Google Analytics privacy policy summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Processed data: Access statistics, which include data such as access locations, device data, access duration and time, navigation behavior and click behavior. You can find more details about this below in this privacy policy.
📅 Storage period: individually adjustable, by default Google Analytics stores 4 data for 14 months
⚖️ Legal bases: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests)
What is Google Analytics?
On our website, we use the analysis tracking tool Google Analytics 4 (GA4) from the American company Google Inc. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. However, by combining different technologies such as cookies, device IDs and login information, you can be identified as a user across different devices. As a result, your actions can also be analyzed across platforms.
For example, when you click on a link, this event is saved in a cookie and sent to Google Analytics. With the help of the reports we receive from Google Analytics, we can better tailor our website and service to your needs. In the following, we will go into more detail about the tracking tool and, in particular, inform you about which data is processed and how you can prevent this.
Google Analytics is a tracking tool that is used to analyze our website's traffic. These measurements and analyses are based on a pseudonymous user identification number. This number does not contain any personal data such as name or address, but is used to assign events to a device. GA4 uses an event-based model that collects detailed information about user interactions, such as page views, clicks, scrolling, and conversion events. In addition, various machine learning functions have also been built into GA4 to better understand user behavior and certain trends. GA4 uses machine learning functions to rely on modelling. This means that, based on the data collected, missing data can also be extrapolated in order to optimize the analysis and also to be able to make forecasts.
In order for Google Analytics to work in principle, a tracking code is built into the code on our website. When you visit our website, this code records various events that you perform on our website. With GA4's event-based data model, we as website operators can define and track specific events in order to obtain analyses of user interactions. In this way, in addition to general information such as clicks or page views, special events that are important for our business can also be tracked. Such special events can include sending a contact form or buying a product.
As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.
Google processes the data and we receive reports about your user behavior. These may include the following reports:
- Target group reports: Through target group reports, we get to know our users better and know more precisely who is interested in our service.
- Ad reports: Ad reports make it easier for us to analyze and improve our online advertising.
- Acquisition reports: Acquisition reports give us helpful information about how we can get more people excited about our service.
- Behavioral reports: This tells us how you interact with our website. We can understand which path you are taking on our site and which links you click on.
- Conversion reports: Conversion is a process in which you take a desired action based on a marketing message. For example, when you go from just a website visitor to a buyer or newsletter subscriber. With the help of these reports, we learn more about how you are receiving our marketing measures. This is how we want to increase our conversion rate.
- Real-time reports: Here we always find out immediately what is happening on our website. For example, we can see how many users are currently reading this text.
In addition to the analysis reports mentioned above, Google Analytics 4 also offers the following functions:
- Event-based data model: This model records very specific events that can take place on our website. For example, playing a video, buying a product, or signing up to our newsletter.
- Advanced analysis features: These features allow us to understand your behavior on our website or certain general trends even better. For example, we can segment user groups, carry out comparative analyses of target groups or understand your path or path on our website.
- Predictive modeling: Based on collected data, machine learning can be used to extrapolate missing data that predict future events and trends. This can help us develop better marketing strategies.
- Cross-platform analysis: It is possible to collect and analyze data from both websites and apps. This gives us the opportunity to analyze user behavior across platforms, provided that you have, of course, consented to data processing.
Why do we use Google Analytics on our website?
Our goal with this website is clear: We want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.
The statistically evaluated data gives us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that interested people can find it more easily on Google. On the other hand, the data helps us to better understand you as a visitor. We therefore know exactly what we need to improve on our website in order to offer you the best possible service. The data also helps us to carry out our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.
What data is stored by Google Analytics?
Google Analytics uses a tracking code to create a random, unique ID that is associated with your browser cookie. This is how Google Analytics recognizes you as a new user and assigns you a user ID. The next time you visit our site, you will be recognized as a “returning” user. All collected data is stored together with this user ID. This is the first way to evaluate pseudonymous user profiles.
In order to be able to analyze our website with Google Analytics, a property ID must be inserted in the tracking code. The data is then stored in the corresponding property. The Google Analytics 4 property is standard for every newly created property. Depending on the property used, data is stored for different lengths of time.
Identifiers such as cookies, app instance IDs, user IDs or user-defined event parameters measure your interactions across platforms, provided you have given your consent. Interactions are all types of actions that you take on our website. If you also use other Google systems (such as a Google account), data generated via Google Analytics can be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, approve it, with exceptions when required by law.
According to Google, no IP addresses are logged or stored in Google Analytics 4. However, Google uses the IP address data to derive location data and deletes it immediately afterwards. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data center or on a server.
Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies compared to previous versions (such as Google Universal Analytics). However, there are some specific cookies that are used by GA4. These include, for example:
Name: _ga
value: 2.1326744211.152322996763-5
Usage: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to differentiate website visitors.
Expiration date: after 2 years
Name: _gid
value: 2.1687193234.152322996763-1
Usage: The cookie is also used to distinguish website visitors
Expiration date: after 24 hours
Name: _gat_gtag_ua_ <property-id>
value: 1
Usage: Used to lower the request rate. <property-id>When Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_.
Expiration date: after 1 minute
Note: This list cannot claim to be exhaustive, as Google also changes the choice of its cookies over and over again. GA4 also aims to improve data protection. As a result, the tool offers a few ways to control data collection. For example, we can set the storage period ourselves and also control data collection.
Here is an overview of the most important types of data that are collected with Google Analytics:
Heat maps: Google creates so-called heat maps. With heat maps, you can see exactly the areas that you click on. This gives us information about where you are “traveling” on our site.
Session duration: Google describes the time you spend on our site without leaving the site as session duration. If you have been inactive for 20 minutes, the session automatically ends.
Bounce rate (English bounce rate): We talk about a bounce when you only view one page on our website and then leave our website again.
Account creation: When you create an account or place an order on our website, Google Analytics collects this data.
location: IP addresses are not logged or stored in Google Analytics. However, derivations for location data are used shortly before the IP address is deleted.
Technical information: Technical information includes, but is not limited to, your browser type, your Internet service provider, or your screen resolution.
Source of origin: Google Analytics and we are of course also interested in which website or which advertisement brought you to our site.
Other data includes contact details, any reviews, playing media (e.g. when you play a video via our site), sharing content via social media, or adding to your favorites. The list is not exhaustive and only serves as a general guide to data storage by Google Analytics.
How long and where is the data stored?
Google has spread their servers all over the world. Here you can read exactly where Google's data centers are located: https://www.google.com/about/datacenters/locations/?hl=de
Your data is distributed across various physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. Every Google data center has appropriate emergency programs for your data. For example, if Google hardware fails or natural disasters paralyze servers, the risk of a service interruption at Google remains low.
The storage period of data depends on the properties used. The storage period is always set specifically for each individual property. Google Analytics offers us four options to control the storage period:
- 2 months: this is the shortest storage period.
- 14 months: By default, GA4 stores data for 14 months.
- 26 months: You can also store the data for 26 months.
- Data is only deleted when we manually delete it
In addition, there is also the option that data will only be deleted if you no longer visit our website within the period selected by us. In this case, the storage period will be reset every time you visit our website again within the specified period of time.
When the specified period has expired, the data is deleted once a month. This storage period applies to your data that is linked to cookies, user recognition and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a fusion of individual data into a larger unit.
How can I delete my data or prevent data storage?
According to European Union data protection law, you have the right to obtain information about, update, delete or restrict your data. Use the browser add-on to disable Google Analytics JavaScript (analytics.js, gtag.js) to prevent Google Analytics 4 from using your data. You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de Download and install. Please note that this add-on only deactivates data collection by Google Analytics.
If you generally want to deactivate, delete or manage cookies, you will find the corresponding links to the respective instructions for the most popular browsers under the “Cookies” section.
Legal basis
The use of Google Analytics requires your consent, which we have obtained with our cookie popup. This consent states Art. 6 para. 1 lit. a GDPR (consent) represents the legal basis for processing personal data, as may occur when collected by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus technically and economically improving our offering. With the help of Google Analytics, we can identify website errors, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (legitimate interests). However, we only use Google Analytics if you have given your consent.
Google also processes data from you in the USA, among others. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information about this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Google also uses so-called standard contractual clauses (= Article 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are sample templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the resolution and the corresponding standard contractual clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.
We hope we were able to provide you with the most important information about data processing by Google Analytics. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.
If you want to learn more about data processing, please use the Google privacy policy at https://policies.google.com/privacy?hl=de.