Privacy policy

Table of contents

1.     Controller. 2

2.     Your rights as a data subject. 2

3.     General data processing on our website. 2

a.      Server log files. 2

b.      Contact Form... 3

4.     Cookies. 4

a.      Use of technically necessary cookies. 4

b.      Use of technically unnecessary cookies. 5

c.      Cookie consent management. 5

5.     Marketing communication. 6

a.      Online surveys. 6

6.     Social media channels. 7

a.      LinkedIn. 8

b.      YouTube. 9

7.     Third Party Tools. 9

a.      Google Tag Manager. 9

b.      Google Analytics. 11

c.      Google Ads. 12

d.      Google Enhanced Conversions. 14

e.      YouTube Video Plugins. 15

8.     TLS encryption: 17

9.     Information about your right to object pursuant to Art. 21 GDPR. 19

10.    Changes to our privacy policy: 19

 

The protection of your data and your privacy is very important to us. We want to ensure that your personal information is secure and that we comply with data protection laws. Below we explain how we handle your data. Exactly which data is processed and how we use it depends on which services you request or agree with us.

1. Controller

The controller within the meaning of data protection laws, in particular the GDPR, is:

Vileda GmbH

Im Technologiepark 19

69469 Weinheim

+49 6201 8087 1000

vileda.professional.export@fhp-ww.com

If you have any questions about data protection, please send us an e-mail or contact to: vileda.professional.export@fhp-ww.com

2. Your rights as a data subject

You can exercise the following rights at any time using the contact details provided:

  • Right to information (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to object (Art. 21 GDPR) and
  • Right to data portability (Art. 20 GDPR).

The limitations and exceptions under national laws apply, as well as any other exceptions or limitations provided for in the relevant data protection laws.

If you have given us your consent, you can revoke it at any time with effect for the future.

In addition, you have the right to lodge a complaint with the supervisory authority, e.g. with the competent supervisory authority of your place of residence or with the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

3. General data processing on our website

a. Server log files

  1. Type and purpose of processing: When you access our website without registering or otherwise providing information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, the referrer URL, the date and time of access and similar information.

They are processed in particular for the following purposes:

  • to ensure a smooth connection to the website,
  • to ensure the smooth use of our website,
  • to ensure and evaluate the security and stability of the system, in particular to detect misuse, and
  • to ensure the technically error-free presentation and optimisation of our website.

We do not use your data to draw conclusions about your identity. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

  1. Legal basis and legitimate interest: Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in enhancing the stability and functionality of our website, ensuring system security, and detecting potential misuse.
  2. Recipients: For the operation and maintenance of our website, we engage service providers who act as data processors on our behalf. These providers are contractually required to handle your data with strict confidentiality
  3. Duration of storage: The data is stored in the server log files in a form that makes it possible to identify the data subjects for a maximum period of 7 days  , unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, the server log files are stored until the security-relevant incident has been rectified and fully clarified.

  1. Third country transfer: Your data will not be transferred to a third country.
  2. Provision required or necessary: The provision of personal data is not required by law or contract. However, without the IP address and the cookie identifier, the service and functionality of our website cannot be guaranteed. In addition, individual services and/or content may not be available or may only be available to a limited extent.
  3. Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.

b. Contact Form

  1. Type and purpose of processing: Our website provides a contact form that allows users to reach us electronically. When a user submits a request via this form, the information entered in the input fields is transmitted to us and stored

The following data is also stored at the time the message is sent:

  • Date and time of the message
  • URL from which the message was sent
  • Name and Email

Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information about the servers involved in the e-mail communication.

You can also contact us using the telephone number provided. In this case, we collect log data containing your telephone number and the duration of the call. We do not record any calls.

Regardless of the type of communication you choose, we record the content of your enquiry. Your data will be stored for the purpose of personalised communication with you.

  1. Legal basis: The processing of data entered into the contact form is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR. Our legitimate interest in processing your data is to facilitate easy and efficient communication with us.

If you contact us to request a quote, the data entered in the contact form will be used to carry out pre-contractual measures on the basis of Art. 6 (1) (b) GDPR.

  1. Recipients: Our website is maintained by service providers who act as our data processors.

If you send us an enquiry about an offer, service providers used by us may receive data for these purposes if they require the data to fulfil their respective services (e.g. IT service providers, call centres).

  1. Duration of storage: The data will be deleted no later than 6 months after the enquiry has been processed. If a contractual relationship is established, we are subject to the statutory retention periods and delete your data after six to ten years.
  2. Third country transfer: Your data will not be transferred to a third country.
  3. Provision mandatory or required: The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the required data and the reason for the enquiry.
  4. Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.

4. Cookies

General information: A cookie is a small data file that is created when a website is visited and temporarily stored on the website user's system. When the user revisits the website, their browser sends the previously stored cookie back to the server, allowing it to analyze the retrieved information. In particular, cookies can make it easier to navigate a website.

Deletion of cookies: You can reject all cookie categories except for those that are technically necessary. To do this, click on the icon at the bottom left of your web browser and change the desired settings in the cookie consent banner that opens.. Please note that these setting must be configured separately for each device.

You can also delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

You can also prevent so-called scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser manufacturer (e.g. for Mozilla Firefox: https://addons.mozilla.org/en-GB/firefox/addon/noscript/).

a. Use of technically necessary cookies

  1. Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the browser making the request can still be identified after navigating to a different page. (e.g. language settings, login to secure areas of our website, shopping basket, electronic invoicing).

Technically necessary cookies help make a website functional by enabling essential features such as page navigation and access to secure areas. Some functions of our website cannot be provided without the use of cookies, as they require the browser to be recognized even after a page transition.

  1. Legal basis and legitimate interest: Processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our legitimate interest in the user-friendly design of our website.
  2. Recipients: We use technical service providers for the operation and maintenance of our website who act as our data processors. These service providers are contractually required to handle your data with strict confidentiality.
  3. Duration of storage: Details on the storage duration of cookies can be found in our Cookie Consent Tool, which you can access by clicking on the icon at the bottom left of the screen.
  4. Third country transfer: Your data will not be transferred to a third country.
  5. Provision required or necessary: The provision of personal data is neither required by law nor by contract. However, the service and functionality of our website cannot be guaranteed without this data. In addition, individual services and performances may not be available or may only be available to a limited extent.
  6. Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.

b. Use of technically unnecessary cookies

  1. Type and purpose of processing: We also use cookies on the website that enable us to analyse the surfing behaviour of users. The purpose of tracking, advertising and targeting cookies is to show users advertising offers that match their surfing behaviour. These cookies are stored in the user's browser to enable cross-session tracking. Since they remain in the browser (client) unless manually deleted, this method is also known as client-side cookie tracking.
  2. Legal basis and legitimate interest: The legal basis for this processing is in any case your consent, Art. 6(1)(a) GDPR and, insofar as data stored and processed via the tags on the end device, the national Cookie law applies.
  3. Recipients: Detailed information on the cookies and their providers can be found in the texts on the "Third Party Tools" used further down on this page.
  4. Duration of storage: Details on the storage duration of cookies can be found in our Cookie Consent Tool, which you can access by clicking on the icon at the bottom left of the screen.
  5. Third country transfer: Information on third country transfer can be found in the texts on the "Third Party Tools" used further down on this page. The processing of your data for the purpose of data transfer is based on your consent in accordance with Art. 49 (1)(a) GDPR.
  6. Provision required or necessary: The provision of personal data is neither legally nor contractually required. However, without this data, we will be unable to send you relevant advertising offers.
  7. Revocation of consent: You can revoke tracking and analysis cookies at any time in our consent banner and only visit the website with necessary cookies. Click on the icon at the bottom left of the screen and change the desired settings in the cookie consent banner that opens.

c. Cookie consent management

  1. Nature and purpose of processing: This website uses Usercentrics' cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document this consent in accordance with data protection regulations. When you visit our website, the following personal data is transmitted to Usercentrics:
  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your end device
  • Time of your visit to the website

In addition, Usercentrics stores a cookie in your browser in order to be able to assign the consents given or their revocation to you.

  1. Legal basis: Usercentrics is used to obtain the legally required consent for the use of cookies, Art. 6(1)(f) GDPR with balancing according the applicable Cookie law.
  2. Beneficiary: The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany. We have entered into a data processing agreement with Usercentrics to ensure that your data is handled confidentially
  3. Duration of storage: The data collected will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected by this.
  4. Third country transfer: Your data will not be transferred to a third country.
  5. Provision is mandatory or required: The provision of personal data is required by law.
  6. Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below.

5. Marketing communication

a. Online surveys

  1. Type and purpose of processing: Your personal data is processed in pseudonymised form as part of the survey. It is not possible for us to draw direct conclusions about your identity. The purpose of processing personal data as part of the surveys is, among other things, to increase customer satisfaction and optimise the shopping experience.

If the survey is linked to a special offer, e.g. a voucher, you will receive the corresponding voucher code at the end of the survey. Using this voucher code, only your participation in a survey can be traced back to you. The result will be made available to us in anonymised form.

  1. Legal basis and legitimate interest: If you are a customer or have subscribed to our newsletter and have not objected to the use of your data for advertising purposes, the processing is based on a legitimate interest, Art. 6 (1) (f) GDPR. We have a legitimate interest in increasing the satisfaction of our customers and optimising their shopping experience.
  2. Recipients: The recipients of the data may include technical service providers who act as processors to implement the survey. All service providers are contractually required to handle your data with strict confidentiality.
  3. Duration of storage: We do not link your responses to your identity; we only record that you have received a link to the survey.
  4. Third country transfer: Your data will not be transferred to a third country.
  5. Provision mandatory or required: The provision of your personal data is voluntary. If you choose not to participate in the customer survey, we will not be able to improve our services based on your anonymous responses. You may not be able to receive or use offers, such as vouchers, that are linked to participation in the customer survey.
  6. Objection: You have the right to object to the use of your address for the aforementioned advertising purposes at any time with effect for the future. You will find a corresponding contact in every cover letter. You can also revoke your consent via the other contact options provided on the website.

6. Social media channels

In the following section, you will find information on the company profiles that we maintain on various social media channels.

  1. General information: We are represented on various social networks. Below you will find information on the company profiles that we maintain on various social media channels. For information on the storage and use of your data as well as your rights and settings options to protect your privacy, please refer to the data protection information of the respective network operator.

We are represented in the following social networks:

  • LinkedIn
  • YouTube

We do not use social plugins or other interfaces on our websites, but link to our presence on the social media providers.

We have no influence on the processing of personal data by the social networks. For example, we have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. We therefore expressly point out that user data (e.g. personal information, IP address) is stored by the operators of the social media platforms in accordance with their data usage guidelines and used for business purposes.

We process your personal data when you contact us via our social media profiles by using the designated functions (e.g., messages, comments, posts) or accessing the content we provide (e.g., videos). If you reach out to us in this way, we process your publicly visible personal data (typically: username, profile picture, message content including any attached photos, as well as the date and time of the interaction) to respond to your inquiry or provide the requested content. Additionally, we process your personal data to promote our company externally and share information about our products.

Page Insights: The operators of the social media platforms provide us with usage statistics (so-called analysis services or page insights data) for our pages on the social media platforms. These statistics are based on the actions and interactions of our followers (e.g. likes, shares, comments, etc., the number of followers, access data for certain page areas, the reach of a post and demographic statistics about followers, including age, language, origin or interests). These statistics help us to do this:

  • Interaction with our followers and interested parties,
  • to understand the use and reach of our contributions,
  • evaluate content and determine usage preferences,
  • design our pages on the social media platforms to be as target group-orientated as possible.

Please note that we have no influence or access to the creation and processing of these usage statistics and the underlying data; this is the sole responsibility of the operator of the respective social media platform.

The information stored in the cookies is received, stored and processed by the operators of the respective social media platforms. This also includes services of the operator or operator group of the social media platforms as well as services of other companies that use the social media platforms and that are visited by the user. In addition, other entities such as partners or third parties on the social media platforms may also use cookies to provide services to the companies advertising on these platforms. More detailed information about the use of cookies by the operators can be found in their privacy policies, which we provide below in the information about the respective social media provider.

On this basis, we and the operators of the social media platforms are considered "joint controllers" within the meaning of the GDPR. Accordingly, we have concluded the necessary agreement in accordance with Art. 26 GDPR, insofar as the operator of the social media platform permits this:

YouTube: The joint responsibility agreement is available at: : https://business.safety.google/controllerterms/

  1. Legal basis: Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest. The legitimate interest pursued by us lies in establishing contact with (potential) customers and interested parties, the external presentation of our company and the provision of information about our products and services.
  2. Recipients: Information on the recipients of the data can be found in the following sections of the respective social media providers.
  3. Duration of storage: We do not store any personal data that is processed in the social networks on our servers.
  4. Mandatory or required provision: The provision of your data is voluntary. If you would like to interact with us, there are alternative ways to contact us, for example by e-mail and telephone.
  5. Third country transfer: Information on the transfer of data to countries outside the EU/EEA can be found in the sections of the respective social media providers below.
  6. Right to object: Please read the information on your right to object pursuant to Art. 21 GDPR below. You also have the option of lodging an objection with the respective platform operator:

a. LinkedIn

We operate a company profile on LinkedIn. This platform is operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.

In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn processes information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. LinkedIn does not provide us with any personal data. We only receive statistics and insights in anonymised form. It is also not possible for us to draw conclusions about individual members from the Page Insights information.

Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy at https://linkedin.com/legal/privacy-policy

You can find information on how to change your data protection settings at https://www.linkedin.com/help/linkedin/answer/a1337839.

In accordance with our agreement with LinkedIn, LinkedIn is responsible for responding to requests from data subjects. In this regard, you have the option of contacting LinkedIn online at  https://www.linkedin.com/help/linkedin/ask/PPQ?lang=en or contacting LinkedIn using the contact details in the privacy policy. However, you can also contact us using the contact details provided on our website to exercise your rights in connection with the processing of personal data in the context of Page Insights. In this case, we will forward your enquiry to LinkedIn.

Transfer to third countries: The recipient of the data is LinkedIn Unlimited. Its parent company, LinkedIn Corporation, is based in the United States, meaning that a transfer of data to the U.S. cannot be ruled out. LinkedIn is certified under the EU-U.S. Data Privacy Framework and relies on the adequacy decision for data transfers to the U.S.

 b. YouTube

We are also represented on YouTube to provide videos. YouTube is a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you use YouTube, your personal data is collected, transmitted, stored, shared and used by Google. Google analyses your user behaviour and creates a corresponding user profile, regardless of whether you have a Google account. This information can be used to tailor content or advertising to you.

YouTube collects data about actions that visitors perform on our channel. This is used to compile statistics about the use of our videos, which we receive in aggregated, i.e. anonymised, form. If you do not actively interact with our channel, e.g. by leaving a comment under a video, it is not possible for us to draw conclusions about individual channel visitors at any time.

If you are logged into your Google or YouTube account, YouTube can assign your surfing behaviour to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.

Further information on the processing of your data by Google, in particular on the storage period and your rights, can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en-US, which also applies to YouTube.

You can find information on how to change your data protection settings at https://policies.google.com/privacy.

If you wish to request information or exercise your user rights, you may do so either with us or directly with Google.

Transfer to third countries: The recipient of the data is Google Ireland Limited. Its parent company, Google LLC, is based in the United States, meaning that a transfer of data to the U.S. cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework and relies on the adequacy decision for data transfers to the U.S.

7. Third Party Tools

a. Google Tag Manager

We use Google Tag Manager (GTM) on our website, a service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Tag Manager allows us to centrally manage various tracking codes ("tags") via a user interface and efficiently integrate them into our website.

Nature of Processing

Google Tag Manager itself is not a tracking tool but serves as a platform for managing tracking tags. However, it processes meta-data necessary for operation and transmits it to Google servers.

  • Tag Management: GTM loads and manages tracking codes such as Google Analytics, Google Ads, Facebook Pixel, or other third-party services.
  • Event Tracking: GTM can track user actions (e.g., clicks, form submissions, scrolling behavior) and forward them to connected tracking services.
  • Data Transmission to Google Servers in the USA: When Google Tag Manager loads, a connection is established with Google servers, transmitting meta-data (including IP address).
  • Compliance with Cookie Policies: GTM can block or trigger specific tags based on your consent.
  • Google Tag Manager can process personal data (IP address) even without active tracking tags.

Google Tag Manager processes the following personal data:

Meta-Data & Technical Information:

  • User IP address (even if no tracking tags are active)
  • Browser and device information (e.g., operating system, screen resolution)
  • Referrer URL (previously visited website)
  • Tag execution data (e.g., which tags were loaded, loading time)

Tracking Services Loaded via GTM May Collect Additional Data, Including:

  • Google Analytics (page views, user interactions)
  • Google Ads (conversion tracking, remarketing)
  • Facebook Pixel (retargeting, advertising campaigns)
  • Other third-party tags

The use of these services depends on your consent via the Cookie Consent Tool.

Purpose of Processing

We use Google Tag Manager to:

  • Efficiently manage tracking tags.
  • Integrate analytics and marketing services correctly → Controlling Google Analytics, Google Ads & Co.
  • Improve website performance → Optimizing load times through dynamic tag management.

Google Tag Manager itself does not store personal data on our website but transmits it directly to Google.

Third-Country Transfer & Safeguards

Google Tag Manager establishes a connection to Google servers in the USA upon loading to transmit meta-data, even if no other tracking services are activated. Since the USA is classified as a third country without an adequate level of data protection, there is a risk that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Data Retention

If tracking services connected via GTM (e.g., Google Analytics, Google Ads) store data, the respective third-party providers’ retention periods apply. For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Withdrawal of Consent

You can withdraw your consent at any time via our Cookie Consent Banner. Additionally, you have the following options:

  • Disable Google Tag Manager & Tracking Services: Disable Google advertising tracking: https://myadcenter.google.com/
  • General deactivation of Google tracking: Use browser extensions such as "Privacy Badger" or "uBlock Origin".

More information on Google's privacy policy: https://policies.google.com/privacy

b. Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies and similar technologies to analyze your use of the website.

Nature of Processing

Google Analytics automatically pseudonymizes IP addresses. Within the EU and the EEA, your IP address is truncated before storage. Only in exceptional cases (e.g., technical delays) may the full IP address be transmitted to Google servers in the USA and pseudonymized there.

Google processes IP addresses for location determination but states that they are not permanently stored and are not linked to other Google services.

During your visit to our website, Google Analytics collects various data as so-called "events," including:

  • Page views
  • Session start and duration
  • User engagement (scroll behavior, clicks on external links)
  • Interactions with content (e.g., videos, downloads, internal searches)
  • Referrer URL (origin of your visit)
  • Viewed or clicked advertisements

Additionally, the following technical information is processed:

  • Your approximate location (region)
  • Truncated IP address
  • Browser type, device type, and screen resolution
  • Internet provider and operating system

Purpose of Processing

We use Google Analytics to better understand how users interact with our website and to optimize our online presence. The collected data helps us to:

  • Analyze user behavior: Which pages are visited? How long do users stay? Which content is most relevant?
  • Improve website functionality: Which devices, browsers, and screen sizes are used? Does the website function optimally for all users?
  • Measure website performance: How fast does the website load? Are there any technical errors or bottlenecks?
  • Evaluate marketing success: Through which sources (Google search, social media, advertisements) do users reach our website? Which campaigns are effective?

This data allows us to customize content and features to better match our visitors' interests and improve user experience.

Third-Country Transfer & Safeguards

Due to data transmission to the USA, there is a risk that U.S. authorities may access your data without providing legal recourse. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google. You can view the SCCs here:  https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Duration of storage

User data collected by Google Analytics is stored for a period of 2 months and is then automatically deleted. Deletion occurs once per month.

Data linked to cookies, user identifiers (e.g., User-ID), or advertising IDs is also deleted after 2 months. Aggregated reports without personal data may be retained indefinitely.

Withdrawal of consent

You can revoke your consent at any time via our cookie consent banner. Additionally, you have the following options:

Google Signals (Google Analytics Feature)

If you have consented to personalized advertising, we use Google Signals as part of Google Analytics. This feature collects session data from users who are signed into their Google account and have enabled personalized ads.

These data can be linked to a cross-device user ID and enable:

  • Cross-device analysis: Users can be analyzed across multiple devices.
  • Enhanced remarketing capabilities: Users can be targeted with personalized ads across platforms (Google Ads, YouTube).
  • Detailed demographic insights: Google enhances GA4 data with Google account information (e.g., age, gender, interests).

Disabling Google Signals

You can disable personalized ads in your Google account settings: https://myadcenter.google.com/. Alternatively, you can revoke your consent via our cookie consent tool.

More information about Google’s privacy policy: https://policies.google.com/privacy

c. Google Ads

We use Google Ads, an advertising service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ads allows us to display targeted advertisements and measure the effectiveness of our advertising campaigns.

Nature of Processing

Google Ads is an online advertising platform that enables us to display ads in Google Search, YouTube, and the Google Display Network (websites, apps).

  • Ad Display: When you search for specific terms on Google or visit certain websites, you may see one of our ads.
  • Conversion Tracking: If you click on one of our ads and perform a defined action (e.g., making a purchase or signing up), this is recorded as a "conversion."
  • Retargeting & Remarketing: If you visit our website but do not complete a conversion, Google may later show you personalized ads on other websites.

These functions rely on various technologies implemented through Google Ads:

Google Ads Tag (Pixel Tracking):

  • Embedded on our website to identify users who reach us via a Google ad.
  • Uses cookies or other identifiers (e.g., device ID, Google account) to recognize users.

Google Ads Cookies & Similar Technologies:

  • Google stores cookies on your device to analyze your user behavior.
  • These cookies help Google determine which ads are relevant to you.

Dynamic Remarketing & Audience Targeting:

  • Google categorizes users based on their interests or purchase behavior to serve more targeted ads.
  • This is done by matching data from other Google services (e.g., YouTube, Google Maps, Gmail).

Types of Data Processed by Google Ads

Technical Data:

  • IP address (truncated)
  • Browser and device information
  • Operating system and internet provider
  • Location data (if enabled)

Usage Data:

  • Which ads were viewed or clicked?
  • User behavior on the website after clicking an ad
  • Completed conversions (e.g., purchases, sign-ups)

Pseudonymized Personal Data:

  • Google uses pseudonymized identifiers (e.g., Google Ads ID, cookie IDs, device IDs).
  • If you are logged into your Google account, Google may link your data with other Google services.

Purpose of Processing

  • Efficient delivery of advertisements: Ads appear for users who are most likely interested.
  • Measurement of ad effectiveness: Tracking whether ads lead to conversions.
  • Optimization of advertising campaigns: Adjusting ads based on user behavior.
  • Remarketing & Retargeting: Re-engaging users who have previously visited our website.

Using Google Ads allows us to fine-tune our marketing strategies and ensure that ads are only shown to relevant users.

Third-Country Transfer & Safeguards

Since Google is headquartered in the United States, data may be transmitted to Google servers outside the EU. The USA is considered a third country without an adequate level of data protection under the GDPR, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google. You can view these SCCs here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Duration of storage

For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Withdrawal of Consent

You can revoke your consent at any time via our cookie consent banner. Additionally, you have the following options:

More information on Google's privacy policy: https://policies.google.com/privacy

 d. Google Enhanced Conversions

We use Google Enhanced Conversions, a service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). This technology is designed to improve the accuracy of conversion tracking in Google Ads.

Nature of Processing

Google Enhanced Conversions extends Google Ads conversion tracking by capturing additional data from users who complete a conversion and securely transmitting it to Google. This technology is implemented via Google Ads Tags or the Google Tag Manager (GTM) on our website.

When a user completes a conversion after clicking on a Google ad (e.g., making a purchase or submitting a form), the system can extract certain first-party data (e.g., email address, phone number, name) from form fields and securely encrypt it before transmitting it to Google.

Key Technical Details:

  • Data Collection: The Enhanced Conversions function captures conversion data using the Google Ads conversion tags embedded on our website.
  • Hashing Encryption: Before transmission to Google, personal data is hashed using the SHA-256 algorithm (a secure one-way encryption method).
  • Matching with Google Data: Google can match the encrypted data with existing Google account information to measure cross-device conversions more accurately.
  • No Plain Text Transmission: The data is never sent to Google in plain text and cannot be decrypted by us or any other third party.

Data Processed by Google Enhanced Conversions

Google Enhanced Conversions only processes data that users voluntarily enter on our website. This includes:

Hashed Personal Identification Data:

  • Email address
  • Phone number
  • Name
  • Postal address (if required)

Conversion Data:

  • Timestamp of the conversion
  • Type of conversion (e.g., purchase, lead, sign-up)
  • Order or transaction values

Technical Data:

  • Truncated IP address
  • Device information (browser, operating system)

The hashed values of these personal data points are matched with Google's databases to recognize conversions even when traditional cookie data is unavailable (e.g., when third-party cookies are blocked).

Purpose of Processing

Google Enhanced Conversions is used to improve the accuracy of Google Ads conversion tracking, particularly in the following cases:

  • Cross-device tracking → If a user clicks an ad on one device but completes the conversion on another, Google can still assign the conversion using the hashed data.
  • Improved ad optimization → The function helps to better analyze Google Ads campaigns and deliver more targeted advertising.
  • Tracking even with restricted cookies → If users block third-party cookies, Google can still detect conversions using the encrypted data.

The collected data is used exclusively to optimize ad delivery in Google Ads and is not used for direct identification of individual users.

Third-Country Transfer & Safeguards

Since Google is headquartered in the United States, hashed data may be transferred to Google servers in the USA. The USA is considered a third country without an adequate level of data protection under the GDPR, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google. You can view these SCCs here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Duration of storage

For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Withdrawal of Consent

You can revoke your consent at any time via our cookie consent banner. Additionally, you have the following options:

More information on Google's privacy policy: https://policies.google.com/privacy

e. YouTube Video Plugins

We use plugins from the video platform YouTube, a service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland), on our website.

We embed YouTube videos directly into our website. In most cases, we use the YouTube "Enhanced Privacy Mode," which prevents YouTube from setting cookies before the page is loaded.

Nature of Processing

When you watch a YouTube video on our website, Google processes various personal and technical data:

1. Technical Connection & Access Data:

  • IP address
  • Browser and device information (operating system, screen resolution)
  • Referrer URL (previously visited page)
  • Location information (if enabled)
  • Loading times and performance data

2. User Behavior & Video Interaction:

  • Playback behavior (e.g., start, pause, playback duration)
  • Videos watched
  • Interaction with YouTube elements (e.g., likes, comments, channel subscriptions)

3. Cookies & Tracking Technologies:

YouTube may set cookies or similar technologies to analyze your behavior across devices. These include:

  • Google tracking cookies (NID, PREF, VISITOR_INFO1_LIVE, YSC)
  • YouTube advertising cookies (IDE, DSID, 1P_JAR)
  • Session IDs for YouTube account users

Purpose of Processing

We integrate YouTube videos to:

  • Provide informative or entertaining content → Enhancing the user experience.
  • Display external media directly on our website → Embedding videos within our pages.
  • Increase the reach of our content → Users can share videos directly via YouTube.

Third-Country Transfer & Safeguards

Since YouTube is a Google service, your personal data may be transferred to Google servers outside the EU, particularly in the United States. The USA is considered a third country without an adequate level of data protection, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Google: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Duration of storage

For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Withdrawal of Consent

If you want to disable YouTube cookies, you can do so via our Cookie Consent Tool or use the following opt-out options:

More information on Google's privacy policy: https://policies.google.com/privacy

Nature of Processing

Microsoft Clarity is a web analytics tool that collects data on how visitors interact with our website using:

  • Session Recordings: Clarity records mouse movements, clicks, scroll behavior, and interactions with website elements.
  • Heatmaps: Clarity generates visual representations of which areas of the website are frequently clicked or viewed.
  • Technical Analysis: Captures browser and device properties to identify usability issues.
  • AI & Pattern Recognition: Clarity analyzes user behavior patterns and detects anomalies (e.g., frustration signals like rapid clicking or abrupt scrolling).

Microsoft Clarity processes various personal and technical data, including:

1. User Interactions & Behavior:

  • Mouse movements, clicks, scrolling behavior
  • Interactions with form fields (excluding text input)
  • Session start time and duration

2. Technical Information:

  • IP address (truncated or full, depending on location)
  • Browser and device information (operating system, screen resolution)
  • Referrer URL (previously visited page)
  • Loading times and website performance

3. Cookies & Tracking Technologies:

  • Microsoft Clarity uses cookies and session IDs to recognize returning users and analyze behavior across multiple sessions. For details on cookies, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Purpose of Processing

We use Microsoft Clarity to:

  • Improve website usability → Identify pain points and optimize navigation.
  • Analyze technical errors → Detect slow loading times or faulty elements.
  • Create heatmaps → Understand which content receives the most attention.
  • Identify behavior patterns → Analyze which user actions lead to drop-offs.

Third-Country Transfer & Safeguards

Microsoft Clarity processes data on servers in the EU and the USA. The USA is considered a third country without an adequate level of data protection, meaning that U.S. authorities may access your data. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses (SCCs) with Microsoft: https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses

Duration of storage

For details on cookie retention periods, please refer to our Cookie Consent Tool, accessible via the icon in the lower-left corner of the screen.

Withdrawal of Consent

If you wish to disable Microsoft Clarity, you can do so via our Cookie Consent Tool or use the following opt-out options:

More information on Microsoft's privacy policy: https://privacy.microsoft.com/en-us/privacystatement

8. TLS encryption:

We process personal data only to the extent permitted by data protection regulations. We also endeavour to take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.

Where we store or process personal data, this is done in a highly secure data centre. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by a firewall and virus protection. Back-up and recovery procedures as well as role and authorisation concepts are a matter of course for us.

Our employees are obliged to comply with the provisions of the GDPR and national data protection laws when handling data.

9. Information about your right to object pursuant to Art. 21 GDPR

Right to object on a case-by-case basis

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision as defined in Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.

Recipient of an objection

The objection can be made informally with the subject "Objection", stating your name, address or other identifying data, to the contact provided above.

10. Changes to our privacy policy:

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Version of 04.03.2025