Privacy Policy
shop.horsch.com — Last updated: 20.07.26
Thank you very much for visiting our online shop or contacting us in any other way. Personal data protection is of paramount importance to us. The website can generally be used without providing any personal data. However, if you would like to use an offer from our company online, processing of personal data may become necessary.
If processing of personal data is required and there is no legal basis for such processing, we generally obtain consent from the person concerned. The processing of personal data, such as name, address, email address or phone number of a person concerned, is always carried out in compliance with the current German Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR) and the Telecommunications Digital Services Data Protection Act (TDDDG).
With this privacy policy, our company would like to inform you about the nature, scope and purpose of the personal data we process and inform affected persons about their rights. Our company has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of personal data processed. However, internet-based data transmissions can generally have security vulnerabilities, so absolute protection cannot be guaranteed.
Table of Contents
- Definitions
- Controller
- Data Protection Officer
- Joint Controllership with HORSCH Maschinen GmbH
- General Information on Data Processing
- Website Provision and Creation of Logfiles
- Use of Cookies
- Consent Management Tool
- Contact Form and Email Contact
- Automatic Email Archiving
- Customer Account
- Order Processing and Dropshipping
- Use of Payment Service Providers
- Automatic Identity and Solvency Check when Selecting "PayPal" as Payment Method
- Google Tag Manager
- Web Analytics via Google Analytics
- Rights of Data Subjects
I. Definitions
The privacy policy of our company is based on the GDPR. Our privacy policy is intended to be simple to read and understand. To ensure this, we explain the terms used in advance:
- Personal Data means all information relating to an identified or identifiable natural person (data subject). A person is considered identifiable if they can be identified directly or indirectly through characteristics such as name, identification number, location data, online identifier or special features. These characteristics may relate to their physical, genetic, psychological, economic, cultural or social identity (Article 4 paragraph 1 GDPR).
- Data Subject means any identified or identifiable natural person whose personal data is processed by the controller.
- Processing means all operations involving personal data – whether automated or not. This includes collecting, storing, organizing, adapting, retrieving, using, transmitting, disseminating, comparing, restricting, deleting or destroying data.
- Restriction of Processing means marking stored personal data with the aim of restricting its future processing.
- Profiling means automated processing of personal data to evaluate personal characteristics of a natural person. This includes analyzing or predicting aspects such as work performance, financial situation, health, preferences, interests, behavior or location.
- Pseudonymization means processing personal data in such a way that they can no longer be attributed to a specific person without additional information. This additional information is kept separately and protected by technical and organizational measures to prevent attribution.
- Controller means the natural or legal person, public authority, agency or other body that alone or jointly with others determines the purposes and means of processing of personal data.
- Processor means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
- Recipient means a natural or legal person, public authority, agency or other body to whom personal data is disclosed, regardless of whether it is a third party or not. Public authorities that may receive personal data in the context of a particular investigation under Union or Member State law are not considered recipients.
- Third Party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorized to process personal data.
- Consent means any manifestation of will freely given, specific, informed and unambiguous by which the data subject, by declaration or clear affirmative action, agrees to the processing of personal data concerning them.
II. Controller
The controller under the GDPR and other national data protection laws of the Member States as well as other data protection provisions is:
Micony GmbH
represented by Frederic Horsch
Sitzenhof 1, 92421 Schwandorf
Phone: +49 162 5715510
Email: hey@ag-parts.de
Website: https://shop.horsch.com
III. Data Protection Officer
For questions regarding data protection, please contact hey@ag-parts.de. A Data Protection Officer is not currently appointed.
IV. Joint Controllership with HORSCH Maschinen GmbH
For the operation of the online shop and processing of orders, we work together with HORSCH Maschinen SE & Co. KG, Sitzenhof 1, 92421 Schwandorf.
Between Micony GmbH and HORSCH Maschinen SE & Co. KG there is joint controllership for certain processing operations pursuant to Article 26 GDPR. While Micony GmbH is responsible in particular for product distribution, contract processing and customer service, HORSCH Maschinen SE & Co. KG provides the technical platform for operating the online shop and supports the provision of the offered products.
The essential contents of the joint controller agreement can be viewed upon request.
Data subjects may assert their rights under Articles 15-22 GDPR against both companies (see section Rights of Data Subjects).
V. General Information on Data Processing
1. Scope of Personal Data Processing
We only process personal data when necessary to provide our website, content or services. This is generally done only with user consent, unless prior consent is not practically possible and is permitted by law.
2. Legal Basis for Processing Personal Data
Where we obtain consent from the data subject for data processing operations, Article 6 paragraph 1 letter a GDPR serves as the legal basis.
Processing of personal data to fulfill a contract with the data subject is based on Article 6 paragraph 1 letter b GDPR. This also applies to data processing necessary to perform pre-contractual measures.
To the extent that processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6 paragraph 1 letter c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Article 6 paragraph 1 letter d GDPR serves as the legal basis.
Where processing is necessary to pursue legitimate interests of our company or third parties and the interests, rights and freedoms of the data subject do not prevail, it is based on Article 6 paragraph 1 letter f GDPR.
3. Data Deletion and Storage Duration
Personal data is deleted or blocked once the purpose of storage no longer applies. Extended storage is only permitted if provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data is also deleted after expiration of statutory periods set therein, unless it is still needed for conclusion or performance of a contract.
VI. Website Provision and Creation of Logfiles
1. Description and Scope of Data Processing
A hosting service provider operates the online shop with its content stored on European servers.
The hosting service provider was carefully selected; all necessary measures have been taken to ensure lawful data processing (for example, conclusion of a data processing agreement).
Each time our website is accessed, our system automatically collects data and information from the computer system making the call. The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet Service Provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accessed our website
- Websites accessed from our website by the user's system
- File accessed
- Amount of data transmitted
The data is also stored in our system's logfiles. This data is not stored together with other personal data of the user.
2. Legal Basis for Data Processing
The legal basis is Article 6 paragraph 1 letter f GDPR (legitimate interest).
3. Purpose of Processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this, the user's IP address must remain stored for the duration of the session.
Storage in logfiles is done to ensure the website functions properly. Furthermore, we use this data for technical optimization of the website and to ensure the security of our information technology systems. These purposes constitute our legitimate interest under Article 6 paragraph 1 letter f GDPR.
Data is not evaluated for marketing purposes in this context.
4. Storage Duration
Data is deleted once it is no longer needed to achieve the purpose of its collection. In the case of data collected for website provision, this occurs when the respective session ends.
In the case of data stored in logfiles, this occurs at the latest after seven days. Extended storage is possible. In such cases, user IP addresses are deleted or anonymized so that assignment to the calling client is no longer possible.
5. Right to Object and Deletion
Data collection for website provision and storage of data in logfiles is absolutely necessary for website operation. Consequently, there is no possibility of objection from the user.
VII. Use of Cookies
1. Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. Cookies are set by our website or external web services to maintain full functionality of our website, improve user experience, or pursue the purpose indicated with your consent. The cookies contain a characteristic character string that allows unique identification of the browser when revisiting the website, as some elements of our website require the browser to be identified even after page navigation.
The cookies store and transmit, for example, the following data:
- Language settings
- Login information
- Items in a shopping cart
When you visit our website, you are informed about the use of cookies for analysis and marketing purposes, and your consent for processing personal data used in this context is obtained (see Consent Management Tool). In this context, reference is also made to this privacy policy.
2. Legal Basis for Data Processing
To the extent you have given us consent, the legal basis for processing personal data using cookies (for example for analysis and marketing purposes) is Article 6 paragraph 1 letter a GDPR in connection with Section 25 paragraph 1 TDDDG.
The legal basis for processing personal data using technically necessary cookies as defined in Section 25 paragraph 2 TDDDG is Article 6 paragraph 1 letter f GDPR.
You may revoke your consent at any time with future effect by disabling this service in the "Privacy Settings" on this page.
3. Purpose of Data Processing
Cookies are set by our website or external web services to maintain full functionality of our website, improve user experience, or pursue the purpose indicated with your consent. It is also possible for us to recognize individual visitors using pseudonyms, which allows us to offer more personalized services.
4. Storage Duration
Our cookies are stored until deletion in your browser or, if it is a session cookie, until the session expires.
5. Right to Object and Deletion
Cookies are stored on the user's computer and transmitted to our site. You as a user therefore have full control over cookie use. By changing settings in your internet browser, you can disable or restrict cookie storage. Previously stored cookies can be deleted at any time. This can also be automated. If cookies for our website are disabled, it may not be possible to use all website functions in full.
VIII. Consent Management Tool
1. Description and Scope of Data Processing
When you visit our website, we display a notice regarding "Privacy Settings" through which we manage our consent management. Our Consent Manager is controlled via the required CookieConsent cookie. This mechanism serves to manage your consent for the use of cookies on our website.
If the CookieConsent cookie is not present, the Consent Manager is displayed. If you decline the use of optional cookies, the CookieConsent cookie receives the value Mandatory and various standard deletion cookies are set. After restarting your browser, the Consent Manager will be presented to you again.
If you give consent for technically necessary services in the Consent Manager, the value mandatory is stored in the CookieConsent cookie with a "|" separator. For example, if you consent to all services, the following value is obtained:
mandatory|Marketing|Stats|External|Unclassified
External media such as Google Maps or YouTube are blocked by default. If the string External is contained in the CookieConsent cookie, these external media are loaded. If you give consent in the blocked media container, the value in the CookieConsent cookie is extended by external and the corresponding content is loaded.
If the value of the CookieConsent cookie contains the strings Marketing, Stats or Unclassified, the Google Tag Manager is initialized, which controls the corresponding services based on the given value. Otherwise, Google Tag Manager remains inactive. If consent has already been given, this last step is executed immediately.
Your consent is valid until the end of the browser session.
2. Legal Basis for Data Processing
The legal basis for the use of a consent management system is Article 6 paragraph 1 letter c GDPR. The legal basis for processing personal data using technically necessary cookies as defined in Section 25 paragraph 2 TDDDG is also Article 6 paragraph 1 letter f GDPR.
3. Purpose of Data Processing
Consent management serves to manage your consent for the use of cookies on our website.
4. Storage Duration, Right to Object and Deletion
You can change your settings or revoke your consent at any time with future effect by disabling the corresponding category in the "Privacy Settings" on this page.
IX. Contact Form and Email Contact
1. Description and Scope of Data Processing
Our website has a contact form that can be used for electronic contact. When a user uses this option, the data entered in the form is transmitted to us and stored. This data includes: first name, last name, email address, phone, subject, comment. At the time of sending the message, the following data is also stored:
- The user's IP address
- Date and time of registration
Your consent is obtained during the sending process through clear affirmative action or behavior, and this privacy policy is referenced. Alternatively, contact is possible via the email address provided (see Controller). In this case, the personal data transmitted with the user's email is stored. No data is shared with third parties in this context. The data is used exclusively for processing the conversation.
2. Legal Basis for Data Processing
The legal basis for processing data with user consent is Article 6 paragraph 1 letter a GDPR. The legal basis for processing data transmitted via email is Article 6 paragraph 1 letter f GDPR. If email contact aims at concluding a contract, an additional legal basis for processing is Article 6 paragraph 1 letter b GDPR.
3. Purpose of Data Processing
Processing of personal data from the form serves solely for processing the contact request. In case of email contact, there is also the required legitimate interest in processing the data. Other personal data processed during sending serves to prevent misuse of the contact form and ensure the security of our information technology systems.
4. Storage Duration
Data is deleted once it is no longer needed to achieve the purpose of its collection and no statutory retention periods oppose deletion. For personal data from the contact form and that transmitted via email, this is the case when the respective conversation with the user is ended. The conversation is considered ended when circumstances indicate that the matter has been finally clarified. Other personal data collected during sending is deleted at the latest after seven days.
5. Right to Object and Deletion
Use of the contact forms is voluntary. The user may revoke consent for processing personal data at any time. If the user contacts us via email, they may object to storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored as part of contact will be deleted in this case.
X. Automatic Email Archiving
1. Description and Scope of Data Processing
We explicitly inform you that our email system has an automated archiving procedure. All incoming and outgoing emails are thereby archived digitally in an audit-proof manner.
2. Legal Basis for Data Processing
Article 6 paragraph 1 letter c GDPR (legal obligation). The legal obligation consists of compliance with tax and commercial law provisions (e.g., Sections 146, 147 AO, Sections 238, 257 HGB).
3. Purpose of Data Processing
The purpose of archiving is compliance with tax law (e.g., Sections 146, 147 AO – obligation to preserve emails of tax relevance) and commercial law provisions (e.g., Sections 238, 257 HGB – obligation to archive business correspondence).
4. Storage Duration
Storage of our email communication occurs until expiration of tax and commercial law retention obligations. The retention period can be up to 10 years.
5. Right to Object and Deletion
You may object to processing at any time pursuant to Article 21 GDPR and request deletion of data pursuant to Article 17 GDPR. Which rights you have and how to exercise them can be found in the section Rights of Data Subjects.
XI. Customer Account
1. Description and Scope of Data Processing
You have the option to create a customer account on our website. Creating and using a customer account is voluntary. Orders can also be placed as guest orders without a customer account.
In the course of registration and use of the customer account, we process the personal data you provide. This includes in particular your email address and the information you enter in your customer account, such as name, billing and delivery address.
To confirm registration, you receive an email with a confirmation link (double opt-in procedure).
At the time of registration, the following data is also processed:
- User's IP address
- Date and time of registration
2. Legal Basis for Data Processing
The legal basis for processing data in the course of registration and use of the customer account is Article 6 paragraph 1 letter b GDPR, to the extent processing is necessary to perform pre-contractual measures or to perform a contract.
3. Purpose of Data Processing
Processing serves to provide and manage the customer account, simplify future ordering processes, and conduct and process orders. Creating a customer account allows you in particular to save and manage your stored data for future orders.
4. Storage Duration
Data is stored as long as the customer account exists or legal retention obligations prevent deletion. After deletion of the customer account, data is deleted to the extent no legal or contractual retention obligations require further storage.
5. Right to Object and Deletion
You can have your customer account deleted at any time. A message to the contact details listed under Section II is sufficient. Legal retention obligations and further storage of data to the extent necessary for order processing or compliance with legal obligations remain unaffected.
XII. Order Processing and Dropshipping
1. Description and Scope of Data Processing
To place an order without registration, follow the "Go Directly to PayPal" button in the shopping cart status window, which you access by clicking the shopping cart icon. You can complete your purchase there without registration either directly through your PayPal account by logging into PayPal, or by selecting "Pay with Credit or Debit Card" if you don't have a PayPal account. After submitting your email address, you have the option via PayPal to pay by direct debit or credit/debit card. To place an order with registration and customer account, you must complete the necessary data in your account and choose a payment method. After placing an order, Micony GmbH processes this data and engages external shipping partners/transportation companies to deliver the goods.
2. Legal Basis for Data Processing
Pursuant to Article 6 paragraph 1 letter b GDPR, your personal data is collected and processed to the necessary extent by us, our partner HORSCH Maschinen GmbH and by the payment provider you have chosen (see Payment Service Providers) when placing an order.
3. Purpose of Data Processing
For payment purposes, you are redirected directly to our payment providers. For order processing, conducting goods delivery and any service or returns processing, Micony GmbH processes your order data and engages external shipping partners/transportation companies to deliver the goods.
4. Storage Duration
Data is deleted once it is no longer needed to achieve the purpose of its collection.
5. Right to Object and Deletion
As a user, you have the option to cancel your registration at any time. The data stored about you can be modified at any time. If data is required to perform a contract or to conduct pre-contractual measures, early deletion of the data is only possible to the extent that contractual or legal obligations do not prevent deletion.
XIII. Use of Payment Service Providers
We process your payment information for the purpose of payment processing when you purchase a product. Depending on the payment method, we forward your payment information to third parties. The legal basis for this data processing is Article 6 paragraph 1 letter b GDPR. We use external payment service providers through whose platforms you and we can conduct payment transactions. Data processed by payment service providers includes master data such as name and address, bank data such as account or credit card numbers, as well as passwords, TANs, checksums and contract-related information. This information is necessary to conduct transactions. Please note, however, that only the payment service providers process and store this data. We do not receive account or credit card-related information, only payment confirmations or rejections. There is a possibility that payment service providers forward this data to credit reporting agencies to conduct identity and solvency checks (see Solvency Check with PayPal). Details and information on asserting withdrawal, information and other data subject rights can be found in the terms and conditions and privacy information of the respective payment service provider.
1. PayPal
If you choose PayPal for payment, your payment data is forwarded in the course of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). For the following payment methods, PayPal reserves the right to conduct a solvency check: credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal. PayPal uses the result of the solvency check to assess the statistical probability of payment default. This assessment serves as the basis for deciding whether to provide the respective payment method. The solvency check may include so-called score values that represent probability values. If score values are included in the solvency check, they are based on scientifically recognized mathematical-statistical procedures. Various data, including address data, are considered in calculating these score values. You can find more information in PayPal's privacy policy at paypal.com/en/webapps/mpp/ua/privacy-full.
For more information on automatic solvency check when selecting PayPal, see the section Automatic Identity and Solvency Check.
2. Mollie
For additional payment methods, the external payment service provider Mollie (Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands) is used on the website. The following payment methods are processed via Mollie:
- Bank transfer (mollie.com/en/privacy)
- Credit cards such as Visa (visa.com/en/privacy), Mastercard (mastercard.us/en-us/privacy.html)
When you make payment, the payment data you entered is transmitted to both Mollie and your chosen payment provider. The transmission of your data to Mollie is based on Article 6 paragraph 1 letter a GDPR (consent) and Article 6 paragraph 1 letter b GDPR (processing to perform a contract). You have the option to revoke your consent for data processing at any time. A revocation does not affect the validity of data processing operations that have already taken place. For payment transactions, the terms and conditions and privacy information of the respective payment service providers apply, which are available on their respective websites or transaction applications. We refer to these for further information and to exercise withdrawal, information and other data subject rights. For details on payment via Mollie, see the following link: mollie.com/en/privacy.
XIV. Automatic Identity and Solvency Check when Selecting "PayPal" as Payment Method
1. Description and Scope of Data Processing
If you have selected "PayPal" as the payment method, we forward your personal customer data collected in the course of the order within the scope necessary to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. If you give your consent, the following data is subject to data transmission: first and last name, street, house number, postal code, city, date of birth, phone number and data in connection with your order.
2. Legal Basis for Processing Personal Data
Article 6 paragraph 1 letter b GDPR (performance of pre-contractual measures).
3. Purpose of Data Processing
PayPal conducts a solvency check when the "PayPal" payment method is selected. Mathematical-statistical procedures are used to calculate a rating regarding the probability of payment default (so-called calculation of a score value). PayPal bases its decision on whether to provide the respective payment methods on the calculated score value. The calculation of a score value is performed using recognized scientific procedures. Please refer to PayPal's privacy policy for additional information: paypal.com/en/webapps/mpp/ua/privacy-full.
4. Storage Duration
We store the relevant data for payment processing for as long as necessary to conduct the transaction. To the extent data is subject to statutory retention obligations, deletion occurs after expiration of the retention obligation. The duration of storage of your data by PayPal can be found in PayPal's privacy policy: paypal.com/en/webapps/mpp/ua/privacy-full.
5. Right to Object and Deletion
You may object to processing at any time pursuant to Article 21 GDPR and request deletion of data pursuant to Article 17 GDPR. Which rights you have and how to exercise them can be found in the section Rights of Data Subjects.
XV. Google
We use the Google service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-en@google.com, Website: www.google.com on our site. Personal data is also transferred to the USA. Regarding this transfer, there is an adequacy decision by the EU Commission for the EU-US Data Privacy Framework under Article 45 GDPR (hereinafter: DPF – Link to decision). The service provider is certified under DPF, so the usual level of GDPR protection applies to the transfer.
The legal basis for processing personal data is your consent under Article 6 paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR, which you have given on our website.
We use Google to be able to load additional Google services on the website. The service is used to provide additional Google services, such as required data processing for providing streams and fonts and relevant content from Google Search. It is technically necessary to exchange information already held by Google about the website visitor between Google services and to provide the website visitor with personalized content adapted to their Google account.
For processing, the service or we collect the following data: background data stored in the Google user account or with other Google services about the website visitor, background data for providing Google services such as streaming data or advertising data, data about how the website user uses Google Search, information about the device used, IP address and browser, and further data from Google services to provide Google services related to our website.
If the service is activated on our website, our website establishes a connection to Google Ireland Limited's servers and transmits the necessary data. In the course of order processing, personal data may also be transmitted to Google LLC servers, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transmit and process information from other Google services to provide background services for displaying and processing services provided by Google. This may also involve data transfers to Google services Google APIs, Doubleclick, Google Cloud, Google Ads and Google Fonts according to Google's privacy policy. You can view the service provider's certification under the EU-US Data Privacy Framework at dataprivacyframework.gov/list.
You may revoke your consent at any time. For more information on revoking your consent, see either the consent request itself or the Rights of Data Subjects section.
For more information on how your transferred data is handled, see the service provider's privacy policy at policies.google.com/privacy.
The provider also offers an opt-out option at support.google.com/My-Ad-Center-Help.
XVI. Google Tag Manager
We use the Google Tag Manager service from Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-en@google.com, Website: www.google.com on our site. Personal data is also transferred to the USA. Regarding this transfer, there is an adequacy decision by the EU Commission for the EU-US Data Privacy Framework under Article 45 GDPR (hereinafter: DPF – Link to decision). The service provider is certified under DPF, so the usual level of GDPR protection applies to the transfer.
The legal basis for processing personal data is your consent under Article 6 paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR, which you have given on our website.
Google Tag Manager provides a technical platform to execute and manage other web tools and web tracking programs via so-called "tags". In this context, Google Tag Manager stores cookies on your computer and, where web tracking tools are executed via Google Tag Manager, analyzes your browsing behavior (so-called "tracking"). Data generated by the "tags" is consolidated, stored and processed by Google Tag Manager under a unified user interface. All integrated "tags" are listed separately in this privacy policy. When using our website with Google Tag Manager "tags" activated, data such as your IP address and user activities are transmitted to Google servers. The tracking tools used in Google Tag Manager ensure through IP anonymization of the source code that the IP address is anonymized before transmission by Google Tag Manager. With Tag Manager, measurements from various service providers (Google and third parties) can be linked and evaluated on the basis of so-called tag management. Google Tag Manager helps us generate reports on website activities and manage the web tools of our website (see also Google Analytics).
For processing, the service or we collect the following data: cookies, web tracking data, incoming or outgoing links, information generated when integrating and activating JavaScript code on the website by Google Tag Manager and the web tools triggered by Google Tag Manager.
You can view the service provider's certification under the EU-US Data Privacy Framework at dataprivacyframework.gov/list.
You may revoke your consent at any time. For more information on revoking your consent, see either the consent request itself or the Rights of Data Subjects section.
For more information on how your transferred data is handled, see the service provider's privacy policy at policies.google.com/privacy. The provider also offers an opt-out option there.
XVII. Web Analytics via Google Analytics
We use the Google Analytics service from Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-en@google.com, Website: www.google.com on our site. Personal data is also transferred to the USA. Regarding this transfer, there is an adequacy decision by the EU Commission for the EU-US Data Privacy Framework under Article 45 GDPR (hereinafter: DPF – Link to decision). The service provider is certified under DPF, so the usual level of GDPR protection applies to the transfer.
The legal basis for processing personal data is your consent under Article 6 paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR, which you have given on our website.
Google Analytics is a web tracker that analyzes the behavior of website visitors and their interactions with our website and provides us with evaluations and forecasts about the content and products of our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can analyze the browsing behavior of website users. For this purpose, Google collects the page interactions of website visitors with our website and any existing information from reading cookies or other storage technologies and prepares it statistically for us. Google Analytics uses data processing technologies that enable tracking of individual website visitors and their interaction with other Google services such as the Google Ads advertising network. Data from other Google services is also used to close statistical gaps using machine learning techniques, modeled statistics and forecast functions, and to create comprehensive statistics about the content of our website. If Google Analytics is activated on our website, the data collected by Google Analytics is transmitted to Google Ireland Limited's servers. In the course of order processing, personal data may also be transmitted to the parent company Google LLC's servers, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We use Google Analytics to continuously optimize our online offering and make it more accessible. This is a so-called audience measurement.
For processing, the service or we collect the following data: data about interactions of website visitors with website content, data about how website features are used, data from external Google services when they interact with our website such as advertising data or data about advertising behavior, data about approximate geographic origin, browser used, operating system and other information about the device used.
Google Analytics will store the data relevant for web tracking for as long as necessary to fulfill the booked web service. Data collection and storage is performed anonymized. To the extent individual interactions of website visitors make it possible to establish a personal reference to concrete actions afterwards, we will delete the collected data once the purpose is achieved. The data is deleted at the latest when it is no longer subject to statutory retention obligations. As a rule, we delete this data at the latest after 12 months. You can view the service provider's certification under the EU-US Data Privacy Framework at dataprivacyframework.gov/list.
You may revoke your consent at any time. For more information on revoking your consent, see either the consent request itself or the Rights of Data Subjects section.
For more information on how your transferred data is handled, see the service provider's privacy policy at policies.google.com/privacy.
The provider offers an opt-out option at tools.google.com/dlpage/gaoptout.
XVIII. Rights of Data Subjects
We are aware that you have certain rights regarding the processing of your data. In the following sections, we inform you about which data subject rights you have and how you can exercise them.
1. Right of Access (Article 15 GDPR)
You have the right to request information from us about what personal data we process about you and for what purpose. For an access request that is not made in writing via a contact address already registered in our systems, we ask for your understanding that we may require evidence from you proving that you are the person you claim to be.
2. Right to Rectification (Article 16 GDPR)
You have the right to have inaccurate or incomplete personal data we have stored about you corrected.
3. Right to Erasure (Article 17 GDPR)
You have the right to request deletion of your personal data from us if it is no longer needed or if processing violates data protection provisions.
4. Right to Restrict Processing (Article 18 GDPR)
You have the right to request restriction of processing of your personal data if you dispute the accuracy of the data, processing is unlawful, or you have objected to processing.
5. Right to Data Portability (Article 20 GDPR)
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.
6. Right to Object (Article 21 GDPR)
You have the right to object to processing of your personal data if processing is based on our legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent (Article 7 paragraph 3 GDPR)
You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
8. Right to Lodge a Complaint with a Supervisory Authority
Notwithstanding any other administrative or judicial remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that processing of your personal data violates the GDPR. The supervisory authority with which the complaint is filed will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
Last updated: 20.07.2026
Micony GmbH, Sitzenhof 1, 92421 Schwandorf
