Johannes Auer

IT Consulting GmbH

30-Min-Call DE

This page was automatically translated from German.
In case of discrepancies, the German version shall prevail.

Privacy Policy

§ 1 General Information

In this privacy policy, you will find detailed information about what happens to your personal data when you visit our website johannesauer.com. All data that can be used to personally identify you is considered personal data. When processing your data, we strictly comply with the statutory provisions, in particular the General Data Protection Regulation (“GDPR”). It is very important to us that your visit to our website is completely secure.

§ 2 Data Controller

The party responsible under data protection law for the collection and processing of personal data on this website is:

  • Name: Johannes Auer IT Consulting GmbH
  • Represented by: Johannes Auer, Managing Director
  • Street, house number: Wöhrlweg 6
  • Country: Germany
  • Email: mail@johannesauer.com
  • Phone: +49 175 4144759

§ 3 Access Data (Server Log Files)

When you access our website, we automatically collect data that your browser transmits to us and store it in so-called server log files. This includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (the source from which you accessed our website)
  • Host name of the accessing device
  • Date and time of the server request
  • IP address currently used by your device (possibly anonymized)

As a rule, we are neither able nor do we intend to assign this data to a specific person. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

§ 4 Cookies

We use cookies to make our website more user-friendly and to enable certain functions. Cookies are small text files stored on your device. They do not execute programs or transmit viruses to your computer.

Cookies that are technically necessary for electronic communication or for providing certain requested functions are stored on the basis of Art. 6(1)(f) GDPR. Other cookies (e.g. for analyzing your browsing behavior) are addressed separately in this privacy policy.

We primarily use session cookies, which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them, allowing us to recognize your browser on future visits.

You can configure your browser to inform you about cookie usage, allow cookies only in individual cases, exclude certain cookies, or disable cookies entirely. Please note that disabling cookies may limit the functionality of this website.

§ 5 Web Analytics Tools and Advertising

A. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable analysis of your use of our website. For users located in the EU, data is initially collected via EU-based domains and servers before being forwarded for further processing.

Processing is based on your consent via the cookie consent tool in accordance with Art. 6(1)(a) GDPR.

a. IP Anonymization

IP anonymization is activated by default. Your IP address is shortened within the EU or EEA before transmission to Google servers in the USA. Only in exceptional cases is the full IP address transmitted and shortened there. According to Google, IP addresses are not logged or stored permanently.

b. Demographic Features

Google Analytics’ “demographic features” allow analysis of age, gender, and interests based on interest-based advertising and third-party data. Personal identification is excluded. You can deactivate this feature via your Google ad settings.

c. Google Signals

We also use Google Signals to generate cross-device usage reports, provided you have enabled personalized ads and linked your devices to your Google account. We only receive aggregated statistics, not personal data.

d. Data Processing Agreement

We have concluded a data processing agreement with Google and comply with German data protection authority requirements.

e. Data Retention

User-level and event-level data linked to cookies or advertising IDs is deleted after 14 months.

f. Right to Withdraw Consent

You may revoke your consent at any time with effect for the future via the cookie settings. The legality of processing carried out before revocation remains unaffected.

B. Google Tag Manager

This website uses Google Tag Manager. The tool itself does not store personal data and only manages the deployment of other tags that may collect data. Google Tag Manager does not access this data.

C. Google Ads and Conversion Tracking

We use Google Ads to advertise our services and measure campaign effectiveness. Conversion tracking cookies expire after 30 days and do not serve personal identification. Data processing is based on your consent (Art. 6(1)(a) GDPR) or our legitimate interest in anonymized analysis (Art. 6(1)(f) GDPR).

D. Google Remarketing

Google Remarketing allows us to display personalized ads across devices based on previous website visits. Data processing is carried out only with your consent. You can permanently disable personalized advertising via your Google account settings.

E. Google AdSense

This website uses Google AdSense to display advertisements. Cookies and web beacons may be used to analyze visitor traffic and deliver interest-based advertising. Processing is based on your consent or our legitimate interest in website and advertising optimization.

F. Google Fonts

We use Google Fonts to ensure consistent and visually appealing typography. Fonts are loaded from Google servers (usually in the USA), which may involve transmitting your IP address. This is done based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Further information:

  • https://fonts.google.com
  • https://developers.google.com/fonts/faq

Here’s the English translation of the section you pasted (content preserved, phrasing kept “legal/website policy” style).

G. WordPress Stats

To statistically analyze visitor activity, our website uses the tool WordPress Stats. WordPress Stats is a component of the Jetpack plugin provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your device and enable an analysis of how you use our website. The information generated by these cookies about your use of our online offering is stored on a server in the USA. Usage profiles may be created from the processed data; these are used exclusively for analysis purposes and not for advertising. Your IP address is anonymized after processing and before storage.

The cookies used by “WordPress Stats” remain on your device until you delete them. Further information can be found in Automattic’s privacy policy at https://automattic.com/privacy/ and in Jetpack’s cookie information at https://jetpack.com/support/cookies/.

The storage of “WordPress Stats” cookies and the use of this analytics tool are based on Art. 6(1)(f) GDPR. Our legitimate interest lies in anonymized analysis of user behavior in order to optimize both our website offering and our advertising measures.

§ 6 Newsletter

We will only send you our newsletter to your email address at regular intervals with your prior consent. To use this service, you must provide and verify your email address. No further data is collected, or only on a voluntary basis. Your data is used exclusively for sending the newsletter.

The data provided during newsletter registration is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time. An informal notice by email or using the unsubscribe link included in the newsletter is sufficient. Data processing carried out prior to withdrawal remains unaffected.

If you unsubscribe from the newsletter, the data stored for setting up the subscription will be deleted. If this data has been provided to us for other purposes and stored elsewhere, it will remain stored there.

§ 7 Contacting Us

If you contact us, including by email, the data you provide (including your contact details) will be stored in order to process your request and to be available for follow-up questions if necessary. This data will not be shared with third parties without your explicit consent.

Your personal data is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You have the right to withdraw this consent at any time without giving reasons. An informal email to us is sufficient to exercise your right of withdrawal. The lawfulness of data processing carried out prior to withdrawal remains unaffected.

The data you provide will be stored until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Statutory retention obligations remain unaffected.

§ 8 Retention Period for Comments

We store user comments as well as the related data, including IP addresses. This data is stored until the comment is removed by the user or a legal obligation to delete it exists.

§ 9 Subscribing to Comments

After registering on our website, you can subscribe to comments. We use a double opt-in procedure for this, meaning you will receive a confirmation email to verify your email address. You can unsubscribe from comment subscriptions at any time via a link in the notification emails. The data collected for setting up the subscription will be deleted after you unsubscribe. If this data has already been provided to us for other purposes and stored elsewhere, it will remain stored in our system.

The storage of your comments is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time without giving reasons. A simple email to us is sufficient. Data processing carried out before withdrawal does not become invalid retroactively.

§ 10 Use and Disclosure of Data

We assure you that personal data you provide to us, for example by email (such as your name, address, or email address), will not be sold to third parties or otherwise used commercially. Your data is processed exclusively for the purpose of corresponding with you and fulfilling the purpose for which you provided the data. As part of payment processing, your payment data will be forwarded to the commissioned financial institution.

The data automatically collected when you visit our website is used solely for the purposes stated above. No other use is made of this data.

Protecting your personal data is important to us. We generally do not disclose your data to third parties unless there is a legal obligation to do so or you have given your explicit consent.

§ 11 Encryption (SSL/TLS)

Our website uses SSL/TLS encryption to ensure the security and protection of the transmission of confidential content. This applies in particular to inquiries that you send to us as the website operator. You can recognize an encrypted connection by “https://” in your browser’s address bar and the lock symbol in the browser bar.

SSL/TLS encryption ensures that data you transmit to us cannot be read by unauthorized third parties.

§ 12 Storage Duration

We store the personal data you transmit to us via our website only for as long as necessary to achieve the purpose of the respective data processing. In accordance with commercial and tax retention obligations, certain data may be stored for up to 10 years.

§ 13 Your Data Protection Rights

As a data subject, you have the following rights against the controller regarding your personal data, in accordance with the applicable legal provisions:

A. Right to Withdraw Consent

Many data processing operations are only possible with your explicit consent. If processing is based on your consent, you have the right to withdraw it at any time with effect for the future pursuant to Art. 7(3) GDPR. Processing carried out before withdrawal remains lawful. Storage for billing and accounting purposes is not affected by withdrawal.

B. Right of Access

Under Art. 15 GDPR, you have the right to obtain confirmation as to whether we process your personal data. If so, you have the right to access the data and information including: purposes of processing, categories of data, recipients, storage period, rights to rectification/erasure/restriction/objection, complaint rights, data sources (if not collected from you), existence of automated decision-making (including profiling), and safeguards under Art. 46 GDPR for transfers to third countries.

C. Right to Rectification

Under Art. 16 GDPR, you have the right to have inaccurate personal data corrected and incomplete data completed.

D. Right to Erasure

Under Art. 17 GDPR, you have the right to request deletion of your personal data where one of the legal grounds applies (e.g., data no longer necessary, consent withdrawn, objection, unlawful processing, legal obligation, etc.).

This right may be restricted where processing is necessary, for example, to comply with a legal obligation, for tasks carried out in the public interest, for public health reasons, for archiving/research/statistics under Art. 89(1) GDPR, or for the establishment/exercise/defense of legal claims.

If we have made your personal data public and are obliged to erase it, we will take reasonable steps (including technical measures) to inform other controllers processing the data that you have requested erasure of links to, copies, or replications of that data.

E. Right to Restriction of Processing

Under Art. 18 GDPR, you have the right to request restriction of processing, e.g., if you contest accuracy, processing is unlawful and you oppose erasure, data is no longer needed but required for legal claims, or an objection under Art. 21(1) GDPR is pending. During restriction, processing generally requires your consent, subject to legal exceptions.

F. Right to Be Informed

Under Art. 19 GDPR, if you exercise your rights to rectification, erasure, or restriction, we must notify recipients to whom the data was disclosed, unless impossible or disproportionate. Upon request, we will inform you of these recipients.

G. Right Not to Be Subject to Automated Decisions (Profiling)

Under Art. 22 GDPR, you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

This does not apply if the decision is necessary for a contract, authorized by law with safeguards, or based on your explicit consent. Appropriate safeguards include at least the right to obtain human intervention, express your viewpoint, and contest the decision.

H. Right to Data Portability

If processing is based on consent (Art. 6(1)(a) or Art. 9(2)(a) GDPR) or a contract (Art. 6(1)(b) GDPR) and carried out by automated means, you have the right under Art. 20 GDPR to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller, or to have it transmitted by us where technically feasible.

I. Right to Object

If we process your data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (including profiling). If you object, we will no longer process the data unless we can demonstrate compelling legitimate grounds overriding your interests, or processing is needed for legal claims.

If data is processed for direct marketing, you may object at any time; then your data will no longer be used for direct marketing (Art. 21(2) GDPR).

J. Right to Lodge a Complaint With a Supervisory Authority (Art. 77 GDPR)

In the event of GDPR violations, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, workplace, or the place of the alleged infringement.

Our competent supervisory authority is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18, 91522 Ansbach

Postal address: P.O. Box 1349, 91504 Ansbach

Phone: 0981/180093-0

Email: poststelle@lda.bayern.de

Website: https://www.lda.bayern.de

§ 14 Validity and Changes to This Privacy Policy

This privacy policy takes effect on 25 January 2026. We reserve the right to amend this policy as necessary in compliance with applicable data protection laws. This may be required, for example, to meet new legal requirements or to reflect changes to our website or new services offered via the website. The version of the privacy policy available on our website at the time of your visit is binding.

If changes are made, we will publish them on this page so that you are fully informed about what personal data we collect, how we process it, and under what conditions we may disclose it.