experience and expertise.
Follow us on Instagram!
