Privacy Policy

Controller

Martin Grozev

Email: martin@du-marketing.com

Website: du-marketing.com

Last updated: 17 August 2025

This notice explains what we process on this website, on which legal bases, and how you can exercise your rights under the GDPR and the German TTDSG. Non-essential cookies/technologies only run after consent.

1) Overview of processing

We process personal data only as necessary to operate this site, respond to inquiries, and analyze usage (analytics only with consent). Legal bases: Art. 6(1)(a), (b), (f) GDPR and, for storing/reading information on end devices, § 25 TTDSG.

2) Hosting & server logs

When you visit the site, our hosting provider processes server logs (e.g., truncated IP address, date/time, requested URL, user agent).

Purpose/interest: operation, security, error analysis (Art. 6(1)(f) GDPR).

Retention: short-term, then deletion or anonymization.

3) Cookies & similar technologies (TTDSG)

We use cookies and comparable technologies for:

  • Strictly necessary functions (e.g., consent storage, form protection) — permitted without consent (§ 25(2) TTDSG).

  • Analytics — loaded only with your consent (§ 25(1) TTDSG).

You can consent, refuse, or adjust choices any time via Cookie Settings in the footer. Your consent is stored for up to 12 months.

4) Consent management (cookie banner)

We use a consent tool to record your choices and control tag firing accordingly. Legal basis: Art. 6(1)(f) GDPR (compliance/IT operations). If the tool sets a consent cookie, § 25(2) TTDSG applies (necessary).

5) Google Tag Manager (GTM)

We use Google Tag Manager to deploy tags. GTM itself does not set cookies and only loads consent-based tags after you opt in. Legal basis: Art. 6(1)(f) GDPR for tag orchestration; consent (Art. 6(1)(a) GDPR/§ 25 TTDSG) for any non-essential tags it loads.

6) Web analytics with Google Analytics 4 (GA4)

We use Google Analytics 4 (Google Ireland Ltd.), embedded via GTM, only with your consent.

Data types: page views, events (e.g., clicks), approximate location (city/region), device/browser data; GA4 uses pseudonymous identifiers.

IP handling: GA4 processes IP for geolocation and discards it; we do not store full IPs in Analytics.

Legal basis: consent (Art. 6(1)(a) GDPR; § 25(1) TTDSG).

Retention: typically up to 14 months (configurable).

You can change your choice anytime in Cookie Settings.

7) Contact form & email

If you send a message via the form or email, we process your input (e.g., name, email, message) and may log basic technical context (timestamp, page URL; and if applicable, UTM parameters) to understand what led to your inquiry.

Purpose: respond to requests, quality assurance, abuse prevention.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and/or Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

Email policy: No marketing spam. We only reply to your inquiry or send messages you explicitly opt in to.

Retention: until your request is resolved and for limited legal/audit periods; then deletion or anonymization.

8) Processors & recipients

We use service providers (processors) for hosting, consent management, analytics, and communications. Data processing agreements per Art. 28 GDPR are in place. Recipient categories: hosting/cloud, consent tool, Google (Analytics/Tag Manager), email/helpdesk systems.

9) Third-country transfers

Use of Google services may involve processing by Google LLC (USA). Transfers rely on recognized safeguards (e.g., EU–US Data Privacy Framework and/or Standard Contractual Clauses). You can decline analytics and still use the site; residual risks of third-country processing may remain.

10) Security (TLS/HTTPS)

We use TLS encryption (https) to protect data in transit.

11) Data retention

Unless stated otherwise, we delete or anonymize personal data when the purpose ends and statutory retention duties do not require longer storage. Consent logs: up to 12 months.

12) Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, portability, and to object to processing based on Art. 6(1)(e/f) GDPR. You may withdraw consent at any time with future effect. You also have the right to lodge a complaint with a data protection authority in the EU/EEA.

13) Right to object (Art. 21 GDPR)

You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. We will then stop processing unless we demonstrate compelling legitimate grounds.

14) Provision of data / automated decisions

There is no legal obligation to provide data. We do not use automated decision-making or profiling.

15) Changes to this policy

We update this notice when legal, technical, or organizational changes occur. The current version is available at du-marketing.com.