Privacy policy


Last updated: September 2026

1. Controller

The controller responsible for data processing is:

AnalyticaA GmbH
Watzmannstraße 1a
81541 Munich

2. Legal bases for processing (GDPR)

We process personal data on the following legal bases:

  • Consent (Article 6(1), first sentence, point (a) GDPR): where you have actively given your consent, e.g. for cookies or newsletters.
  • Performance of a contract and pre-contractual measures (Article 6(1), first sentence, point (b) GDPR): e.g. for client enquiries or during the recruitment process.
  • Legal obligation (Article 6(1), first sentence, point (c) GDPR): where data must be retained for legal reasons, e.g. under tax law.
  • Legitimate interests (Article 6(1), first sentence, point (f) GDPR): e.g. for the secure operation of the website, audience measurement or direct marketing, provided that our interests prevail.

For users in Switzerland, the provisions of the Swiss Federal Act on Data Protection (FADP) also apply.

3. Data processed and purposes

Types of data processed

Master data, payment data, location data, contact data, content data, contract data, usage data, and metadata and communications data.

Special categories of personal data

Application documents may contain special categories of personal data, such as health data or information about ethnic origin (e.g. severe disability status). Article 9 GDPR applies to these data.

Purposes of processing

  • Performance of contracts and handling contact enquiries
  • Direct marketing
  • Tracking and audience measurement (web analytics)
  • Remarketing and conversion measurement
  • Affiliate tracking
  • Conducting the recruitment process
  • Providing our online services

4. International data transfers (transfers to third countries)

We use service providers and tools based in the USA, including those from Google and social media platforms. This may involve transferring data to third countries.

  • Transfers are primarily based on adequacy decisions under Article 45 GDPR. The EU-US Data Privacy Framework (DPF) applies to the USA; the European Commission adopted an adequacy decision for this framework on 10 July 2023. Tools from providers certified under the DPF may be used on this basis.
  • Where no adequacy decision exists, we base transfers on standard contractual clauses (Article 46(2)(c) GDPR) or on your explicit consent (Article 49(1) GDPR).

5. Data security and erasure

Encryption

This website uses TLS encryption (HTTPS) throughout.

Erasure

We erase personal data as soon as the purpose of processing no longer applies or consent is withdrawn. Data subject to statutory retention periods under commercial or tax law are restricted for the duration of those periods and are not otherwise processed.

6. Data subject rights

As a data subject, you have the following rights under the GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object

You may withdraw any consent you have given at any time with effect for the future. If you contact us by email, you may object to the storage of your data at any time; in this case, the correspondence cannot be continued.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR).

7. Technologies and tools used

As a digital marketing agency, we use a range of services. These cover the following areas:

  • Cookies and web hosting: for the basic operation of the website.
  • Web analytics, monitoring and optimisation: recording user behaviour, usually through Google Analytics or comparable services, for which consent is obtained via the cookie banner.
  • Digital marketing and remarketing: audience creation, conversion measurement and affiliate tracking.
  • Communication and cloud services: video conferences, webinars, newsletter distribution and cloud services for data management.
  • Social media: data processing in connection with our social media profiles (including Facebook and Instagram) and embedded plugins.