Privacy Policy
Last updated: October 13, 2026
1. Data Controller
Zeitmaker GmbH
Freddie-Mercury-Straße 5
80797 München, Germany
Email: sales@zeitmaker.com
2. General Information on Data Processing
We only process personal data of our users insofar as this is necessary for the provision of a functional website and our content and services. The legal bases for data processing are primarily derived from Art. 6 GDPR.
3. Hosting
This website is hosted by Vercel Inc.(440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, information is automatically transmitted to Vercel's servers, including:
- IP address
- Date and time of the request
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a stable website). Vercel also processes data in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework.
4. Cookies and Functional Storage
NEXT_LOCALE Cookie
We use a functionally necessary cookie called NEXT_LOCALE that stores your preferred language setting (German/English). This cookie has a lifespan of 1 year.
The legal basis is Art. 6(1)(f) GDPR, as this cookie is technically necessary for displaying the website in the desired language.
Storing your cookie decision
Without your consent we set no cookies for analytics or marketing purposes and do not read any information from your device. Besides NEXT_LOCALE, the only technically necessary entry is analytics-consentin your browser's localStorage: it remembers your decision from the cookie banner so that we do not ask you again.
You can change your decision at any time via the “Cookie settings” link in the footer.
5. Analytics and Tracking Tools
Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself does not store any personal data but manages the integration of other services (e.g. Google Analytics 4, Google Ads conversion tracking, LinkedIn Insight Tag). Services that require consent are only loaded once you have given it.
The Google services integrated via the Tag Manager use Google Consent Mode v2: as long as you do not consent, the consent signals are set to “denied”. No cookies are set and no information is read from your device in that case. The legal basis for operating the Tag Manager is Art. 6(1)(f) GDPR (legitimate interest in managing website tags consistently and in line with consent).
Google Analytics 4
We use Google Analytics 4 (Google Ireland Limited). Via Google Consent Mode v2, the service operates in two tiers:
a) Without consent: no cookies are set and no information is read from your device. Google only receives cookieless signals that cannot be attributed to a person, for example that a page view or a conversion took place, together with technical context such as time, browser type and approximate location based on the IP address. You are not recognised across multiple visits. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-preserving reach and campaign measurement).
b) With your consent: if you choose “Accept all” in the cookie banner, Google Analytics sets cookies (including _ga and _gid) and analyses your usage behaviour on our website. The following data is collected:
- Pages visited and time spent
- Device and browser information
- Approximate location (based on IP address)
- Referrer (origin of visit)
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer; the analytics cookies set until then are deleted. Your IP address is truncated before storage. Data may be transferred to Google servers in the USA (EU-US Data Privacy Framework).
You can prevent tracking by Google Analytics by installing the browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout
PostHog
We use PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) to analyse how the website is used. Analytics data is processed on servers within the European Union. Technically, the data is transmitted via a proxy on our own domain (/ph-relay) to the PostHog servers in the EU. Where data is transferred to the USA, this is based on appropriate safeguards under Art. 44 et seq. GDPR (EU-US Data Privacy Framework or EU standard contractual clauses). PostHog operates in two tiers:
a) Cookieless reach measurement (without consent): as long as you do not consent, we measure website usage without cookies and without accessing your device: nothing is stored in or read from your browser. To distinguish visitors, a short-lived identifier is computed server-side from technical connection data (including IP address and browser signature). The random value used for this changes daily and is deleted afterwards, which rules out recognition beyond a single day or across other websites. The legal basis is our legitimate interest in privacy-preserving reach measurement (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR) by emailing sales@zeitmaker.com.
b) Extended analytics (only with consent): if you choose “Accept all” in the cookie banner, PostHog sets cookies and stores a pseudonymous identifier in your browser to recognise returning visits. In addition, we then collect:
- Page views and clicks during a session
- Device and browser information
- Interactions with website elements (e.g. calculator)
- Session recordings in which form inputs are masked
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer; the analytics cookies set until then are deleted.
Organisation and truncated IP address (both tiers): regardless of your consent, when you visit a page our server looks up your IP address in the public RIPE database (RIPE NCC, Amsterdam, Netherlands) to determine the organisation the address range is registered to, such as a company or a university. We store only the name of that organisation (nothing if the address belongs to an internet provider's private-customer range) plus a truncated IP address with the last part removed (e.g. 192.0.2.0 instead of 192.0.2.17). The full IP address is not stored; it is only sent to RIPE for the lookup. The purpose is to understand which organisations are interested in our services. The legal basis is our legitimate interest in this (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR) by emailing sales@zeitmaker.com.
Vercel Analytics
We use Vercel Analytics (Vercel Inc.) to measure website performance and Core Web Vitals. This collects anonymised performance data that cannot be attributed to individual users. The legal basis is Art. 6(1)(f) GDPR.
6. Marketing and Conversion Tracking
Google Ads Conversion Tracking
We use conversion tracking from Google Ads (Google Ireland Limited) to measure which ads lead to enquiries. This service is also connected to Google Consent Mode v2.
Without consent, no cookies are set and no information is read from your device. Google Ads then only receives cookieless signals without any personal reference, for example that a conversion took place. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring the success of our advertising).
With your consent, Google Ads sets cookies (including _gcl_*) that allow a click on an ad to be linked to a later enquiry. Also only with your consent, we use “Enhanced Conversions”: when you submit a form, the email address you enter is hashed in your browser using a cryptographic hash function and transmitted to Google Ads in this hashed form only, so that Google can attribute the conversion to an ad click. Google does not receive the address in plain text. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer. Data may be transferred to Google servers in the USA (EU-US Data Privacy Framework).
LinkedIn Insight Tag
We use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). This tool enables us to:
- Track conversions for LinkedIn advertising campaigns
- Retarget website visitors on LinkedIn
- Analyse demographics of our website visitors
The LinkedIn Insight Tag is only loaded via Google Tag Manager once you choose “Accept all” in the cookie banner. LinkedIn then sets cookies (including li_sugr, bcookie, lidc, UserMatchHistory and AnalyticsSyncHistory) and a connection to LinkedIn servers is established, in the course of which your IP address and technical data such as browser, device, visited URL, referrer and time are processed. If you are logged in to LinkedIn, LinkedIn can link the visit to your profile; we only receive aggregated, anonymous reports and no information about individual persons. According to LinkedIn, direct identifiers are pseudonymised within 7 days and the pseudonymised data is deleted after 180 days. Without your consent the Insight Tag is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer. Data may be transferred to LinkedIn servers in the USA (EU-US Data Privacy Framework).
You can opt out of LinkedIn tracking here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
7. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
To exercise your rights, please contact: sales@zeitmaker.com
8. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
https://www.lda.bayern.de
9. Changes to This Privacy Policy
We reserve the right to update this privacy policy as needed to reflect changes in legal requirements or in our data processing practices. The current version can always be found on this page.