Privacy Policy
1. General Information
With this privacy policy, we wish to inform you about the handling of your personal data when you visit this website. digitalwerk places great importance on the protection, accuracy, and integrity of your personal data. The use of this website is voluntary. Should you not agree with the use of your data, you can leave this website at any time. This privacy policy can be changed or updated at any time.
2. Responsible Organization
Below you will find the contact details of the controller and the data protection officer.
Controller for Data Processing
Ad Boutique OÜ
3. Security Measures
We implement organizational, contractual, and technical security measures in accordance with the latest state of the art to ensure compliance with data protection regulations and the protection of the data we use against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. The security measures include, in particular, the encrypted transmission of all data between your browser and our server.
4. Disclosure of Information to Third Parties
Personal data is only passed on to third parties if this is necessary – for example, for contractual purposes in accordance with the General Data Protection Regulation (GDPR) Art. 6 para. 1 lit. b or on the basis of legitimate interests of an economic and efficient business operation for our company in accordance with GDPR Art. 6 para. 1 lit. f.
When engaging subcontractors to provide our services, we take legal precautions as well as technical and organizational measures to ensure the security of personal data in accordance with data protection regulations.
5. Contact
When contacting us (by email), the information provided by users* will be processed to handle the contact request in accordance with GDPR Art. 6 para. 1b. User* data may be stored in our Customer Relationship Management system ("CRM system") or a similar requesting organization.
6. Webflow
The website ad.boutique is hosted by Webflow Inc., located at 398 11th Street, 2nd Floor, San Francisco, 94103 California, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files including your IP address(es).
Webflow is a tool for creating and hosting websites. Webflow stores cookies or uses other identification technologies that are necessary for displaying the page, providing certain website functions, and ensuring security (necessary cookies). The use of such necessary cookies is based on Art. 6 para. 1 lit. f GDPR. digitalwerk has a legitimate interest in ensuring that the website is displayed as reliably as possible.
The use of other Webflow functions and the setting of other, non-necessary Webflow cookies (such as analytics or advertising cookies) only takes place based on your consent, so that the processing is exclusively based on Art. 6 para. 1 lit. a GDPR or § 165 para. 2 TKG 2021. Consent can be revoked at any time with future effect. We point out that such a revocation may result in certain functions of the website no longer being available and/or certain services no longer being able to be provided to you. More information can be found in Webflow's Privacy Policy.
If your personal data is transferred to Webflow's servers located in the United States of America, this is done on the basis of the EU Commission's standard contractual clauses, which we have concluded with Webflow. Through these standard contractual clauses, Webflow has committed to maintaining a level of data protection comparable to that in the EU. Further information can be found here: EU & Swiss Privacy Policy
We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
7. Data Collection and Log Files
We collect data based on legitimate interests in accordance with GDPR Art. 6 para. 1f. regarding every access to the service's server (so-called server log files). The access data includes the name of the accessed web page, file, date and time of access, transferred data volume, notification of successful access, browser type, version, the user*'s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
For security reasons (e.g., for clarification of misuse or fraud in connection with access), log file information is stored for a maximum of seven days and then deleted. Data for which evidentiary purposes are required is excluded from deletion until the incident is resolved.
8. Cookies & Reach Measurement
Cookies consist of information transferred from our own server or that of a third party to the user's browser and stored there for later retrieval. Cookies can be small files or similar types of information storage.
We use session cookies, which are only active for the duration of the current visit to one of our websites. A randomly generated and unique identification number, a so-called session ID, is stored in a session cookie. In addition, the cookie contains information about its origin and storage duration - it cannot secure any further data.
The session cookie is deleted when the use of our online service ends, i.e., when logging out or closing the browser. Information about the use of cookies for pseudonymous reach measurement is provided to the user within the framework of the privacy policy.
If the storage via cookie on the user's computer is not desired, the user is asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of their browser. The exclusion of cookies may lead to functional limitations of our online services.
The following cookies are used on this website:
Cookie Name: \_ga
Data Category: Statistics
Purpose of the Cookie: Used to distinguish between users
Cookie is set by: Google
Storage Duration: 2 years
Cookie Name: \_fbp
Data Category: Statistics
Purpose of the Cookie: Used to distinguish between users and enable the delivery of targeted advertising
Cookie is set by: Meta
Storage Duration: 3 months
9. Google Analytics
Based on our legitimate interests (interest in the analysis, optimisation, and economic operation of our online offering within the meaning of GDPR Art. 6 Para. 1f), we use Google Analytics, a web analysis service provided by Google Inc. Google uses cookies, which means that user information about the use of the online offering is transmitted to a server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and guarantees compliance with European data protection law. More information can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)).
On our behalf, Google uses this information to evaluate the use of our website by users, to compile reports on activities within our website, and to provide other services associated with the use of our website and internet use. The data processed in this context can be used to create user profiles under pseudonyms.
We use Google Analytics to display advertisements within Google's advertising services and those of its partners only to users who have shown an interest in our online services or who exhibit certain characteristics (e.g., interest in specific topics or products determined by the website visited). By using Remarketing Audiences, we aim to ensure that our advertisements correspond to the potential interests of users and do not appear disruptive.
We use Google Analytics exclusively with activated IP anonymisation. This means that the user's IP address is shortened and pseudonymised within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there; the transmitted IP address of the user will not be merged with other Google data. The user can prevent the storage of cookies by deactivating the corresponding option in their browser system settings. Furthermore, you can prevent Google from collecting the data generated by the cookie and related to your use of the website, as well as Google's processing of this data, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on Google's data use, settings, and objection possibilities can be found on the following websites:
https://policies.google.com/technologies/partner-sites?hl=de
https://policies.google.com/technologies/ads?hl=de
https://adssettings.google.de/anonymous?hl=de
10. Google Remarketing Services
Based on our legitimate interests (interest in the analysis, economic, and efficient operation of our online offering pursuant to GDPR Art. 6 Para. 1f), we use marketing and remarketing services ("Google Marketing Services") provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google"), which are certified under the Privacy Shield Agreement and guarantee compliance with European data protection law. More information can be found here.
The use of Google Marketing Services enables us to display more targeted advertisements for and on our website, showing ads only to users who have expressed potential interest. When a user is shown a product that they have shown interest in on another website, this is referred to as "remarketing."
[](https://www.deepl.com/translator?utm_source=macos&utm_medium=app&utm_campaign=macos-share)
For this purpose, when our and other websites where Google Marketing Services are activated are visited, a Google code is immediately executed and so-called (re-)marketing tags (invisible graphics or codes, also known as "web beacons") are embedded into the website. With the help of these, an individual cookie - a small file - is saved on the user's device (instead of cookies, similar technology may also be used).
Cookies can be set by various domains, for example: google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. These files store user data (which website was visited, which content the user is interested in, and which offers they clicked on, technical information about the browser and operating system, referring websites, time of access, and further information about the use of our online offering).
The user's IP address is also collected, but is shortened only within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, in accordance with Google Analytics. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The transmitted IP address of the user will not be merged with other data from other Google services. The information mentioned above can be linked by Google with information from other sources. Upon subsequent visits to another website, users may be shown advertisements corresponding to their interests.
User data is processed pseudonymously by Google Marketing Services. This means that Google does not store the user's name or email address, but only processes the corresponding cookie data into pseudonymous user profiles. Therefore, Google ads are not displayed to a specific identified person, but to a cookie owner, regardless of who the cookie owner is. This does not apply if a user has given Google their consent to process their data without pseudonymisation. The user data collected by Google Marketing Services is transmitted to Google and stored on its servers in the USA. One of the Google Marketing Services we use is the online advertising program "Google AdWords." In the case of Google AdWords, each AdWords customer receives a different "conversion cookie." Cookies therefore cannot be tracked by AdWords customers' websites. The information collected by cookies is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a website containing a conversion tracking tag. They do not receive any information that can be used to identify a user.
Based on "DoubleClick" by Google Marketing Services, third-party advertisements can be integrated. DoubleClick uses cookies, which enable Google and its partner websites to display advertisements based on visits to this and other websites on the internet. Furthermore, third-party advertisements can be displayed based on "AdSense" by Google Marketing Services. AdSense uses cookies, which enable Google and its partner websites to display advertisements based on visits to this and other websites on the internet. Similarly, "Google Optimizer" can be used, which, within the scope of "A/B testing," allows us to understand how changes to the website affect users (e.g., changes to input fields, designs, etc.). For these test purposes, cookies are placed on the users' devices. The "Google Tag Manager" can also be used to integrate and manage Google analysis and marketing services on our website.
Further information on data use and marketing purposes by Google can be found on this overview page. Google's privacy policy can be read here.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the settings and opt-out options provided by Google.
11. Facebook, Custom Audiences and Facebook Marketing Services
Within our online offering, based on our legitimate interests (i.e., interest in the analysis, economic and efficient operation of our online offering), we use the "Facebook Pixel" service of the social network Facebook, operated by Facebook Inc., located at 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you reside in the European Union, Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook is certified under the Privacy Shield Agreement, which guarantees compliance with European data protection law. More information can be found here.
By using the Facebook Pixel, Facebook is able to identify visitors to our website as a target group for the display of advertisements ("Facebook Ads"). We use the Facebook Pixel to deliver Facebook Ads to Facebook users who have shown interest in our online offering or who have certain characteristics (e.g., interest in specific topics or products determined by the visited website) that we transmit to Facebook (so-called "Custom Audiences"). By using the Facebook Pixel, we aim to ensure that our Facebook Ads correspond to the potential interests of users and do not appear annoying. With the Facebook Pixel, we can also determine the effectiveness of our Facebook Ads for statistical and market research purposes – for example, we can see if the user was redirected to our website via a Facebook Ad (so-called "Conversion").
When you visit our web pages, Facebook Pixels are immediately integrated, and a cookie – a small file – may be stored on the user's device. If you then log in to Facebook or visit while already logged in, the visit to our online offering will be stored in your profile. The personal data collected is anonymous to us, so the user cannot be identified by us. However, Facebook secures and processes the data so that a connection to a specific user profile can be established, which is then used by Facebook and us for our own market research and advertising purposes. If data is sent to Facebook for matching, it is encrypted locally in the user's browser and then transmitted encrypted to Facebook via a secure HTTPS connection. This only occurs if encrypted data is to be matched with similar encrypted data from Facebook.
Based on our legitimate interest, we use the "Custom Audiences from File" service of Facebook, Inc. Here, the email addresses of newsletter recipients are uploaded to Facebook. The upload process is encrypted. The purpose of the upload is to identify recipients for our Facebook Ads. In this way, we want to ensure that the ads are only displayed to users who have shown interest in our information and services.
The processing of data by Facebook is carried out within the framework of Facebook's Data Policy. Relevant information on the display of Facebook Ads can be found in Facebook's Data Policy: https://www.facebook.com/policy.php
Specific information and details about Facebook Pixels and their functionality can be found in Facebook's Help Center: https://www.facebook.com/business/help/651294705016616
You can object to the collection of data by the Facebook Pixel and the processing of your data for the display of Facebook advertisements. To adjust the settings for which advertisements are shown on Facebook, you can visit the relevant Facebook page and follow the instructions for changing the settings for usage-based advertisements: https://www.facebook.com/settings?tab=ads. These settings are platform-independent, meaning the changes apply to all types of devices (PC, mobile devices, etc.).
Note: Please be aware that Facebook currently does not offer an opt-out option – this must therefore be implicitly implemented by you. If you wish to object to the use of cookies for reach measurement and advertising purposes, you can visit the opt-out page of the Network Advertising Initiative (https://optout.networkadvertising.org) as well as the US website (https://www.aboutads.info/choices) or the European website (https://www.youronlinechoices.com/uk/your-ad-choices/).
12. Services and Content of Third Parties
Based on our legitimate interests (interest in the analysis, economic and efficient operation of our online offering pursuant to GDPR Art. 6 Para. 1f), we use content and services from third parties to market their content and services, e.g., videos and fonts (consistently used as content). This presupposes that these third-party providers use the user's IP address, as the content cannot be transmitted to the browser without the IP address. The IP address is therefore required for the display of this content. We endeavor to use only such content whose providers merely use the IP address for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics or codes, also known as "web beacons") for statistical or marketing purposes. With the help of "pixel tags", information such as visitor traffic on subpages of the website can be analyzed. The pseudonymous data can be stored in cookies on the user's device and include technical information about the browser and operating system, referring web pages, the time of access, and other information about the use of our online offering. This information is used to link it with other information from various sources.
The following description provides an overview of third parties and their respective content, including a link to their respective privacy policies, which contain further information on data processing and, as partly mentioned above, objection options (so-called opt-out):
External fonts from Google, Inc. www.google.com/fonts ("Google Fonts"). The integration of Google Fonts occurs via server call (usually by Google US). Data protection regulations: www.google.com/policies/privacy/, Opt-Out: www.google.com/settings/ads/.
Videos from the platform "YouTube" by the third-party provider Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection regulations: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
13. Rights of Users
Users have the right, upon request, to receive free information about the personal data stored about them, the right to rectification of inaccurate data, restriction of processing, and erasure of personal data, if they assert their right to data portability, the right to lodge a complaint with the competent supervisory authority in case of unlawful processing, and the right to withdraw consent with effect for the future.
14. Deletion of Data
The data stored by us will be deleted when it is no longer necessary for the purpose of its fulfillment and provided that no legal retention obligations prevent the deletion. If a user's data is not deleted because it is required for other legal purposes, processing will be restricted. This means that the data will be blocked and not used for other purposes, which applies to user data that must be stored for commercial or tax reasons. Generally, data is stored for up to 10 years.
15. Right to Object
Users have the right to object to the future processing of their personal data in accordance with legal provisions at any time, in particular, the processing of data for direct marketing can be objected to.
16. Changes to the Privacy Policy
We reserve the right to change the privacy policy, to adapt it to changed legal situations or to changes in the service and data processing. However, this only applies to declarations regarding data processing. Insofar as the user's consent is required or components of the privacy policy contain provisions of the contractual relationship with the users, changes will only be made with the users' consent.
Users are requested to regularly inform themselves about the content of the privacy policy.