Manufacturer declarations & certificates

This service allows the user to measure traffic and engagement on their websites and mobile apps using customizable reports.

Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Purpose of Data
This list represents the purposes of data collection and processing.
– Marketing
– Analytics

Technologies Used
– Tracking Code
– Cookies

Collected Data
This list contains all (personal) data collected by or through the use of this service.
– Account Data
– Anonymized IP Address
– Bounce Rates
– Browser Information
– Click Path
– Date and Time of Visit
– Device Information
– Downloads
– Duration of Visit
– Location Information
– Internet Service Provider
– Mouse Movements
– Screen Resolution
– Behavioral Data
– Referrer URL
– App Updates

Legal Basis
Below is the required legal basis for the processing of data
– Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
European Union

Duration of Storage
The storage duration is the period during which the collected data is stored for processing. The data must be deleted as soon as it is no longer needed for the specified processing purposes.
The customer can choose how long Google Analytics data is stored. The maximum retention period is 26 months.

Data Recipient
Alphabet Inc., Google LLC, Google Ireland Limited

Data Protection Officer of Processing Company
Below you will find the email address of the Data Protection Officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Transfer to Third Countries
This service may forward the collected data to another country. Please note that this service may transfer data to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without the possibility of legal remedies. Below is a list of countries to which the data is transferred. For more information on security guarantees, please refer to the privacy policy of the website provider or contact the website provider directly.

United States of America, Singapore, Taiwan, Chile

Click here to read the privacy policy of the data processor. https://policies.google.com/privacy?hl=en

Click here to opt out on all domains of the processing company. https://tools.google.com/dlpage/gaoptout?hl=de

Click here to read the cookie policy of the data processor. https://policies.google.com/technologies/cookies?hl=en

This is a web analytics service. It is used to collect data about user behavior. Hotjar may also process information provided by you in the context of surveys and feedback functions that are integrated on our website.

Processing Company
Hotjar Limited
Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta

Purpose of Data
This list represents the purposes of data collection and processing.
– Analysis
– Feedback

Used Technologies
– Cookies

Collected Data
This list contains all (personal) data collected by or through the use of this service.
– Date and time of visit
– Device type
– Geographical location
– IP address
– Mouse movements
– Pages visited
– Referrer URL
– Screen resolution
– Unique device identifier
– Language information
– Device operating system
– Browser type
– Clicks
– Domain name
– Unique user identifier
– Responses to surveys

Legal Basis
The following is the required legal basis for the processing of data
– Art. 6 Para. 1 S. 1 lit. a GDPR

Location of Processing
European Union

Duration of Storage
The duration of storage is the period during which the collected data is stored for processing. The data must be deleted as soon as they are no longer needed for the specified processing purposes.

Data about your visit and activities on the website are generally stored for 365 days and then automatically deleted. This does not apply to information collected in the context of surveys and incoming feedback. However, the data will be deleted as soon as they are no longer required for the purposes of processing.

Data Recipients

• Hotjar Ltd., Amazon Web Services EMEA SARL, Datadog Inc., Functional Software Inc.

Data Protection Officer of the Processing Company
Below you will find the email address of the data protection officer of the processing company.

dpo@hotjar.com

Transfer to Third Countries
This service may transfer the collected data to another country. Please note that this service may transfer data to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and surveillance purposes, without the possibility of legal remedies. Below you will find a list of countries to which the data are transferred. For more information on the security guarantees, please refer to the privacy policy of the website provider or contact the website provider directly.

United States of America

Click here to read the privacy policy of the data processor. https://www.hotjar.com/legal/policies/privacy

Click here to revoke on all domains of the processing company. https://www.hotjar.com/legal/compliance/opt-out

Click here to read the cookie policy of the data processor. https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies