Privacy

At a glance

You can use our websites without telling us who you are. We load videos, fonts and scripts from our own servers, without requests to third parties. Google Analytics and Google Ads conversion tracking only load once you agree in the cookie banner. Otherwise we only receive personal data when you write to us.

Hosting

The websites run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre. Videos and images are stored in Hetzner object storage in Nuremberg and delivered through our own server. To deliver the pages, the server necessarily processes your IP address and the information your browser sends. The server records every request in a log file: date and time, the address requested, status code, amount of data transferred and the information your browser sends (such as browser type, language and the previously visited page). We only store your IP address in shortened form (for IPv4 without the last two blocks, for IPv6 only the first 32 bits), so it can no longer be linked to you. We use the log files to find errors, fend off attacks and count how often search engines and AI services access our pages. They are deleted automatically after 30 days. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Enquiry form and email

If you write to us using the enquiry form, we process your details to answer your enquiry: name, email address, message and, if you provide them, company, phone number, selected topics and budget range or project stage. The form also sends the address of the page you submit it from and the previously visited page (for our own pages the path and any campaign parameters, for other websites only the domain). You can optionally tell us how you heard about us by choosing from a fixed list; free text is not possible. The enquiry is sent by email to our mailbox hello@zeitraum.com. We use Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for email. This also applies if you email us directly.

The legal basis is Art. 6(1)(b) GDPR if your enquiry concerns a contract or pre-contractual steps, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep your details until your enquiry has been dealt with, unless statutory retention periods require longer storage.

To protect against spam, the server checks whether a hidden field was filled in, how quickly the form was submitted and how many enquiries come from the same IP address within an hour. For this it stores only a check value (hash) of IP address and hour, not the IP address itself. The legal basis is Art. 6(1)(f) GDPR.

Cookie banner and browser storage

On your first visit we ask whether you allow statistics (Google Analytics) and marketing (Google Ads). “Accept all” and “Necessary only” are offered on equal terms. We store your choice for 182 days in your browser’s storage (localStorage) so that we do not ask again on every visit. The banner is loaded from our own server. You can change or withdraw your choice at any time via “Cookie settings” in the footer of every page.

Your browser also remembers individual settings of the website, such as a notice already shown or a selected budget range until the confirmation page. This information stays on your device. The legal basis is Section 25(2) no. 2 TDDDG and, for proof of your consent, also Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Google Analytics 4

With your consent (category “Statistics”) we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates how our websites are used, such as pages viewed, time on page, scroll depth, clicks on email and phone, videos started and enquiries sent. For an enquiry we also send the previously visited page (for other websites only the domain), whether you came to us via an AI assistant such as ChatGPT or Perplexity, the selected budget range or project stage and how you heard about us. We do not send your name, email address, phone number or message to Google. For this Google sets cookies and processes, among other things, device and browser information, your IP address in shortened form and approximate location. Google Analytics 4 does not store full IP addresses. Google signals are disabled, data is deleted after 14 months.

Without your consent we do not load any script from Google. We use Google’s Consent Mode v2 in basic mode. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission of 10 July 2023. You can withdraw your consent at any time via “Cookie settings”. More information: policies.google.com/privacy

Google Ads conversion tracking

With your consent (category “Marketing”) we use Google Ads conversion tracking by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you reach our website through a Google ad and send an enquiry, Google learns that the ad led to an enquiry. We only receive aggregated figures, no information that would allow us to identify you. We do not use remarketing or personalised advertising based on your visit. Without consent the website sends no data to Google Ads.

The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Regarding transfers to the USA and withdrawal, the information on Google Analytics applies.

Applications

We process applications you send us by email in order to decide on filling the position (Section 26 BDSG, Art. 6(1)(b) GDPR). If we do not work together, we delete the documents two months after the rejection, unless legitimate interests such as evidence obligations under the German General Equal Treatment Act require otherwise.

Your rights

You have the right to access the data we hold about you, to rectification, erasure and restriction of processing, to data portability and to object to processing based on our legitimate interest (Art. 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. To do so, write to datenschutz@zeitraum.com. You can also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Unabhängiges Datenschutzzentrum Saarland.