Google Tag Manager

Description of Service
This is a tag management system. With this the user can update measurement codes and related code fragments collectively known as tags on the users website or mobile app.

 

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

 

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Tag Management


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Pixel


Data Collected


This list represents all (personal) data that is collected by or through the use of this service.

 

Aggregated data about tag firing


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR

 

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted after 14 days of retrieval.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

United States of America, Singapore, Taiwan, Chile


Data Recipients
In the following the recipients of the data collected are listed.

 

Alphabet Inc., Google LLC, Google Ireland Limited

 

Click here to read the privacy policy of the data processor
policies.google.com/privacy

 

Click here to read the cookie policy of the data processor
policies.google.com/technologies/cookies

 

Click here to opt out from this processor across all domains
safety.google/privacy/privacy-controls/

 

Usercentrics Consent Management Platform

Description of Service
This is a consent management service. Usercentrics GmbH is used on the website as a processor for the purpose of consent management.

 

Processing Company

Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

 

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

datenschutz@usercentrics.com

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Compliance with legal obligations
Consent storage

 

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Local storage


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID
Time of consent
Consent type
Template version
Banner language


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. c GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The consent data (given consent and revocation of consent) are stored for three years. The data will then be deleted immediately.


Data Recipients
In the following the recipients of the data collected are listed.

 

Usercentrics GmbH


Click here to read the privacy policy of the data processor
https://usercentrics.com/privacy-policy/

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: Session
Non-cookie storage: no


Facebook Pixel

Description of Service
This is a Tracking technology offered by Facebook and used by other Facebook services such as Facebook Custom Audiences.

 

Processing Company

Facebook Ireland Limited
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Analytics
Marketing
Retargeting

 Tracking
Advertisement

 

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Cookies
Pixel


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

    Ads viewed
    Content viewed
    Device information
    Geographic location
    HTTP-header
    Interactions with advertisement, services, and products
    IP address
    Items clicked
    Marketing information
    Non-sensitive custom data
    Pages visited
    Pixel ID
    Referrer URL
    Success of marketing campaigns
    Usage data
    User behaviour
    Facebook cookie information
    Facebook user ID
    Usage/click behaviour
    Browser information


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

 

The data will be deleted the latest after 720 days.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

Singapore, United Kingdom, United States of America

 

Data Recipients
In the following the recipients of the data collected are listed.

 

Facebook Inc.
Facebook Ireland Limited


Click here to read the privacy policy of the data processor
https://www.facebook.com/privacy/explanation

 

Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: 1 year
Non-cookie storage: no


Facebook Social Plugins

Description of Service
This is a social plug-in from Facebook, which enables integration of Facebook content on third-party websites.

 

Processing Company

Facebook Ireland Limited
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

 

Data Purposes
This list represents the purposes of the data collection and processing.

    Integration of Facebook functions
    Advertisement
    Optimization
    Personalisation


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

    Cookies


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

    Usage data
    Browser information
    Date and time of visit
    Facebook user ID
    Websites visited
    HTTP-header


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

    Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

    European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The data will be deleted as soon as they are no longer needed for the processing purposes.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

Worldwide


Data Recipients
In the following the recipients of the data collected are listed.

 

Facebook Inc.
Facebook Ireland Limited


Click here to read the privacy policy of the data processor
https://www.facebook.com/privacy/explanation


Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies/


Click here to opt out from this processor across all domains
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

 

Google Ads

Description of Service
This is an advertising service.

 

Processing Company

Google Ireland Limited
Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

 

Data Purposes
This list represents the purposes of the data collection and processing.

    Advertisement
    Analytics
    Providing Service
    Statistics


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

    Cookies


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

    Ads viewed
    Cookie ID
    Date and time of visit
    Device information
    Geographic location
    IP address
    Search terms
    Ads shown
    Client ID
    Impressions
    Online identifiers
    Browser information


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

    Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

    European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The data will be deleted as soon as they are no longer needed for the processing purposes. Log data is anonymized after 9 months and cookie information is anonymized after 18 months.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

Chile, Singapore, United States of America, Taiwan


Data Recipients
In the following the recipients of the data collected are listed.

 

    Alphabet Inc., Google LLC, Google Ireland Limited


Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en


Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en


Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: 1 year
Non-cookie storage: no


Google Analytics

Description of Service
This is a web analytics service. With this the user can measure the advertising ROI as well as track Flash, video, and social networking sites and applications.

 

Processing Company

Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Marketing
Analytics


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Cookies
Pixel


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

    App updates
    Click path
    Date and time of visit
    Device information
    Downloads
    Flash version
    Location information
    IP address
    JavaScript support
    Pages visited
    Purchase activity
    Referrer URL
    Usage data
    Widget interactions
    Browser information


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The Retention Period depends on the type of the saved data. Each client can choose how long Google Analytics retains data before automatically deleting it.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

United States of America, Singapore, Chile, Taiwan

 

Data Recipients
In the following the recipients of the data collected are listed.

 

Google Ireland Limited, Alphabet Inc., Google LLC


Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en


Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en


Click here to opt out from this processor across all domains
https://tools.google.com/dlpage/gaoptout?hl=de

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: 2 years
Non-cookie storage: no


Google Fonts

Description of Service
This is a collection of fonts for commercial and personal use.

 

Processing Company

Google Ireland Limited
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Providing fonts


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

    IP address
    CSS request
    Aggregated usage numbers
    Font file requests
    Referrer URL


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The data will be deleted as soon as they are no longer needed for the processing purposes.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

Worldwide


Data Recipients
In the following the recipients of the data collected are listed.

 

    Alphabet Inc.
    Google LLC
    Google Ireland Limited


Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en


Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en


Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

 

gstatic.com

Description of Service
This is a domain used by Google to off-load static content to a different domain name in an effort to reduce bandwidth usage and increase network performance for the end user.

 

Processing Company

Alphabet Inc.
1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, United States of America


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Increasing network performance
Reducing bandwidth usage


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

JavaScript


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

    Images
    CSS


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. f GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

United States of America


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

Requests for CSS assets are cached for 1 day, font files are cached for one year. Some information retained until removed by the user, some expires after a specific period of time, some is retained until the user's Google Account is deleted.

 

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

Worldwide


Data Recipients
In the following the recipients of the data collected are listed.

 

Alphabet Inc.


Click here to read the privacy policy of the data processor
http://www.google.com/intl/de/policies/privacy/


Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en


Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: Session
Non-cookie storage: no


Hotjar

Description of Service
This is a web analytics service. With this service online behaviour and feedback of website visitors is revealed.

 

Processing Company

Hotjar Limited
Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

dpo@hotjar.com


Data Purposes
This list represents the purposes of the data collection and processing.

 

Analytics
Feedback


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Cookies


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

    Browser information
    Date and time of visit
    Device type
    Geographic location
    IP address
    Mouse movements
    Pages visited
    Referrer URL
    Screen resolution
    Unique device identifier
    Language information


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

Data will be deleted as soon as they are no longer needed for the processing purposes.


Data Recipients
In the following the recipients of the data collected are listed.

 

Hotjar Ltd.


Click here to read the privacy policy of the data processor
https://www.hotjar.com/legal/policies/privacy


Click here to read the cookie policy of the data processor
https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies


Click here to opt out from this processor across all domains
https://www.hotjar.com/legal/compliance/opt-out

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: 1 year
 Non-cookie storage: no


Twitter Button

Description of Service
This is a plug-in from Twitter.

 

Processing Company

Twitter International Company
One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland


Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

 

Data Purposes
This list represents the purposes of the data collection and processing.

 

Social Media
Providing a social media feed


Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

 

Cookies


Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

 

    Browser type
    Date and time of tweet
    Internet address where tweet button is located
    IP address
    Message content of tweet
    Operating system information


Legal Basis
In the following the required legal basis for the processing of data is listed.

 

Art. 6 para. 1 s. 1 lit. a GDPR


Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

 

European Union


Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

 

The data will be deleted as soon as they are no longer needed for the processing purposes.


Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

 

United States of America


Data Recipients
In the following the recipients of the data collected are listed.

 

Twitter International Company
Twitter, Inc.


Click here to read the privacy policy of the data processor
https://twitter.com/en/privacy


Click here to read the cookie policy of the data processor
https://help.twitter.com/en/rules-and-policies/twitter-cookies

 

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

Maximum age of cookie storage: 2 years
Non-cookie storage: no