DATA POLICY

Data Policy / Privacy Statement
Valid for the website of Semrau & Co., owner: Nicolai Semrau, accessible at www.semrau.co


1. Data Controller
The controller responsible for processing personal data on this website is:
Semrau & Co.Owner: Nicolai SemrauAddress: Dorstener Straße 92, 45657 Recklinghausen, GermanyEmail: info@semrau.coPhone: +49 160 92747506


2. Hosting & Provision of the Website (Webflow)
Our website is hosted by Webflow, Inc.(398 11th Street, 2nd Floor, San Francisco, CA, 94103, USA).
Webflow automatically processes data such as:
• IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL
• Pages visited
• Device information

Webflow stores these server log files to ensure the provision, stability, and security of the website.
Legal basis: Art. 6 para. 1 lit. f GDPRData transfer to the USA: Webflow’s Standard Contractual Clauses (SCC)


3. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to recognize users, analyze user behavior, and deliver personalized advertising.
Types of cookies:
• Essential cookies (necessary for the operation of the website)
• Analytics cookies (e.g., Google Analytics)
• Marketing cookies (Meta Pixel, TikTok Pixel, etc.)
• Functional cookies (e.g., for saving preferences)
‍
Upon your first visit, a cookie banner will appear allowing you to select which cookies may be set.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)


4. Tracking and Marketing Tools Used
4.1 Google Analytics 4
We use Google Analytics 4, operated by Google Ireland Ltd.(Gordon House, Barrow Street, Dublin 4, Ireland).
Data collected:
• IP address (truncated/anonymized)
• Page views, clicks, scroll depth
• Device and browser information
• Timestamp, behavior, session duration
• Referrer/origin
‍
Google uses cookies and event-based tracking technologies.
Legal basis: ConsentData transfer to the USA: Standard Contractual ClausesOpt-out: Via our cookie banner or browser add-on


4.2 Meta Pixel (Facebook/Instagram)
We use the Meta Pixel, provided by Meta Platforms Ireland Ltd., for conversion tracking and personalized advertising.
Data processed:
• Visitor behavior (page views, events)
• Interactions with our website
• Device and browser information
• Facebook ID (if logged in)
Purposes:
• Displaying personalized advertising
• Measuring campaign performance
• Creating custom audiences
‍
Legal basis: ConsentMeta may transfer data to the USA (SCC).


4.3 TikTok Pixel
We use the TikTok Pixel, operated by TikTok Technology Ltd., to analyze user behavior and measure the effectiveness of TikTok advertising campaigns.
Data collected:
• Page views
• Clicks and events
• IP address
• Device information
• TikTok User ID (if logged in)
‍
Legal basis: ConsentData may be transferred to third countries (SCC).


4.4 Google Ads / Conversion Tracking
Our website uses Google Ads Conversion Tracking to measure the performance and success of our advertising campaigns.


4.5 Google Tag Manager
We use Google Tag Manager to centrally integrate tracking tags.The Tag Manager:
• does not set its own cookies
• does not process personal data
• only triggers other integrated tools


4.6 YouTube Embeds
Video content is embedded via YouTube (Google).Where possible, we use enhanced privacy mode.
Data collected:
• IP address
• Google account information (if logged in)
• Device information
• Playback behavior


4.7 Vimeo Embeds
If Vimeo is used, similar data processing principles apply as with YouTube.


4.8 Google Maps
When Google Maps is embedded, location data and IP address may be transmitted.


5. Newsletter (e.g., Mailchimp, Klaviyo)
When you subscribe to our newsletter, we store:
• Email address
• IP address at the time of subscription
• Date/time of registration
‍
The newsletter is sent via Klaviyo, and data may be processed within the EU or the USA (SCC).
Legal basis: Consent (Double Opt-In procedure)


6. Contact Forms
When you contact us via a form, we process:
• Name
• Email address
• Phone number (if provided)
• Content of your inquiry
• Metadata (timestamp, anonymized IP)
‍
Legal basis:Art. 6 para. 1 lit. b GDPR (pre-contractual/contract-related inquiries)orArt. 6 para. 1 lit. f GDPR (legitimate interest in responding)


7. Payment Providers
When purchases are made, payment providers such as Stripe or PayPal process:
• Payment information
• Billing address
• Bank or credit card data
• Transaction metadata
‍
Each provider processes data independently in accordance with GDPR/SCC.


8. Data Processors
We work exclusively with third-party service providers who are contractually bound under Art. 28 GDPR.


9. Storage Period
We store personal data only for as long as necessary for their respective purpose:
• Server logs: max. 30 days
• Contact inquiries: 6–24 months
• Newsletter data: until revoked/unsubscribed
• Marketing data: until revoked/opted out
• Contract data: until statutory retention obligations expire


10. Rights of Data Subjects
You have the following rights at any time:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority


11. Withdrawal of Consent / Opt-Out Options
You can deactivate tracking at any time via:
• Our cookie banner
• Browser settings
• Opt-out links (Google, Meta, TikTok, etc.)


12. Data Security
We use SSL encryption and work exclusively with verified hosting partners.


13. Changes to This Privacy Policy
We reserve the right to update this privacy policy as required by new technologies or legal changes.


14. Contact
For privacy-related inquiries, please contact:
Semrau & Co.
Email: info@semrau.co