Privacy policy
This page is being updated. For privacy questions, please use the contact form.
Our own cookie-free analytics
We measure how visitors use our website ourselves, mainly when they arrive from an ad. We set no cookies and store nothing on your device. A session ID exists only in the open browser tab and is gone after a reload. We do not store your IP address.
We record: where the visit came from (referrer, UTM parameters and, for Google ads, the click ID gclid), the landing page, pages viewed, scroll depth, clicks on links and buttons, whether a form was started or submitted, the country (from the server header), device type, language and window size. This measurement runs for all visitors, including those who decline, because it stores nothing on your device. If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is recorded.
The legal basis is our legitimate interest in analysing and improving our website and ads (Art. 6(1)(f) GDPR). The data is stored in a Supabase database, and only we have access. If you send an enquiry through the contact form, we link it to that session to see which channel brought you to us.
Consent and cookie settings (Cookiebot)
We ask for your consent before using any statistics or marketing services. We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, for this. Cookiebot stores your choice in a cookie (CookieConsent, 12 months) so the banner does not appear on every visit. An anonymised IP address, the date and time of consent, browser details and the categories you chose are sent to Cookiebot and stored there as proof. The legal basis is our legal obligation to be able to prove consent (Art. 6(1)(c) together with Art. 7(1) GDPR) and Section 25(2) no. 2 TDDDG.
Until you make a choice, or if you decline, we load no services from Google or LinkedIn. You can change or withdraw your consent at any time with effect for the future through the “Cookie settings” link at the bottom of every page.
Google Analytics 4 (only with consent to statistics)
If you accept the statistics category, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (_ga, _ga_*, up to 2 years) and records which pages you view, for how long, and how you reached us. Google Analytics 4 does not store your IP address. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Google Ads: conversion tracking and remarketing (only with consent to marketing)
If you accept the marketing category, we use the Google Ads tag by Google Ireland Limited. It tells us whether a visit from an ad led to an enquiry through the contact form or a click on “Book an initial call” (conversion tracking). It also lets us show ads in the Google network later to visitors of certain areas of our website, such as /industrie or /websites (remarketing). Google sets cookies for this (for example _gcl_au, up to 90 days) and processes the page viewed, device, browser and the ad click ID.
When you send the contact form, we pass your email address and, if given, your phone number to Google in hashed form (SHA-256, not in plain text) so Google can match the enquiry to an ad (enhanced conversions). This happens only with your consent to marketing. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
LinkedIn Insight Tag (only with consent to marketing)
If you accept the marketing category, we may use the LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It measures whether visits from LinkedIn ads lead to enquiries, gives us aggregated information on visitors' industry and job function (no names), and enables remarketing on LinkedIn. LinkedIn sets cookies for this (for example li_sugr, bcookie, up to 1 year). Data may be transferred to LinkedIn Corporation in the USA; LinkedIn is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Google reCAPTCHA in forms
We use Google reCAPTCHA v3 to protect our forms from spam. Without consent, reCAPTCHA loads only when you submit a form. Google then processes, among other things, your IP address and browser and usage details to judge whether the request comes from a person. The legal basis is our legitimate interest in spam-free forms (Art. 6(1)(f) GDPR) and, for access to your device, Section 25(2) no. 2 TDDDG.