Implemented Technologies

Google Tag Manager

Description of Service
This is a tag management system. With this the user can update measurement codes and related code fragments collectively known as tags on the users website or mobile app.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Data Purposes
This list represents the purposes of the data collection and processing.

  • Tag Management

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  • Pixel

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  • Aggregated data about tag firing

Legal Basis
In the following the required legal basis for the processing of data is listed.

  • Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  • European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  • The data will be deleted after 14 days of retrieval.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  • United States of America,Singapore,Taiwan,Chile

Data Recipients
In the following the recipients of the data collected are listed.

  • Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en

Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Usercentrics Consent Management Platform

Description of Service
This is a consent management service. Usercentrics GmbH is used on the website as a processor for the purpose of consent management.

Processing Company

  • Usercentrics GmbH
  • Sendlinger Str. 7, 80331 Munich, Germany

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

  • datenschutz@usercentrics.com

Data Purposes
This list represents the purposes of the data collection and processing.

  • Compliance with legal obligations
  • Consent storage

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  • Local storage

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  • Opt-in and opt-out data
  • Referrer URL
  • User agent
  • User settings
  • Consent ID
  • Time of consent
  • Consent type
  • Template version
  • Banner language

Legal Basis
In the following the required legal basis for the processing of data is listed.

  • Art. 6 para. 1 s. 1 lit. c GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  • European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  • The consent data (given consent and revocation of consent) are stored for three years. The data will then be deleted immediately.

Data Recipients
In the following the recipients of the data collected are listed.

  • Usercentrics GmbH

Click here to read the privacy policy of the data processor
https://usercentrics.com/privacy-policy/

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  • Maximum age of cookie storage: Session
  • Non-cookie storage: no

Facebook Pixel

Description of Service
This is a Tracking technology offered by Facebook and used by other Facebook services such as Facebook Custom Audiences.

Processing Company

  • Facebook Ireland Limited
  • 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Analytics
  •     Marketing
  •     Retargeting
  •     Tracking
  •     Advertisement

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies
  •     Pixel

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Ads viewed
  •     Content viewed
  •     Device information
  •     Geographic location
  •     HTTP-header
  •     Interactions with advertisement, services, and products
  •     IP address
  •     Items clicked
  •     Marketing information
  •     Non-sensitive custom data
  •     Pages visited
  •     Pixel ID
  •     Referrer URL
  •     Success of marketing campaigns
  •     Usage data
  •     User behaviour
  •     Facebook cookie information
  •     Facebook user ID
  •     Usage/click behaviour
  •     Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The data will be deleted the latest after 720 days.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     Singapore,United Kingdom,United States of America

Data Recipients
In the following the recipients of the data collected are listed.

  •     Facebook Inc.
  •     Facebook Ireland Limited

Click here to read the privacy policy of the data processor
https://www.facebook.com/privacy/explanation

Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: 1 year
  •     Non-cookie storage: no

Facebook Social Plugins

Description of Service
This is a social plug-in from Facebook, which enables integration of Facebook content on third-party websites.

Processing Company

  • Facebook Ireland Limited
  • 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Integration of Facebook functions
  •     Advertisement
  •     Optimization
  •     Personalisation

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Usage data
  •     Browser information
  •     Date and time of visit
  •     Facebook user ID
  •     Websites visited
  •     HTTP-header

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     Worldwide

Data Recipients
In the following the recipients of the data collected are listed.

  •     Facebook Inc.
  •     Facebook Ireland Limited

Click here to read the privacy policy of the data processor
https://www.facebook.com/privacy/explanation
Click here to read the cookie policy of the data processor
https://www.facebook.com/policies/cookies/
Click here to opt out from this processor across all domains
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Google Ads

Description of Service
This is an advertising service.

Processing Company

  • Google Ireland Limited
  • Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Advertisement
  •     Analytics
  •     Providing Service
  •     Statistics

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Ads viewed
  •     Cookie ID
  •     Date and time of visit
  •     Device information
  •     Geographic location
  •     IP address
  •     Search terms
  •     Ads shown
  •     Client ID
  •     Impressions
  •     Online identifiers
  •     Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The data will be deleted as soon as they are no longer needed for the processing purposes. Log data is anonymized after 9 months and cookie information is anonymized after 18 months.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     Chile,Singapore,United States of America,Taiwan

Data Recipients
In the following the recipients of the data collected are listed.

  •     Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: 1 year
  •     Non-cookie storage: no

Google Analytics

Description of Service
This is a web analytics service. With this the user can measure the advertising ROI as well as track Flash, video, and social networking sites and applications.

Processing Company

  • Google Ireland Limited
  • Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Marketing
  •     Analytics

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies
  •     Pixel

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     App updates
  •     Click path
  •     Date and time of visit
  •     Device information
  •     Downloads
  •     Flash version
  •     Location information
  •     IP address
  •     JavaScript support
  •     Pages visited
  •     Purchase activity
  •     Referrer URL
  •     Usage data
  •     Widget interactions
  •     Browser information

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The Retention Period depends on the type of the saved data. Each client can choose how long Google Analytics retains data before automatically deleting it.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     United States of America,Singapore,Chile,Taiwan

Data Recipients
In the following the recipients of the data collected are listed.

  •     Google Ireland Limited, Alphabet Inc., Google LLC

Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://tools.google.com/dlpage/gaoptout?hl=de

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: 2 years
  •     Non-cookie storage: no

Google Fonts

Description of Service
This is a collection of fonts for commercial and personal use.

Processing Company

  • Google Ireland Limited
  • Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Providing fonts

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     IP address
  •     CSS request
  •     Aggregated usage numbers
  •     Font file requests
  •     Referrer URL

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     Worldwide

Data Recipients
In the following the recipients of the data collected are listed.

  •     Alphabet Inc.
  •     Google LLC
  •     Google Ireland Limited

Click here to read the privacy policy of the data processor
https://policies.google.com/privacy?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

gstatic.com

Description of Service
This is a domain used by Google to off-load static content to a different domain name in an effort to reduce bandwidth usage and increase network performance for the end user.

Processing Company

  • Alphabet Inc.
  • 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Increasing network performance
  •     Reducing bandwidth usage

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     JavaScript

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Images
  •     CSS

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     United States of America

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     Requests for CSS assets are cached for 1 day, font files are cached for one year. Some information retained until removed by the user, some expires after a specific period of time, some is retained until the user's Google Account is deleted.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     Worldwide

Data Recipients
In the following the recipients of the data collected are listed.

  •     Alphabet Inc.

Click here to read the privacy policy of the data processor
http://www.google.com/intl/de/policies/privacy/
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: Session
  •     Non-cookie storage: no

Hotjar

Description of Service
This is a web analytics service. With this service online behaviour and feedback of website visitors is revealed.

Processing Company

  • Hotjar Limited
  • Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

  • dpo@hotjar.com

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Analytics
  •     Feedback

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Browser information
  •     Date and time of visit
  •     Device type
  •     Geographic location
  •     IP address
  •     Mouse movements
  •     Pages visited
  •     Referrer URL
  •     Screen resolution
  •     Unique device identifier
  •     Language information

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     Data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients
In the following the recipients of the data collected are listed.

  •     Hotjar Ltd.

Click here to read the privacy policy of the data processor
https://www.hotjar.com/legal/policies/privacy
Click here to read the cookie policy of the data processor
https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
Click here to opt out from this processor across all domains
https://www.hotjar.com/legal/compliance/opt-out

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: 1 year
  •     Non-cookie storage: no

Twitter Button

Description of Service
This is a plug-in from Twitter.

Processing Company

  • Twitter International Company
  • One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Data Purposes
This list represents the purposes of the data collection and processing.

  •     Social Media
  •     Providing a social media feed

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  •     Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  •     Browser type
  •     Date and time of tweet
  •     Internet address where tweet button is located
  •     IP address
  •     Message content of tweet
  •     Operating system information

Legal Basis
In the following the required legal basis for the processing of data is listed.

  •     Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  •     European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  •     The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  •     United States of America

Data Recipients
In the following the recipients of the data collected are listed.

  •     Twitter International Company
  •     Twitter, Inc.

Click here to read the privacy policy of the data processor
https://twitter.com/en/privacy
Click here to read the cookie policy of the data processor
https://help.twitter.com/en/rules-and-policies/twitter-cookies

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  •     Maximum age of cookie storage: 2 years
  •     Non-cookie storage: no