snapADDY
Privacy and Security Hub
PLEASE NOTE: You agree to the German Privacy Policy which has been translated to English for your convenience only. The German Privacy Policy is binding.
You can find our privacy policy for receiving the newsletter here. Below you will find all data protection information relating to the use of our website.
We welcome you to our website. We would like to inform you about the management of your personal data in accordance with Art. 13 General Data Protection Regulation (GDPR).
Privacy Policy Website & Newsletter Reception
5. Data Collection for Pre-Contractual Measures and Contract Fulfillment
- 6. Order Form
- 7. Data Transfer
- 8. Information on the Use of Other Website Services
- 9. Tracking and Analysis Tools
- 10. User Rights
- 10.1 Right to Information (Art. 15 GDPR)
- 10.2 Right to Correction and Deletion (Art. 16 and 17 GDPR)
- 10.3 Right to Restriction of Processing (Art. 18, 19 GDPR)
- 10.4 Right to Data Portability (Art. 20 GDPR)
- 10.5 Right to Object (Art. 21 GDPR)
- 10.6 Right to Lodge a Complaint with a Supervisory Authority
- 10.7 Right to Withdraw Consent at Any Time
- 11. Changes to the Privacy Policy
Introduction
We appreciate your interest in our products and understand that data protection is important. We handle your data with great care. We collect, store, and use data exclusively in accordance with legal regulations. Personal data is treated confidentially and is not shared for advertising purposes without your authorization.
Protecting your personal data is our top priority at snapADDY GmbH (hereinafter referred to as "we" or "us"). In some cases, we may request personal data from you when using our services (data that can directly identify you, such as your name in combination with your address, telephone number, email address, or even your IP address).
Data that cannot be linked to your identity, such as anonymized data, is not considered personal data. Processing (e.g., collection, storage, retrieval, use, transmission, deletion, or destruction) in accordance with Art. 4 No. 2 GDPR always requires a legal basis or your consent. Personal data must be deleted once the processing purpose is fulfilled, and no legally prescribed retention obligations apply.
The following privacy policy informs you about your rights and our obligations regarding your personal data when visiting our website. To provide the functions and services of our website, we may need to collect personal data from you, for which your active consent may be required. In accordance with Art. 15 GDPR, you have the right to request information. Additional details can be found in Section 10.
We also explain the type and scope of data processing, the purpose, the corresponding legal basis, and the respective storage duration.
This privacy policy applies only to this website and not to other websites we merely reference via hyperlinks. We cannot be held responsible for how third-party websites handle your personal data. Please consult their respective privacy policies for more details.
Below, you will find the contact details of the responsible entity and the data protection officer.
1. Responsible Entity
1.1 Name or Company of the Responsible Entity
snapADDY GmbH, VAT ID according to § 27 a VAT Act: DE815576732 Registered in the Commercial Register B of the Würzburg District Court; Company Number: HRB 12891.
1.2 Owners, Directors, Managing Directors, or Other Legally or Constitutionally Appointed Leaders and Persons Responsible for Data Processing
Authorized representatives:
- Roland Hötzl, Managing Director
- Sebastian Metzger, Managing Director
- Jochen Seelig, Managing Director
Head of Data Processing:
- Sebastian Metzger
1.3 Address of the Responsible Entity
snapADDY GmbH
Jochen Seelig
Haugerkirchgasse 7
DE-97070 Würzburg
Phone: +49 931 466212 00
Email: info@snapaddy.com
2. Contact Details of the Data Protection Officer
Our corporate Data Protection Officer is available to provide information or suggestions on data protection matters:
SiDIT GmbH
Langgasse 20
97261 Güntersleben
Tel.: +49 931 78 08 77 0
Email: legal@snapaddy.com
3. Privacy Policy
3.1 Type and Scope of Data Processing
If you use this website without providing data to us in any other way (e.g., through registration or the use of a contact form), we collect technically necessary data through server log files that are automatically transmitted to our server, including:
- IP address
- Date and time of request
- Name and URL of the accessed file
- Website from which access occurs (referrer URL)
- Access status/HTTP status code
- Browser type
- Language and version of browser software
- Operating system.
3.2 Consent of Guardians
According to Art. 8 para. 1 sentence 2 alt. 2 GDPR, parents or other legal guardians must consent to all data processing on this website that requires the consent of a minor who has not yet reached the age of 16.
You may revoke your consent at any time by sending a revocation declaration in text form to the contact details of the responsible entity. The processing remains lawful until the revocation.
3.3 Purpose and Legal Basis
The processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the mentioned data is required for the provision of a website and thus serves to safeguard a legitimate interest of our company.
3.4 Storage Duration
As soon as the mentioned personal data is no longer required for displaying the website, it will be deleted. The collection of data for providing the website and the storage of data in log files is essential for operating the website. Consequently, the user has no option to object to this aspect. Further storage may occur in individual cases if legally required.
4. Cookies
We use cookies on our website. Cookies are small text files that are sent from us to the browser on your device, stored there, and read out. Cookies can contain data that allow the recognition of the device used upon a repeat visit to our website. Some cookies only contain information on specific settings that are not personally identifiable.
We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our online offering more user-friendly and effective by tracking your website usage and determining your preferred settings (e.g., country and language settings). Cookies do not harm your device, cannot execute programs, and do not contain viruses. Our website uses different types of cookies. If third parties process information via cookies (third-party cookies), they collect the information directly via your browser. A distinction is made between session cookies (also known as temporary cookies), which are deleted once you close your browser, and permanent cookies, which are stored beyond an individual session.
The processing of cookies is based on Art. 6 para. 1 lit. f) GDPR and serves the interest of enabling user guidance and ensuring the presentation of our website. If you have granted us consent to use cookies via a notice on our website (“cookie banner”), the legal basis is additionally Art. 6 para. 1 lit. a) GDPR.
4.1 Session Cookies or Temporary Cookies
Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. These types of cookies allow us to track your session ID, enabling us to associate various browser requests with the same session and recognize your device during future visits to our website.
4.2 Permanent Cookies
Our website also uses so-called permanent cookies. Permanent cookies are stored in your browser for an extended period and can transmit information. The storage duration of each cookie varies. You can manually delete permanent cookies in your browser settings.
4.3 Third-Party Cookies
We use analytical cookies to observe anonymized user behavior on our website.
Additionally, we use advertising and statistical cookies. These cookies allow tracking of user behavior for advertising and targeted marketing purposes, as well as interaction with the website.
Marketing cookies are used to follow visitors across websites. Their purpose is to display relevant and engaging ads for individual users and to analyze the effectiveness of advertising efforts.
Statistical cookies help website owners understand how visitors interact with websites by collecting and reporting information in a pseudonymized form.
4.4 Configuration of Browser Settings
You can configure your browser to inform you about the placement of cookies. This makes the use of cookies transparent to you. You can also delete cookies at any time via the relevant browser setting and prevent new cookies from being set. Please note that if you disable cookies, our website may not be displayed optimally, and some functions may no longer be technically available. Since different browsers have varying functionalities, please refer to your browser’s help menu for the respective configuration options.
Disabling cookies may require storing a permanent cookie on your computer. If you delete this cookie later, you may need to disable it again.
4.5 Storage Duration
Once the data transmitted via cookies is no longer required for the purposes described above, it will be deleted. Further storage may occur in individual cases if legally required.
5. Data Collection for Pre-Contractual Measures and Contract Fulfillment
5.1 Type and Scope of Data Processing
In the pre-contractual phase and upon contract conclusion, we collect personal data about you. This includes, for example, company name, first and last name, address, email address, telephone number, VAT ID, or the selected payment method.
When using the "invoice payment" method, only this personal data is collected and stored.
When using the "direct debit" payment method, additional data such as the account holder's name, IBAN, and for account holders outside Germany, the BIC, is collected and stored.
When using the "PayPal" payment method, the email address associated with the PayPal account is collected and stored.
When using the "credit card" payment method, additional data such as the credit card number, cardholder name, expiration month and year, and the issuing institution (e.g., Visa, MasterCard) is collected and stored.
5.2 Purpose and Legal Basis of Data Processing
We collect and process this data solely for the purpose of contract execution or to fulfill pre-contractual obligations.
The legal basis for this is Art. 6 para. 1 lit. b) GDPR. If you have provided additional consent, the legal basis is also Art. 6 para. 1 lit. a) GDPR.
5.3 Storage Duration
Data will be deleted as soon as it is no longer required for its intended purpose.
Additionally, legal retention obligations may exist, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the Fiscal Code (AO). If such retention obligations exist, we will restrict or delete your data at the end of these retention periods.
6. Order Form
Our website includes an order form that can be used for electronic orders.
6.1 Type and Scope of Data Processing
Our data processing is limited to the following data. Please note our information regarding the payment method in the following section.
- Company name
- First and last name of the orderer
- Business address
- Telephone number
- Email address
- Payment method (further details below)
- Product name
- Quantity of the product
- Optional personal message content
When using the "invoice payment" method, only this personal data is collected and stored.
When using the "direct debit" payment method, in addition to the payment method, the account holder name, IBAN, and for account holders outside Germany, the BIC, is collected and stored.
When using the "PayPal" payment method, in addition to the payment method, the email address linked to the PayPal account is collected and stored.
When using the "credit card" payment method, in addition to the payment method, the credit card number, cardholder name, expiration month and year, and issuing institution (e.g., Visa, MasterCard) is collected and stored.
6.2 Purpose and Legal Basis
The purpose of data processing is to process your order properly. After a free trial phase, you can convert your account into a paid subscription. To do this, payment information is collected for the respective payment method.
The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of data is necessary for contract fulfillment or for carrying out pre-contractual measures at the request of the data subject.
6.3 Storage Duration
Data will be deleted as soon as it is no longer required to achieve the purpose of processing.
Additionally, legal retention obligations may exist, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the Fiscal Code (AO). If such retention obligations exist, we will restrict or delete your data at the end of these retention periods.
6.4 Contract for Data Processing in Accordance with § 28 GDPR
As a client, you must provide us with a written order for data processing. To offer you the best possible service, we provide a template for data processing agreements. You can use this template to fulfill the legal requirement under § 28 GDPR. To do so, please sign this template in duplicate and send it either by mail to snapADDY GmbH, Haugerkirchgasse 7, DE-97070 Würzburg, or digitally via email to legal@snapaddy.com. Further information on applications, contractual provisions, processing procedures, or security measures can be found in the general terms and conditions, the data processing agreement, the public processing directory, or further details available on our website.
7. Data Transfer
We only share your personal data with third parties if:
- You have given your explicit consent in accordance with Art. 6 para. 1 lit. a) GDPR,
- It is legally permissible and necessary under Art. 6 para. 1 lit. b) GDPR for fulfilling a contractual relationship with you or for carrying out pre-contractual measures,
- There is a legal obligation for disclosure under Art. 6 para. 1 lit. c) GDPR,
- We are legally required to transmit data to government authorities, such as tax authorities, social security agencies, health insurance funds, regulatory authorities, and law enforcement agencies,
- The transfer is necessary under Art. 6 para. 1 lit. f) GDPR to protect legitimate corporate interests as well as to establish, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in preventing such disclosure,
- We engage external service providers (so-called data processors) for processing under Art. 28 GDPR, who are obligated to handle your data with care.
We use such service providers in the following areas:
- Information Technology
We only transfer personal data within the EU (European Union) or the EEA (European Economic Area).
8. Information on the Use of Other Website Services
Details on the respective services can be found in the following sections:
8.1 Use of the Newsletter
We offer you the option to subscribe to our free newsletter on our website. By clicking the activation link in our confirmation email, your newsletter subscription is activated. This grants us separate consent to inform you via email about our company's products and services. The corresponding processing is based on Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out until the revocation. If the consent is withdrawn, we will stop the corresponding data processing.
If you no longer wish to receive the newsletter, you can unsubscribe at any time, e.g., by sending an email to support@snapaddy.com or via the unsubscribe link found in each newsletter email.
Our privacy policy regarding newsletter reception can be found here.
8.2 Contact via a Form, Blog, or Feedback Button
We enable you to contact us via various online forms and services on our website. The collected data is only used within the scope of the intended purpose and stored in compliance with legal retention obligations before being deleted after the retention period expires. Criteria for determining the storage period include statutory limitation periods for service contracts of three years. Additionally, legal retention obligations may apply, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the Fiscal Code (AO). If such retention obligations exist, we restrict or delete your data at the end of these periods.
The legal basis for processing is Art. 6 para. 1 lit. f) GDPR. Your data is only processed to respond to your inquiry. Data is not shared with third parties. You can contact us via these forms to ask questions as a customer or prospective contractual partner, arrange product presentations, request product information, or provide feedback regarding our products or website.
8.3 Sweepstakes
Information you provide as part of sweepstakes is used solely to determine and contact winners (Art. 6 para. 1 lit. f) GDPR). To participate in the sweepstake, you grant us your consent to use your personal data for the sweepstake pursuant to Art. 6 para. 1 lit. a) GDPR. Winners will be notified in writing. We explicitly exclude using your data for advertising purposes. We delete this data immediately after the prize has been awarded or if you object to the use of your data.
8.4 Application Process
We provide a form on our website that you can use to apply for jobs with us. Your personal data from the application will be processed in accordance with our privacy notice for applicants (available at: https://snapaddy.jobs.personio.de/privacy-policy). The use of this form is based on our legitimate interest in the simple and secure transmission of your application documents, Art. 6 para. 1 sentence 1 lit. f) GDPR.
We use the service provider Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany; Phone: +49(89) 1250 1004 for this purpose. We have entered into a data processing agreement with them.
The privacy information regarding the processing of personal data by us in the context of the application process, as well as by Personio itself through the provision of the application tool, can be found at https://www.personio.com/privacy-policy/.
9. Tracking and Analytics Tools
9.1 Social Media Functions
We do not integrate social plugins directly into our website. Therefore, when you visit our pages, no data is transmitted to social media services such as LinkedIn, XING, YouTube, Medium, Facebook, Instagram, or TikTok. This prevents third parties from creating user profiles based on your visit.
9.2 Web Analytics
Some of our services allow you to share your personal data with other users. Please use this option responsibly. The following section explains which companies receive data and process personal data.
9.2.1 Google Analytics
To design our website according to user needs, we create pseudonymized usage profiles with the help of Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies, which are stored on your device and can be accessed by us. This allows us to recognize and count returning visitors. Data processing is based on Art. 6 para. 1 lit. f) GDPR, as we have a legitimate interest in understanding how often our website is accessed by different users. If you have given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.
The information generated by the cookie about your use of this website is typically transmitted to a Google server in the USA and stored there. However, since we have activated IP anonymization on this website, your IP address is first truncated by Google within EU member states. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. We have also entered into a data processing agreement with Google Inc. (USA) in accordance with Art. 28 GDPR. Google may only use this data strictly for evaluating the use of our website and generating reports on website activity for us.
There is no automated decision-making based on user behavior.
You can object to data processing at any time. Please use one of the following options:
- You can prevent the storage of cookies by adjusting your browser settings; however, please note that this may prevent full use of all website functions.
- You can also prevent Google from collecting and processing data generated by the cookie related to your website use (including your IP address) by downloading and installing the following browser plugin: http://tools.google.com/dlpage/gaoptout?hl=en.
- You also have the right to request confirmation of whether your data is currently being processed.
9.2.2 Mouseflow
This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The purpose of this data processing is to analyze website usage and optimize the website. Processing is based on Art. 6 para. 1 lit. f) GDPR, as we have a legitimate interest in direct customer communication and user-oriented website design. If you have given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time in our privacy settings or disable the tool using Mouseflow’s own function here.
Mouseflow collects and stores data for marketing and optimization purposes. From this data, pseudonymous user profiles can be created. Cookies may be used. Mouseflow randomly records individual visits (only with anonymized IP addresses). A protocol of mouse movements and clicks is created to identify potential website improvements. The data collected by Mouseflow is not used to personally identify visitors and is not merged with other personal data of the user.
9.2.3 Google Remarketing and Cross-Device Remarketing
To offer you advertising tailored to your interests on other websites, we use Google’s remarketing technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Data processing is based on your consent under Art. 6 para. 1 lit. a) GDPR.
When you visit our website, Google may collect recognition features of your browser or device, evaluate your IP address, or store a small text file (e.g., a third-party cookie) on your device. Your usage behavior across different websites is recorded. The features are designed pseudonymously. If you are logged into your Google account, these features can be assigned directly to your profile. Google may link and store your visits to our websites using these features to display targeted advertising on other websites. Google can also recognize your previous visit to our website. Your device and browser are recognized by Google when you visit a page that includes advertisements from Google.
We can label our website with keywords describing its content, such as offered products. Google receives these keywords, which do not contain personal or sensitive information. If you visit a page with specific keywords, Google stores this and assigns it to your pseudonymous recognition features. Based on this association, Google determines which ads may be relevant to you.
Google can technically link pseudonymous features across your devices, such as tablets, smartphones, and email accounts (Cross-Device Remarketing). This requires prior consent for this data processing. Google can thus conduct targeted advertising campaigns across multiple devices.
Your data is transferred to Google and stored in the USA. An adequate level of data protection is ensured by Google's participation in the Privacy Shield under Art. 45 para. 1 GDPR. We have also entered into a data processing agreement with Google Inc. (USA) in accordance with Art. 28 GDPR.
You can object to remarketing under Art. 21 and Art. 6 para. 1 lit. f) GDPR at any time. To disable cross-device remarketing, visit Google's settings page at https://support.google.com/My-Ad-Center-Help/answer/12155764 and adjust your personalized advertising settings. Please note that these settings may not apply to all devices. If you use a device with your Google account, pseudonymous features may be assigned to your account. If you do not want this, please log out of your Google account.
9.2.4 Hubspot
We use Hubspot for our online marketing activities. Hubspot is a software company based in the USA with an office in Ireland. Contact: Hubspot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
Hubspot allows us to manage customer and prospect interactions. It enables us to track customer interactions, such as through completed forms. The collected personal data can be used for communication with potential customers or marketing activities (e.g., newsletters or automated emails). We can also create landing pages and contact forms and integrate them into our website.
Through the use of tracking pixels and cookies, we can analyze website usage in greater detail. The collected data (e.g., pages viewed) is stored on Hubspot servers and made available to us in reports. We have selected Europe as our server location. We use all collected information exclusively for marketing and communication with business contacts. If you do not want Hubspot to collect data, you can disable cookies in your browser settings or adjust your preferences in our cookie manager.
Hubspot complies with EU data protection requirements under the EU-US Privacy Shield and is certified accordingly (www.privacyshield.gov). Further details on the technologies used by Hubspot can be found in their privacy policy: https://legal.hubspot.com/privacy-policy.
9.2.5 Microsoft Advertising
Our website uses the "Microsoft Advertising" network from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. As part of this service, personal data is collected, processed, and stored to display targeted advertising tailored to your interests.
If you access our website via a Microsoft Bing advertisement, the following personal data may be collected: - IP address - Location data (if enabled) - Information about pages visited on our website - Duration of your visit to our website - Browser type and version - Operating system - Referrer URL (previously visited page)
The purpose of this data collection is to analyze the effectiveness of our advertising campaigns, optimize ad displays, and provide you with targeted advertisements that may be relevant to you.
This data is processed by Microsoft and may be transferred to and stored in the USA.
Data is generally stored for a maximum of 390 days and then automatically deleted unless a longer storage period is required by law or to pursue our legitimate interests.
The collection and processing of your personal data are based on your consent under Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time in our website footer, with effect for the future.
You also have the right to object to the collection and processing of your data at any time. You can do this by adjusting your browser's cookie settings, disabling automatic cookie placement, or submitting an objection via the following link: http://choice.microsoft.com/en-US/opt-out.
For more information about Microsoft's privacy policy and data processing, please visit: https://privacy.microsoft.com/en-us/privacystatement.
9.2.6 Vimeo
Our website uses the Vimeo video platform (Vimeo.com Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA; Email: legal@vimeo.com, Tel.: (+1) 212 314 7457) to provide video content. When embedding Vimeo videos, personal data of users may be collected and processed. Vimeo uses cookies and similar technologies to gather and analyze video usage information.
When Vimeo videos are played, the following data may be collected:
- Usage data: Information on how often and for how long a video is watched, as well as interactions with the video (e.g., play, pause, fullscreen mode).
- Device information: Data about the device used, including IP address, browser type, and operating system.
- Location data: Geographical information based on the IP address.
Vimeo processes this data to analyze video usage, improve user experience, and provide personalized content. More information about Vimeo’s data processing can be found in their privacy policy: Vimeo Privacy Policy.
By using our website and playing Vimeo videos, you consent to Vimeo processing your data as described. If you do not wish for Vimeo to collect data about you, we recommend not playing the videos or adjusting your browser settings to block cookies.
Please note that we have no control over Vimeo’s data processing and do not use this data for our own purposes.
9.2.7 LinkedIn Insight Tag
Our website uses the "LinkedIn Insight Tag" conversion tool from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This tool creates a cookie in your web browser that allows the collection of the following data: - IP address - Device and browser characteristics - Page events (e.g., page views)
This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share any personal data with us but provides anonymized reports on website audiences and ad performance. Additionally, LinkedIn uses the Insight Tag for retargeting purposes, enabling us to display targeted advertising outside our website without identifying you as a website visitor. More details about LinkedIn's data processing can be found in their privacy policy.
LinkedIn members can manage the use of their personal data for advertising purposes in their account settings. To disable the LinkedIn Insight Tag on our website (“opt-out”), click here.
9.2.8 Google reCAPTCHA
Our website uses the "Google reCAPTCHA" tool from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. This tool helps distinguish between real and automated users, such as bots. It ensures that automated programs do not interact with our website to submit forms, leave comments, or perform fraudulent activities.
During the verification process, Google collects several types of data, including: - Information about the webpage where the reCAPTCHA is embedded - The webpage from which you accessed the reCAPTCHA - Your IP address - Device settings (such as language, browser, and location) - Time spent on the page - Mouse movements and keystrokes - Screen and window resolution - Time zone settings - Installed browser plugins
Additionally, Google checks if a reCAPTCHA cookie is already stored in your browser. If not, Google places a cookie to track your internet behavior across different websites.
9.2.9 Google Tag Manager
We use "Google Tag Manager (GTM)," a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to manage JavaScript and HTML tags for tracking and analytics with both proprietary and third-party software. Tags are small code elements that help us measure traffic and visitor behavior, evaluate advertising effectiveness, set up remarketing and audience targeting, and test and optimize our website. GTM itself is only a support tool that simplifies the integration and management of tracking tags. Many of the services mentioned in this privacy policy are technically integrated into our website via Google Tag Manager. GTM ensures that these tools are properly loaded and executed.
GTM merely implements tags, meaning it does not set its own cookies or collect any personal data. However, it may trigger other tags that may collect data. GTM does not access this data. If you have disabled tracking on a domain or cookie level, it remains disabled for all tracking tags implemented via Google Tag Manager.
These processing activities are carried out exclusively with your explicit consent under Art. 6 para. 1 lit. a) GDPR. More information on Google Tag Manager and Google’s privacy policy can be found at https://policies.google.com/privacy?hl=en and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
10. User Rights
When processing your personal data, the GDPR grants you certain rights as a website user:
10.1 Right of Access (Art. 15 GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, what type of data it is. You have the right to obtain access to this personal data and to the information specified in Art. 15 GDPR. Upon your request, the data must be provided to you.
10.2 Right to Rectification and Erasure (Art. 16 and 17 GDPR):
You have the right to request the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
You also have the right to request the immediate deletion of personal data concerning you if one of the reasons specified in Art. 17 GDPR applies, for example, if the data is no longer needed for the purposes for which it was collected, provided that no legal retention obligations prevent the deletion.
10.3 Right to Restriction of Processing (Art. 18, 19 GDPR):
You have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR applies. You have the right to object to data processing. This right can be exercised by filing an objection against processing. During any review of your objection, your data will be restricted.
10.4 Right to Data Portability (Art. 20 GDPR):
In certain cases, as outlined in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request that this data be transmitted to a third party, provided that such direct transmission is technically feasible.
10.5 Right to Object (Art. 21 GDPR):
If data is processed based on Art. 6 para. 1 lit. f GDPR (data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then cease processing the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
10.6 Right to Lodge a Complaint with a Supervisory Authority
Under Art. 77 GDPR, you have the right to file a complaint with a supervisory authority of your choice if you believe that the processing of data concerning you violates data protection regulations. This right to complain may, in particular, be exercised before a supervisory authority in the Member State of your residence, workplace, or the location of the alleged infringement.
10.7 Right to Withdraw Consent at Any Time
Under Art. 7 para. 3, 13 para. 2 lit. c GDPR, you have the right to withdraw your consent to data processing at any time. The lawfulness of processing carried out up until the withdrawal remains unaffected. You can revoke your consent here.
11. Changes to the Privacy Policy
If we modify the privacy policy, this will be indicated on the website.
Last update: 13.03.2025

Do you have any questions?
We hope there are no more questions! If you do, please feel free to contact us at the email address below:
Data protection
datenschutz@snapaddy.com