The protection of your data and your privacy is very important to us. We want to ensure that your personal information is secure and that we comply with data protection laws. Below we explain how we handle your data. Exactly which data is processed and how we use it depends on which services you request or agree with us.
1. Controller
2. Your rights as a data subject
3. General data processing on our website
a. Sever log files
b. Contact form
c. Cookies
d. Cookie consent with Usercentrics
4. Marketing communication
a. Newsletter
b. Online surveys
5. Social media channels
a. Facebook and Instagram
b. LinkedIn
c. TikTok
d. Youtube
6. Tracking and analysis tools
a. Google Tag Manager
b. Google Analytics
c. Google Ads
d. Youtube video plugins
e. Campaign tracking, retargeting and conversion tracking
f. Retargeting / usage analysis
7. TLS encryption
8. Information about your right to object pursuant to Art. 21 GDPR
9. Changes to our privacy policiy
The controller within the meaning of data protection laws, in particular GDPR, is:
Freudenberg Home and Cleaning Solutions GmbH
Data Protection Officer
Im Technologiepark 19
69469 Weinheim
Germany
If you have any questions about data protection, please send us an e-mail or contact to:
You can exercise the following rights at any time using the contact details provided:
The limitations and exceptions under national laws apply, as well as any other exceptions or limitations provided for in the relevant data protection laws.
If you have given us your consent, you can revoke it at any time with effect for the future.
In addition, you have the right to lodge a complaint with the supervisory authority, e.g. with the competent supervisory authority of your place of residence or with the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with addresses can be found at:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
3. General data processing on our website
a. Server log files
(1) Type and purpose of processing: When you access our website without registering or otherwise providing information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, the referrer URL, the date and time of access and similar information.
They are processed in particular for the following purposes:
We do not use your data to draw conclusions about your identity. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
(2) Legal basis and legitimate interest: Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in enhancing the stability and functionality of our website, ensuring system security, and detecting potential misuse.
(3) Recipients: For the operation and maintenance of our website, we engage service providers who act as data processors on our behalf. These providers are contractually required to handle your data with strict confidentiality.
(4) Duration of storage: The data is stored in the server log files in a form that makes it possible to identify the data subjects for a maximum of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).
In the event of such an incident, the server log files are stored until the security-relevant incident has been rectified and fully clarified.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Provision required or necessary: The provision of personal data is not required by law or contract. However, without the IP address and the cookie identifier, the service and functionality of our website cannot be guaranteed. In addition, individual services and/or content may not be available or may only be available to a limited extent.
(7) Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.
b. Contact form
(1) Type and purpose of processing: Our website provides a contact form that allows users to reach us electronically. When a user submits a request via this form, the information entered in the input fields is transmitted to us and stored
The following data is also stored at the time the message is sent:
Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information about the servers involved in the e-mail communication.
You can also contact us using the telephone number provided. In this case, we collect log data containing your telephone number and the duration of the call. We do not record any calls.
Regardless of the type of communication you choose, we record the content of your enquiry. Your data will be stored for the purpose of personalised communication with you.
(2) Legal basis: The processing of data entered into the contact form is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR. Our legitimate interest in processing your data is to facilitate easy and efficient communication with us.
If you contact us to request a quote, the data entered in the contact form will be used to carry out pre-contractual measures on the basis of Art. 6 (1) (b) GDPR.
(3) Recipients: Our website is maintained by service providers who act as our data processors.
If you send us an enquiry about an offer, service providers used by us may receive data for these purposes if they require the data to fulfil their respective services (e.g. IT service providers, call centres).
(4) Duration of storage: The data will be deleted no later than 6 months after the enquiry has been processed. If a contractual relationship is established, we are subject to the statutory retention periods and delete your data after six to ten years.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Provision mandatory or required: The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the required data and the reason for the enquiry.
(7) Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.
c. Cookies
General information: A cookie is a small data file that is created when a website is visited and temporarily stored on the website user's system. When the user revisits the website, their browser sends the previously stored cookie back to the server, allowing it to analyze the retrieved information. In particular, cookies can make it easier to navigate a website.
Deletion of cookies: You can reject all cookie categories except for those that are technically necessary. To do so, click on the icon at the bottom left of your web browser and change the desired settings in the cookie consent banner that opens. Please note that these setting must be configured separately for each device.
You can also delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
Mozilla Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox
Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416
Opera: http://www.opera.com/help
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
You can also prevent so-called scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser manufacturer (e.g. for Mozilla Firefox: https://addons.mozilla.org/en-GB/firefox/addon/noscript/).
a. Use of technically necessary cookies
(1) Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the browser making the request can still be identified after navigating to a different page. (e.g. language settings, login to secure areas of our website).
Technically necessary cookies help make a website functional by enabling essential features such as page navigation and access to secure areas. Some functions of our website cannot be provided without the use of cookies, as they require the browser to be recognized even after a page transition.
(2) Legal basis and legitimate interest: Processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our legitimate interest in the user-friendly design of our website.
(3) Recipients: We use technical service providers for the operation and maintenance of our website who act as our data processors. These service providers are contractually required to handle your data with strict confidentiality.
(4) Duration of storage: Details on the storage duration of cookies can be found in our Cookie Consent Tool, which you can access by clicking on the icon at the bottom left of the screen.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Provision required or necessary: The provision of personal data is neither required by law nor by contract. However, the service and functionality of our website cannot be guaranteed without this data. In addition, individual services and performances may not be available or may only be available to a limited extent.
(7) Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.
b. Use of technically unnecessary cookies
(1) Type and purpose of processing: We also use cookies on the website that enable us to analyse the surfing behaviour of users. The purpose of tracking, advertising and targeting cookies is to show users advertising offers that match their surfing behaviour. These cookies are stored in the user's browser to enable cross-session tracking. Since they remain in the browser (client) unless manually deleted, this method is also known as client-side cookie tracking.
(2) Legal basis and legitimate interest: The legal basis for this processing is in any case your consent, Art. 6(1)(a) GDPR and, insofar as data stored and processed via the tags on the end device, the national Cookie law applies.
(3) Recipients: Detailed information on the cookies and their providers can be found in the texts on the "Third Party Tools" used further down on this page.
(4) Duration of storage: Details on the storage duration of cookies can be found in our Cookie Consent Tool, which you can access by clicking on the icon at the bottom left of your screen.
(5) Third country transfer: Information on third country transfer can be found in the texts on the "Third Party Tools" used further down on this page. The processing of your data for the purpose of data transfer is based on your consent in accordance with Art. 49 (1)(a) GDPR.
(6) Provision required or necessary: The provision of personal data is neither legally nor contractually required. However, without this data, we will be unable to send you relevant advertising offers.
(7) Revocation of consent: You can revoke tracking and analysis cookies at any time in our consent banner and only visit the website with necessary cookies. Click on the icon at the bottom left of the screen and change the desired settings in the cookie consent banner that opens.
c. Cookie consent management
(1) Nature and purpose of processing: This website uses Usercentrics' cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document this consent in accordance with data protection regulations. When you visit our website, the following personal data is transmitted to Usercentrics:
Your consent(s) or the revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your end device
- Time of your visit to the website
In addition, Usercentrics stores a cookie in your browser in order to be able to assign the consents given or their revocation to you.
(2) Legal basis: Usercentrics is used to obtain the legally required consent for the use of cookies, Art. 6(1)(f) GDPR with balancing according the applicable Cookie law.
(3) Beneficiary: The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany. We have entered into a data processing agreement with Usercentrics to ensure that your data is handled confidentially
(4) Duration of storage: The data collected will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected by this.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Provision is mandatory or required: The provision of personal data is required by law.
(7) Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.
a. Newsletter
(1) Type Type and purpose of processing: To send our newsletter, we collect personal data that is transmitted to us via an input mask. We require a valid e-mail address in order to be able to register you successfully.
In order to check whether a registration is actually made by the owner of a specific e-mail address, we use the "double opt-in" procedure (DOI) for online registrations. This means that after registering for the newsletter, you will receive an e-mail in which you must confirm your newsletter registration again.
The following data is also stored at the time of DOI confirmation: Timestamp.
Additionally, we analyze your reading and usage behavior to continuously improve our newsletter and tailor it to your interests and needs. This includes evaluating which content you read or click on in our email newsletters to enhance their relevance, create customer segments, and develop special offers for these groups.
(2) Legal basis: We send our newsletter and analyse it on the basis of your consent, Art. 6 (1)(a) GDPR.
(3) Recipients: We use service providers who act as our data processors for dispatch and any analyses. All service providers are contractually obliged to treat your data confidentially.
(4) Duration of storage: In this context, the data will only be processed for as long as the corresponding consent has been given.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Mandatory or required provision: The provision of your personal data is voluntary and is based solely on your consent. There are no disadvantages for you. Unfortunately, we cannot send you our newsletter without your valid consent.
(7) Right to revoke your consent: You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch by us at any time. A corresponding link can be found in every newsletter. You can also withdraw your consent using the other contact options offered on the website.
(8) Profiling: If you have given us your consent, we will evaluate your interaction with the newsletters sent and evaluate subsequent visits to our website in order to further improve the newsletter and the website and optimise them according to the actual interests of the visitors.
b. Online surveys
(1) Type and purpose of processing: Your personal data is processed in pseudonymised form as part of the survey. It is not possible for us to draw direct conclusions about your identity. The purpose of processing personal data as part of the surveys is, among other things, to increase customer satisfaction.
If the survey is linked to a special offer, e.g. a voucher, you will receive the corresponding voucher code at the end of the survey. Using this voucher code, only your participation in a survey can be traced back to you. The result will be made available to us in anonymised form.
(2) Legal basis and legitimate interest: If you are a customer or have subscribed to our newsletter and have not objected to the use of your data for advertising purposes, the processing is based on a legitimate interest, Art. 6 (1) (f) GDPR. We have a legitimate interest in increasing the satisfaction of our customers and optimising their shopping experience.
(3) Recipients: The recipients of the data may include technical service providers who act as processors to implement the survey. All service providers are contractually required to handle your data with strict confidentiality.
(4) Duration of storage: We do not link your responses to your identity; we only record that you have received a link to the survey.
(5) Third country transfer: Your data will not be transferred to a third country.
(6) Provision mandatory or required: The provision of your personal data is voluntary. If you choose not to participate in the customer survey, we will not be able to improve our services based on your anonymous responses. You may not be able to receive or use offers, such as vouchers, that are linked to participation in the customer survey.
(7) Objection: You have the right to object to the use of your address for the aforementioned advertising purposes at any time with effect for the future. You will find a corresponding contact in every cover letter. You can also revoke your consent via the other contact options provided on the website.
In the following section, you will find information on the company profiles that we maintain on various social media channels.
(1) General information: We are represented on various social networks. Below you will find information on the company profiles that we maintain on various social media channels. For information on the storage and use of your data as well as your rights and settings options to protect your privacy, please refer to the data protection information of the respective network operator.
We are represented in the following social networks:
- LinkedIn
- Facebook and Instagram
- Youtube
- TikTok
We do not use social plugins or other interfaces on our websites, but link to our presence on the social media providers.
We have no influence on the processing of personal data by the social networks. For example, we have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. We therefore expressly point out that user data (e.g. personal information, IP address) is stored by the operators of the social media platforms in accordance with their data usage guidelines and used for business purposes.
We process your personal data when you contact us via our social media profiles by using the designated functions (e.g., messages, comments, posts) or accessing the content we provide (e.g., videos). If you reach out to us in this way, we process your publicly visible personal data (typically: username, profile picture, message content including any attached photos, as well as the date and time of the interaction) to respond to your inquiry or provide the requested content. Additionally, we process your personal data to promote our company externally and share information about our products.
Page Insights: The operators of the social media platforms provide us with usage statistics (so-called analysis services or page insights data) for our pages on the social media platforms. These statistics are based on the actions and interactions of our followers (e.g. likes, shares, comments, etc., the number of followers, access data for certain page areas, the reach of a post and demographic statistics about followers, including age, language, origin or interests). These statistics help us to do this:
Please note that we have no influence or access to the creation and processing of these usage statistics and the underlying data; this is the sole responsibility of the operator of the respective social media platform.
The information stored in the cookies is received, stored and processed by the operators of the respective social media platforms. This also includes services of the operator or operator group of the social media platforms as well as services of other companies that use the social media platforms and that are visited by the user. In addition, other entities such as partners or third parties on the social media platforms may also use cookies to provide services to the companies advertising on these platforms. More detailed information about the use of cookies by the operators can be found in their privacy policies, which we provide below in the information about the respective social media provider.
On this basis, we and the operators of the social media platforms are considered "joint controllers" within the meaning of the GDPR. Accordingly, we have concluded the necessary agreement in accordance with Art. 26 GDPR, insofar as the operator of the social media platform permits this:
- Facebook and Instagram: The joint responsibility agreement is available at: https://de-de.facebook.com/legal/terms/page_controller_addendum The essence of the contract can be found at: https://www.facebook.com/legal/terms/information_about_page_insights_data?locale2=en_EN&_rdr
- LinkedIn: The joint responsibility agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum
- TikTok: The joint responsibility agreement is available at :https://www.tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum/en
- Youtube: The joint responsibility agreement is available at :https://business.safety.google/controllerterms/
(2) Legal basis: Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest. The legitimate interest pursued by us lies in establishing contact with (potential) customers and interested parties, the external presentation of our company and the provision of information about our products and services.
(3) Recipients: Information on the recipients of the data can be found in the following sections of the respective social media providers.
(4) Duration of storage: We do not store any personal data that is processed in the social media networks on our servers.
(5) Mandatory or required provision: The provision of your data is voluntary. If you would like to interact with us, there are alternative ways to contact us, for example by e-mail and telephone.
(6) Third country transfer: Information on the transfer of data to countries outside the EU/EEA can be found in the sections of the respective social media providers below.
(7) Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below. You also have the option of lodging an objection with the respective platform operator:
- Facebook and Instagram: https://www.facebook.com/help/contact/1994830130782319
- LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out and https://www.linkedin.com/help/linkedin/answer/a1338610/widerspruch-gegen-die-datenverarbeitung-einschrankung-der-datenverarbeitung?lang=de
- TikTok:https://www.tiktok.com/legal/report/privacy
- Youtube: https://myaccount.google.com/intro/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=pp_body&hl=en and https://support.google.com/policies/answer/9581826?hl=de&visit_id=638180071003734036-4215394538&rd=1
a. Facebook and Instagram
We operate a company page on Facebook and Instagram. The provider of the platforms is Meta Platforms Ireland Limited, "Meta" (4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland).
As a user, you use our company website and its functions at your own risk. This applies in particular to the interactive functions (e.g. commenting, sharing, liking). Meta processes personal data about your account, your IP address and the end devices you use. Cookies are also used to collect data.
If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyse your user behaviour and create a user profile corresponding to this behaviour. This user data is regularly processed for market research and (personalised) advertising purposes. If you want to avoid this, you should log out of your Facebook/Instagram profile or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. This will delete the Facebook/Instagram information that can be used to identify you directly. This allows you to use our Facebook/Instagram page without revealing your Facebook/Instagram ID. When you access interactive features of the page (like, comment, share, message, etc.), a Facebook/Instagram login screen will appear. Once you have logged in, Meta will recognise you as a specific user.
Further information about the processing of your data by Meta Ireland, in particular about the storage period and your rights, can be found in Meta's privacy policy, which you can view at https://www.facebook.com/privacy/policy/.
You can find information on how to change your data protection settings at https://www.facebook.com/help/instagram/196883487377501?cms_id=196883487377501.
If you wish to request information or exercise your user rights, you may do so either with us or directly with Meta.
Transfer to third countries: The recipient of the data is Meta Platforms Ireland Limited. Since its parent company, Meta Platforms Inc., is based in the United States, data transfers to the U.S. cannot be ruled out. Meta is certified under the EU-U.S. Data Privacy Framework and relies on the adequacy decision for data transfers to the U.S.
b. LinkedIn
We operate a company profile on LinkedIn. This platform is operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.
In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. LinkedIn does not provide us with any personal data. We only receive statistics and insights in anonymised form. It is also not possible for us to draw conclusions about individual members from the Page Insights information.
Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy at https://linkedin.com/legal/privacy-policy
In accordance with our agreement with LinkedIn, LinkedIn is responsible for responding to requests from data subjects. In this regard, you have the option of contacting LinkedIn online at https://www.linkedin.com/help/linkedin/ask/PPQ?lang=en or contacting LinkedIn using the contact details in the privacy policy. However, you can also contact us using the contact details provided on our website to exercise your rights in connection with the processing of personal data in the context of Page Insights. In this case, we will forward your enquiry to LinkedIn.
Transfer to third countries: The recipient of the data is LinkedIn Unlimited. Its parent company, LinkedIn Corporation, is based in the United States, meaning that a transfer of data to the U.S. cannot be ruled out. LinkedIn is certified under the EU-U.S. Data Privacy Framework and relies on the adequacy decision for data transfers to the U.S.
c. TikTok
We operate a company page on TikTok. TikTok is an online service for sharing photos and videos from the Chinese company ByteDance. For the European region, TikTok is provided by TikTok Technology Limited (registered office 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom). We use TikTok so that you can watch our TikTok videos and, if necessary, interact with the videos.
When you watch or interact with our TikTok videos, TikTok may collect information about your usage behaviour and your device. This may include data such as your IP address, browser type, operating system, location and other technical information. TikTok may also use cookies and similar technologies to collect information. If you are logged into your TikTok account, further information about you may be processed. This includes, for example, user information (such as name, date of birth and your email address) and data about your communication with other TikTok users. We only receive statistics and findings in anonymised form. It is also not possible for us to draw conclusions about individual members from the Page Insights information.
For more information on how TikTok processes personal data, please refer to TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=en
In accordance with our agreement with TikTok, TikTok is responsible for responding to requests from data subjects. In this context, you have the possibility to contact TikTok via TikTok's privacy web form available at https://www.tiktok.com/legal/report/privacy. You can also contact us to assert your rights in connection with the processing of personal data in the context of Page Insights by using the contact details provided on our website. In this case, we will forward your request to TikTok.
Transfers to third countries: TikTok is operated by the Chinese company ByteDance and is therefore subject to access by Chinese authorities. When using TikTok, personal data may be transferred to China, a third country without an adequacy decision. Under the Chinese Multi-Level Protection Scheme 2.0, Chinese companies are required to disclose data to Chinese authorities, granting them unrestricted access to company servers.
As a result, compliance with European data protection regulations cannot be fully guaranteed. Please note that we have no control over the further processing of your personal data by TikTok.
d. Youtube
We are also represented on YouTube to provide videos. YouTube is a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you use YouTube, your personal data is collected, transmitted, stored, shared and used by Google. Google analyses your user behaviour and creates a corresponding user profile, regardless of whether you have a Google account. This information can be used to tailor content or advertising to you.
YouTube collects data about actions that visitors perform on our channel. This is used to compile statistics about the use of our videos, which we receive in aggregated, i.e. anonymised, form. If you do not actively interact with our channel, e.g. by leaving a comment under a video, it is not possible for us to draw conclusions about individual channel visitors at any time.
If you are logged into your Google or YouTube account, YouTube can assign your surfing behaviour to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.
Further information on the processing of your data by Google, in particular on the storage period and your rights, can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en-US, which also applies to YouTube.
You can find information on how to change your data protection settings at https://policies.google.com/privacy.
If you wish to request information or exercise your user rights, you may do so either with us or directly with Google.
Transfer to third countries: The recipient of the data is Google Ireland Limited. Its parent company, Google LLC, is based in the United States, meaning that a transfer of data to the U.S. cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework and relies on the adequacy decision for data transfers to the U.S.
a. Google Tag Manager
We use Google Tag Manager (GTM) on our website, a service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Tag Manager allows us to centrally manage various tracking codes ("tags") via a user interface and efficiently integrate them into our website.
Nature of Processing
Google Tag Manager itself is not a tracking tool but serves as a platform for managing tracking tags. However, it processes meta-data necessary for operation and transmits it to Google servers.
Google Tag Manager processes the following personal data:
Meta-Data & Technical Information:
Tracking Services Loaded via GTM May Collect Additional Data, Including:
The use of these services depends on your consent via the Cookie Consent Tool.
Purpose of Processing
We use Google Tag Manager to:
Google Tag Manager itself does not store personal data on our website but transmits it directly to Google.
Third-Country Transfer & Safeguards
Google Tag Manager establishes a connection to Google servers in the USA upon loading to transmit meta-data, even if no other tracking services are activated. Since the USA is classified as a third country without an adequate level of data protection, there is a risk that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
Data Retention
If tracking services connected via GTM (e.g., Google Analytics, Google Ads) store data, the respective third-party providers’ retention periods apply. For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.
Withdrawal of Consent
You can withdraw your consent at any time via our Cookie Consent Banner. Additionally, you have the following options:
More information on Google's privacy policy: https://policies.google.com/privacy
b. Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
Google Analytics uses cookies and similar technologies to analyze your use of the website.
Nature of Processing
Google Analytics automatically pseudonymizes IP addresses. Within the EU and the EEA, your IP address is truncated before storage. Only in exceptional cases (e.g., technical delays) may the full IP address be transmitted to Google servers in the USA and pseudonymized there.
Google processes IP addresses for location determination but states that they are not permanently stored and are not linked to other Google services.
During your visit to our website, Google Analytics collects various data as so-called "events," including:
Additionally, the following technical information is processed:
Purpose of Processing
We use Google Analytics to better understand how users interact with our website and to optimize our online presence. The collected data helps us to:
This data allows us to customize content and features to better match our visitors' interests and improve user experience.
Third-Country Transfer & Safeguards
Due to data transmission to the USA, there is a risk that U.S. authorities may access your data without providing legal recourse. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google. You can view the SCCs here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
Duration of storage
User data collected by Google Analytics is stored for a period of 2 months and is then automatically deleted. Deletion occurs once per month.
Data linked to cookies, user identifiers (e.g., User-ID), or advertising IDs is also deleted after 2 months.Aggregated reports without personal data may be retained indefinitely.
Withdrawal of consent
You can revoke your consent at any time via our cookie consent banner. Additionally, you have the following options:
Google Signals (Google Analytics Feature)
If you have consented to personalized advertising, we use Google Signals as part of Google Analytics. This feature collects session data from users who are signed into their Google account and have enabled personalized ads.
These data can be linked to a cross-device user ID and enable:
Disabling Google Signals
You can disable personalized ads in your Google account settings: https://myadcenter.google.com/. Alternatively, you can revoke your consent via our cookie consent tool.
More information about Google’s privacy policy: https://policies.google.com/privacy
c. Google Ads
We use Google Ads, an advertising service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ads allows us to display targeted advertisements and measure the effectiveness of our advertising campaigns.
Nature of Processing
Google Ads is an online advertising platform that enables us to display ads in Google Search, YouTube, and the Google Display Network (websites, apps).
These functions rely on various technologies implemented through Google Ads:
Google Ads Tag (Pixel Tracking):
Google Ads Cookies & Similar Technologies:
Dynamic Remarketing & Audience Targeting:
Types of Data Processed by Google Ads
Technical Data:
Usage Data:
Pseudonymized Personal Data:
Purpose of Processing
Using Google Ads allows us to fine-tune our marketing strategies and ensure that ads are only shown to relevant users.
Third-Country Transfer & Safeguards
Since Google is headquartered in the United States, data may be transmitted to Google servers outside the EU. The USA is considered a third country without an adequate level of data protection under the GDPR, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google. You can view these SCCs here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
Duration of storage
For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.
Withdrawal of Consent
You can revoke your consent at any time via our cookie consent banner. Additionally, you have the following options:
More information on Google's privacy policy: https://policies.google.com/privacy
d. Youtube video plugins
We use plugins from the video platform YouTube, a service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland), on our website.
We embed YouTube videos directly into our website. In most cases, we use the YouTube "enhanced privacy mode" which prevents YouTube from setting cookies before the page is loaded.
Nature of Processing
When you watch a YouTube video on our website, Google processes various personal and technical data:
1. Technical Connection & Access Data:
2. User behaviour & video interaction:
3. Cookies & tracking technologies:
YouTube may set cookies or similar technologies to analyze your behavior across devices. These include:
Purpose of Processing
We integrate YouTube videos to:
Third-Country Transfer & Safeguards
Since YouTube is a Google service, your personal data may be transferred to Google servers outside the EU, particularly in the United States. The USA is considered a third country without an adequate level of data protection, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
Duration of storage
For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.
Withdrawal of Consent
If you want to disable YouTube cookies, you can do so via our Cookie Consent Tool or use the following opt-out options:
More information on Google's privacy policy: https://policies.google.com/privacy
7. TLS encryption:
We process personal data only to the extent permitted by data protection regulations. We also endeavour to take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.
Where we store or process personal data, this is done in a highly secure data centre. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by a firewall and virus protection. Back-up and recovery procedures as well as role and authorisation concepts are a matter of course for us.
Our employees are obliged to comply with the provisions of the GDPR and national data protection laws when handling data.
Right to object on a case-by-case basis
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision as defined in Article 4(4) of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.
Recipient of an objection
The objection can be made informally with the subject "Objection", stating your name, address or other identifying data, to the contact provided above.
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Version of 15.03.2025
