Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. Therefore, we would like to inform you here about what personal data we collect when you visit our website and for what purposes it is used.

 

This privacy policy applies to the internet service of tricos Coaching & Bildung, which can be accessed under the domain tricosand its various subdomains ("our website").

 

Who is responsible and how can I reach you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

 

tricos Bildung & Coaching

Owner: Robert Stricker

Kronenstraße 39-41

70174 Stuttgart

tricos
 

Data Protection Officer

Achim Barth

Barth Regelwerk GmbH

Brunnengasse 3

73650 Winterbach

0711 / 40070720

info@barth-regelwerk.de

What is it about?

This privacy policy fulfills the legal requirements for transparency in the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot link to you (or only with disproportionate effort), for example, through anonymization, is not considered personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been fulfilled and there are no legitimate grounds for further retention of the data. We will inform you about the specific retention periods or criteria for storage in the individual processing operations. Regardless of this, we may store your personal data in individual cases for the establishment, exercise, or defense of legal claims and where statutory retention obligations exist.

Who gets my data?

We only share your personal data, which we process on our website, with third parties if this is necessary for fulfilling the purposes for which it was collected and is covered by a legal basis in each individual case (e.g., consent or legitimate interests). Furthermore, we may share personal data with third parties in individual cases if this serves the establishment, exercise, or defense of legal claims. Potential recipients may then include, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf in accordance with Article 28 GDPR, these providers may be recipients of your personal data. Further information on the use of data processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that we send to your browser during your visit to our website, where they are stored. Alternatively, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, allow us to perform various analyses, enabling us, for example, to recognize your browser when you revisit our website and transmit various pieces of information to us (non-essential cookies). Cookies help us, among other things, to make our website more user-friendly and effective by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not harm your device. They cannot execute programs or contain viruses.

We provide information about the specific services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the consent manager of this website.

Cookies used

domainnamesDescriptionStorage duration
tricos_gaThis cookie name is associated with Google Universal Analytics – a major update to Google's widely used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request on a website and is used to calculate visitor, session, and campaign data for website analytics reports. By default, it expires after two years, although this can be adjusted by website owners.approximately 1 year
tricos_ga_E8GX322CBCNot availableapproximately 1 year
tricos_gcl_auUsed by Google AdSense to experiment with the efficiency of advertising on websites that use their servicesapproximately 3 months
tricosSureNot availablemeeting
tricosPHPSESSIDPHP session cookie associated with embedded content from this domain.meeting
doubleclick.nettest_cookieThis cookie is set by DoubleClick (owned by Google) to determine if the website visitor's browser supports cookies.15 minutes

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

  • Information In accordance with Article 15 GDPR, you are entitled to receive information about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored with us;
  • deletion In accordance with Article 17 GDPR, the data stored by us will be deleted unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • restriction the processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you object to its erasure because you require it for the establishment, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
  • Data portability In accordance with Article 20 of the GDPR, insofar as you have provided us with personal data within the framework of consent pursuant to Article 6(1)(a) of the GDPR or on the basis of a contract pursuant to Article 6(1)(b) of the GDPR, and this data has been processed by us using automated procedures, you will receive your data in a structured, commonly used and machine-readable format, or we will transmit the data directly to another controller, insofar as this is technically feasible.
  • Contradiction In accordance with Article 21 of the GDPR, you have the right to object to the processing of your personal data if this processing is based on Article 6(1)(e) or (f) of the GDPR and there are grounds relating to your particular situation, or if the objection is directed against direct marketing. The right to object does not apply if compelling legitimate grounds for the processing can be demonstrated, or if the processing is necessary for the establishment, exercise, or defense of legal claims. If the right to object does not apply to specific processing operations, this will be indicated there.
  • Cancellation In accordance with Article 7 Paragraph 3 GDPR, your consent will be withdrawn with effect for the future.
  • Complaint According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. You can usually contact the supervisory authority in your place of habitual residence, your place of work, or the location of our company headquarters.

How exactly is my data processed?

Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage period. No automated decision-making in individual cases, including profiling, takes place.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

 

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring its security and stability, based on Article 6(1)(f) GDPR. The collection of this data and its storage in log files is essential for the operation of the website. There is no right to object to this processing due to the exception under Article 21(1) GDPR. Insofar as the further storage of log files is legally required, the processing is based on Article 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website is technically impossible without providing this data.

 

Storage duration

The aforementioned data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session ends. In the case of data stored in log files, this is the case after a maximum of 10 days. Storage beyond this period is possible. In this case, the user's IP address will be deleted or anonymized by us so that it is no longer possible to identify the requesting client and the data no longer contains any personal information.

Contact form

Type and scope of processing

You can contact us via our contact form and the provided email address. In this case, the personal data of the sender (i.e., the user) transmitted with the inquiry will be stored. We sometimes use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.


Purpose and legal basis

The legal basis for processing this data, which is transmitted in the course of submitting an inquiry, is Article 6(1)(f) GDPR (legitimate interests of us as the data controller)
If your request, for example via our quote request form, aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR (performance of a contract, pre-contractual measures)

We process this personal data to handle your contact request and to create a requested offer or order.
 

Storage duration

The above-mentioned data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
 

For personal data transmitted via email, the contact form, or the inquiry form, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

 

Right to object

The user has the right to object to data processing at any time. Objections should be sent to the following email address:tricos. In this case, all personal data stored during the contact process will be deleted, unless a legal retention period prevents deletion.

 

Registering a customer account

Type and scope of processing

As part of the order processing, we collect your personal data to register a customer account. You can choose whether to order as a guest or register a permanent user account. The information collected via the mandatory fields during registration is identical in both cases and is required for processing the order in the online shop. When registering a permanent user account, we also collect a password that you choose yourself. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the order.

Your personal data will only be passed on to third parties (e.g. shipping service providers / forwarding agents) and processors in accordance with Art. 28 GDPR to the extent necessary for processing the order.

 

Purpose and legal basis

We process your personal data for the purpose of registering a customer account in order to fulfill a contract with you in accordance with Article 6(1)(b) GDPR. There is a contractual obligation to provide your data insofar as it relates to the mandatory fields, as this information is necessary for identifying you and for us to fulfill the contract. There is no legal obligation to provide this data. Without providing this information, placing an order in our online shop and thus concluding a contract is not possible. There is no obligation to provide the additional information you voluntarily provide. Ordering in our online shop is also possible without disclosing this voluntary information.

The additional processing of your password for the registration of a permanent user account is carried out for the purpose of providing a customer account, displaying your previous purchases, and storing your purchase-related data (e.g., billing address, various delivery addresses) based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deleting your customer account pursuant to Art. 7 para. 3 GDPR.

 

Storage duration

If you order as a guest, we store your personal data until your order is fully processed (contract end). If you register a permanent customer account, we store the purchase-related data beyond the end of the contract until you withdraw your consent (delete your customer account). In both cases, your data will only be stored further if there are legal retention obligations (for example, tax and commercial law).

Presence on social media platforms

We maintain so-called fan pages, accounts, or channels on the networks listed below to provide you with information and offers within social networks and to offer you further ways to contact us and learn about our services. Below, we inform you about the data we, or the respective social network, process from you in connection with accessing and using our fan pages/accounts.

 

Data we process from you

If you wish to contact us via Messenger or Direct Message through the respective social network, we generally process your username, which you use to contact us, and may store other data you provide insofar as this is necessary to process/respond to your request.

The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).

 

(Static) usage data that we receive from social networks

We receive automated statistics about our accounts via Insights functionalities. These statistics include, among other things, the total number of page views, likes, information on page activity and post interactions, reach, video views, and information on the proportion of men/women among our fans/followers.

The statistics contain only aggregated data that cannot be linked to individual persons. You cannot be identified through this data.

 

What data social networks process about you

To view the content of our fan pages or accounts, you do not need to be a member of the respective social network and therefore no user account for the respective social network is required.

Please note that when you access a social network, it collects and stores data from website visitors even if they don't have a user account (e.g., technical data to display the website to you) and uses cookies and similar technologies, over which we have no control. For details, please refer to the privacy policies of the respective social networks (see the links above)

If you wish to interact with the content on our fan pages/accounts, e.g., by commenting on, sharing or liking our posts and/or contacting us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no control over the data processing carried out by social networks when you use them. To the best of our knowledge, your data is stored and processed primarily in connection with providing the services of the respective social network, and also for analyzing user behavior (using cookies, pixels/web beacons, and similar technologies). This analysis is used to display interest-based advertising both within and outside the respective social network. It cannot be ruled out that your data may also be stored by the social networks outside the EU/EEA and shared with third parties.

Information regarding the exact scope and purposes of processing your personal data, storage duration/deletion, and guidelines for the use of cookies and similar technologies during registration and use of social networks can be found in the privacy policies/cookie policies of the social networks. There you will also find information about your rights and options to object.

Facebook page

When you visit our Facebook page, Facebook (meta) collects, among other things, your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Facebook page, with statistical information about the use of the page. Further information is available from Facebook at the following link: https://facebook.com/help/pages/insights.

The statistical information provided does not allow us to draw conclusions about individual users. We only use this information to better understand the interests of our users and to continuously improve and ensure the quality of our online presence.

We collect your data via our fan page solely to enable communication and interaction with us. This collection typically includes your name, message content, comment content, and the profile information you have made publicly available.

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 f) GDPR. If you, as a user, have given your consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6 para. 1 a) and Art. 7 GDPR.

Because the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (requests for information, deletion requests, objections, etc.). The most effective way to assert these rights is therefore directly with the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted against Meta Platforms Ireland Ltd. as well as against us.

According to the GDPR, Facebook bears primary responsibility for the processing of Insights data and fulfills all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. provides the essential information of the Page Insights Supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly on Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including details on the exact scope and purposes of processing your personal data, storage duration/deletion, and guidelines on the use of cookies and similar technologies during registration and use, can be found in Facebook's Privacy Policy/Cookie Policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram page

When you visit our Instagram page, Instagram collects, among other things, your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operators of the Instagram page, with statistical information about the use of the page. Further information is available from Instagram at the following link: https://facebook.com/help/pages/insights.

The statistical information provided does not allow us to draw conclusions about individual users. We only use this information to better understand the interests of our users and to continuously improve and ensure the quality of our online presence.

We collect your data via our fan page solely to enable communication and interaction with us. This collection typically includes your name, message content, comment content, and the profile information you have made publicly available.

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 f) GDPR. If you, as a user, have given your consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6 para. 1 a) and Art. 7 GDPR.

Because the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (requests for information, deletion requests, objections, etc.). The most effective way to assert these rights is therefore directly with the respective provider.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Facebook Ireland as well as with us.

According to the GDPR, Instagram bears primary responsibility for the processing of Insights data, and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data. Facebook Ireland provides the essential information of the Page Insights Supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data and all other information arising from Article 13 GDPR, including legal basis, identity of the controller and storage duration of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

LinkedIn page

LinkedIn is a social network operated by LinkedIn Inc., headquartered in Sunnyvale, California, USA. It allows individuals and companies to create personal and professional profiles. Users can maintain existing contacts and build new ones within the network. Companies and other organizations can create profiles where they upload photos and other company information to present themselves as employers and recruit staff. Other LinkedIn users can access this information and write their own articles and share this content with others. The network focuses on professional exchange about industry topics with people who share similar professional interests.

When using or visiting the network, LinkedIn automatically collects data from users or visitors during their visit, such as username, job title, and IP address. This is done using various tracking technologies. LinkedIn uses this collected data to provide users with information, offers, and recommendations, among other things.

We collect your data via our company profile solely to enable communication and interaction with us. This collection typically includes your name, message content, comment content, and profile information you have made publicly available.

The processing of your personal data for the purposes mentioned above is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 f GDPR. If you, as a user, have given your consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6 para. 1 a, Art. 7 GDPR.

Because the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (requests for information, deletion requests, objections, etc.). The most effective way to assert these rights is therefore directly with the respective provider.

We are jointly responsible with LinkedIn for the personal content on our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.

We do not make any decisions regarding the data collected on LinkedIn's website using tracking technologies.

For more information about LinkedIn, please visit: https://about.linkedin.com.

Further information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.

Further information on data retention/deletion and guidelines on the use of cookies and similar technologies during registration and use of LinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.

Information about your right to object under Article 21 GDPR

Right to object on a case-by-case basis

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR (processing based on legitimate interests).

Right to object to the processing of data for advertising purposes

You have the right to object at any time to the processing of your personal data for direct marketing purposes. This also applies to profiling insofar as it is related to such direct marketing. The objection can be made informally.

Google Ads

Type and scope of processing

We have integrated Google Ads into our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyze user behavior and recognize returning users.

Google Ads collects information about visitor behavior across various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifying information, such as your user agent, are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate your visit with your account. Even if you are not registered with Google Ireland Limited or are not logged in, it is possible that the provider can determine and store your IP address and other identifying information.

In this case, your data will be shared with the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Purpose and legal basis

The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfers to the USA are carried out in accordance with Article 45(1) GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-US Data Protection Framework), we have agreed on other appropriate safeguards with the recipients of the data in accordance with Articles 44 et seq. of the GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can find a copy of these standard contractual clauses at [link to relevant page] https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE view.

Furthermore, before any such transfer to a third country, we obtain your consent in accordance with Article 49(1)(a) GDPR, which you grant via the consent form in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are not fully understood in detail (e.g., data processing by security authorities of the third country, the exact scope and consequences of which for you are unknown to us, over which we have no influence, and of which you may not be aware).

 

Storage duration

We have no control over the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google Ads privacy policy: policies.google.com/privacy.

Google DoubleClick

Type and scope of processing

We have integrated components from Google DoubleClick into our website. DoubleClick is a Google brand under which specialized online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression, click, or other activity.

Each of these data transfers triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is necessary for the technical processing of the ad. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick can also use the cookie ID to track which advertisements have already been displayed in a browser, thus preventing duplicate displays. Furthermore, the cookie ID allows DoubleClick to track conversions. Conversions are recorded, for example, when a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website using the same web browser.

A DoubleClick cookie does not contain any personally identifiable information, but it may contain additional campaign identifiers. A campaign identifier serves to identify campaigns with which you have already interacted on other websites. As part of this service, Google receives data that it also uses to generate commission statements. Among other things, Google can track whether you have clicked on certain links on our website. In this case, your data is transferred to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection regulations of DoubleClick by Google can be found at [link to DoubleClick by Google's privacy policy] policies.google.com/privacy can be retrieved.

 

Purpose and legal basis

We process your data using the DoubleClick cookie for the purpose of optimizing and displaying advertising based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. The cookie is used, among other things, to deliver and display user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie serves to prevent the same advertisement from being displayed multiple times. Each time you access a page on our website that has a DoubleClick component integrated into it, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purposes of online advertising and commission billing. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can still visit our website without restriction, however, some functions may not be fully available.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfers to the USA are carried out in accordance with Article 45(1) GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-US Data Protection Framework), we have agreed on other appropriate safeguards with the recipients of the data in accordance with Articles 44 et seq. of the GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can find a copy of these standard contractual clauses at [link to relevant page] https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE view.

Furthermore, before any such transfer to a third country, we obtain your consent in accordance with Article 49(1)(a) GDPR, which you grant via the consent form in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are not fully understood in detail (e.g., data processing by security authorities of the third country, the exact scope and consequences of which for you are unknown to us, over which we have no influence, and of which you may not be aware).

 

Storage duration

We have no control over the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google DoubleClick privacy policy: policies.google.com/privacy.

Google Tag Manager

Type and scope of processing

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via a single interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

 

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfers to the USA are carried out in accordance with Article 45(1) GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF).

In cases where no adequacy decision by the European Commission exists (including US companies not certified under the EU-US Data Protection Framework), we have agreed on other appropriate safeguards with the recipients of the data in accordance with Articles 44 et seq. of the GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can find a copy of these standard contractual clauses at [link to relevant page] https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE view.

Furthermore, before any such transfer to a third country, we obtain your consent in accordance with Article 49(1)(a) GDPR, which you grant via the consent form in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are not fully understood in detail (e.g., data processing by security authorities of the third country, the exact scope and consequences of which for you are unknown to us, over which we have no influence, and of which you may not be aware).

 

Storage duration

We have no control over the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google Tag Manager privacy policy marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Last updated on June 5, 2025, at 12:03 PM by Barth Regelwerk GmbH