data protection
We have written this data protection declaration (version 12/29/2020-211138720) to provide you with the requirements of the General Data Protection Regulation (EU) 2016/679 to explain what information we collect, how we use data and what choices you have as a visitor to this website.
Unfortunately, it is in the nature of things that these explanations sound very technical, but when creating them we tried to describe the most important things as simply and clearly as possible.
Cookies
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
What exactly are cookies?
Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. To be more precise, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser sends the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually because each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “malicious” things. Cookies also cannot access information on your PC.
For example, cookie data might look like this:
Surname: _ga
Value: GA1.2.1326744211.152211138720-6
Purpose of use: Differentiation of website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
- At least 4096 bytes per cookie
- At least 50 cookies per domain
- At least 3000 cookies in total
What types of cookies are there?
The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the data protection declaration. At this point we would like to briefly discuss the different types of HTTP cookies.
There are 4 types of cookies:
Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user puts a product in the shopping cart, then continues surfing on other pages and only later checks out. These cookies do not delete the shopping cart, even if the user closes their browser window.
Purposeful cookies
These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and behavior of the website on different browsers.
Targeting cookies
These cookies ensure better user experience. For example, entered locations, font sizes or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They serve to provide the user with individually tailored advertising. This can be very practical, but also very annoying.
Typically, when you first visit a website, you will be asked which of these types of cookies you would like to allow. And of course this decision is also saved in a cookie.
How can I delete cookies?
You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option of deleting cookies, deactivating them or only partially allowing them. For example, you can block third-party cookies but allow all other cookies.
If you would like to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can do this in your browser settings:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies
If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google using the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.
What about my data protection?
The so-called “Cookie Guidelines” have existed since 2009. This states that storing cookies requires your consent. However, there are still very different reactions to these guidelines within the EU countries. In Austria, however, this directive was implemented in Section 96 Paragraph 3 of the Telecommunications Act (TKG).
If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265 , the Request for Comments from the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.
Rights according to the General Data Protection Regulation
You are subject to the provisions of the GDPR and the Austrian law Data Protection Act (DSG) basically the following rights:
- Right to rectification (Article 16 GDPR)
- Right to erasure (“right to be forgotten”) (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to notification – obligation to notify in connection with the correction or deletion of personal data or the restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)
If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can complain to the supervisory authority, which in Austria is the data protection authority, whose website you can find at https://www.dsb.gv.at/ find.
Evaluation of visitor behavior
In the following data protection declaration we inform you whether and how we evaluate data from your visit to this website. The data collected is usually evaluated anonymously and we cannot identify you personally from your behavior on this website.
You can find out more about the options for objecting to this evaluation of visit data in the following data protection declaration.
TLS encryption with https
We use https to transmit data on the Internet in a secure manner (data protection through technical design Article 25 paragraph 1 GDPR ). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transfer protection by the small lock symbol at the top left of the browser and the use of the https scheme (instead of http) as part of our internet address.
Google Fonts privacy policy
We use Google Fonts on our website. These are the “Google fonts” from Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
You do not need to register or provide a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts/fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google Account, you do not need to worry that your Google Account information will be transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We will take a closer look at what data storage looks like.
What are Google Fonts?
Google Fonts (formerly Google Web Fonts) is a directory with over 800 fonts that Google makes it available to your users for free.
Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses.
Why do we use Google Fonts on our website?
With Google Fonts we can use fonts on our own website and do not have to upload them to our own server. Google Fonts is an important component in keeping the quality of our website high. All Google fonts are automatically optimized for the web and this saves data volume and is a big advantage, especially for use on mobile devices. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can visually distort some texts or entire websites. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We use Google Fonts so that we can display our entire online service as beautifully and consistently as possible.
What data does Google store?
When you visit our website, the fonts are downloaded via a Google server. Through this external call, data is transmitted to the Google servers. This is how Google also recognizes that you or your IP address visits our website. The Google Fonts API is designed to reduce the use, storage, and collection of end-user data to what is necessary for proper font delivery. By the way, API stands for “Application Programming Interface” and serves, among other things, as a data transmitter in the software sector.
Google Fonts stores CSS and font requests securely on Google and is therefore protected. By collecting usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis sites, such as Google Analytics. Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in the Google Fonts BigQuery database. Entrepreneurs and developers use the Google web service BigQuery to examine and move large amounts of data.
However, it should also be remembered that with every Google Font request, information such as language settings, IP address, browser version, browser screen resolution and browser name are automatically transmitted to the Google servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google.
How long and where is the data stored?
Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use the fonts using a Google stylesheet. A style sheet is a format template that you can use to quickly and easily change the design or font of a website, for example.
The font files are stored by Google for one year. Google's goal is to fundamentally improve the loading time of websites. When millions of websites reference the same fonts, they are cached after the first visit and immediately appear on all other websites visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.
How can I delete my data or prevent data storage?
The data that Google stores for a day or a year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. In order to delete this data early, you must contact Google Support https://support.google.com/?hl=de&tid=211138720 to contact. In this case, you can only prevent data storage if you do not visit our site.
Unlike other web fonts, Google allows us unlimited access to all fonts. So we have unlimited access to a sea of fonts and get the best for our website. You can find out more about Google Fonts and other questions at https://developers.google.com/fonts/faq?tid=211138720 . Although Google addresses data protection-related matters there, it does not contain any really detailed information about data storage. It is relatively difficult to get really precise information about stored data from Google.
You can also see which data is generally collected by Google and what this data is used for https://www.google.com/intl/de/policies/privacy/ read up.
Google Analytics privacy policy
On our website we use the analysis tracking tool Google Analytics (GA) from the American company Google Inc. For Europe, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, if you click on a link, this action will be saved in a cookie and sent to Google Analytics. The reports we receive from Google Analytics allow us to better tailor our website and service to your needs. Below we will go into more detail about the tracking tool and, above all, inform you about what data is stored and how you can prevent this.
What is Google Analytics?
Google Analytics is a tracking tool that is used to analyze traffic on our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions that you take on our website. As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.
Google processes the data and we receive reports about your user behavior. These may include, among others, the following reports:
- Target group reports: Through target group reports we get to know our users better and know more precisely who is interested in our service.
- Display Reports: Display reports make it easier for us to analyze and improve our online advertising.
- Acquisition reports: Acquisition reports give us helpful information about how we can attract more people to our service.
- Behavioral reports: This is where we learn how you interact with our website. We can track the route you take on our site and which links you click on.
- Conversion reports: Conversion is the process in which you take a desired action based on a marketing message. For example, when you go from being just a website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts are being received by you. This is how we want to increase our conversion rate.
- Real-time reports: Here we always find out immediately what is happening on our website. For example, we can see how many users are currently reading this text.
Why do we use Google Analytics on our website?
Our goal with this website is clear: we want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.
The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that interested people can find it more easily on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to offer you the best possible service. The data also helps us to carry out our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.
What data does Google Analytics store?
Google Analytics creates a random, unique ID associated with your browser cookie using a tracking code. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a “returning” user. All collected data is stored together with this user ID. This is how it is possible to evaluate pseudonymous user profiles.
Identifiers such as cookies and app instance IDs measure your interactions on our website. Interactions are all types of actions that you take on our website. If you also use other Google systems (such as a Google account), data generated via Google Analytics may be linked to third-party cookies. Google does not pass on Google Analytics data unless we as website operators authorize this. Exceptions may occur if required by law.
The following cookies are used by Google Analytics:
Surname: _ga
Value: 2.1326744211.152211138720-5
Purpose of use: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to distinguish website visitors.
Expiry Date: after 2 years
Surname: _gid
Value: 2.1687193234.152211138720-1
Purpose: The cookie is also used to distinguish website visitors
Expiry date: after 24 hours
Surname: _gat_gtag_UA_
Value: 1
Purpose of use: Used to reduce request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_.
Expiry Date: after 1 minute
Surname: AMP_TOKEN
Value: not specified
Purpose of use: The cookie has a token that can be used to retrieve a User ID from the AMP Client ID service. Other possible values indicate a logout, a request, or an error.
Expiry date: after 30 seconds up to one year
Surname: __utma
Value: 1564498958.1564498958.1564498958.1
Purpose of use: This cookie is used to track your behavior on the website and measure performance. The cookie is updated each time information is sent to Google Analytics.
Expiry Date: after 2 years
Surname: __utmt
Value: 1
Purpose of use: The cookie is used like _gat_gtag_UA_ to throttle the request rate.
Expiry date: after 10 minutes
Surname: __utmb
Value: 10/3/1564498958
Purpose of use: This cookie is used to determine new sessions. It is updated every time new data or information is sent to Google Analytics.
Expiry date: after 30 minutes
Surname: __utmc
Value: 167421564
Purpose of use: This cookie is used to set new sessions for returning visitors. This is a session cookie and is only stored until you close the browser again.
Expiry Date: After closing the browser
Surname: __utmz
Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose of use: The cookie is used to identify the source of traffic to our website. This means that the cookie stores where you came to our website from. This could have been another page or an advertisement.
Expiry Date: after 6 months
Surname: __utmv
Value: not specified
Purpose of use: The cookie is used to store custom user data. It is always updated when information is sent to Google Analytics.
Expiry Date: after 2 years
Note: This list cannot claim to be complete, as Google continually changes its choice of cookies.
Here we show you an overview of the most important data collected with Google Analytics:
Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas you click on. This gives us information about where you are on our site.
Session duration: Google refers to the time that you spend on our site without leaving the site as session duration. If you have been inactive for 20 minutes, the session ends automatically.
Bounce rate Bounce rate is when you only view one page on our website and then leave our website again.
Account creation: If you create an account or place an order on our website, Google Analytics collects this data.
IP address: The IP address is only shown in abbreviated form so that a clear assignment is not possible.
Location: The country and your approximate location can be determined via the IP address. This process is also known as IP location determination.
Technical information: Technical information includes, but is not limited to, your browser type, your Internet provider or your screen resolution.
Source of origin: Of course, Google Analytics and we are also interested in which website or advertising you came to our site from.
Other data includes contact details, any reviews, playing media (e.g. when you play a video via our site), sharing content via social media or adding it to your favorites. The list does not claim to be complete and only serves as a general guide to data storage by Google Analytics.
How long and where is the data stored?
Google has its servers spread all over the world. Most servers are located in America and therefore your data is usually stored on American servers. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/inside/locations/?hl=de
Your data is distributed on different physical storage media. This has the advantage that the data can be accessed more quickly and is better protected against manipulation. Every Google data center has appropriate emergency programs for your data. For example, if Google's hardware fails or natural disasters paralyze servers, the risk of service disruption at Google remains low.
Google Analytics has a standardized retention period of 26 months for your user data. Your user data will then be deleted. However, we have the option to choose the retention period of user data ourselves. We have five variants available to us:
- Deletion after 14 months
- Deletion after 26 months
- Deletion after 38 months
- Deletion after 50 months
- No automatic deletion
Once the specified period has expired, the data will be deleted once a month. This retention period applies to your data linked to cookies, user recognition and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a fusion of individual data into a larger unit.
How can I delete my data or prevent data storage?
Under European Union data protection law, you have the right to access, update, delete or restrict your data. Use the Google Analytics JavaScript Opt-out Browser Add-on (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data. You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de download and install. Please note that this add-on only deactivates data collection by Google Analytics.
If you generally want to deactivate, delete or manage cookies (independently of Google Analytics), there are separate instructions for each browser:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies
Google Analytics is an active participant in the EU-US Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=211138720 . We hope we were able to provide you with the most important information about data processing by Google Analytics. If you want to find out more about the tracking service, we recommend these two links: http://www.google.com/analytics/terms/de.html and https://support.google.com/analytics/answer/6004245?hl=de .
Google Analytics IP anonymization
We have implemented IP address anonymization from Google Analytics on this website. This function was developed by Google so that this website can comply with the applicable data protection regulations and recommendations of the local data protection authorities if they prohibit the storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed.
You can find more information about IP anonymization at https://support.google.com/analytics/answer/2763052?hl=de .
Google Analytics reports on demographics and interests
We have activated the advertising reporting functions in Google Analytics. Demographics and interests reports include information about age, gender, and interests. This allows us to get a better picture of our users - without being able to assign this data to individual people. You can find out more about the advertising functions on https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad .
You can control the use of your Google Account activities and information under “Ad Settings”. https://adssettings.google.com/authenticated end with checkbox.
Google Analytics deactivation link
If you click on the following Deactivation link If you click, you can prevent Google from recording further visits to this website. Attention: Deleting cookies, using the incognito/private mode of your browser, or using a different browser will result in data being collected again.
Google Analytics Google Signals Privacy Policy
We have activated Google signals in Google Analytics. This will update existing Google Analytics features (advertising reporting, remarketing, cross-device reporting, and interest and demographic reporting) to receive aggregated and anonymized data from you if you have allowed personalized ads in your Google Account.
The special thing about it is that it involves cross-device tracking. This means your data can be analyzed across devices. By activating Google signals, data is collected and linked to the Google account. For example, Google can recognize if you view a product on our website using a smartphone and then later purchase the product using a laptop. Thanks to the activation of Google Signals, we can launch cross-device remarketing campaigns that would otherwise not be possible in this form. Remarketing means that we can also show you our offerings on other websites.
Google Analytics also collects other visitor data such as location, search history, YouTube history and data about your actions on our website through Google signals. This gives us better advertising reports and more useful information about your interests and demographics from Google. This includes your age, what language you speak, where you live or what gender you are. There are also social criteria such as your job, marital status or income. All of these features help Google Analytics define groups of people or target groups.
The reports also help us to better assess your behavior, wishes and interests. This allows us to optimize and adapt our services and products for you. By default, this data expires after 26 months. Please note that this data collection only occurs if you have allowed personalized advertising in your Google account. This is always aggregated and anonymous data and never individual data. You can manage or delete this data in your Google account.
Google Analytics addition to data processing
We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in Google Analytics.
You can find out more about the addition to data processing for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad
Facebook Pixel Privacy Policy
We use the Facebook pixel from Facebook on our website. We have implemented code for this on our website. The Facebook pixel is a snippet of JavaScript code that loads a collection of functions that allow Facebook to track your user actions if you came to our website via Facebook Ads. For example, if you purchase a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies enable Facebook to compare your user data (customer data such as IP address, user ID) with the data from your Facebook account. Then Facebook deletes this data again. The data collected is anonymous and cannot be viewed by us and can only be used to place advertisements. If you are a Facebook user and are logged in, your visit to our website will automatically be assigned to your Facebook user account.
We only want to show our services and products to those people who are really interested in them. With the help of Facebook pixels, our advertising measures can be better tailored to your wishes and interests. This means that Facebook users (if they have allowed personalized advertising) see appropriate advertising. Facebook also uses the data collected for analysis purposes and its own advertisements.
Below we will show you the cookies that were set by integrating Facebook pixels on a test page. Please note that these are just example cookies. Depending on the interaction on our website, different cookies are set.
Surname: _fbp
Value: fb.1.1568287647279.257405483-6211138720-7
Purpose of use: This cookie is used by Facebook to display advertising products.
Expiry Date: after 3 months
Name: fr
Value: 0aPf312HOS5Pboo2r..Bdeiuf…1.0.Bdeiuf.
Purpose of use: This cookie is used so that Facebook Pixel works properly.
Expiry Date: after 3 months
Surname: comment_author_50ae8267e2bdf1253ec1a5769f48e062211138720-3
Value: Author's name
Purpose of use: This cookie stores the text and name of a user who, for example, leaves a comment.
Expiry Date: after 12 months
Surname: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062
Value: https%3A%2F%2Fwww.testseite…%2F (author’s URL)
Purpose of use: This cookie stores the URL of the website that the user enters in a text field on our website.
Expiry Date: after 12 months
Surname: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062
Value: Author email address
Purpose of use: This cookie stores the user's email address if they have provided it on the website.
Expiry Date: after 12 months
Note: The cookies mentioned above relate to individual user behavior. Changes on Facebook can never be ruled out, especially when it comes to the use of cookies.
If you are logged in to Facebook, you can change your advertising settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen change yourself. If you are not a Facebook user, you can go to http://www.youronlinechoices.com/de/praferenzmanagement/ basically manage your usage-based online advertising. There you have the option to deactivate or activate providers.
If you would like to learn more about Facebook's data protection, we recommend that you consult the company's own data policies https://www.facebook.com/policy.php .
Facebook Automatic Advanced Matching Privacy Policy
We have also activated Automatic Advanced Matching as part of the Facebook Pixel function. This function of the pixel allows us to send hashed emails, names, gender, city, state, zip code and date of birth or telephone number to Facebook as additional information, if you have provided this data to us. This activation allows us to tailor advertising campaigns on Facebook even more precisely to people who are interested in our services or products.
Google Tag Manager privacy policy
For our website we use the Google Tag Manager from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This Tag Manager is one of Google's many helpful marketing products. Using Google Tag Manager, we can centrally install and manage code sections from various tracking tools that we use on our website.
In this data protection declaration we would like to explain to you in more detail what Google Tag Manager does, why we use it and in what form data is processed.
What is Google Tag Manager?
Google Tag Manager is an organizational tool that allows us to integrate and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record (track) your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our site. The tags often come from Google's internal products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. You can collect browser data, feed marketing tools with data, embed buttons, set cookies and also track users across multiple websites.
Why do we use Google Tag Manager for our website?
As the saying goes: organization is half the battle! And of course this also applies to the maintenance of our website. In order to make our website as good as possible for you and everyone who is interested in our products and services, we need various tracking tools such as Google Analytics. The data collected by these tools shows us what interests you most, where we can improve our services and which people we should show our offers to. And in order for this tracking to work, we have to integrate appropriate JavaScript code into our website. In principle, we could incorporate each code section of the individual tracking tools separately into our source code. However, this takes a relatively long time and it is easy to lose track. That's why we use Google Tag Manager. We can easily install the necessary scripts and manage them from one place. In addition, the Google Tag Manager offers an easy-to-use user interface and no programming knowledge is required. This is how we manage to keep order in our daily jungle.
What data is stored by Google Tag Manager?
The Tag Manager itself is a domain that does not set cookies and does not store any data. It acts as a mere “manager” of the implemented tags. The data is recorded by the individual tags of the different web analysis tools. The data is essentially passed through to the individual tracking tools in Google Tag Manager and is not stored.
However, things look completely different with the integrated tags of the various web analysis tools, such as Google Analytics. Depending on the analysis tool, various data about your web behavior is usually collected, stored and processed with the help of cookies. Please read our data protection texts on the individual analysis and tracking tools that we use on our website.
In the Tag Manager account settings, we have allowed Google to receive anonymized data from us. However, this only concerns the use and use of our tag manager and not your data, which is stored via the code sections. We enable Google and others to receive selected data in anonymized form. We therefore agree to the anonymous transfer of our website data. Despite extensive research, we were unable to find out exactly which summarized and anonymous data is forwarded. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking involves comparing your own results with those of your competitors. Processes can be optimized based on the information collected.
How long and where is the data stored?
If Google stores data, this data is stored on Google's own servers. The servers are distributed all over the world. Most are in America. Under https://www.google.com/about/datacenters/inside/locations/?hl=de you can read exactly where the Google servers are located.
You can find out how long the individual tracking tools store your data in our individual data protection texts for the individual tools.
How can I delete my data or prevent data storage?
The Google Tag Manager itself does not set cookies, but rather manages tags from various tracking websites. In our data protection texts for the individual tracking tools, you will find detailed information on how you can delete or manage your data.
Google is an active participant in the EU-US Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&tid=211138720 . If you want to find out more about Google Tag Manager, we recommend the FAQs below https://www.google.com/intl/de/tagmanager/faq.html .
Google Ads (Google AdWords) Conversion Tracking Privacy Policy
We use Google Ads (formerly Google AdWords) as an online marketing measure to advertise our products and services. We want to make more people aware of the high quality of our offerings on the Internet. As part of our advertising measures through Google Ads, we use conversion tracking from Google Inc. on our website. In Europe, however, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This free tracking tool allows us to better tailor our advertising offerings to your interests and needs. In the following article we want to go into more detail about why we use conversion tracking, what data is stored and how you can prevent this data storage.
What is Google Ads Conversion Tracking?
Google Ads (formerly Google AdWords) is the in-house online advertising system of Google Inc. We are convinced of the quality of our offering and want as many people as possible to get to know our website. Google Ads offers the best platform for this online. Of course, we also want to gain a precise overview of the cost-benefit factor of our promotions. That's why we use the Google Ads conversion tracking tool.
But what is a conversion actually? A conversion occurs when you go from being a purely interested website visitor to taking action. This always happens when you click on our ad and then carry out another action, such as visiting our website. We use Google's conversion tracking tool to record what happens after a user clicks on our Google Ads ad. For example, we can see whether products are purchased, services are used or whether users have signed up for our newsletter.
Why do we use Google Ads conversion tracking on our website?
We use Google Ads to draw attention to our offer on other websites. The aim is to ensure that our advertising campaigns only reach those people who are interested in our offers. With the conversion tracking tool we see which keywords, ads, ad groups and campaigns lead to the desired customer actions. We see how many customers interact with our ads on a device and then convert. This data allows us to calculate our cost-benefit factor, measure the success of individual advertising measures and consequently optimize our online marketing measures. We can also use the data obtained to make our website more interesting for you and adapt our advertising offerings even more individually to your needs.
What data is stored in Google Ads conversion tracking?
We have integrated a conversion tracking tag or code snippet on our website in order to better analyze certain user actions. If you click on one of our Google Ads advertisements, the “Conversion” cookie from a Google domain will be stored on your computer (usually in the browser) or mobile device. Cookies are small text files that store information on your computer.
Here is the data for the most important cookies for Google conversion tracking:
Surname: Conversion
Value: EhMI_aySuoyv4gIVled3Ch0llweVGAEgt-mr6aXd7dYlSAGQ211138720-3
Purpose of use: This cookie stores every conversion you make on our site after coming to us via a Google Ad.
Expiry Date: after 3 months
Surname: _gac
Value: 1.1558695989.EAIaIQobChMIiOmEgYO04gIVj5AYCh2CBAPrEAAYASAAEgIYQfD_BwE
Purpose: This is a classic Google Analytics cookie and is used to record various actions on our website.
Expiry Date: after 3 months
Annotation: The cookie _gac only appears in connection with Google Analytics. The above list does not claim to be complete, as Google often uses other cookies for analytical evaluations.
As soon as you complete an action on our website, Google recognizes the cookie and saves your action as a so-called conversion. As long as you surf our website and the cookie has not yet expired, we and Google recognize that you found us via our Google Ads ad. The cookie is read and sent back to Google Ads with the conversion data. It is also possible that other cookies are used to measure conversions. Google Ads conversion tracking can be further refined and improved using Google Analytics. Ads that Google displays in various locations on the web may set cookies called “__gads” or “_gac” under our domain. Since September 2017, various campaign information has been stored by analytics.js using the _gac cookie. The cookie stores this data as soon as you visit one of our pages for which the automatic tagging of Google Ads has been set up. In contrast to cookies that are set for Google domains, Google can only read these conversion cookies when you are on our website. We do not collect or receive any personal data. We receive a report from Google with statistical evaluations. For example, we find out the total number of users who clicked on our ad and we see which advertising measures were well received.
How long and where is the data stored?
At this point we would like to point out that we have no influence on how Google uses the data collected. According to Google, the data is encrypted and stored on secure servers. In most cases, conversion cookies expire after 30 days and do not transmit any personal data. The cookies named “Conversion” and “_gac” (which is used in conjunction with Google Analytics) have an expiration date of 3 months.
How can I delete my data or prevent data storage?
You have the option not to participate in Google Ads conversion tracking. If you deactivate the Google conversion tracking cookie via your browser, you will block conversion tracking. In this case, you will not be included in the tracking tool's statistics. You can change the cookie settings in your browser at any time. This works a little differently for every browser. Here you will find instructions on how to manage cookies in your browser:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies
If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow the cookie or not. By downloading and installing this browser plugin on https://support.google.com/ads/answer/7395996 All “advertising cookies” are also deactivated. Remember that disabling these cookies will not prevent ads, only personalized advertising.
Through certification for the American-European data protection agreement “Privacy Shield”, the American company Google LLC must comply with the data protection laws applicable in the EU. If you would like to find out more about data protection at Google, we recommend Google's general data protection declaration: https://policies.google.com/privacy?hl=de .
YouTube privacy policy
We have integrated YouTube videos on our website. This means we can present you interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you access a page on our website that has an embedded YouTube video, your browser automatically connects to the YouTube or Google servers. Various data is transferred (depending on the settings). Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in Europe.
Below we would like to explain to you in more detail what data is processed, why we have integrated YouTube videos and how you can manage or delete your data.
What is YouTube?
On YouTube, users can watch, rate, comment and upload videos for free. Over the last few years, YouTube has become one of the most important social media channels worldwide. So that we can display videos on our website, YouTube provides a code snippet that we have integrated into our site.
Why do we use YouTube videos on our website?
YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. And of course interesting videos shouldn't be missing. With the help of our embedded videos, we provide you with other helpful content in addition to our texts and images. In addition, our website is easier to find on the Google search engine thanks to the embedded videos. Even if we place advertisements via Google Ads, thanks to the data collected, Google can only show these advertisements to people who are interested in our offers.
What data does YouTube store?
As soon as you visit one of our pages that has a YouTube video installed, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged in to your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Other data may include contact details, any reviews, sharing content on social media or adding it to your favorites on YouTube.
If you are not signed in to a Google account or a YouTube account, Google stores data with a unique identifier associated with your device, browser or app. For example, your preferred language setting is retained. But much interaction data cannot be stored because fewer cookies are set.
In the following list we show cookies that were set in the browser in a test. On the one hand, we show cookies that are set without a logged in YouTube account. On the other hand, we show cookies that are set when the account is logged in. The list cannot claim to be complete because user data always depends on interactions on YouTube.
Surname: YSC
Value: b9-CV6ojI5Y211138720-1
Purpose of use: This cookie registers a unique ID to store statistics of the video viewed.
Expiry Date: after the end of the meeting
Surname: PREF
Value: f1=50000000
Purpose of use: This cookie also registers your unique ID. Google receives statistics about how you use YouTube videos on our website via PREF.
Expiry Date: after 8 months
Surname: GPS
Value: 1
Purpose of use: This cookie registers your unique ID on mobile devices to track GPS location.
Expiry date: after 30 minutes
Surname: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Purpose of use: This cookie tries to estimate the user's bandwidth on our websites (with built-in YouTube videos).
Expiry date: after 8 months
Other cookies that are set when you are logged in to your YouTube account:
Surname: APISID
Value: zILLlvClZSkqGsSwI/AU1aZI6HY7211138720-
Purpose of use: This cookie is used to create a profile about your interests. The data is used for personalized advertisements.
Expiry Date: after 2 years
Surname: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose of use: The cookie stores the status of a user's consent to the use of various Google services. CONSENT also serves security purposes to check users and protect user data from unauthorized attacks.
Expiry Date: after 19 years
Surname: HSID
Value: AcRwpgUik9Dveht0I
Purpose of use: This cookie is used to create a profile about your interests. This data helps to display personalized advertising.
Expiry date: after 2 years
Surname: LOGIN_INFO
Value: AFmmF2swRQIhALLl6aL…
Purpose of use: This cookie stores information about your login data.
Expiry date: after 2 years
Surname: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Purpose of use: This cookie works by uniquely identifying your browser and device. It is used to create a profile about your interests.
Expiry date: after 2 years
Surname: SID
Value: oQfNKjAsI211138720-
Purpose of use: This cookie stores your Google account ID and your last login time in a digitally signed and encrypted form.
Expiry date: after 2 years
Surname: SIDCC
Value: AN0-TYuqub2JOcDTyL
Purpose of use: This cookie stores information about how you use the website and what advertising you may have seen before visiting our site.
Expiry date: after 3 months
How long and where is the data stored?
The data that YouTube receives and processes from you is stored on Google servers. Most of these servers are located in America. Under https://www.google.com/about/datacenters/inside/locations/?hl=de see exactly where the Google data centers are located. Your data is distributed across the servers. This means that the data can be accessed more quickly and is better protected against manipulation.
Google stores the data collected for different lengths of time. You can delete some data at any time, others are automatically deleted after a limited period of time, and others are stored by Google for a longer period of time. Some data (such as My Activity items, photos or documents, products) stored in your Google Account remains stored until you delete it. Even if you're not signed in to a Google Account, you can delete some data associated with your device, browser, or app.
How can I delete my data or prevent data storage?
In principle, you can delete data in your Google account manually. With the automatic deletion function of location and activity data introduced in 2019, information is stored for either 3 or 18 months and then deleted, depending on your decision.
Regardless of whether you have a Google account or not, you can configure your browser to delete or deactivate Google cookies. Depending on which browser you use, this works in different ways. The following instructions show how to manage cookies in your browser:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Deleting and managing cookies
If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow it or not. Since YouTube is a subsidiary of Google, there is a common data protection declaration. If you would like to find out more about how your data is handled, we recommend the data protection declaration at https://policies.google.com/privacy?hl=de.
Google reCAPTCHA privacy policy
Our primary goal is to secure and protect our website as best as possible for you and for us. To ensure this, we use Google reCAPTCHA from Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With reCAPTCHA we can determine whether you are really a human being and not a robot or other spam software. By spam we mean any unwanted information sent to us electronically without being asked. With the classic CAPTCHAS, you usually had to solve text or image puzzles to check. With reCAPTCHA from Google, we usually don't have to bother you with such puzzles. In most cases it is enough to simply check the box and confirm that you are not a bot. With the new Invisible reCAPTCHA version you don't even have to check the box anymore. You will find out exactly how this works and, above all, what data is used for this in the course of this data protection declaration.
What is reCAPTCHA?
reCAPTCHA is a free Captcha service from Google that protects websites from spam software and misuse by non-human visitors. Most often, this service is used when filling out forms on the Internet. A captcha service is a type of automatic Turing test designed to ensure that an action on the Internet is carried out by a human and not a bot. In the classic Turing test (named after the computer scientist Alan Turing), a human determines the difference between a bot and a human. With Captchas, this is also done by the computer or a software program. Classic captchas work with small tasks that are easy for humans to solve, but are significantly difficult for machines. With reCAPTCHA you no longer have to actively solve puzzles. The tool uses modern risk techniques to distinguish humans from bots. Here you just have to tick the text field “I am not a robot” or with Invisible reCAPTCHA even this is no longer necessary. With reCAPTCHA, a JavaScript element is integrated into the source code and then the tool runs in the background and analyzes your user behavior. The software calculates a so-called Captcha score from these user actions. Google uses this score to calculate how likely you are to be human before you enter the Captcha. reCAPTCHA or captchas in general are always used when bots could manipulate or abuse certain actions (such as registrations, surveys, etc.).
Why do we use reCAPTCHA on our website?
We only want to welcome people of flesh and blood to our side. Bots or spam software of all kinds can safely stay at home. That's why we do everything we can to protect ourselves and offer you the best possible user-friendliness. For this reason we use Google reCAPTCHA from Google. So we can be pretty sure that we will remain a “bot-free” website. By using reCAPTCHA, data is transmitted to Google to determine whether you are actually human. reCAPTCHA therefore serves the security of our website and subsequently also your security. For example, without reCAPTCHA, it could happen that when registering, a bot registers as many email addresses as possible in order to then “spam” forums or blogs with unwanted advertising content. With reCAPTCHA we can avoid such bot attacks.
What data is stored by reCAPTCHA?
reCAPTCHA collects personal data from users to determine whether the actions on our website actually come from humans. This means that the IP address and other data that Google requires for the reCAPTCHA service can be sent to Google. IP addresses are almost always shortened within EU member states or other contracting states to the Agreement on the European Economic Area before the data ends up on a server in the USA. The IP address will not be combined with other Google data unless you are logged in with your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube, Gmail, etc.) are already placed on your browser. reCAPTCHA then sets an additional cookie in your browser and captures a snapshot of your browser window.
The following list of collected browser and user data is not intended to be complete. Rather, these are examples of data that, to our knowledge, are processed by Google.
- Referrer URL (the address of the page from which the visitor comes)
- IP address (e.g. 256.123.123.1)
- Information about the operating system (the software that enables your computer to operate. Well-known operating systems are Windows, Mac OS X or Linux)
- Cookies (small text files that store data in your browser)
- Mouse and keyboard behavior (every action you perform with the mouse or keyboard is saved)
- Date and language settings (which language or date you have preset on your PC will be saved)
- All JavaScript objects (JavaScript is a programming language that allows websites to adapt to the user. JavaScript objects can collect all kinds of data under one name)
- Screen resolution (shows how many pixels the image consists of)
It is undisputed that Google uses and analyzes this data even before you click on the “I am not a robot” checkbox. With the Invisible reCAPTCHA version, there is no need to tick anything and the entire recognition process runs in the background. Google does not tell you in detail how much and what data Google stores.
The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version from Google https://www.google.com/recaptcha/api2/demo . All of these cookies require a unique identifier for tracking purposes. Here is a list of cookies that Google reCAPTCHA has set on the demo version:
Surname: IDE
Value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-211138720-8
Purpose of use: This cookie is set by the company DoubleClick (also owned by Google) to register and report a user's actions on the website when dealing with advertisements. In this way, advertising effectiveness can be measured and appropriate optimization measures can be taken. IDE is stored in browsers under the domain doubleclick.net.
Expiry Date: after a year
Surname: 1P_JAR
Value: 2019-5-14-12
Purpose of use: This cookie collects website usage statistics and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to show users relevant advertisements. Furthermore, the cookie can be used to prevent a user from seeing the same ad more than once.
Expiry Date: after a month
Surname: ANIDE
Value: U7j1v3dZa2111387200xgZFmiqWppRWKOr
Purpose of use: We were not able to find out much information about this cookie. In Google's privacy policy, the cookie is referred to in connection with “advertising cookies” such as: B. “DSID”, “FLC”, “AID”, “TAID” mentioned. ANID is stored under domain google.com.
Expiry Date: after 9 months
Surname: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose of use: The cookie stores the status of a user's consent to the use of various Google services. CONSENT is also used for security to verify users, prevent credential fraud, and protect user data from unauthorized attacks.
Expiry Date: after 19 years
Surname: NID
Value: 0WmuWqy211138720zILzqV_nmt3sDXwPeM5Q
Purpose of use: NID is used by Google to tailor advertisements to your Google searches. With the help of the cookie, Google “remembers” your most frequently entered search queries or your previous interaction with advertisements. This means you always get tailor-made advertisements. The cookie contains a unique ID to collect the user's personal settings for advertising purposes.
Expiry Date: after 6 months
Surname: DV
Value: gEAABBCjJMXcI0dSAAAANbqc211138720-4
Purpose of use: Once you have ticked the “I am not a robot” checkbox, this cookie will be set. The cookie is used by Google Analytics for personalized advertising. DV collects information in anonymized form and is further used to make user distinctions.
Expiry Date: after 10 minutes
Note: This list cannot claim to be complete, as experience has shown that Google constantly changes its choice of cookies.
How long and where is the data stored?
By inserting reCAPTCHA, your data will be transferred to the Google server. Google does not make it clear where exactly this data is stored, even after repeated inquiries. Without receiving confirmation from Google, it can be assumed that data such as mouse interaction, time spent on the website or language settings are stored on the European or American Google platforms. stored on servers. The IP address that your browser transmits to Google is generally not merged with other Google data from other Google services. However, if you are logged into your Google account while using the reCAPTCHA plugin, the data will be merged. The different data protection regulations of Google apply.
How can I delete my data or prevent data storage?
If you do not want any data about you and your behavior to be transmitted to Google, you must log out of Google completely and delete all Google cookies before you visit our website or use the reCAPTCHA software. In principle, the data is automatically transmitted to Google as soon as you access our site. To delete this data again, you must contact Google Support https://support.google.com/?hl=de&tid=211138720 to contact.
If you use our website, you agree that Google LLC and its representatives automatically collect, process and use data.
You can find out more about reCAPTCHA on Google's web developer page https://developers.google.com/recaptcha/ . Google goes into more detail about the technical development of reCAPTCHA here, but you won't find precise information about data storage and data protection-related topics there either. You can find a good overview of the basic use of data at Google in the company's own data protection declaration https://www.google.com/intl/de/policies/privacy/ .
jQuery CDN privacy policy
In order to deliver our website or all of our individual subpages (websites) to you quickly and easily on different devices, we use jQuery CDN services from the company jQuery Foundation. jQuery is distributed via the Content Delivery Network (CDN) of the American software company StackPath (LCC 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA). This service stores, manages and processes your personal data.
A content delivery network (CDN) is a network of regionally distributed servers connected to each other via the Internet. This network allows content, especially very large files, to be delivered quickly, even during large peak loads.
jQuery uses JavaScript libraries to deliver our website content quickly. A CDN server loads the necessary files. As soon as a connection to the CDN server is established, your IP address is recorded and stored. This only happens if this data is not already stored in your browser from a previous website visit.
StackPath's privacy policy explicitly mentions that StackPath uses aggregated and anonymized data from various services (such as jQuery) to expand security and for its own services. However, this data cannot identify you as a person.
If you do not want this data transfer to occur, you always have the option of using Java script blockers such as ghostery.com or noscript.net to install. You can also simply deactivate the execution of JavaScript codes in your browser. If you decide to deactivate JavaScript codes, the usual functions will also change. For example, a website no longer loads as quickly.
StackPath is an active participant in the EU-US Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active .
You can find more information about data protection at StackPath at https://www.stackpath.com/legal/privacy-statement/ and to jQuery below https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf .
BootstrapCDN Privacy Policy
In order to be able to deliver all of our individual websites (subpages of our website) to you quickly and securely on all devices, we use the Content Delivery Network (CDN) BootstrapCDN from the American software company StackPath, LLC 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA.
A content delivery network (CDN) is a network of regionally distributed servers connected to each other via the Internet. This network allows content, especially very large files, to be delivered quickly, even during large peak loads.
BootstrapCDN works by delivering so-called JavaScript libraries to your browser. If your browser now downloads a file from BootstrapCDN, your IP address will be transmitted to StockPath during the connection to the Bootstrap CDN server.
StackPath also mentions in its privacy policy that the company uses aggregated and anonymized data from various services (such as BootstrapCDN) to extend backup and for other StackPath services and clients. However, none of this data can identify a person.
If you want to prevent this data transfer, you can use a JavaScript blocker (see for example https://noscript.net/ ) or deactivate the execution of JavaScript codes in your browser. Please note, however, that this means the website can no longer offer the usual service (such as fast loading speeds).
StackPath is an active participant in the EU-US Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active .
You can find more information about data protection at StackPath or BootstrapCDN at https://www.bootstrapcdn.com/privacy-policy/ .
Source: Created with the Data Protection Generator from firmenwebseiten.at in cooperation with newspartner.at