Privacy Policy

Introduction and Overview

We have written this privacy policy (version 26.07.2025-313034426) to inform you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, about which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We provide you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, on the other hand, aims to describe the most important things as simply and transparently as possible. Wherever it promotes transparency, technical terms are explained in a reader-friendly manner, links to further information are provided, and graphics are used. We are therefore informing you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis for doing so. This is certainly not possible if one provides the briefest, most unclear and legally technical explanations possible, as is often the standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information you did not know.
If you still have questions, please contact the responsible office named below or in the imprint, follow the links provided, and view further information on third-party sites. Of course, you can also find our contact details in the imprint.

Scope

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person’s name, email address, and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online shops) that we operate
• social media presences and e-mail communication
• mobile apps for smartphones and other devices

In short: This privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned. Should we enter into a legal relationship with you outside of these channels, we will inform you separately if necessary.

Legal Basis

In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e., the legal basis of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. This EU General Data Protection Regulation can of course be accessed online at EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We will only process your data if at least one of the following conditions applies:

1. Consent (Article 6 (1) (a) GDPR): You have given us your consent to process data for a specific purpose. An example would be to store the data you entered in a contact form.
2. Contract (Article 6 (1) (b) GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we enter into a purchase agreement with you, we require personal information in advance.
3. Legal Obligation (Article 6 (1) (c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate Interests (Article 6 (1) (f) GDPR): We reserve the right to process personal data in the case of legitimate interests that do not restrict your fundamental rights. For example, we have to process certain data in order to operate our website securely and in an economically efficient manner. This processing is therefore a legitimate interest.

Other conditions such as the exercise of public interest recordings and the exercise of official authority, as well as the protection of vital interests, generally do not apply to us. However, if such a legal basis should be relevant, it will be indicated at the appropriate point.

In addition to the EU regulation, national laws also apply:

• In Austria, this is the Federal Act on the Protection of Individuals with regard to the Processing of Personal Data (Datenschutzgesetz), or DSG for short.
• In Germany, the Federal Data Protection Act, or BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact Details of the Controller

Should you have any questions regarding data protection or the processing of personal data, you will find the contact details of the controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) below:
Sven Sachs
Im Hof 9
51766 Engelskirchen

E-mail: sachs.pal@gmail.com

Imprint: https://www.sachspal.de/impressum/

Storage Duration

The general criterion we apply is to store personal data only for as long as it is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose no longer applies, for example for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and insofar as there is no obligation to store it.

We will inform you below about the specific duration of the respective data processing, provided that we have further information.

Rights according to the General Data Protection Regulation

In accordance with Articles 13 and 14 of the GDPR, we are informing you of the following rights to which you are entitled to ensure fair and transparent data processing:

• According to Article 15 of the GDPR, you have the right to obtain information about whether we are processing your data. If this is the case, you have the right to receive a copy of the data and to learn the following information:
  
  • the purpose for which we are processing the data;
  • the categories, i.e., the types of data being processed;
  • who receives the data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data is stored;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority (links to these authorities can be found below);
  • the origin of the data if we have not collected it from you;
  • whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile of you.
• According to Article 16 of the GDPR, you have the right to have your data rectified, which means that we must correct data if you find any errors.
• According to Article 17 of the GDPR, you have the right to erasure (‘right to be forgotten’), which specifically means that you may request the deletion of your data.
• According to Article 18 of the GDPR, you have the right to restrict processing, which means that we are only allowed to store the data but not to use it further.
• According to Article 20 of the GDPR, you have the right to data portability, which means that we are obliged to provide you with your data in a commonly used format upon request.
• According to Article 21 of the GDPR, you have the right to object, which, if exercised, will result in a change in the processing.
  
  • If the processing of your data is based on Article 6 (1) (e) (public interest, exercise of official authority) or Article 6 (1) (f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.
  • If data is used for direct marketing, you can object to this type of data processing at any time. We are then no longer allowed to use your data for direct marketing.
  • If data is used for profiling, you can object to this type of data processing at any time. We will then no longer be allowed to use your data for profiling.
• According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g., profiling).
• According to Article 77 of the GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible office listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). For our company, the following local data protection authority is responsible:

Web Hosting Introduction

Web Hosting Summary 👥 Affected parties: Website visitors 🤝 Purpose: Professional hosting of the website and ensuring its operation 📓 Processed data: IP address, time of website visit, browser used, and other data. More details can be found below or with the respective web hosting provider used. 📅 Storage duration: depends on the respective provider, but generally 2 weeks ⚖️ Legal basis: Art. 6 (1) (f) GDPR (Legitimate interests)

What is Web Hosting?

When you visit websites today, certain information – including personal data – is automatically created and stored, and this is also the case on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all web pages on a domain, i.e., everything from the home page to the very last sub-page (like this one). By domain, we mean, for example, example.de or sampleexample.com.

If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply call it a browser or web browser.

To display the website, the browser must connect to another computer where the website’s code is stored: the web server. Operating a web server is a complicated and elaborate task, which is why it is usually taken over by professional providers, the web hosts. They offer web hosting and thus ensure reliable and error-free storage of website data. A lot of technical terms, but please bear with me, it gets even better!

When the browser on your computer (desktop, laptop, tablet, or smartphone) connects and during data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server also has to store data for a certain period to ensure proper operation.

A picture says more than a thousand words, so the following graphic illustrates the interaction between the browser, the internet, and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

1. Professional hosting of the website and ensuring its operation
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offer and, if necessary, for prosecution or assertion of claims

What data is processed?

Even while you are currently visiting our website, our web server, which is the computer on which this website is stored, generally automatically stores data such as

• the complete internet address (URL) of the accessed website
• browser and browser version (e.g., Chrome 87)
• the operating system used (e.g., Windows 10)
• the address (URL) of the previously visited page (Referrer URL) (e.g., https://www.beispielquellsite.de/vondabinichgekommen/)
• the hostname and IP address of the device from which access is made (e.g., COMPUTERNAME and 194.23.43.121)
• date and time
• in files, the so-called web server log files

How long is data stored?

As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data may be viewed by authorities in the event of unlawful conduct.

In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not pass on your data without consent!

Legal Basis

The lawfulness of processing personal data within the framework of web hosting results from Art. 6 (1) (f) GDPR (safeguarding legitimate interests), as the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the internet and, if necessary, to pursue attacks and claims arising therefrom.

Between us and the hosting provider, there is usually a contract for order processing according to Art. 28 et seq. GDPR, which ensures compliance with data protection and guarantees data security.

Web Analytics Introduction

Web Analytics Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Evaluation of visitor information to optimize the web offering. 📓 Processed data: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found with the respective Web Analytics Tool used. 📅 Storage duration: depends on the Web Analytics Tool used ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (Legitimate Interests)

What is Web Analytics?

We use software on our website to analyze the behavior of website visitors, known as Web Analytics or web analysis for short. This involves collecting data that the respective Analytic Tool provider (also known as a tracking tool) stores, manages, and processes. With the help of this data, analyses of user behavior on our website are created and made available to us as the website operator. Additionally, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. To do this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such testing procedures, as well as for other analytics procedures, user profiles can also be created and the data stored in cookies.

Why do we use Web Analytics?

We have a clear goal in mind with our website: we want to provide the best web offering on the market for our industry. To achieve this goal, we want to offer the best and most interesting range of products on the one hand, while also making sure that you feel completely at home on our website on the other. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our website for you and us accordingly. For example, we can see the average age of our visitors, where they come from, when our website is most frequently visited, or which content or products are particularly popular. All this information helps us to optimize the website and thus adapt it to your needs, interests, and wishes in the best possible way.

What data is processed?

Exactly what data is stored depends, of course, on the analysis tools used. But as a rule, for example, what content you view on our website, which buttons or links you click on, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website, or which computer system you use. If you have consented to location data being collected, this too can be processed by the Web Analytics Tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored in pseudonymized form (i.e., in an unrecognizable and abbreviated form). For the purpose of testing, web analysis, and web optimization, no direct data, such as your name, age, address, or email address, is generally stored. All this data, if collected at all, is stored in pseudonymized form. This means that you cannot be identified as a person.

The following example schematically shows how Google Analytics works as an example of client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies only store data for a few minutes or until you leave the website, while other cookies can store data for several years.

Duration of Data Processing

We will inform you about the duration of data processing below, provided we have further information. In general, we process personal data only for as long as it is absolutely necessary for the provision of our services and products. If legally required, as for example in the case of accounting, this storage period can also be exceeded.

Right to Object

You also have the right and the option at any time to revoke your consent to the use of cookies or third-party providers. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser.

Legal Basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 (1) (a) GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when it is collected by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of our website visitors to improve our services both technically and economically. With the help of web analytics, we can detect website errors, identify attacks, and improve efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests). However, we only use the tools if you have given your consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data are stored and processed, you should read the privacy policies of the respective tools.

Information on specific web analytics tools can be found – if available – in the following sections.

Google Analytics Privacy Policy

Google Analytics Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Evaluation of visitor information to optimize the web offering. 📓 Processed data: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, and click behavior. More details can be found below in this privacy policy. 📅 Storage duration: individually adjustable; by default, Google Analytics 4 stores data for 14 months ⚖️ Legal basis: Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (Legitimate Interests)

What is Google Analytics?

We use the analysis tracking tool Google Analytics in the Google Analytics 4 (GA4) version on our website, provided by the American company Google Inc. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe. Google Analytics collects data about your actions on our website. Through the combination of various technologies such as cookies, device IDs, and login information, you as a user can be identified across different devices. This means that your actions can also be analyzed cross-platform.

For example, when you click on a link, this event is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us to better tailor our website and services to your needs. In the following, we will discuss the tracking tool in more detail and, in particular, inform you about what data is processed and how you can prevent this.

Google Analytics is a tracking tool used for analyzing the data traffic on our website. These measurements and analyses are based on a pseudonymous user identification number. This number does not contain any personal data such as your name or address but is used to assign events to a device. GA4 uses an event-based model that collects detailed information on user interactions such as page views, clicks, scrolling, and conversion events. In addition, various machine learning functions have been built into GA4 to better understand user behavior and certain trends. GA4 uses machine learning functions for modeling. This means that missing data can be extrapolated based on the collected data to optimize the analysis and also to make predictions.

For Google Analytics to function, a tracking code is built into our website’s code. When you visit our website, this code records various events you perform on our website. With GA4’s event-based data model, we as website operators can define and track specific events to obtain analyses of user interactions. This means that, in addition to general information such as clicks or page views, specific events important for our business can also be tracked. Such special events could be, for example, submitting a contact form or purchasing a product.

As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data, and we receive reports about your user behavior. These reports may include the following:

• Audience reports: Audience reports help us get to know our users better and understand more about who is interested in our service.
• Advertising reports: Advertising reports help us analyze and improve our online advertising.
• Acquisition reports: Acquisition reports provide us with helpful information on how we can attract more people to our service.
• Behavior reports: These reports tell us how you interact with our website. We can see the path you take on our site and which links you click on.
• Conversion reports: A conversion is a process in which you perform a desired action based on a marketing message. For example, when you go from being a mere website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts reach you. This way, we want to increase our conversion rate.
• Real-time reports: These always tell us immediately what is happening on our website. For example, we can see how many users are currently reading this text.

In addition to the above-mentioned analysis reports, Google Analytics 4 also offers the following functions, among others:

• Event-based data model: This model records very specific events that may occur on our website. For example, playing a video, purchasing a product, or registering for our newsletter.
• Advanced analytics: These features help us to better understand your behavior on our website or certain general trends. For example, we can segment user groups, compare target groups, or track your path on our website.
• Predictive modeling: Based on collected data, machine learning can be used to extrapolate missing data that predicts future events and trends. This can help us develop better marketing strategies.
• Cross-platform analysis: Data can be collected and analyzed from both websites and apps. This offers us the opportunity to analyze user behavior across platforms, provided that you have consented to the data processing.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we want to offer you the best possible service. The statistics and data from Google Analytics help us to achieve this goal.

The statistically evaluated data gives us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is easier for interested people to find on Google. On the other hand, the data helps us to better understand you as a visitor. This means we know exactly what we need to improve on our website to offer you the best possible service. The data also helps us to make our advertising and marketing measures more individual and cost-effective. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID that is associated with your browser cookie. This is how Google Analytics recognizes you as a new user and assigns you a user ID. The next time you visit our site, you will be recognized as a ‘returning’ user. All collected data is stored together with this user ID. This is the only way to evaluate pseudonymous user profiles.

To analyze our website with Google Analytics, a property ID must be added to the tracking code. The data is then saved in the corresponding property. Google Analytics is set up by default for each new property. Depending on the property used, data is stored for different lengths of time.

Your interactions are measured across platforms through identifiers such as cookies, app instance IDs, user IDs, or custom event parameters, provided you have given your consent. Interactions are all types of actions that you perform on our website. If you also use other Google systems (such as a Google account), data generated by Google Analytics can be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may apply if required by law.

According to Google, IP addresses are not logged or stored in Google Analytics 4. However, Google uses the IP address data to derive location data and deletes it immediately afterward. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data center or on a server.

Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies than previous versions (such as Google Universal Analytics). Nevertheless, there are some specific cookies that are used by GA4. These include, for example:

• Name: _ga
  Value: 2.1326744211.152312925868-5
  Purpose: By default, analytics.js uses the _ga cookie to store the user ID. In principle, it is used to distinguish between website visitors.
  Expiry date: after 2 years
• Name: _gid
  Value: 2.1687193234.152312925868-1
  Purpose: The cookie is also used to distinguish between website visitors.
  Expiry date: after 24 hours
• Name: _gat_gtag_UA_
  Value: 1
  Purpose: Used to lower the request rate. If Google Analytics is provided through Google Tag Manager, this cookie is named _dc_gtm_.
  Expiration date: after 1 minute

Note: This list cannot claim to be exhaustive, as Google repeatedly changes the selection of its cookies. The aim of GA4 is also to improve data protection. Therefore, the tool offers some options for controlling data collection. For example, we can define the storage period ourselves and also control data collection.

Here is an overview of the main types of data collected by Google Analytics:

• Heatmaps: Google creates so-called heatmaps. Heatmaps show you exactly the areas you click on. This is how we get information about where you are on our site.
• Session duration: Google defines session duration as the time you spend on our site without leaving it. If you are inactive for 20 minutes, the session ends automatically.
• Bounce rate: A bounce occurs when you view only one page on our website and then leave our website.
• Account creation: When you create an account or place an order on our website, Google Analytics collects this data.
• Location: IP addresses are not logged or stored in Google Analytics. However, shortly before the IP address is deleted, derivations are used for location data.
• Technical information: Technical information includes, among other things, your browser type, your internet service provider, or your screen resolution.
• Source: Google Analytics and we are, of course, also interested in which website or which advertisement you used to come to our site.

Other data includes contact details, any ratings, playing media (e.g., if you play a video on our site), sharing content via social media, or adding to your favorites. This list is not exhaustive and is only intended to provide a general overview of how Google Analytics stores data.

How Long and Where is Data Stored?

Google has servers all over the world. You can find out exactly where Google’s data centers are located here: https://www.google.com/about/datacenters/locations/?hl=de

Your data is distributed across various physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. Each Google data center has appropriate emergency programs for your data. If, for example, Google’s hardware fails or natural disasters cripple servers, the risk of service interruption at Google remains low.

The retention period for the data depends on the properties used. The storage period is always defined separately for each individual property. Google Analytics offers us four options for controlling the storage period:

• 2 months: this is the shortest storage period.
• 14 months: by default, GA4 stores the data for 14 months.
• 26 months: you can also store the data for 26 months.
• Data will only be deleted if we delete it manually.

In addition, there is also the option that data will only be deleted if you no longer visit our website within the period we have selected. In this case, the retention period is reset each time you visit our website again within the specified period.

Once the specified time period has passed, the data is deleted once a month. This retention period applies to your data associated with cookies, user identification, and advertising IDs (e.g., cookies from the DoubleClick domain). Reporting results are based on aggregated data and stored independently of user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent it from being stored?

Under European Union data protection law, you have the right to request access to, update, delete, or restrict the use of your information. You can prevent Google Analytics 4 from using your information by using the browser add-on to disable Google Analytics JavaScript (analytics.js, gtag.js). You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de. Please note that this add-on only deactivates data collection by Google Analytics.

If you generally wish to deactivate, delete, or manage cookies, you will find the relevant links to the instructions for the most popular browsers under the ‘Cookies’ section.

Legal Basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 (1) (a) GDPR (consent), this consent is the legal basis for the processing of personal data, as may occur when it is collected by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of our website visitors to improve our services from a technical and economic perspective. With the help of Google Analytics, we can detect website errors, identify attacks, and improve efficiency. The legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests). However, we only use Google Analytics if you have given your consent.

Google processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the United States. You can find more information at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses standard contractual clauses (SCC) (Art. 46 (2) and (3) GDPR). These are templates provided by the EU Commission to ensure that your data also meets European data protection standards when it is transferred to and stored in third countries (such as the US). Through the EU-US Data Privacy Framework and the standard contractual clauses, Google is obliged to comply with the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we have been able to provide you with the most important information about Google Analytics data processing. If you would like to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

If you would like to learn more about data processing, please use the Google data protection declaration at Google Site Kit Privacy Policy