Privacy Policy
Table of Contents
Introduction and Overview
We have drafted this Privacy Policy (version 18.09.2026) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (in short: data) we as controller – and the processors commissioned by us (e.g. hosting providers) – process, will process in the future, and which lawful options you have. All terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about the data we process about you.
Privacy policies usually sound very technical and use legal terminology. This Privacy Policy, however, is intended to describe the most important points to you as simply and transparently as possible. Where it serves transparency, technical terms are explained in a user-friendly way, links to further information are provided, and graphics may be used. In clear and simple language, we inform you that, in the course of our business activities, we only process personal data where there is an appropriate legal basis. That is certainly not possible if one provides statements that are as brief, unclear and legal-technical as possible – as is often standard on the internet when it comes to data protection. We hope you find the following explanations interesting and informative and that there may be one or two pieces of information you did not know before.
If you still have questions, we kindly ask you to contact the controller named below or in the imprint, to follow the available links and to obtain further information from third-party websites. Our contact details can of course also be found in the imprint.
Scope of Application
This Privacy Policy applies to all personal data processed by us in our company and to all personal data processed by companies commissioned by us (processors). By personal data we mean information within the meaning of Art. 4(1) GDPR such as, for example, the name, email address and postal address of a person. The processing of personal data enables us to provide and bill our services – whether online or offline. The scope of this Privacy Policy covers:
In short: This Privacy Policy applies to all areas in which personal data in the company is processed in a structured manner via the channels mentioned. Should we enter into legal relations with you outside these channels, we will inform you separately where appropriate.
Legal Bases
In the following Privacy Policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which allow us to process personal data.
With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at
https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32016R0679.
We only process your data if at least one of the following conditions applies:
You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.
We process your data in order to fulfil a contract or pre-contractual obligations with you. For example, if we conclude a service contract with you, we need personal information beforehand.
If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
In the case of legitimate interests that do not override your fundamental rights, we reserve the right to process personal data. For example, we must process certain data in order to operate our website in a secure and economically efficient manner. This processing is therefore a legitimate interest.
Further legal bases such as the performance of a task carried out in the public interest or in the exercise of official authority, as well as the protection of vital interests, generally do not apply to us. If such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.
In addition to the EU Regulation, national law also applies. As our company is established in Hungary, the applicable national law is Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.).
Where additional regional or national laws apply, we will inform you in the following sections.
Contact Details of the Controller
If you have any questions regarding data protection or the processing of personal data, you will find the contact details of the controller pursuant to Article 4(7) GDPR below:
RP Marketing Kft
9400 Sopron, Ágfalvi út 2/B Fsz. 3. ajtó, Hungary
Commercial register number: Cg.08-09-038890 (Company Registry Court of the Győr Regional Court)
European VAT number: HU32733046
Managing Directors (each authorised to represent the company independently):
Manuel Ried, BSc · Ing. Dominik Fischer · Bernhard Gutmayer · Benjamin Milleder
Email: [email protected]
Phone: +36 30 744 8971
Imprint: https://www.risingperformancemarketing.hu/imprint/
Storage Period
As a general principle, we only store personal data for as long as is absolutely necessary to provide our services. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, however, we are legally obliged to store certain data even after the original purpose has ceased to apply. In particular, accounting records must be retained for eight years under Section 169 of Hungarian Act C of 2000 on Accounting.
If you request the deletion of your data or withdraw your consent to data processing, the data will be deleted as quickly as possible, provided there is no obligation to retain it.
Where we have further information on the specific duration of the respective data processing, we will inform you about this in the relevant sections below.
Rights under the General Data Protection Regulation
In accordance with Articles 13 and 14 GDPR, we inform you of the following rights to which you are entitled in order to ensure fair and transparent processing of data:
In short: You have rights – do not hesitate to contact the controller listed above!
Supervisory Authority
If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you can lodge a complaint with the competent supervisory authority. For our company, this is the Hungarian data protection authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
Email: [email protected]
Website: https://naih.hu
If you are resident in another EU Member State, you may alternatively lodge a complaint with the supervisory authority of your country of residence.
Data Transfer to Third Countries
We only transfer or process data in countries outside the scope of the GDPR (third countries) if you have consented to this processing or if there is another legal permission. This is particularly the case when processing is required by law or necessary to fulfil a contractual relationship and, in any case, only to the extent that this is generally permitted. Your consent is, in most cases, the most important basis for us to have data processed in third countries.
The processing of personal data in third countries such as the USA, where many software providers offer services and host their servers, may mean that personal data is processed and stored in unexpected ways.
We expressly point out that, according to the Court of Justice of the European Union, an adequate level of protection for the transfer of data to the USA currently only exists if a US company that processes personal data of EU citizens in the USA is an active participant in the EU–US Data Privacy Framework. You can find more information here:
https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en
Processing of personal data by US services that are not active participants in the EU–US Data Privacy Framework may result in data being processed and stored in a non-anonymised form. Furthermore, US public authorities may have access to certain data. It may also occur that data collected is linked with data from other services of the same provider, if you have a corresponding user account. Wherever possible, we try to use server locations within the EU, where this is offered.
We will inform you more specifically about data transfers to third countries at the appropriate points in this Privacy Policy, where applicable.
Security of Data Processing
In order to protect personal data, we have implemented both technical and organisational measures. Where possible, we encrypt or pseudonymise personal data. This makes it as difficult as reasonably possible for third parties to infer personal information from our data.
Article 25 GDPR speaks of “data protection by design and by default” and refers to the principle that, with both software (e.g. forms) and hardware (e.g. access to the server room), security must always be considered and appropriate measures implemented. Where required, we will go into more detail about specific measures below.
TLS Encryption with HTTPS
TLS, encryption and HTTPS sound very technical – and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely over the internet.
This means that the entire transmission of all data from your browser to our web server is secured – no one can “listen in”.
With this, we have implemented an additional security layer and comply with data protection by design (Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.
You can recognise the use of this secure data transfer by the small lock symbol in the upper left-hand corner of the browser, to the left of the internet address (e.g. example.com), and by the use of the scheme https (instead of http) as part of our internet address.
If you want to learn more about encryption, we recommend searching for “Hypertext Transfer Protocol Secure wiki” in your preferred search engine to find good links to further information.
Contact Form
When you send us an inquiry through our contact form, we process the personal data you voluntarily provide. Depending on the fields you complete, this includes:
Purpose of Processing
We process this data for the following purposes:
Legal Basis
The processing of your data is based on:
Storage Period
We store contact form submissions only as long as necessary to respond to your request, and in accordance with mandatory commercial and tax retention periods (in Hungary, eight years for accounting records).
Non-contractual inquiries are deleted on a regular basis once processing is complete.
Data Recipients
Your form submission is processed on servers operated by our hosting provider:
easyname GmbH, Canettistrasse 5/10, 1100 Vienna, Austria
easyname acts as a processor under a Data Processing Agreement pursuant to Article 28 GDPR.
The form is technically provided via Elementor Forms and stored on our own server. Elementor does not transfer data to third parties unless additional integrations (e.g. email marketing tools, CRMs) are explicitly connected. We do not use such integrations.
Security
All data transmitted through the contact form is protected by SSL/TLS encryption (HTTPS), ensuring that your information cannot be intercepted or accessed by unauthorised third parties.
No Obligation to Provide Data
You are not legally required to provide your personal data. However, without the necessary information (such as your email address), we may not be able to respond to your inquiry.
Cookies
Cookies – Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: Depends on the respective cookie. More details can be found below and/or from the software provider that sets the cookie.
📓 Processed data: Depends on the cookie used. More details can be found below and/or from the software provider that sets the cookie.
📅 Storage period: Depends on the respective cookie, can range from a few hours to several years.
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What are cookies?
Our website uses HTTP cookies to store user-specific data.
In the following, we explain what cookies are and why they are used, so that you can better understand this Privacy Policy.
Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox and Microsoft Edge. Most websites store small text files in your browser – these are called cookies.
One thing is clear: cookies are really helpful little tools. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files that are stored by our website on your computer. These cookie files are placed in your browser’s cookie folder – effectively the “memory” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data, such as language or personal page settings. When you visit our site again, your browser sends these “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you your usual settings. In some browsers, each cookie has its own file; in others, like Firefox, all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our website, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie needs to be assessed individually, as each cookie stores different data. The expiration time of a cookie also varies between a few minutes and several years. Cookies are not software programs and do not contain viruses, trojans or other “malware”. Cookies cannot access information on your PC.
Here is an example of cookie data:
These minimum capacities should be supported by a browser:
What types of cookies are there?
Which cookies we use in particular depends on the services used and is explained in the following sections of this Privacy Policy. At this point we would like to briefly explain the different types of HTTP cookies.
We can distinguish 4 types of cookies:
These cookies are necessary to ensure basic functions of the website, for example to remember your cookie preferences or to keep a session active while you navigate between pages.
These cookies collect information about user behaviour and whether users receive error messages. They are also used to measure the loading time and behaviour of the website in different browsers.
These cookies improve user-friendliness. For example, they store entered locations, font sizes or form data.
These cookies are also called targeting cookies. They are used to deliver personalised advertising to the user.
Usually, you are asked on your first visit which types of cookies you want to allow. And of course, this decision is itself stored in a cookie.
If you want to learn more about cookies and do not shy away from technical documentation, we recommend
https://datatracker.ietf.org/doc/html/rfc6265 – the “HTTP State Management Mechanism” Request for Comments by the IETF.
Purpose of processing via cookies
The purpose ultimately depends on the respective cookie. More details can be found below and/or from the software provider that sets the cookie.
What data is processed?
Cookies are small helpers for many different tasks. Which data is stored in cookies cannot be generalised, but we will inform you in the context of this Privacy Policy about the data processed and/or stored.
Storage period of cookies
The storage period depends on the respective cookie and will be specified further below where possible. Some cookies are deleted in less than an hour, others can remain stored on a computer for several years.
You can also influence the storage period yourself. You can delete all cookies manually at any time via your browser (see also “Right to object”). Furthermore, cookies that are based on consent will be deleted at the latest after you withdraw your consent; the lawfulness of storage up to that point remains unaffected.
Right to object – how can I delete cookies?
You decide how and whether you want to use cookies. Regardless of the service or website from which cookies originate, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.
If you want to find out which cookies are stored in your browser, change cookie settings or delete cookies, you can find this in your browser settings:
If you generally do not want any cookies, you can configure your browser such that it always informs you when a cookie is to be set. This allows you to decide, for each individual cookie, whether you allow it or not. The procedure differs depending on the browser. It is best to search for instructions using your search engine with the terms “delete cookies Chrome” or “disable cookies Chrome” if you use Chrome.
Legal basis
Since 2009, the so-called “Cookie Directive” (Directive 2002/58/EC, as amended) has required your consent for the storage of, and access to, information on your device, unless that storage is strictly necessary. In Hungary, this requirement is implemented in the Act on Electronic Communications; in addition, Article 6(1)(a) GDPR applies to the processing of any personal data resulting from cookies.
For strictly necessary cookies, even where no consent is present, there are legitimate interests (Article 6(1)(f) GDPR), which are mostly economic in nature. We want to offer visitors a pleasant user experience, and certain cookies are often absolutely necessary for this.
Where non-essential cookies are used, this only happens if you have given your consent. The legal basis for this is Article 6(1)(a) GDPR.
In the following sections, you will be informed in more detail about the use of cookies, where software used by us relies on them.
Web Hosting – Introduction
Web Hosting – Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: Professional hosting of the website and ensuring operations
📓 Processed data: IP address, time of website visit, browser used and additional data. More details can be found below and/or from the hosting provider used.
📅 Storage period: Depends on the provider, usually 2 weeks
⚖️ Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
What is web hosting?
When you visit websites today, certain information – including personal data – is automatically created and stored, including on this website. Such data should be processed as sparingly as possible and only where justified. By “website” we mean all pages on a domain, i.e. everything from the homepage to the very last subpage (like this one here). By “domain” we mean, for example, example.com or samplewebsite.com.
If you want to view a website on a computer, tablet or smartphone, you use a program called a web browser. You probably know some of them by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We refer to them as browsers or web browsers.
For the website to be displayed, the browser must connect to another computer where the website code is stored: the web server. Operating a web server is a complex and demanding task and is therefore generally provided by professional providers, the hosting providers. They offer web hosting and thus ensure reliable and error-free storage of website data.
When your browser connects to our web server and while data is transmitted back and forth, personal data may be processed. On the one hand, your computer stores data, and on the other hand, the web server also needs to store data for a certain period to ensure proper operation.
Why do we process personal data?
The purposes of this data processing are:
What data is processed?
Even while you are currently visiting our website, our web server (the computer on which this website is stored) typically automatically logs data such as:
How long is the data stored?
As a rule, the data listed above is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude that authorities may access this data in case of unlawful behaviour.
In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not pass on your data without your consent!
Legal basis
The lawfulness of the processing of personal data in the context of web hosting arises from Article 6(1)(f) GDPR (protection of legitimate interests), as the use of professional hosting by a provider is necessary to present the company securely and user-friendly on the internet and to be able to pursue any attacks and claims arising from this.
We have a data processing agreement in place with our hosting provider pursuant to Article 28 GDPR, which ensures compliance with data protection and guarantees data security.
External Web Hosting Provider – Privacy
Below you will find the contact details of our external hosting provider, where you can find more information on data processing, in addition to the information provided above:
easyname GmbH
Canettistrasse 5/10, 1100 Vienna, Austria
Our website is hosted on servers located within the European Union. You can find more details on data processing by this provider in its privacy policy.
Website Builder Systems – Introduction
Website Builder Systems – Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: Operation and presentation of our website
📓 Processed data: Technical usage information such as IP address, browser, operating system and time of access, as well as any data you actively submit (e.g. via forms)
📅 Storage period: See the sections on web hosting and the contact form
⚖️ Legal bases: Art. 6(1)(f) GDPR (legitimate interests), Art. 6(1)(a) GDPR (consent)
What are website builder systems?
We use a content management system and a page builder for our website. With these systems, website operators can create and maintain a website without extensive programming knowledge. By using such a system, personal data about you may be collected, stored and processed. In this section we provide general information on this; details on the specific systems we use follow below.
Why do we use a website builder system?
The biggest advantage of such a system is its ease of use. We want to provide you with a clear, simple and well-structured website that we can operate and maintain ourselves without external support. This allows us to design our online presence according to our wishes and offer you an informative and pleasant experience on our website.
Legal basis
We have a legitimate interest in using a content management system and a page builder in order to operate our website and present it efficiently and attractively to you. The corresponding legal basis for this is Article 6(1)(f) GDPR (legitimate interests).
Where data processing is not necessary for the operation of the website, data is only processed on the basis of your consent. This applies in particular to tracking activities. In this respect, the legal basis is Article 6(1)(a) GDPR (consent).
WordPress (self-hosted)
We use the open-source content management system WordPress for our website. WordPress is free software published by the WordPress Foundation and made available at wordpress.org.
Important: we operate WordPress as a so-called self-hosted installation. The software runs entirely on our own web space at our hosting provider easyname GmbH in Vienna, Austria. We do not use the hosted service WordPress.com operated by Automattic Inc. (USA).
This means that simply visiting our website does not cause any data to be transmitted to Automattic Inc. or to any other WordPress service provider. The data processed when you access our website – in particular your IP address and the technical access data described above – is processed exclusively on our server within the European Union and is described in the section “Web Hosting”.
WordPress itself sets cookies only in specific cases, for example when you leave a comment or when a logged-in user administers the website. As a visitor, you are not normally affected by this.
Individual extensions (plugins) may load additional content or set cookies. Where this is the case, we describe it separately in the relevant sections of this Privacy Policy.
Legal basis: The operation of WordPress is based on our legitimate interest in providing a functional, secure and maintainable website (Article 6(1)(f) GDPR). Where a plugin processes data that is not necessary for the operation of the website, this only takes place on the basis of your consent (Article 6(1)(a) GDPR).
Elementor Page Builder
We use the WordPress page builder Elementor (by Elementor Ltd., Tuval St 40, Ramat Gan, Israel) to create and display the content and layout of our website. Elementor is an extension integrated directly into our WordPress system and operates locally on our web server. This means that no data is automatically transmitted to Elementor’s servers simply by visiting our website.
Israel is a third country for which the European Commission has adopted an adequacy decision (Commission Decision 2011/61/EU), meaning that an adequate level of data protection is recognised. However, as described above, no visitor data is transmitted to Elementor Ltd. in the ordinary operation of our website.
What data does Elementor process?
When you interact with elements on our website that were created with Elementor (such as forms, animations, pop-ups, sliders, text blocks, or layout structures), the following data may be processed:
Elementor stores these form submissions locally on our server, managed by our hosting provider easyname GmbH. No data is transferred to Elementor Ltd. unless specific external integrations are used (we do not use such integrations).
Purpose of Processing
Elementor is used for:
Legal Basis
The use of Elementor is based on:
Storage Period
Technical data (server logs) is stored according to our hosting provider’s standard retention periods. Form submissions via Elementor are stored only as long as necessary to process your request and to comply with legal retention obligations, after which they are deleted.
Data Processing Location
All data processed through Elementor is handled on our own servers, located at:
easyname GmbH, Canettistrasse 5/10, 1100 Vienna, Austria
No data is automatically transferred outside the EU.
Security
Our website uses SSL/TLS encryption (HTTPS), ensuring that any data transmitted through Elementor elements — especially form submissions — cannot be accessed by unauthorised third parties.
More Information
For more details, please refer to Elementor’s privacy policy: https://elementor.com/about/privacy/
Web Analytics – Introduction
Web Analytics – Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimise the web offering
📓 Processed data: Access statistics containing data such as locations of access, device data, duration and time of access, navigation behaviour, click behaviour and IP addresses. More details can be found from the respective web analytics tool.
📅 Storage period: Depends on the web analytics tool used
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is web analytics?
We use software on our website to evaluate visitor behaviour – called web analytics or web analysis. Data is collected that is stored, managed and processed by the respective analytics provider (also referred to as tracking tool). The data is used to create analyses of user behaviour on our website and made available to us as website operators. For such analyses, user profiles can be created and data can be stored in cookies.
Why do we use web analytics?
With our website, we have a clear goal: we want to offer the best web offering in our industry. Web analytics tools help us to take a closer look at the behaviour of our website visitors and then improve our web offering accordingly. For example, we can see where our visitors come from, when our website is most frequently visited or which content is particularly popular. All this information helps us to optimise the website and adapt it to your needs, interests and wishes.
What data is processed?
Which data is stored depends on the analysis tool used. Typically, however, data is stored such as which content you view on our website, which buttons or links you click, when you access a page, which browser you use, with which device (PC, tablet, smartphone etc.) you visit the website or which operating system you use. If you have agreed that location data may also be collected, these can also be processed by the analytics provider.
Your IP address is also stored. Under the GDPR, IP addresses are considered personal data. However, your IP address is usually stored in a pseudonymised (i.e. shortened and anonymised) form. As a rule, no direct data such as your name, age, address or email address is stored for the purposes of testing, web analysis and optimisation. All such data, if collected, is stored pseudonymously. This means you cannot be identified as a person.
How long data is stored depends on the provider. Some cookies store data for only a few minutes or until you leave the website; others can store data for several years.
Duration of data processing
We will inform you below about the duration of data processing where we have more information. In general, we only process personal data for as long as is absolutely necessary to provide our services. If there are statutory storage obligations (e.g. for accounting purposes), this period may be exceeded.
Right to object
You also always have the right and option to withdraw your consent to the use of cookies and/or third-party providers. This can be done either via our cookie management tool or via other opt-out functions. For example, you can prevent data collection by cookies by managing, disabling or deleting cookies in your browser.
Legal basis
The use of web analytics requires your consent, which we obtain via our cookie popup. This consent constitutes the legal basis within the meaning of Article 6(1)(a) GDPR (consent) for the processing of personal data as it may occur when collected by web analytics tools.
In addition to consent, we also have a legitimate interest in analysing visitor behaviour in order to improve our offering technically and economically. Web analytics help us identify website errors, detect attacks and improve profitability. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use such tools to the extent that you have given your consent.
Since web analytics tools use cookies, we also recommend reading our general section on cookies.
Google Analytics Privacy Policy
Google Analytics – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Evaluation of visitor information to optimise the website
📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behaviour and click behaviour. More details can be found further down in this privacy policy.
📅 Storage period: individually adjustable; by default, Google Analytics 4 stores data for 14 months.
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is Google Analytics?
We use the Google Analytics 4 (GA4) analysis tracking tool from the American company Google Inc. on our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. By combining various technologies such as cookies, device IDs and login information, you as a user can be identified across different devices. This allows your actions to be analysed across platforms.
For example, when you click on a link, this event is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us to better tailor our website and service to your needs. These measurements and analyses are based on a pseudonymous user identification number. This number does not contain any personal data such as name or address, but is used to assign events to a device. GA4 uses an event-based model that collects detailed information about user interactions such as page views, clicks, scrolling and conversion events.
In order for Google Analytics to function, a tracking code is embedded in the code of our website. When you visit our website, this code records various events that you perform on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.
Google processes the data and we receive reports on your user behaviour. These reports may include audience reports, advertising reports, acquisition reports, behaviour reports, conversion reports and real-time reports.
Why do we use Google Analytics on our website?
Our goal with this website is clear: we want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.
The statistically evaluated data gives us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimise our site so that it is easier for interested people to find. On the other hand, the data helps us to better understand you as a visitor. The data also helps us to tailor our advertising and marketing measures more individually and cost-effectively.
What data is stored by Google Analytics?
Google Analytics uses a tracking code to create a random, unique ID that is linked to your browser cookie. This allows Google Analytics to recognise you as a new user and assign you a user ID. The next time you visit our site, you will be recognised as a “returning” user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles.
Through identifiers such as cookies, app instance IDs, user IDs or custom event parameters, your interactions are measured across platforms, provided you have given your consent. If you also use other Google systems (such as a Google account), data generated by Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, approve it. Exceptions may occur if required by law.
According to Google, IP addresses are not logged or stored in Google Analytics 4. However, Google uses IP address data to derive location data and deletes it immediately afterwards. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data centre or on a server.
Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies compared to previous versions. Nevertheless, there are some specific cookies that are used by GA4. These include, for example:
Name: _ga
Value: 2.1326744211.152
Purpose: By default, the _ga cookie is used to store the user ID. Basically, it serves to distinguish between website visitors.
Expiry date: after 2 years
Name: _gid
Value: 2.1687193234.152
Purpose: The cookie is also used to distinguish between website visitors.
Expiry date: after 24 hours
Name: _gat_gtag_UA_<property-id>
Value: 1
Purpose: Used to reduce the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_<property-id>.
Expiry date: after 1 minute
Note: This list cannot claim to be exhaustive, as Google constantly changes its choice of cookies.
How long and where is the data stored?
Google has servers all over the world. You can find out exactly where Google’s data centres are located here: https://datacenters.google/
Your data is distributed across various physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation.
The retention period for the data depends on the settings of the respective property. Google Analytics offers four options for controlling the storage period: 2 months, 14 months, 26 months, or deletion only when carried out manually. By default, data is stored for 14 months in GA4.
Once the specified period has expired, the data will be deleted once a month. This retention period applies to your data linked to cookies, user recognition and advertising IDs. Reporting results are based on aggregated data and are stored independently of user data.
How can I delete my data or prevent data storage?
Under European Union data protection law, you have the right to obtain information about your data, to update it, to delete it or to restrict its use. You can prevent Google Analytics 4 from using your data by using the browser add-on to deactivate Google Analytics JavaScript. You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en. Please note that this add-on only deactivates data collection by Google Analytics.
If you want to deactivate, delete or manage cookies in general, you will find the relevant links to the respective instructions for the most popular browsers in the “Cookies” section.
Legal basis
The use of Google Analytics requires your consent, which we have obtained with our cookie pop-up. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web analytics tools.
In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors in order to improve our offering both technically and economically. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). However, we only use Google Analytics if you have given your consent.
Google also processes your data in the USA, among other places. Google is an active participant in the EU–US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Google also uses so-called Standard Contractual Clauses (Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/adsprocessorterms/.
If you would like to learn more about data processing, please refer to Google’s privacy policy at https://policies.google.com/privacy?hl=en.
Google Site Kit Privacy Policy
Google Site Kit – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Evaluation of visitor information to optimise the website
📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. More details can be found in the Google Analytics section above.
📅 Storage period: depends on the properties used
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is Google Site Kit?
We have integrated the WordPress plugin Google Site Kit from the American company Google Inc. into our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. With Google Site Kit, we can view statistics from various Google products, such as Google Analytics, directly in our WordPress dashboard. In addition to Google Analytics, Google Search Console, PageSpeed Insights and Google Tag Manager can also be linked to Google Site Kit.
Why do we use Google Site Kit on our website?
Statistical analyses help us to get to know you better and tailor our offerings to your wishes and interests. Site Kit makes our work much easier in this regard because we can view and analyse the statistics from Google products directly in the dashboard, without having to log in separately for each tool.
What data is stored by Google Site Kit?
If you have actively agreed to tracking tools in the cookie banner, Google products such as Google Analytics will set cookies and collect data about you — for example, information about your user behaviour. This data is then sent to Google, where it is stored and processed. This also includes personal data such as your IP address.
Site Kit itself is only a dashboard: the data collection takes place through the linked Google services. For details on the cookies used, the storage period and how you can prevent data storage, please refer to the Google Analytics section above.
Legal basis
The use of Google Site Kit requires your consent, which we obtained through our cookie popup. This consent constitutes the legal basis for the processing of personal data according to Art. 6(1)(a) GDPR (consent).
In addition to consent, we also have a legitimate interest in analysing the behaviour of website visitors in order to improve our services both technically and economically. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use Google Site Kit if you have given consent.
Google also processes your data in the United States, among other locations. Google is an active participant in the EU–US Data Privacy Framework and additionally uses Standard Contractual Clauses pursuant to Art. 46(2) and (3) GDPR. Further details and links can be found in the Google Analytics section above.
To learn more about data processing by Google, we recommend that you read Google’s privacy policy at https://policies.google.com/privacy?hl=en.
Online Marketing – Introduction
Online Marketing – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Evaluation of visitor information to optimise the website
📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. Personal data such as name or email address may also be processed. More details can be found in the respective online marketing tool used.
📅 Storage period: Depends on the online marketing tools used
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is online marketing?
Online marketing refers to all measures carried out online to achieve marketing goals such as increasing brand awareness or closing a deal. Furthermore, our online marketing measures aim to draw people’s attention to our website. This usually involves online advertising, content marketing or search engine optimisation. In order to use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, the data helps us to show our content only to those people who are actually interested in it and, on the other hand, it enables us to measure the advertising success of our online marketing measures.
Why do we use online marketing tools?
We want to show our website to everyone who is interested in what we have to offer. There are various tools that make our online marketing work easier and also provide us with suggestions for improvement based on data. This allows us to target our campaigns more precisely to our target group.
What data is processed?
To ensure that our online marketing works and that the success of our measures can be measured, user profiles are created and data is stored in cookies. For example, the cookies mentioned store which pages you have visited on our website, how long you have viewed these pages, which links or buttons you click on, or which website you came to us from. Technical information may also be stored. This includes your IP address, which browser you use, which device you use to visit our website, and the time at which you accessed our website and left it again. Your IP address is stored in pseudonymised form. Unique data that directly identifies you as a person is also only stored in pseudonymised form as part of advertising and online marketing processes.
For all advertising tools we use that store your data on their servers, we only ever receive aggregated information and never data that identifies you as an individual.
Duration of data processing
We will inform you about the duration of data processing below, provided we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services. Data stored in cookies is stored for varying lengths of time.
Right to object
You have the right and option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either via our cookie management tool or via other opt-out functions. The lawfulness of the processing until withdrawal remains unaffected.
Legal basis
If you have consented to the use of third-party providers, the legal basis for the corresponding data processing is this consent (Art. 6(1)(a) GDPR).
We also have a legitimate interest in measuring online marketing measures in anonymised form in order to optimise our offerings and measures with the help of the data obtained. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). However, we only use the tools if you have given your consent.
Audio & Video – Introduction
Audio & Video – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Optimisation of our services
📓 Processed data: Data such as contact details, user behaviour data, information about your device and your IP address may be stored. More details can be found below in the relevant privacy policy texts.
📅 Storage period: Data is generally stored for as long as it is necessary for the purpose of the service.
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What are audio and video elements?
We have integrated audio and video elements into our website so that you can watch videos or listen to music/podcasts directly via our website. The content is provided by service providers. All content is therefore also obtained from the providers’ respective servers.
These are integrated functional elements from platforms such as YouTube, Vimeo or Spotify. With the help of these integrated elements, you can listen to or view the respective content via our website.
When you use audio or video elements on our website, your personal data may also be transmitted to the service providers, processed and stored.
Why do we use audio and video elements on our website?
Of course, we want to provide you with the best possible experience on our website. Instead of simply providing you with a link to a video, we offer audio and video formats directly on our website that are entertaining or informative. This expands our service and makes it easier for you to access interesting content.
What data is stored by audio and video elements?
When you visit a page on our website that has an embedded video, your browser connects to the service provider’s server. In doing so, data about you is also transferred to the third-party provider and stored there. Some data is collected and stored regardless of whether you have an account with the third-party provider or not. This usually includes your IP address, browser type, operating system and other general information about your device. Most providers also collect information about your web activity. All this information is usually stored via cookies or pixel tags (also known as web beacons).
Duration of data processing
You can find out exactly how long the data is stored on the servers of third-party providers either further down in the data protection text for the respective tool or in the provider’s privacy policy. As a matter of principle, personal data is only ever processed for as long as is absolutely necessary for the provision of our services.
Right to object
You have the right and option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either via our cookie management tool or via other opt-out functions. The legality of the processing until withdrawal remains unaffected.
Legal basis
If you have consented to your data being processed and stored by integrated audio and video elements, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and effective communication with you or other customers and business partners. However, we only use the integrated audio and video elements if you have given your consent.
YouTube Privacy Policy
YouTube – Summary
👥 Data subjects: Visitors to the website
🤝 Purpose: Optimisation of our services
📓 Processed data: Data such as contact details, user behaviour data, information about your device and your IP address may be stored. More details can be found further down in this privacy policy.
📅 Storage period: Data is generally stored for as long as it is necessary for the purpose of the service.
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is YouTube?
We have integrated YouTube videos into our website. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that has a YouTube video embedded in it, your browser connects to the YouTube or Google servers. Various data is transferred during this process (depending on your settings). Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all data processing in the European Union.
Why do we use YouTube videos on our website?
YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. With the help of our embedded videos, we provide you with additional helpful content alongside our texts and images.
What data does YouTube store?
As soon as you visit one of our pages that has a YouTube video embedded in it, YouTube will set at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet service provider.
If you are not logged into a Google account or YouTube account, Google stores data with a unique identifier linked to your device, browser or app.
The following list shows cookies that were set in a browser test. The list cannot claim to be complete because user data always depends on interactions on YouTube.
Name: YSC — Purpose: registers a unique ID to store statistics about the video viewed — Expiry: end of session
Name: PREF — Purpose: registers your unique ID; Google uses PREF to obtain statistics on how you use YouTube videos — Expiry: after 8 months
Name: GPS — Purpose: registers your unique ID on mobile devices to track your GPS location — Expiry: after 30 minutes
Name: VISITOR_INFO1_LIVE — Purpose: estimates the user’s bandwidth on pages with embedded YouTube videos — Expiry: after 8 months
Additional cookies such as APISID, CONSENT, HSID, LOGIN_INFO, SAPISID, SID and SIDCC may be set when you are logged in with your YouTube account. These are used to identify your browser and device, to store login information and consent status, and to create a profile of your interests for personalised advertising. Their expiry periods range from three months to several years.
How long and where is the data stored?
The data that YouTube receives and processes from you is stored on Google servers. Most of these servers are located in the United States. At https://datacenters.google/ you can see exactly where the Google data centres are located.
Google stores the collected data for varying lengths of time. You can delete some data at any time, while other data is automatically deleted after a limited period of time and still other data is stored by Google for a longer period.
How can I delete my data or prevent data storage?
In principle, you can manually delete data in your Google account. With the automatic deletion function for location and activity data, information is stored for either 3 or 18 months, depending on your decision, and then deleted.
Regardless of whether you have a Google account or not, you can configure your browser to delete or disable Google cookies. Under the “Cookies” section, you will find the relevant links to the respective instructions for the most popular browsers.
Legal basis
If you have consented to your data being processed and stored by integrated YouTube elements, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and effective communication with you or other customers and business partners. However, we only use the integrated YouTube elements if you have given your consent.
YouTube also processes your data in the USA, among other places. YouTube and Google are active participants in the EU–US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Google uses Standard Contractual Clauses (Art. 46(2) and (3) GDPR). You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
Since YouTube is a subsidiary of Google, there is a joint privacy policy. If you would like to learn more about how your data is handled, we recommend reading the privacy policy at https://policies.google.com/privacy?hl=en.
Web Design – Introduction
Web Design – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Improving the user experience
📓 Processed data: The data processed depends heavily on the services used. In most cases, this includes the IP address, technical data, language settings, browser version, screen resolution, and browser name.
📅 Storage period: Depends on the tools used
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is web design?
We use various tools on our website that serve our web design purposes. Web design is not just about making our website look pretty, but also about functionality and performance. The goal of web design is to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. In this Privacy Policy, the category “web design” therefore includes all services that improve the design of our website. These can be, for example, fonts, various plugins, or other integrated web design functions.
Why do we use web design tools?
How you absorb information on a website depends heavily on the structure, functionality, and visual perception of the website. That is why good, professional web design is important to us. We are constantly working to improve our website and see this as an extended service for you as a website visitor.
What data is stored by web design tools?
When you visit our website, web design elements may be integrated into our pages that can also process data. The exact nature of this data depends heavily on the tools used. Below, you can see exactly which tools we use for our website. Fonts loaded from external servers, for example, automatically transmit information such as language settings, IP address, browser version, screen resolution and browser name to the provider’s servers.
Duration of data processing
How long data is processed is very individual and depends on the web design elements used. If cookies are used, the storage period can be as short as one minute or as long as a few years. As a rule, data is only stored for as long as is necessary to provide the service.
Right to object
You have the right and option to revoke your consent to the use of cookies or third-party providers at any time. You can do this either via our cookie management tool or via other opt-out functions. However, some web design elements (usually fonts) contain data that cannot be deleted so easily. This is the case when data is automatically collected when a page is accessed and transmitted to a third-party provider. In this case, please contact the support team of the relevant provider.
Legal basis
If you have consented to the use of web design tools, this consent forms the legal basis for the corresponding data processing (Art. 6(1)(a) GDPR). We also have a legitimate interest in improving the web design of our website. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). However, we only use web design tools that load external content if you have given your consent.
Adobe Fonts Privacy Policy
We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. For the European region, the Irish company Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible.
Adobe also processes your data in the USA, among other places. Adobe is an active participant in the EU–US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, please visit https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Adobe uses Standard Contractual Clauses (Art. 46(2) and (3) GDPR). You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en
You can find out more about the data processed when using Adobe Fonts in the privacy policy at https://www.adobe.com/privacy.html.
Google Fonts Privacy Policy
Google Fonts – Summary
👥 Data subjects: Website visitors
🤝 Purpose: Optimisation of our services
📓 Processed data: Data such as IP address and CSS and font requests
📅 Storage period: Font files are stored by Google for one year.
⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What are Google Fonts?
We use Google Fonts on our website. These are the “Google fonts” from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.
You do not need to register or enter a password to use Google Fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services.
Google Fonts is a directory of over 800 fonts that Google makes available to its users free of charge. Many of these fonts are published under the SIL Open Font License, while others are published under the Apache License.
Why do we use Google Fonts on our website?
Google Fonts allows us to use fonts on our website without having to upload them to our own server. All Google fonts are automatically optimised for the web, which saves data volume and is a major advantage, especially for use on mobile devices. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts.
What data does Google store?
When you visit our website, the fonts are downloaded via a Google server. This external call transmits data to Google’s servers. This also allows Google to recognise that you or your IP address has visited our website. The Google Fonts API was developed to reduce the use, storage, and collection of end-user data to what is necessary for the proper provision of fonts.
However, it should be noted that every Google Font request automatically transmits information such as language settings, IP address, browser version, browser screen resolution, and browser name to Google servers.
How long and where are the data stored?
For requests related to CSS assets, Google stores data for one day on its servers, which are primarily located outside the EU. The font files themselves are stored by Google for one year. Google’s goal is to generally improve the loading speed of websites.
How can I delete my data or prevent data storage?
The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. To have this data deleted prematurely, you must contact Google Support at https://support.google.com/?hl=en.
You can find more information about Google Fonts and additional FAQs at https://developers.google.com/fonts/faq.
Legal Basis
If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is your consent (Art. 6(1)(a) GDPR).
Furthermore, we have a legitimate interest in using Google Fonts in order to optimise our online services. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use Google Fonts if you have provided your consent.
Google also processes some of your data in the United States. Google is an active participant in the EU–US Data Privacy Framework and additionally uses Standard Contractual Clauses pursuant to Art. 46(2) and (3) GDPR. Further details and links can be found in the Google Analytics section above.
Information on which data Google generally collects and how this data is used can also be found at https://policies.google.com/privacy?hl=en.
Online Map Services – Introduction
Online Map Services – Summary
👥 Data subjects: Visitors of the website
🤝 Purpose: Improving the user experience
📓 Processed data: The data processed depends heavily on the services used. Typically, this includes IP address, location data, search queries, and/or technical data.
📅 Storage period: Depends on the tools used
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What are online map services?
We use online map services on our website as an extended service. Such services make it possible to display locations, route plans, or other geographic information directly on our website.
By integrating a map service, you no longer need to leave our website to view, for example, directions to a specific location. To enable the online map to function on our website, map sections are embedded using HTML code.
When you use the embedded map service, data is also transmitted to the respective tool and stored there. This data may include personal data.
Why do we use online map services on our website?
Our goal is to offer you a pleasant experience on our website. Without leaving our website, you can use the map system to view directions and locations with ease. It is also practical that you can instantly see where our company is located.
Which data is stored by online map services?
When you open a page on our website that includes an online map function, personal data may be transmitted to the respective service and stored there. In most cases, this involves your IP address, which can also be used to determine your approximate location. In addition to the IP address, data such as entered search terms as well as latitude and longitude coordinates are stored.
The data is not stored by us, but on the servers of the integrated tools. To ensure that the service works properly, at least one cookie is usually set in your browser.
How long and where are the data stored?
Each online map service processes different user data. In general, personal data is always retained only for as long as necessary to provide the service. We therefore recommend reviewing the privacy policies of the specific tools used.
Right to object
You always have the option and the right to access your personal data and to object to its use and processing. You may also withdraw any consent you have previously given us at any time. In most cases, the easiest way to do this is via the cookie consent tool.
Legal basis
If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent (Art. 6(1)(a) GDPR).
We also have a legitimate interest in using an online map service in order to optimise the service on our website (Art. 6(1)(f) GDPR). However, we only use an online map service if you have given your consent.
OpenStreetMap Privacy Policy
OpenStreetMap – Summary
👥 Data subjects: Visitors of the website
🤝 Purpose: Optimisation of our service offering
📓 Processed data: Data such as IP address, browser information, operating system, content of the request, limited location and usage data
📅 Storage period: The IP address is deleted after 180 days
⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)
What is OpenStreetMap?
We have integrated map sections from the online mapping tool OpenStreetMap on our website. This is an open-source mapping system that we access via an API (interface). The service is provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
By using this map function, your IP address is transmitted to OpenStreetMap. The United Kingdom is a third country for which the European Commission has adopted an adequacy decision, meaning that an adequate level of data protection is recognised.
Why do we use OpenStreetMap on our website?
We use the OpenStreetMap mapping service so that we can show you exactly how to find our company. The map displays the best route to us, making your journey effortless.
What data is stored by OpenStreetMap?
When you visit one of our web pages that includes OpenStreetMap, user data is transmitted to the service and stored there. OpenStreetMap collects information about your interactions with the digital map, your IP address, data about your browser, device type, operating system, as well as the date and time when you used the service. According to the organisation’s own privacy policy, the analytics tool “Piwik” is used to record user interactions; Piwik stores your IP address only in a shortened form.
The following cookie may be set in your browser when you interact with OpenStreetMap via our website:
Name: _osm_location — Purpose: required to unlock OpenStreetMap content — Expiration: after 10 years
If you view the map in full screen mode, you will be redirected to the OpenStreetMap website. There, cookies such as _osm_totp_token (expiry: after 1 hour), _osm_session (expiry: end of session) and _pk_id.1.cf09 (set by Piwik, expiry: after 1 year) may be stored in your browser.
How long and where is the data stored?
The API servers, databases, and auxiliary service servers are currently located in the United Kingdom and the Netherlands. Your IP address and user information, which is stored in shortened form by the web analytics tool Piwik, is deleted after 180 days.
How can I delete my data or prevent data storage?
You have the right to access your personal data at any time and to object to its use and processing. You can manage, delete, or disable any cookies that may be set by OpenStreetMap directly in your browser at any time. However, doing so may result in the service no longer functioning to its full extent.
Legal Basis
If you have consented to the use of OpenStreetMap, this consent constitutes the legal basis for the corresponding data processing (Art. 6(1)(a) GDPR).
We also have a legitimate interest in using OpenStreetMap to optimise our online services (Art. 6(1)(f) GDPR). However, we only use OpenStreetMap if you have provided your consent.
If you would like to learn more about how OpenStreetMap processes data, we recommend reading the organisation’s privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy.
Explanation of Terms Used
We always strive to make our Privacy Policy as clear and understandable as possible. However, this is not always easy, especially when dealing with technical and legal topics. It often makes sense to use legal terms (such as “personal data”) or specific technical expressions (such as “cookies” or “IP address”). Nevertheless, we do not want to use these terms without providing an explanation.
Below you will find a list of important terms used throughout this Privacy Policy. If these terms originate from the GDPR and constitute defined terms, we also include the relevant GDPR text and, where appropriate, add our own explanations.
Processor
Definition according to Article 4 GDPR: “Processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Explanation: As a company and website operator, we are responsible for all data we process from you. In addition to controllers, there may also be so-called processors. This includes any company or individual that processes personal data on our behalf. Processors can therefore include service providers such as tax advisors, as well as hosting or cloud providers, payment providers or newsletter services.
Consent
Definition according to Article 4 GDPR: “Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Explanation: On websites, such consent is usually obtained through a cookie consent tool. When you visit a website for the first time, you are typically asked via a banner whether you agree to the processing of your data. In most cases, you can also set individual preferences and decide which types of data processing you allow and which you do not. If you do not give consent, your personal data may not be processed. Of course, consent can also be given in writing and not only through a tool.
Personal Data
Definition according to Article 4 GDPR: “personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Explanation: Personal data includes all information that can identify you as a person. This typically includes data such as:
According to the European Court of Justice (ECJ), your IP address also qualifies as personal data. IT experts can use your IP address to determine at least the approximate location of your device and, consequently, identify you as the connection owner. Therefore, the storage of an IP address also requires a legal basis under the GDPR.
There are also so-called “special categories” of personal data, which are particularly sensitive. These include:
Profiling
Definition according to Article 4 GDPR: “profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Explanation: Profiling involves gathering various pieces of information about a person in order to learn more about them. In the online sector, profiling is often used for advertising purposes. Web or advertising analytics tools, for example, collect data about your behaviour and interests on a website. From this data, a specific user profile is created, which allows advertising to be targeted to a relevant audience.
Controller
Definition according to Article 4 GDPR: “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Explanation: In our case, we are responsible for the processing of your personal data and therefore the “controller”. If we transfer collected data to other service providers for processing, these providers become “processors”. For this purpose, a data processing agreement must be signed.
Processing
Definition according to Article 4 GDPR: “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Note: When we refer to processing in our Privacy Policy, we mean any type of data processing. As outlined in the original GDPR definition above, this includes not only the collection but also the storage and handling of data.
Closing Remarks
If you are reading these lines, you have truly worked your way through our entire Privacy Policy – or at least scrolled down to this point. As you can see from the extent of this Privacy Policy, we take the protection of your personal data very seriously.
It is important to us to inform you to the best of our knowledge and belief about the processing of personal data. We do not only want to tell you which data is being processed, but also why we use various software tools. Privacy policies often sound very technical and legalistic. However, since most of you are neither web developers nor lawyers, we wanted to take a different linguistic approach and explain the matter in simple and clear terms.
If you have any questions regarding data protection on our website, please do not hesitate to contact us or the competent supervisory authority named above. We wish you a pleasant time and hope to welcome you back on our website soon.
All texts are protected by copyright.
