Analytics & Cookies

GDPR-Compliant Privacy Notice for Websites with Analytics & Cookies

Information: This Model Notice is for websites that use analytics and/or advertising cookies. It explains what personal data is collected, why, and how users can manage their consent. This policy is designed to be used in conjunction with a Consent Management Platform (CMP) - see our note at the end of this page.

Last Updated: September 28, 2025

1. Summary: Core Principles

This privacy notice explains how we process your personal data in compliance with the General Data Protection Regulation (GDPR). We process personal data on this website for analytics and marketing purposes. We collect data on website usage and device information to improve our services and show you relevant advertising. The legal basis for this processing is your explicit consent, which you provide and manage through our Consent Management Platform (CMP).

2. Types of Personal Data We Collect

When you visit our website, we automatically collect certain information through cookies and similar tracking technologies. The personal data we collect may include:

• Website usage data: Pages visited, time spent on site, clicks, navigation paths, and referral sources.

• Device information: IP address, browser type, operating system, device model, and screen resolution.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

• To analyze and improve our website's performance and user experience. The legal basis for this processing is your explicit consent.

• To provide relevant advertising and measure the effectiveness of our marketing campaigns. The legal basis for this processing is your explicit consent.

• To ensure the security and functionality of our website. The legal basis for this is our legitimate interest to protect our business and our users.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. We use both essential cookies, which are strictly necessary for the website to function, and non-essential cookies (such as those for analytics and advertising), which require your explicit consent.

To manage your cookie preferences and provide your consent, we use a Consent Management Platform (CMP). This platform allows you to:

• Give or withdraw your consent at any time.

• Customize your preferences for different types of cookies (e.g., analytics, advertising).

• View a detailed list of the cookies we use and their purposes.

Your choices are stored and honored for your subsequent visits. For more information on the specific cookies we use, please refer to our [Link to Cookie Policy, if applicable].

5. Recipients of Your Personal Data

We may share your personal data with the following categories of third-party service providers who assist in our operations:

• Analytics providers (e.g., Google Analytics).

• Advertising platforms (e.g., Facebook Pixel, Google Ads).

• Hosting and IT service providers.

If we transfer your data to a country outside of the EU/EEA, we will ensure that it is done using appropriate data protection safeguards, such as Standard Contractual Clauses (SCCs), to guarantee an adequate level of data protection.

6. Your Rights

Under the GDPR, you have the right to:

• Access your data.

• Rectify inaccurate data.

• Erase your data (the "right to be forgotten").

• Restrict or object to processing.

• Withdraw your consent at any time.

You can withdraw your consent for cookies and other tracking technologies directly through our Consent Management Platform (CMP) as described in the section below. For all other requests related to your rights, please contact us using the details provided below. We may need to verify your identity to process your request.

We do not use any automated decision-making, including profiling, that produces a legal or similarly significant effect on you.

7. How to Manage Your Consent

We use a Consent Management Platform (CMP) to provide you with granular control over your personal data. You can easily manage or withdraw your consent for non-essential cookies at any time by clicking the "Cookie Settings" or "Manage Consent" link, which is typically found in the footer of our website.

By using our CMP, we ensure that non-essential cookies are blocked until you give your explicit consent and that your consent choices are recorded and auditable.

8. Changes and updates to this policy

This GDPR-compliant Model Privacy Policy Notice is regularly reviewed by Joon Han Legal, who monitors changes in Data Protection Laws. Only the latest version, which is currently applicable, is published on the SME Privacy website (www.smeprivacy.org).

9. Contact Information and Supervisory Authority

For any questions or concerns regarding this Notice or our data processing activities, you can contact us by email at the address mentioned in our Data Protection Clause. You also have the right to lodge a complaint with a Data Protection Authority. A list of European Data Protection Authorities can be found on the European Data Protection Board's website (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en).

—

SME Privacy’s Recommended Data Protection Clause to be Embedded on your Website:

"Data Protection: we use a Privacy Policy for Websites with Analytics & Cookies developed by SME Privacy. You can read it at https://www.smeprivacy.org/notice/analytics-cookies. This policy, along with the details below, explains how we process your personal data.

Specifics of Processing: We use a Consent Management Platform (CMP) provided by [CMP Provider Name, e.g., Usercentrics, OneTrust, Iubenda]. We collect and process your personal data for website traffic analysis with [Analytics Provider, e.g., Google Analytics] (data retention: [Retention Period]) and for targeted advertising with the [Advertising Provider, e.g., Facebook Pixel] (data retention: [Retention Period]). This processing is only performed after we receive your consent through our CMP.

Controller: For all enquiries regarding your personal data, please contact [FULL NAME (sole proprietor) or COMPANY NAME (registered company)] at [EMAIL ADDRESS]."

Optional Clauses to be Included as Applicable:

• EU Representative: If you are based outside of the EU/EEA, please also mention the identity and contact details of the controller's EU Representative.

• Data Protection Officer: Where applicable, please also mention the identity and contact details of the controller's Data Protection Officer.

—

Note: A Word on Consent Management

For websites that use analytics, advertising, or social media plugins, having a privacy notice alone isn't enough. The GDPR requires you to prove you have a user's explicit consent before processing their data for these purposes. This is where a Consent Management Platform (CMP) comes in. A CMP is a tool that allows you to easily display a cookie banner, collect valid consent, and give users a simple way to change their mind at any time. We highly recommend implementing a reputable CMP to ensure you are fully compliant and to protect your business.