Automatic Data RetentionEvery time you visit a website nowadays, certain information is automatically created and stored, just as it happens on this website. This data should be collected as sparingly as possible, and only with good reason. By website, we mean the entirety of all websites on your domain, i.e. everything from the homepage to the very last subpage (like this one here). By domain, we mean example.uk or examplepage.com. Even while you are currently visiting our website, our web server – this is the computer this website is stored on, usually automatically retains data such as the below – for reasons such as operational security or for creating access statistics, etc.
- the full address (URL) of the accessed website (e.g., https://www.examplepage.uk/examplesubpage.html/)
- browser and browser version (e.g., Chrome 87)
- the operating system used (e.g., Windows 10)
- the address (URL) of the previously visited site (referrer URL) (e.g. https://www.examplepage.uk/icamefromhere.html/)
- the host name and the IP address of the device the website is accessed from (e.g., COMPUTERNAME and 220.127.116.11)
- date and time
- in so-called web server log files.
- at least 4096 bytes per cookie
- at least 50 cookies per domain
- at least 3000 cookies in total
Essential CookiesThese cookies are necessary to ensure the basic function of a website. They are needed when a user for example puts a product into their shopping cart, then continues surfing on different websites and comes back later in order to proceed to the checkout. Even when the user closed their window priorly, these cookies ensure that the shopping cart does not get deleted.
Purposive CookiesThese cookies collect info about user behavior and record if the user potentially receives any error messages. Furthermore, these cookies record the website’s loading time as well as its behavior within different browsers.
Target-Orientated CookiesThese cookies care for improved user-friendliness. Thus, information such as previously entered locations, fonts, or data in forms stays saved.
Advertising CookiesThese cookies are also known as targeting-Cookies. They serve the purpose of delivering individually adapted advertisements to the user. This can be very practical, but also rather annoying. Upon your first visit to a website, you are usually asked which of these cookie types you want to accept. Furthermore, this decision will of course also be saved in a cookie.
Storage of Personal DataAny personal data you electronically submit to us on this website, such as your name, email address, home address, or other personal information you provide via the transmission of a form or via any comments to the blog, are solely used for the specified purpose and get stored securely along with the respective submission times and IP-address. These data do not get passed on to third parties. Therefore, we use personal data for the communication with only those users, who have explicitly requested being contacted, as well as for the execution of the services and products offered on this website. We do not pass your personal data to others without your approval, but we cannot exclude the possibility this data will be looked at in case of illegal conduct. If you send us personal data via email – and thus not via this website – we cannot guarantee any safe transmission or protection of your data. We recommend you, to never send confidential data via email.
Rights in accordance with the General Data Protection RegulationYou are granted the following rights in accordance with the provisions of the GDPR (General Data Protection Regulation) and the Austrian Data Protection Act (DSG):
- right to rectification (article 16 GDPR)
- right to erasure (“right to be forgotten“) (Article 17 GDPR)
- right to restrict processing (Article 18 GDPR)
- right to notification – notification obligation regarding rectification or erasure of personal data or restriction of processing (Article 19 GDPR)
- right to data portability (article 20 GDPR)
- Right to object (article 21 GDPR)
- right not to be subject to a decision based solely on automated processing – including profiling – (article 22 GDPR)
TLS encryption with httpsThe terms TLS, encryption, and https sound very technical, which they are indeed. We use HTTPS (Hypertext Transfer Protocol Secure) to securely transfer data on the Internet. This means that the entire transmission of all data from your browser to our web server is secured – nobody can “listen in”. We have thus introduced an additional layer of security and meet privacy requirements through technology design Article 25 Section 1 GDPR). With the use of TLS (Transport Layer Security), which is an encryption protocol for safe data transfer on the internet, we can ensure the protection of confidential information. You can recognize the use of this safeguarding tool by the little lock-symbol , which is situated in your browser’s top-left corner in the left of the internet address (e.g. example page.uk), as well as by the display of the letters https (instead of http) as a part of our web address. If you want to know more about encryption, we recommend you do a Google search for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.
What are Google Fonts?Google Fonts (previously Google Web Fonts) is a list of over 800 fonts which Google LLC provides to its users for free. Many of these fonts have been published under the SIL Open Font License license, while others have been published under the Apache license. Both are free software licenses.
Why do we use Google Fonts on our website?With Google Fonts we can use different fonts on our website and do not have to upload them to our own server. Google Fonts is an important element that helps to keep the quality of our website high. All Google fonts are automatically optimized for the web, which saves data volume and is an advantage especially for the use of mobile terminal devices. When you use our website, the low data size provides fast loading times. Moreover, Google Fonts are secure Web Fonts. Various image synthesis systems (rendering) can lead to errors in different browsers, operating systems, and mobile terminal devices. These errors could optically distort parts of texts or entire websites. Due to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts. All common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) are supported by Google Fonts, and it reliably operates on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We also use Google Fonts for presenting our entire online service as pleasantly and as uniformly as possible.
Which data is saved by Google?Whenever you visit our website, the fonts are reloaded by a Google server. Through this external cue, data gets transferred to Google’s servers. Therefore, this makes Google recognize that you (or your IP address) are visiting our website. The Google Fonts API was developed to reduce the usage, storage, and gathering of end-user data to the minimum needed for the proper depiction of fonts. What is more, API stands for Application Programming Interface and works as a software data intermediary. Google Fonts stores CSS and font requests safely with Google, and therefore it is protected. Using its collected usage figures, Google can determine how popular the individual fonts are. Google publishes the results on internal analysis pages, such as Google Analytics. Moreover, Google also utilizes data of its own web crawler, in order to determine which websites are using Google fonts. This data is published in Google Fonts’ BigQuery database. Entrepreneurs and developers use Google’s web services BigQuery to be able to inspect and move big volumes of data. One more thing that should be considered, is that every request for Google Fonts automatically transmits information such as language preferences, IP address, browser version, as well as the browser’s screen resolution and name to Google’s servers. It cannot be clearly identified if this data is saved, as Google has not directly declared it.
How long and where is the data stored?Google saves requests for CSS assets for one day in a tag on their servers, which are primarily located outside of the EU. This makes it possible for us to use the fonts by means of a Google stylesheet. With the help of a stylesheet, e.g. designs or fonts of a website can get changed swiftly and easily. Any font-related data is stored with Google for one year. This is because Google’s aim is to fundamentally boost websites’ loading times. With millions of websites referring to the same fonts, they are buffered after the first visit and instantly reappear on any other websites that are visited thereafter. Sometimes Google updates font files to either reduce the data sizes, increase the language coverage, or improve the design.
How can I delete my data or prevent it from being stored?The data Google stores for either a day or a year cannot be deleted easily. Upon opening the page this data is automatically transmitted to Google. In order to clear the data ahead of time, you have to contact Google’s support. The only way for you to prevent the retention of your data is by not visiting our website. Unlike other web fonts, Google offers us unrestricted access to all its fonts. Thus, we have a vast sea of font types at our disposal, which helps us to get the most out of our website. You can find more answers and information on Google Fonts here. While Google does address relevant elements on data protection at this link, it does not contain any detailed information on data retention. It proofs rather difficult to receive any precise information on stored data by Google. You can read more about what data is generally collected by Google and what this data is used for on the Google website.
What is Google Analytics?Google Analytics is a tracking tool with the purpose of conducting data traffic analysis of our website. For Google Analytics to work, there is a tracking code integrated into our website. Upon your visit to our website, this code records various actions you perform on your website. As soon as you leave our website, this data is sent to the Google Analytics server, where it is stored. Google processes this data and we then receive reports on your user behavior. These reports can be one of the following:
- Target audience reports: With the help of target audience reports we can get to know our users better and can therefore better understand who is interested in our service.
- Advertising reports: Through advertising reports, we can analyze our online advertising better and hence improve it.
- Acquisition reports: Acquisition reports provide us helpful information on how we can get more people enthusiastic about our service.
- Behavior reports: With these reports, we can find out how you interact with our website. By the means of behavior reports, we can understand what path you go on our website and what links you click.
- Conversion reports: A conversion is a process of leading you to carry out the desired action due to a marketing message. An example of this would be transforming you from a mere website visitor into a buyer or a newsletter subscriber. Hence, with the help of these reports, we can see in more detail, if our marketing measures are successful with you. Our aim is to increase our conversion rate.
- Real-time reports: With the help of these reports, we can see in real time, what happens on our website. It makes us for example see, we can see how many users are reading this text right now.
Why do we use Google Analytics on our website?The objective of our website is clear: We want to offer you the best possible service. Google Analytics’ statistics and data help us with reaching this goal. Statistically evaluated data give us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our page in a way, that makes it easier to be found by interested people on Google. On the other hand, the data helps us to get a better understanding of you as our visitor. Therefore, we can very accurately find out what we must improve on our website, in order to offer you the best possible service. The analysis of that data also enables us to carry out our advertising and marketing measures in a more individual and more cost-effective way. After all, it only makes sense to show our products and services exclusively to people who are interested in them.
What data gets stored by Google Analytics?With the aid of a tracking code, Google Analytics creates a random, unique ID that is connected to your browser cookie. That way, Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a “recurring” user. All data that is collected gets saved together with this very user ID. Only this is how it is made possible for us to evaluate and analyze pseudonymous user profiles. Your interactions on our website are measures by tags such as cookies and app instance IDs. Interactions are all kinds of actions that you perform on our website. If you are also using other Google systems (such as a Google Account), data generated by Google Analytics can be linked with third-party cookies. Google does not pass on any Google Analytics data unless we as the website owners authorize it. In case it is required by law, exceptions can occur. The following cookies are used by Google Analytics: Name: _ga Value:2.1326744211.152111677938-5 Purpose: By default, analytics.js uses the cookie _ga, to save the user ID. It generally serves the purpose of differentiating between website visitors. Expiration date: After 2 years Name: _gid Value:2.1687193234.152111677938-1 Purpose: This cookie also serves the purpose of differentiating between website users Expiration date: After 24 hours Name: _gat_gtag_UA_ Value: 1 Purpose: It is used for decreasing the demand rate. If Google Analytics is provided via Google Tag Manager, this cookie gets the name _dc_gtm_. Expiration date: After 1 minute Name: AMP_TOKEN Value: No information Purpose: This cookie has a token that is used to retrieve the user ID by the AMP Client ID Service. Other possible values suggest a logoff, a request, or an error. Expiration date: After 30 seconds up to one year Name: __utma Value:1564498958.1564498958.1564498958.1 Purpose: With this cookie, your behavior on the website can be tracked and the site performance can be measured. The cookie is updated every time the information is sent to Google Analytics. Expiration date: After 2 years Name: __utmt Value: 1 Purpose: Just like _gat_gtag_UA_ this cookie is used for keeping the requirement rate in check. Expiration date: Afer 10 minutes Name: __utmb Value:3.10.1564498958 Purpose: This cookie is used to determine new sessions. It is updated every time new data or information gets sent to Google Analytics. Expiration date: After 30 minutes Name: __utmc Value: 167421564 Purpose: This cookie is used to determine new sessions for recurring visitors. It is therefore a session cookie, and only stays saved until you close the browser again. Expiration date: After closing the browser Name: __utmz Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/ Purpose: This cookie is used to identify the source of our website’s visitor number. This means, that the cookie saves information on where you came to our website from. This could be another site or an advertisement. Expiration date: After 6 months Name: __utmv Value: No information Purpose: The cookie is used to store custom user data. It gets updated whenever information is sent to Google Analytics. Expiration date: After 2 years Note: This list is by no means exhaustive since Google is repeatedly changing the use of its cookies. Below we will give you an overview of the most important data that can be evaluated by Google Analytics: Heatmaps: Google creates so-called Heatmaps. These Heatmaps make it possible to see the exact areas you click on, so we can get information on what routes you make on our website. Session duration: Google calls the time you spend on our website without leaving it session duration. Whenever you are inactive for 20 minutes, the session ends automatically. Bounce rate If you only look at one page of our website and then leave our website again, it is called a bounce. Account creation: If you create an account or make an order on our website, Google Analytics collects this data. IP-Address: The IP address is only shown in a shortened form, to make it impossible to clearly allocate it. Location: Your approximate location and the country you are in can be defined by the IP address. This process is called IP location determination. Technical information: Information about your browser type, your internet provider, and your screen resolution is called technical information. Source: Both, Google Analytics as well as ourselves, are interested in what website or what advertisement led you to our site. Further, possibly stored data includes contact data, potential reviews, playing media (e.g., when you play a video on our site), sharing of content via social media, or adding our site to your favorites. This list is not exhaustive and only serves as general guidance on Google Analytics’ data retention.
How long and where is the data saved?Google has servers across the globe. Most of them are in America and therefore your data is mainly saved on American servers. Here you can read detailed information on where Google’s data centers are located. Your data is allocated to various physical data mediums. This has the advantage of allowing to retrieve the data faster, and of protecting it better from manipulation. Every Google data center has respective emergency programs for your data. Hence, in case of a hardware failure at Google or a server error due to natural disasters, the risk for a service interruption stays relatively low. Google Analytics has a 26-month standardized period of retaining your user data. After this time, your user data is deleted. However, we have the possibility to choose the retention period of user data ourselves. There are the following five options:
- Deletion after 14 months
- Deletion after 26 months
- Deletion after 38 months
- Deletion after 50 months
- No automatic deletion
Google Analytics IP AnonymisationWe implemented Google Analytics’ IP address anonymization to this website. Google developed this function, so this website can comply with the applicable privacy laws and the local data protection authorities’ recommendations, should they prohibit the retention of any full IP addresses. The anonymization or masking of IP addresses takes place, as soon as they reach Google Analytics’ data collection network, but before the data would be saved or processed. You can find more information on IP anonymization here.
Google Analytics Reports on demographic characteristics and interestsWe have turned on Google Analytics’ functions for advertising reports. These reports on demographic characteristics and interests contain details about age, gender, and interests. Through them, we can get a better picture of our users – without being able to allocate any data to individual persons. You can learn more about advertising functions here. You can terminate the use of your Google Account’s activities and information using a checkbox in the Ads Settings.
How long and where is the data saved?When Google stores data, this is done on Google’s own servers. These servers are located all over the world, with most of them being in America. You can read in detail where Google’s servers are here. In our individual data protection texts on the different tools, you can find out how long the respective tracking tools save your data.
How can I delete my data or prevent data retention?Google Tag Manager itself does not set any cookies but manages different tracking websites’ tags. In our data protection texts on the different tracking tools, you can find detailed information on how you can delete or manage your data. Google actively participates in the EU-U.S. Privacy Shield Framework, which regulates the safe transfer of personal data. You can find more information here. If you want to learn more about Google Tag Manager, go here.
What is Hotjar?As mentioned in the above paragraph, Hotjar helps us analyze the behavior of our site visitors. Some of the tools Hotjar offers are e.g. heatmaps, conversion funnels, visitor recording, incoming feedback, feedback polls, and surveys. Therewith, Hotjar helps us to provide you a better user experience as well as an improved service. On the one hand, it offers a good analysis of online behavior and on the other hand, it gives us good feedback on our website’s quality. Besides the analytical aspects we of course also want to know your opinion about our website. This is possible thanks to the feedback tool.
Why do we use Hotjar on our website?Within the last years, the importance of websites’ user experience has gained importance. And justifiably so – a website should be structured in a way that makes the user feel comfortable and is easy to navigate. Thanks to Hotjar’s analysis and the feedback tools, we can make our website and our offer more attractive. To us, Hotjar’s Heatmaps has proven particularly valuable, as it helps with presenting and visualizing data. In that sense, Hotjar’s Heatmaps help us see what you like to click on and where you scroll to, for example.
What data is saved by Hotjar?Hotjar automatically collects information on your user behavior while you surf our website. In order to be able to collect this information, we implemented a tracking code. We integrated a tracking code, to be able to collect this information. The following data can be gathered via your computer or your browser:
- Your computer’s IP address (is collected and saved in an anonymous format)
- Screen size
- Browser information (which browser and version etc.)
- Your location (but only the country)
- Your language preference
- Visited websites (subpages)
- Date and time of access to one of our subpages (websites)
How long and where is the data saved?We integrated a tracking code to our website, which is transmitted to Hotjar’s servers in Ireland (EU). This tracking code contacts Hotjar’s servers and sends a script to your computer or any terminal device with which you are accessing our website. The script collects certain data concerning your interaction with our website. Then, the data is sent to Hotjar’s servers for processing. Moreover, Hotjar imposed a limit of retaining data for up to 365 days on itself. This means that all data collected by Hotjar which is over one year old are deleted automatically.
What is Google Ads conversion tracking?Google Ads (previously Google AdWords) is the internal online advertising system of the company Google LLC. We are convinced of our offer’s quality and would like as many people as possible to discover our website. For this, Google Ads offers the best platform within the online environment. Of course, we also want to get an overview of the cost-benefit factor of our advertising campaigns. Thence, we use Google Ads’ conversion tracking tool. But what is a conversion actually? A conversion occurs when you turn from an interested visitor into an acting website visitor. This happens every time you click on our ad and then make another action, such as paying a visit to our website. With Google’s conversion tracking tool, we can understand what happens after a user clicks our Google ad. It shows us for instance if products get bought, services are used, or whether users have subscribed to our newsletter.
Why do we use Google Ads conversion tracking on our website?We use Google Ads to show our offer also across other websites. Our aim is for our advertising campaigns to reach only those people, who are interested in our offers. With the conversion tracking tool, we see what keywords, ads, ad groups, and campaigns lead to the desired customer actions. We see how many customers interact with our ads on a device, to then convert. With this data, we can calculate our cost-benefit factor, measure the success of individual ad campaigns, and therefore optimize our online marketing measures. With the help of the obtained data, we can give our website a more interesting design and customize our advertising offer better to your needs.
What data is stored with Google Ads conversion tracking?For a better analysis of certain user actions, we have integrated a conversion tracking tag or code snippet into our website. Therefore, if you click one of our Google ads, a Google domain stores the cookie “conversion” on your computer (usually in the browser) or on your mobile device. Cookies are little text files that save information on your computer. Here are data of the most significant cookies for Google’s conversion tracking: Name: Conversion Value: EhMI_aySuoyv4gIVled3Ch0llweVGAEgt-mr6aXd7dYlSAGQ111677938-3 Purpose: This cookie saves every conversion you make on our website after you came to us via a Google ad. Expiry date: after 3 months Name: _gac Value: 1.1558695989.EAIaIQobChMIiOmEgYO04gIVj5AYCh2CBAPrEAAYASAAEgIYQfD_BwE Purpose: This is a classic Google Analytics Cookie that records various actions on our website. Expiry date: after 3 months Note: The cookie _gac only appears in connection with Google Analytics. The above list does not claim to be exhaustive, as Google repeatedly changes the cookies they use for analytical evaluation. As soon as you complete an action on our website, Google identifies the cookie and saves your action as a so-called conversion. For as long as you surf our website, provided the cookie has not expired, both Google and us can determine that you found your way to us via a Google ad. Then, the cookie is read and sent back to Google Ads, together with the conversion data. Moreover, other cookies may also be used for measuring conversions. Google Ads conversion tracking can be fine-tuned and improved with the aid of Google Analytics. Furthermore, ads that Google displays in various places across the web, might be placed under our domain with the name “__gads” or “_gac”. Since September 2017, analytics.js retains various campaign information with the _gac cookie. This cookie stores data as soon as you open one of our sites that has been set up for Google Ads’ auto-tagging. In contrast to cookies that are placed for Google domains, Google can only read these conversion cookies when you are on our website. We do neither collect nor receive any personal data. We do obtain a report with statistical evaluations by Google. With the help thereof, we can not only see the total number of users who clicked our ad but also what advertising measures were well received.
How long and where is the data stored?At this point, we want to reiterate, that we have no influence on how Google uses the collected data. According to Google, the data are encrypted and saved on a secure server. In most cases, conversion cookies expire after 30 days and do not transmit any personalized data. The cookies named “conversion“ and “_gac“ (which is used with Google Analytics) have an expiry date of 3 months.
- Instagram Data Policy
- Facebook Data Policy
Facebook Data PolicyWe use selected Facebook tools on our website. Facebook is a social media network of the company Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. With the aid of this tool, we can provide the best possible offers to you and anyone interested in our products and services. In the following, we will give you an overview of the different Facebook tools, as well as on what data is sent to Facebook and how you can delete these data.
What are Facebook tools?Along with many other products, Facebook also offers so-called “Facebook Business Tools”. This is Facebook’s official name for the tools, but it is not very common. Therefore, we decided to merely call them “Facebook tools”. They include the following:
- Facebook Pixel
- Social plugins, such as the Like or Share button
- Facebook Login
- Account Kit
- APIs (application programming interface)
- SDKs (software development kits)
- Platform integrations
- Technologies and services
Why do we use Facebook tools on our website?We only want to show our services and products to people who are genuinely interested in them. With the help of advertisements (Facebook Ads), we can reach exactly these people. However, to be able to show suitable adverts to users, Facebook requires additional information on people’s needs and wishes. Therefore, information on the user behavior (and contact details) on our website, are provided to Facebook. Consequently, Facebook can collect better user data and is able to display suitable adverts for our products or services. Thanks to the tools it is possible to create targeted, customized ad campaigns for Facebook. Facebook calls data about your behavior on our website “event data” and uses them for analytics services. That way, Facebook can create “campaign reports” about our ad campaigns’ effectiveness on our behalf. Moreover, by analyses, we can get a better insight into how you use our services, our website, or our products. Therefore, some of these tools help us optimize your user experience on our website. With the social plugins, for instance, you can share our site’s contents directly on Facebook.
What data is saved by the Facebook tools?With the use of the Facebook tools, personal data (customer data) may be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number, and IP address may be transmitted. Facebook uses this information to match the data with the data it has on you (if you are a Facebook member). However, before the customer data is transferred to Facebook, a so-called “Hashing” takes place. This means, that a data record of any size is transformed into a string of characters, which also has the purpose of encrypting data. Moreover, not only contact data but also “event data“ are transferred. These data are the information we receive about you on our website. To give an example, it allows us to see what subpages you visit or what products you buy from us. Facebook does not disclose the obtained information to third parties (such as advertisers) unless the company has explicit permission or is legally obliged to do so. Also, “event data“ can be linked to contact information, which helps Facebook to offer improved, customized adverts. Finally, after the previously mentioned matching process, Facebook deletes the contact data. To deliver optimized advertisements, Facebook only uses event data, if they have been combined with other data (that have been collected by Facebook in other ways). Facebook also uses event data for the purposes of security, protection, development, and research. Many of these data are transmitted to Facebook via cookies. Cookies are little text files, that are used for storing data or information in browsers. Depending on the tools used, and on whether you are a Facebook member, a different number of cookies are placed in your browser. In the descriptions of the individual Facebook tools, we will go into more detail on Facebook cookies. You can also find general information about the use of Facebook cookies here.
How long and where are the data saved?Facebook fundamentally stores data, until they are no longer of use for their own services and products. Facebook has servers for storing its data all around the world. However, customer data is cleared within 48 hours after they have been matched with their own user data.
How can I delete my data or prevent data retention?In accordance with the General Data Protection Regulation (GDPR), you have the right to information, rectification, transfer, and deletion of your data. The collected data is only fully deleted when you delete your entire Facebook account. Deleting your Facebook account works as follows:
- Click on Settings on the top right side of Facebook.
- Then, click “Your Facebook information“ in the left column.
- Now click on “Deactivation and deletion”.
- Choose “Permanently delete account“ and then click on “Continue to account deletion“.
- Enter your password, click “Continue“ and then “Delete account“.
- “Save” button
- “Like” button, Share, Send and Quote
- Page plugin
- Messenger plugin
- Embedded posts and video player
- Group plugin
What is Twitter?For some, Twitter is a news service, for others, a social media platform, and for others still, it is a microblogging service. All these terms are justified and mean pretty much the same. Both individuals, as well as companies, use Twitter for communicating with interested people via short messages. Twitter only allows 280 characters per message. These messages are called “tweets”. In contrast to Facebook, for example, the service does not focus on the expansion of a network of “friends”, but strives to be regarded as an open, worldwide news platform. On Twitter you can also have an anonymous account and tweets can be deleted by both, either the company or the users themselves.
Why do we use Twitter on our website?Like many other websites and companies, we try to use different channels for offering our services and communicating with our customers. Twitter is a truly useful “small” news service, which is why it has grown dear to us. We regularly tweet or retweet exciting, funny, or interesting content. We understand that you do not have the time to follow every channel after channel, as you surely have enough other things to do. That is why we also have integrated Twitter functions into our website. That way, you can experience our Twitter activities “on-site” or come to our Twitter page via a direct link. With the integration, we want to strengthen the service and user-friendliness of our website.
What data is stored by Twitter?You will find integrated Twitter functions on some of our subpages. If you interact with Twitter content, such as by clicking a button, Twitter may collect and save data. This can happen even if you don’t have a Twitter account yourself. Twitter calls this data “log data”. It includes demographic data, browser cookie IDs, your smartphone’s ID, hashed email addresses, and information on which pages you have visited on Twitter and what actions you have taken there. Of course, Twitter stores more data if you have a Twitter account and are logged in. This retention is usually done via cookies. Cookies are small text files that are usually set in your browser and transmit various information to Twitter. We will now show you which cookies are placed if you are not logged in to Twitter but visit a website with built-in Twitter functions. Please consider this list as an example. We do not claim for this list to be extensive, since the array of cookies always changes and depends on your individual actions with Twitter content. The following cookies have been used in our test: Name: personalization_id Value: “v1_cSJIsogU51SeE111677938” Purpose: This cookie stores information on how you use the website and what ad may have led you to Twitter. Expiry date: after 2 years Name: lang Value: en Purpose: This cookie stores your default or preferred language. Expiry date: after the end of the session Name: guest_id Value: 111677938v1%3A157132626 Purpose: This cookie is set to identify you as a guest. Expiry date: after 2 years Name: fm Value: 0 Purpose: Unfortunately, we could not find out the purpose of this cookie. Expiry date: after the end of the session Name: external_referer Value: 1116779382beTA0sf5lkMrlGt Purpose: This cookie collects anonymous data, such as how often you visit Twitter and how long you visit Twitter. Expiry date: after 6 days Name: eu_cn Value: 1 Purpose: This cookie stores user activity and is used for Twitter’s various advertising purposes. Expiry date: after one year Name: ct0 Value: c1179f07163a365d2ed7aad84c99d966 Purpose: Unfortunately, we could not find any information on this cookie. Expiry date: after 6 hours Name: _twitter_sess Value: 53D%253D–dd0248111677938- Purpose: With this cookie, you can use functions within Twitter’s website. Expiry date: after the end of the session Note: Twitter also works with third parties. Therefore, we have recognized the three Google Analytics cookies _ga, _gat, _gid in our test. On the one hand, Twitter uses the collected data for gaining a better understanding of user behavior, and thus to improve their own services and advertising offers. On the other hand, the data are also used for internal security measures.
How long and where are the data stored?When Twitter collects data from other websites, after a maximum of 30 days, they will be deleted, summarized, or otherwise concealed. Twitter’s servers are in various server centers in the United States. Accordingly, it can be assumed that the gathered data will be collected and stored in America. In our research, we could not clearly determine whether Twitter also owns servers in Europe. Generally, Twitter may keep collected data stored until either the data are no longer useful to the company until you delete the data or until a potential legal deletion period has been reached.
What is LinkedIn?LinkedIn is the largest social network for business contacts. In contrast to e.g. Facebook, LinkedIn focuses exclusively on establishing business connections. Therefore, companies can present services and products on the platform and establish business relationships. Many people also use LinkedIn to find a job or to find suitable employees for their own company. In Germany alone, the network has over 11 million members. In Austria, there are about 1.3 million.
Why do we use LinkedIn on our website?We know how busy you are. You just cannot keep up with following every single social media channel. Even if it would really be worth it, as it is with our channels since we keep posting interesting news and articles worth spreading. Therefore, on our website, we have created the opportunity to share interesting content directly on LinkedIn, or to refer directly to our LinkedIn page. We consider built-in social plugins as an extended service on our website. The data LinkedIn collects also help us to display potential advertising measures only to people who are interested in our offer.
What data are stored by LinkedIn?LinkedIn stores no personal data due to the mere integration of social plugins. LinkedIn calls the data generated by plugins passive impressions. However, if you click on a social plugin to e.g. share our content, the platform stores personal data as so-called “active impressions”. This happens regardless of whether you have a LinkedIn account or not. If you are logged in, the collected data will be assigned to your account. When you interact with our plugins, your browser establishes a direct connection to LinkedIn’s servers. Through that, the company logs various usage data. These may include your IP address, login data, device information, or information about your internet or cellular provider. If you use LinkedIn services via your smartphone, your location may also be identified (after you have given permission). Moreover, LinkedIn can share these data with third-party advertisers in “hashed” form. Hashing means that a data set is transformed into a character string. This allows data to be encrypted, which prevents persons from getting identified. Most data on your user behavior is stored in cookies. These are small text files that usually get placed in your browser. Furthermore, LinkedIn can also use web beacons, pixel tags, display tags, and other device recognitions. Various tests also show which cookies are set when a user interacts with a social plug-in. We do not claim the information we found to be exhaustive, as it only serves as an example. The following cookies were set without being logged in to LinkedIn: Name: bcookie Value: =2&34aab2aa-2ae1-4d2a-8baf-c2e2d7235c16111677938- Purpose: This cookie is a so-called “browser ID cookie” and stores your identification number (ID). Expiry date: after 2 years Name: lang Value: v=2&lang=en-gb Purpose: This cookie saves your default or preferred language. Expiry date: after the end of the session Name: lidc Value: 1818367:t=1571904767:s=AQF6KNnJ0G111677938… Purpose: This cookie is used for routing. Routing records how you found your way to LinkedIn and how you navigate through the website. Expiry date: after 24 hours Name: rtc Value: kt0lrv3NF3x3t6xvDgGrZGDKkX Purpose: No further information could be found about this cookie. Expiry date: after 2 minutes Name: JSESSIONID Value: ajax:1116779382900777718326218137 Purpose: This is a session cookie that LinkedIn uses to maintain anonymous user sessions through the server. Expiry date: after the end of the session Name: bscookie Value: “v=1&201910230812… Purpose: This cookie is a security cookie. LinkedIn describes it as a secure browser ID cookie. Expiry date: after 2 years Name: fid Value: AQHj7Ii23ZBcqAAAA… Purpose: We could not find any further information about this cookie. Expiry date: after 7 days Note: LinkedIn also works with third parties. That is why we identified the Google Analytics cookies _ga and _gat in our test.
How long and where are the data stored?In general, LinkedIn retains your personal data for as long as the company considers it necessary for providing its services. However, LinkedIn deletes your personal data when you delete your account. In some exceptional cases, LinkedIn keeps some summarised and anonymized data, even account deletions. As soon as you delete your account, it may take up to a day until other people can no longer see your data. LinkedIn generally deletes the data within 30 days. However, LinkedIn retains data if it is necessary for legal reasons. Also, data that can no longer be assigned to any person remain stored even after the account is closed. The data are stored on various servers in America and presumably also in Europe.
What is Xing?Xing is a social network with its headquarters in Hamburg. The company specializes in managing professional contacts. That means, that as opposed to other networks, Xing is primarily about professional networking. The platform is often used for job hunting or for companies to find employees. Moreover, Xing offers interesting content on various professional topics. The global counterpart of Xing is the American company LinkedIn.
Why do we use Xing on our website?Nowadays, there is a flood of social media channels, and we understand that your time is very precious. It is simply not possible for you to closely follow every social media channel of a company. Therefore, we want to make your life as easy as possible and enable you to share or follow interesting content on Xing directly via our website. With these so-called “social plugins” we are expanding the service on our website. Additionally, the data collected by Xing help us to create targeted advertising on the platform. This means that our services are only displayed to people who are genuinely interested in them.
What data is saved by Xing?As for plugins for websites, Xing offers the share, follow, and login buttons. As soon as you open a page with an integrated Xing social plugin, your browser will connect to servers in a Xing data center. Xing claims that upon using the share button, no data that could directly relate to a person is stored. Furthermore, Xing does not save your IP address, neither do any cookies get set upon using the share button. This means that your user behavior is not analyzed. You can find more information here. With Xing’s other plugins, cookies only get set in your browser if you interact with the plugin or click on it. Personal data such as your IP address, browser data, as well as the date and time of your visit to Xing may be stored. If you have a XING account and are logged in, the collected data will be assigned to your personal account and matched with the data stored in it. If you click on the follow or log-in button and are not yet logged in to Xing, the following cookies are set in your browser. Please keep in mind that this is an indicative list and we do not claim for it to be exhaustive: Name: AMCVS_0894FF2554F733210A4C98C6%40AdobeOrg Value: 1 Purpose: This cookie is used to create and store identification details for website visitors. Expiry date: after session ends Name: c_ Value: 157c609dc9fe7d7ff56064c6de87b019111677938-8 Purpose: We were unable to find out more information on this cookie. Expiry date: after one day Name: prevPage Value: wbm%2FWelcome%2Flogin Purpose: This cookie stores the URL of the previous website you visited. Expiry date: after 30 minutes Name: s_cc Value: true Purpose: This Adobe Site Catalyst cookie determines whether cookies are generally activated in the browser. Expiry date: after the end of the session Name: s_fid Value: 6897CDCD1013221C-39DDACC982217CD1111677938-2 Purpose: This cookie is used to identify a unique visitor. Expiry date: after 5 years Name: visitor_id Value: fe59fbe5-e9c6-4fca-8776-30d0c1a89c32 Purpose: The visitor cookie contains a unique visitor ID and a unique identifier for your account. Expiry date: after 2 years Name:_session_id Value: 533a0a6641df82b46383da06ea0e84e7111677938-2 Purpose: This cookie creates a temporary session ID that is used as the in-session user ID. The cookie is vital to provide the functions of Xing. Expiry date: after the end of the session When you are logged in to Xing or are a member of the platform, further personal data will be collected, processed, and saved. Xing also passes personal data to third parties if it is either necessary for its own business purposes, if you have given your consent or if there is a legal obligation.
How long and where is the data stored?Xing stores data on different servers in various data centers. The company stores this data until you delete it or until you delete your user account. Of course, this only applies to users who are already Xing members.
What is YouTube?On YouTube, users can watch, rate, comment, or upload videos for free. Over the past few years, YouTube has become one of the most important social media channels worldwide. For us to be able to display videos on our website, YouTube provides a code snippet that we have integrated into our website.
Why do we use YouTube videos on our website?YouTube is the video platform with the most visitors and best content. We strive to offer you the best possible user experience on our website, which of course includes interesting videos. With the help of our embedded videos, we can provide you other helpful content in addition to our texts and images. Additionally, embedded videos make it easier for our website to be found on the Google search engine. Moreover, if we place ads via Google Ads, Google only shows these ads to people who are interested in our offers, thanks to the collected data.
What data is stored by YouTube?As soon as you visit one of our pages with an integrated YouTube, YouTube places at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, by using cookies YouTube can usually associate your interactions on our website with your profile. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution, or your Internet provider. Additional data can include contact details, potential ratings, shared content via social media, or YouTube videos you added to your favorites. If you are not logged in to a Google or YouTube account, Google stores data with a unique identifier linked to your device, browser, or app. Thereby, e.g. your preferred language setting is maintained. However, many interaction data cannot be saved since fewer cookies are set. In the following list, we show you cookies that were placed in the browser during a test. On the one hand, we show cookies that were set without being logged into a YouTube account. On the other hand, we show you what cookies were placed while being logged in. We do not claim for this list to be exhaustive, as user data always depend on how you interact with YouTube. Name: YSC Value: b9-CV6ojI5Y111677938-1 Purpose: This cookie registers a unique ID to store statistics of the video that was viewed. Expiry date: after the end of the session Name: PREF Value: f1=50000000 Purpose: This cookie also registers your unique ID. Google receives statistics via PREF on how you use YouTube videos on our website. Expiry date: after 8 months Name: GPS Value: 1 Purpose: This cookie registers your unique ID on mobile devices to track GPS locations. Expiry date: after 30 minutes Name: VISITOR_INFO1_LIVE Value: 95Chz8bagyU Purpose: This cookie tries to estimate the user’s internet bandwidth on our sites (that have built-in YouTube videos). Expiry date: after 8 months Further cookies that are placed when you are logged into your YouTube account: Name: APISID Value: zILlvClZSkqGsSwI/AU1aZI6HY7111677938- Purpose: This cookie is used to create a profile on your interests. This data is then used for personalized advertisements. Expiry date: after 2 years Name: CONSENT Value: YES+AT.de+20150628-20-0 Purpose: The cookie stores the status of a user’s consent to the use of various Google services. CONSENT also provides safety measures to protect users from unauthorized attacks. Expiry date: after 19 years Name: HSID Value: AcRwpgUik9Dveht0I Purpose: This cookie is used to create a profile on your interests. This data helps to display customized ads. Expiry date: after 2 years Name: LOGIN_INFO Value: AFmmF2swRQIhALl6aL… Purpose: This cookie stores information on your login data. Expiry date: after 2 years Name: SAPISID Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM Purpose: This cookie identifies your browser and device. It is used to create a profile on your interests. Expiry date: after 2 years Name: SID Value: oQfNKjAsI111677938- Purpose: This cookie stores your Google Account ID and your last login time, in a digitally signed and encrypted form. Expiry date: after 2 years Name: SIDCC Value: AN0-TYuqub2JOcDTyL Purpose: This cookie stores information on how you use the website and on what advertisements you may have seen before visiting our website. Expiry date: after 3 months
How long and where is the data stored?The data YouTube receive and process on you are stored on Google’s servers. Most of these servers are in America. Here you can see where Google’s data centers are located. Your data is distributed across the servers. Therefore, the data can be retrieved quicker and is better protected against manipulation. Google stores collected data for different periods of time. You can delete some data anytime, while other data are automatically deleted after a certain time, and still, other data are stored by Google for a long time. Some data (such as elements on “My activity”, photos, documents, or products) that are saved in your Google account are stored until you delete them. Moreover, you can delete some data associated with your device, browser, or app, even if you are not signed in to a Google Account.
Why do we use reCAPTCHA on our website?We only want to welcome people from flesh and bones on our side and want bots or spam software of all kinds to stay away. Therefore, we are doing everything we can to stay protected and to offer you the highest possible user-friendliness. For this reason, we use Google reCAPTCHA from Google. Thus, we can be pretty sure that we will remain a “bot-free” website. Using reCAPTCHA, data is transmitted to Google to determine whether you genuinely are human. reCAPTCHA thus ensures our website’s and subsequently your security. Without reCAPTCHA, it could e.g. happen that a bot would register as many email addresses as possible when registering, in order to subsequently “spam” forums or blogs with unwanted advertising content. With reCAPTCHA, we can avoid such bot attacks.
What data is stored by reCAPTCHA?reCAPTCHA collects personal user data to determine whether the actions on our website are made by people. Thus, IP addresses and other data Google needs for its reCAPTCHA service may be sent to Google. Within member states of the European Economic Area, IP addresses are almost always compressed before the data makes its way to a server in the USA. Moreover, your IP address will not be combined with any other of Google’s data, unless you are logged into your Google account while using reCAPTCHA. Firstly, the reCAPTCHA algorithm checks whether Google cookies from other Google services (Youtube, Gmail, etc.) have already been placed in your browser. Then reCAPTCHA sets an additional cookie in your browser and takes a snapshot of your browser window. The following list of collected browser and user data is not exhaustive. Rather, it provides examples of data, which to our knowledge, is processed by Google.
- Referrer URL (the address of the page the visitor has come from)
- IP-address (z.B. 218.104.22.168)
- Information on the operating system (the software that enables the operation of your computers. Popular operating systems are Windows, Mac OS X, or Linux)
- Cookies (small text files that save data in your browser)
- Mouse and keyboard behavior (every action you take with your mouse or keyboard is stored)
- Date and language settings (the language and date you have set on your PC is saved)
- Screen resolution (shows how many pixels the image display consists of)
What is HubSpot?HubSpot is an integrated software solution with which we cover various aspects of our online marketing. These include e-mail marketing, social media publishing & reporting, reporting, contact management (e.g. user segmentation & CRM), landing pages, and contact forms.
What data does HubSpot store?To optimize our marketing measures, the following data can be collected and processed via HubSpot:
- Geographical position
- Browser type
- Navigation information
- Referral URL
- Performance data
- Information on how often the application is used
- Mobile apps data
- Credentials for the HubSpot subscription service
- Files that are displayed on site
- Domain names
- Pages viewed
- Aggregate usage
- Operating system version
- Internet service provider
- IP address
- Device identifier
- Duration of the visit
- Where the application was downloaded from
- Operating system
- Events that occur within the application
- Access times
- Clickstream data
- Device model and version
- Content of all sent and received chat messages
- Context information (e.g. the page on which the chat was used)
- Optional: e-mail address of the user (if provided by the user via chat function)