Privacy Policy

This policy explains which personal data we process when you visit this website or contact us — and what rights you have in that regard.

1. Overview

Personal data is any data by which you can be personally identified. The controller for data processing on this website is the website operator; you will find the contact details below under “Controller”.

We collect your data in two ways: because you provide it to us — for example via the contact form — and because our server automatically records technical data such as browser type, operating system and time of access when you open a page. Analytics and advertising services are used only after your explicit consent.

You have the right at any time to obtain information about, rectify and erase your data, as well as to restrict and object to its processing. Details are set out in section 3.

Please note that data transmission over the internet — for example when communicating by e-mail — can have security gaps. Complete protection of data against access by third parties is not possible.

2. Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host. This may include IP addresses, contact requests, metadata and communication data, contact details, names and website accesses.

We use the following host:

prohost networks GmbH
Wilhelm-Külz-Str. 69
14532 Stahnsdorf (near Berlin), Germany

External hosting takes place for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Our host processes your data only to the extent necessary to fulfil its performance obligations and follows our instructions in doing so.

We have concluded a data processing agreement (DPA) with our host. This contract, required by data protection law, ensures that the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Controller

The controller for data processing on this website is:

Feuerpfeil Werbeagentur GmbH & Co KG
Friedrichstr. 6
95444 Bayreuth, Germany

Phone: +49 921 1504032
E-mail: agentur@feuerpfeil.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it — such as retention periods under tax or commercial law. In the latter case, we delete the data once those grounds cease to apply.

Legal bases for processing

Where you have consented to the processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information on your device, processing additionally takes place on the basis of § 25(1) TDDDG. Consent can be withdrawn at any time.

Where your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to fulfil a legal obligation, we rely on Art. 6(1)(c) GDPR, and otherwise on our legitimate interest pursuant to Art. 6(1)(f) GDPR. We state the applicable legal basis in each individual case in the sections below.

Data transfer to the USA

The Google services used on this website may result in personal data being transferred to and processed in the USA. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in third countries.

The USA is generally regarded as a safe third country where the recipient holds a certification under the EU-US Data Privacy Framework (DPF). Google LLC is DPF-certified; further information is available at dataprivacyframework.gov.

Recipients of personal data

We only pass personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest in the disclosure under Art. 6(1)(f) GDPR, or where another legal basis permits it. Where processors are used, we pass on data only on the basis of a valid data processing agreement.

Withdrawal of your consent

Many data processing operations are only possible with your explicit consent. You can withdraw consent already given at any time — you can change your cookie choices via the “Cookie settings” link in the footer. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

Your further rights

• Information, rectification and erasure — you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the processing, as well as, where applicable, a right to rectification or erasure of that data.
• Restriction of processing — you may request the restriction of processing while the accuracy of your data is being verified, where processing was unlawful and you prefer restriction to erasure, where you need the data to assert legal claims although we no longer require it, or while the balancing of interests following an objection has not yet been concluded.
• Data portability — you have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a common, machine-readable format, or to have it transferred to a third party, insofar as this is technically feasible.
• Right to lodge a complaint — in the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.

An informal message to agentur@feuerpfeil.de is sufficient for all of these requests.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

Objection to advertising e-mails

We hereby object to the use of contact data published in the context of our legal notice obligations for sending advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information.

4. Data collection on this website

Cookies and local storage

Simply opening this website does not set any cookies. Data is only stored in your browser once you give consent in the cookie dialogue or use functions that technically require it:

• Your consent — we store your choice from the cookie banner in your browser’s local storage (ccb_contao_token_…) so that we do not have to ask you again on every visit. This information is not transmitted to third parties.
• Technically necessary — when you submit the contact form, our content management system sets a session identifier (PHPSESSID) and a security token to prevent form abuse (csrf_…). Both are deleted at the end of the session.
• Analytics and advertising — only with your consent — _ga and _ga_… for Google Analytics with a lifetime of 400 days, and _gcl_au for Google Ads with a lifetime of 90 days.

We store technically necessary cookies on the basis of Art. 6(1)(f) GDPR — we have a legitimate interest in the technically error-free provision of our services. All other cookies and comparable technologies are used exclusively on the basis of your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).

You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases, or to exclude them generally. Disabling cookies may limit the functionality of this website.

Consent management

To obtain and document your consent we use the cookie bar provided by the oveleon/contao-cookiebar extension. It runs entirely on our own server; no data is transmitted to an external provider. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. The legal basis for its use is Art. 6(1)(c) GDPR.

Server log files

The provider of these pages automatically collects and stores information in server log files, which your browser transmits automatically. These are:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR — we have a legitimate interest in the technically error-free presentation and optimisation of our website.

Contact form

Via our contact form we collect your first name, last name and e-mail address as mandatory fields, and — optionally — your company, the desired app platform, the project type and your project description. In addition, you confirm by ticking a checkbox that you have read this privacy policy.

This information is not stored in the database of this website. It is transmitted exclusively by e-mail to the relevant members of our team and kept there in order to process your enquiry and to deal with any follow-up questions. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases it is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

The data remains with us until you ask us to delete it, withdraw your consent, or the purpose for storage no longer applies — for example once your enquiry has been dealt with. Mandatory statutory retention periods remain unaffected.

Enquiries by e-mail or telephone

If you contact us by e-mail or telephone, your enquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The statements made above regarding the contact form apply accordingly to the legal basis and storage period.

5. Analytics and advertising

On this website we use only two services for analytics and advertising purposes: Google Analytics and Google Ads. Both are integrated via Google Tag Manager and are loaded only after you have consented to the “Marketing” category in the cookie dialogue. Without your consent, no connection to Google is established.

We do not use any other analytics, tracking or social media services on this website — no Meta/Facebook pixel, LinkedIn Insight Tag, TikTok pixel, Hotjar or comparable tools.

The provider of all services listed below is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager

Google Tag Manager is a tool with which we manage and deliver the two services named above. It does not itself create user profiles, store cookies or carry out any independent analysis. However, the Tag Manager does record your IP address, which may also be transferred to Google’s parent company in the USA.

We only integrate the Tag Manager after your consent; the legal basis is therefore Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time.

Google Analytics

Google Analytics allows us to analyse the behaviour of website visitors. We receive usage data such as page views, time on site, operating systems used and the origin of the user. This data is assigned to the respective end device; we do not assign it to a user ID.

Google Analytics uses technologies that enable the recognition of users — on this website the cookies _ga and _ga_…. The information collected is generally transferred to a Google server in the USA and stored there. IP anonymisation is enabled by default in Google Analytics 4: your IP address is truncated within the EU or EEA before being transferred to the USA and is not merged with other Google data.

In addition to page views, we record a single event: the successful submission of our contact form. No content of your enquiry is transmitted to Google — only the fact that a form was submitted.

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time. We have concluded a data processing agreement with Google. Further information on the handling of user data can be found in Google’s privacy information for Analytics.

Google Ads and conversion tracking

We use Google Ads to advertise our services. Conversion tracking is part of our Google Ads account: if you reach this website via one of our ads, Google sets the cookie _gcl_au (lifetime 90 days). This allows us and Google to recognise whether a click on an ad has led to an enquiry. We only receive statistical evaluations — such as the total number of enquiries — and cannot use them to identify you personally.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time.

Google Signals and remarketing

Google advertising features are enabled in our Google Analytics account. As a result — provided you have agreed to personalised advertising in your Google account — Google can attribute your visits to this website to your Google account across devices and use this to build advertising audiences (remarketing). Technically, data is transmitted to stats.g.doubleclick.net and google.de/ads/ga-audiences. This too only happens if you have consented to the “Marketing” category; the legal basis is Art. 6(1)(a) GDPR.

How to object

• Use the “Cookie settings” link in the footer to withdraw your consent with immediate effect — neither Analytics nor Google Ads will be loaded afterwards.
• You can additionally prevent collection by Google Analytics using the Google Analytics opt-out browser add-on.
• You can switch off personalised advertising in your Google ad settings.

6. Fonts

The fonts used on this website are served locally from our own server. No connection to third-party servers — such as Google Fonts — is established, and no data is transmitted to third parties.

Last updated: July 2026