This page is a structural draft, not a published legal notice. dgtlwrks has not yet completed German company registration, and the disclosures below have not been reviewed by a lawyer. Every entity fact on this page — name, address, register court and number, VAT ID — is a marked placeholder, not a real value, until that review and registration are complete.
Privacy
Data protection notice under the EU General Data Protection Regulation (DSGVO/GDPR).
Controller
Same pending entity disclosed on the imprint page — see that page for the full record.
— pending company registration —
— pending company registration —
hello@dgtlwrks.com
What is measured
Every measurement build runs on GA4 and Google Tag Manager with server-side tagging as the default, not an add-on — tags fire from our own server as well as the browser, so a blocked or dropped client-side tag isn't the only signal an ad platform gets. Nothing measurement-related fires before a visitor's consent choice is recorded, and Meta's Conversions API runs server-side alongside the browser pixel so ad performance data survives consent decisions and browser tracking prevention. DSGVO compliance gets built into the specific tags, vendors, and data flows from day one — never treated as a checkbox someone else already handled.
In practice: GA4 and Google Tag Manager, server-side tagging, Meta's Conversions API running server-side alongside the browser pixel, and real-user field data (Core Web Vitals) collected through the site's own web-vitals reporting. All of it is consent-aware — see Legal basis below.
Legal basis
Consent, Art. 6(1)(a) DSGVO. Nothing analytics-related fires before that consent choice is recorded.
Legitimate interest, Art. 6(1)(f) DSGVO — limited to what's needed to keep the site running and secure.
Processors
GA4 and Google Tag Manager — analytics collection and tag management, browser and server-side.
Conversions API (CAPI) — server-side conversion events alongside the browser pixel.
Retention
GA4 event data is retained on the 14-month setting — the shorter of GA4's two configurable retention options, chosen as the DSGVO-oriented stance rather than the 2-month or unlimited alternatives some setups leave on the default.
Your rights
Under the DSGVO, you have the right to:
Access the personal data held about you
Rectification of inaccurate data
Erasure of your data
Restriction of processing
Data portability
Object to processing
Lodge a complaint with a supervisory authority