Privacy Policy

Last Updated: May 30, 2026

Table of Contents

  • Controller
  • Overview of Processing Activities
  • Relevant Legal Bases
  • Security Measures
  • General Information on Data Storage and Deletion
  • Rights of Data Subjects
  • Business Services
  • Provision of the Online Offering and Web Hosting
  • Blogs and Publication Media
  • Contact and Inquiry Management
  • Audio Content
  • Promotional Communication via Email, Post, Fax, or Telephone
  • Web Analytics, Monitoring, and Optimization
  • Presence on Social Networks (Social Media)
  • Plug-ins, Embedded Functions, and Content
  • Privacy Information for Whistleblowers
  • Amendments and Updates
  • Definitions of Terms

Controller
Cordula Boeck
Haupstr. 56 a
Bad Wörishofen
Germany

Email Address: contact@cyberseucreguard.org

Overview of Processing Activities
The following overview summarizes the types of data processed and the purposes of their processing, and identifies the data subjects involved.

 

Types of Data Processed

  • Inventory data.
  • Employee data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta, communication, and procedural data.
  • Log data.
  • Categories of Data Subjects
  • Recipients of services and clients.
  • Employees.
  • Prospective customers/interested parties.
  • Communication partners.
  • Users.
  • Business and contractual partners.
  • Third parties.
  • Whistleblowers.
  • Purposes of Processing
  • Provision of contractual services and fulfillment of contractual obligations.
  • Communication.
  • Security measures.
  • Direct marketing.
  • Reach measurement.
  • Tracking.
  • Office and organizational procedures.
  • Target group formation.
  • Organizational and administrative procedures.
  • Feedback.
  • Marketing.
  • Profiles containing user-related information. Provision of our online services and user-friendliness.
  • Information technology infrastructure.
  • Whistleblower protection.
  • Public relations.
  • Sales promotion.
  • Business processes and management procedures.

 

Relevant Legal Bases

Relevant Legal Bases under the GDPR: The following provides an overview of the legal bases under the GDPR upon which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Furthermore, should more specific legal bases be applicable in individual cases, we will inform you of these in the Privacy Policy.
• Consent (Art. 6 para. 1 lit. a) GDPR) – The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
• Contractual Performance and Pre-contractual Inquiries (Art. 6 para. 1 lit. b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal Obligation (Art. 6 para. 1 lit. c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate Interests (Art. 6 para. 1 lit. f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
National Data Protection Regulations in Germany: In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. These include, in particular, the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The BDSG contains, in particular, specific provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and data transmission, as well as automated individual decision-making, including profiling. Furthermore, the data protection laws of the individual federal states may also apply.
Note on the Applicability of the GDPR and the Swiss DPA: These data protection notices serve to provide information in accordance with both the Swiss Federal Act on Data Protection (DPA) and the General Data Protection Regulation (GDPR). For this reason, please note that—due to their broader territorial scope and greater clarity—the terminology of the GDPR is used herein. Specifically, instead of the terms used in the Swiss DPA—such as “processing” of “personal data,” “overriding interest,” and “sensitive personal data”—we employ the corresponding terms used in the GDPR: “processing” of “personal data,” “legitimate interest,” and “special categories of data.” However, within the scope of the Swiss DPA’s applicability, the legal meaning of these terms continues to be determined in accordance with the Swiss DPA.
Applicability of Data Protection Regulations in the Country of Establishment: In the country where the Data Controller is established, national data protection regulations apply alongside the General Data Protection Regulation (GDPR).

Security Measures

In accordance with statutory requirements—and taking into account the state of the art, the costs of implementation, the nature, scope, context, and purposes of processing, as well as the varying likelihoods and severity of the risks to the rights and freedoms of natural persons—we implement appropriate technical and organizational measures to ensure a level of security commensurate with the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as controlling access, input, transmission, availability, and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and appropriate responses in the event of data security risks. Moreover, we prioritize the protection of personal data during the development and selection of hardware, software, and procedures—adhering to the principles of data protection by design and by default—through technical safeguards and privacy-friendly default settings.
Securing Online Connections via TLS/SSL Encryption Technology (HTTPS): To protect user data transmitted through our online services against unauthorized access, we utilize TLS/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) serve as the cornerstones of secure data transmission on the Internet. These technologies encrypt the information exchanged between the website or app and the user’s browser (or between two)

 

General Information on Data Storage and Deletion

We delete personal data that we process in accordance with statutory provisions as soon as the underlying consents are revoked or no further legal basis for the processing exists. This applies to cases where the original purpose of processing ceases to apply or the data is no longer required. Exceptions to this rule exist where statutory obligations or specific legitimate interests require the data to be retained or archived for a longer period.

In particular, data that must be retained for commercial or tax law reasons—or the storage of which is necessary for the enforcement of legal claims or for the protection of the rights of other natural or legal persons—must be archived accordingly.
Our Privacy Notices contain additional information regarding the retention and deletion of data that applies specifically to certain processing activities.

In cases where multiple specifications exist regarding the retention period or deletion deadlines for a specific piece of data, the longest period shall always prevail. Data that is no longer retained for its originally intended purpose—but rather due to statutory requirements or other reasons—is processed by us exclusively for the specific purposes justifying its retention.
Commencement of the Retention Period at Year-End: If a retention period is not expressly stipulated to begin on a specific date, and if said period is at least one year in duration, it shall automatically commence at the end of the calendar year in which the event triggering the retention period occurred. In the case of ongoing contractual relationships within the scope of which data is stored, the triggering event is the date on which the termination of the contract—or other cessation of the legal relationship—becomes effective.

Rights of Data Subjects

Rights of Data Subjects under the GDPR

As a data subject, you have various rights under the General Data Protection Regulation (GDPR), particularly those set out in Articles 15 to 21 GDPR:

Right to Object:
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where such processing is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling to the extent that it is related to direct marketing.

Right to Withdraw Consent:
You have the right to withdraw any consent you have given at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right of Access:
You have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, access to that data, as well as further information and a copy of the data in accordance with legal requirements.

Right to Rectification:
You have the right to request the correction of inaccurate personal data concerning you and, taking into account the purposes of the processing, to have incomplete personal data completed.

Right to Erasure and Restriction of Processing:
You have the right, in accordance with applicable legal requirements, to request the deletion of personal data concerning you without undue delay. Alternatively, you may request the restriction of the processing of your personal data where the legal conditions are met.

Right to Data Portability:
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to request that this data be transmitted to another controller, where technically feasible and legally applicable.

Right to Lodge a Complaint with a Supervisory Authority:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you believe that the processing of your personal data violates the provisions of the GDPR.

Business Services

We process the personal data of our contractual and business partners, such as customers, clients, prospective customers, suppliers, and other cooperation partners (collectively referred to as “contractual partners”), for the purpose of establishing, performing, and managing contractual relationships and comparable legal relationships. This also includes pre-contractual measures taken at the request of the data subject, as well as communication related to the respective contractual relationship.

The processing is carried out primarily for the fulfillment of our contractual obligations and related duties. This includes providing the agreed services, meeting update and information obligations, handling warranty claims and other service-related issues, processing withdrawals, cancellations of ongoing contractual relationships, refunds, reimbursements, and managing other contract-related declarations and inquiries. This applies to both one-time agreements and ongoing contractual relationships.

The personal data processed may include master data such as name, address, and company name (where applicable); contact details such as email address and telephone number; contract and service-related information such as the subject matter of the contract, contract duration, order or transaction numbers, usage and service data; payment and billing information; as well as communication records and correspondence. Where necessary, we may also process information disclosed or transmitted to us in connection with the performance of a specific assignment or project.

We also process personal data to safeguard our legal rights and to comply with legal obligations. This includes, in particular, obligations under commercial and tax laws, documentation requirements, and any applicable accountability and record-keeping obligations. Furthermore, processing may take place based on our legitimate interests in proper business management, internal administration, risk management, IT security, and the protection of our business operations and contractual partners against misuse, threats to data, confidential information, and other legal interests. This may involve the use of external service providers such as IT and telecommunications providers, transport and logistics companies, payment service providers, banks, tax advisors, legal advisors, or other subcontractors where necessary for contract performance or compliance with legal obligations.

Personal data will only be disclosed to third parties where this is necessary for the performance of a contract, the implementation of pre-contractual measures, the protection of legitimate interests, or compliance with legal obligations. Any additional processing activities, particularly for marketing purposes, are described separately within this Privacy Policy.

We inform our contractual partners about which data is required in each individual case during the data collection process, for example through corresponding markings in online forms or during personal communication.

Personal data will be deleted once it is no longer required for the purposes described above and no statutory retention obligations apply. Legal retention periods, particularly those arising under commercial and tax laws, may require longer storage periods. Data provided in connection with a specific assignment or project will be deleted after completion of the assignment and expiration of any applicable retention periods, unless further legal or contractual obligations require continued storage.

The legal basis for processing is Article 6(1)(b) GDPR for the implementation of pre-contractual measures and the performance of contractual relationships, and Article 6(1)(c) GDPR for compliance with legal obligations. Where processing is based on legitimate interests, the legal basis is Article 6(1)(f) GDPR. Such legitimate interests include maintaining an efficient and legally compliant business organization, internal administration and documentation of business processes, the establishment, exercise or defense of legal claims, ensuring IT and data security, preventing misuse and fraud, and supporting the economic management and development of our business operations. These interests particularly serve to ensure a secure and legally compliant business environment and to maintain our operational capability.

Categories of Data Processed

  • Master data (e.g., full name, address, contact information, customer number)
  • Payment data (e.g., bank account details, invoices, payment history)
  • Contact data (e.g., postal addresses, email addresses, telephone numbers)
  • Contract data (e.g., contract subject matter, duration, customer category)
  • Usage data (e.g., page views, time spent on pages, click paths, frequency and intensity of use, device types, operating systems, interactions with content and features)
  • Metadata, communication data, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons)

Categories of Data Subjects

  • Customers and clients
  • Prospective customers and interested parties
  • Business partners and contractual partners

Purposes of Processing and Legitimate Interests

  • Provision of contractual services and fulfillment of contractual obligations
  • Security measures
  • Communication
  • Office and organizational procedures
  • Administrative and management processes
  • Business operations and commercial activities

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Bases

  • Performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR)
  • Compliance with legal obligations (Article 6(1)(c) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)

Further Information on Processing Activities, Procedures, and Services

Online Shop, Order Forms, E-Commerce, and Service Fulfillment

We process customer data to enable the selection, purchase, and ordering of products, goods, and related services, as well as their payment, provision, delivery, or execution. Where necessary for the fulfillment of an order, we engage service providers, particularly postal services, shipping companies, freight carriers, and logistics providers, to deliver products or perform services on our behalf. For the processing of payments, we use the services of banks and payment service providers.

Information required for the ordering or purchasing process is clearly identified as mandatory and includes the data necessary for delivery, provision of services, billing, and communication regarding the order.

Legal Basis: Performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR).

Provision of Online Services and Web Hosting

We process users’ personal data to provide our online services and ensure the functionality, security, and availability of our website. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

Categories of Data Processed

  • Usage data (e.g., page views, time spent on pages, click paths, frequency and intensity of use, device types, operating systems, interactions with content and website features)
  • Metadata, communication data, and procedural data (e.g., IP addresses, timestamps, identification numbers, and involved parties)
  • Log data (e.g., server log files relating to website access, login attempts, data retrieval, and access times)

Categories of Data Subjects

  • Users (e.g., website visitors and users of online services)

Purposes of Processing and Legitimate Interests

  • Provision and optimization of our online services
  • Ensuring user-friendly website functionality
  • Operation and maintenance of our IT infrastructure, including servers, systems, and technical equipment
  • Implementation of security measures and protection against misuse and cyber threats

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Basis

  • Legitimate interests (Article 6(1)(f) GDPR)

Further Information on Processing Activities, Procedures, and Services

Hosting of the Website

To provide our online services, we use storage space, computing capacity, and software services supplied by a hosting provider (“web host”). These services enable the operation, maintenance, and secure delivery of our website and its content.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Collection of Access Data and Server Log Files

Access to our website is recorded in so-called server log files. These log files may include:

  • The name and address of the accessed webpages and files
  • Date and time of access
  • Volume of data transferred
  • Confirmation of successful retrieval
  • Browser type and browser version
  • User operating system
  • Referrer URL (the previously visited webpage)
  • IP address
  • Requesting Internet service provider

Server log files are processed for security purposes, including the detection and prevention of unauthorized access attempts, abuse, and attacks such as Distributed Denial-of-Service (DDoS) attacks. They are also used to ensure the stability, reliability, and performance of our servers and online services.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Retention Period for Log Files

Server log file information is generally stored for a maximum period of 30 days and is then deleted or anonymized. Data that must be retained for evidentiary purposes in connection with a specific incident will be exempt from deletion until the matter has been fully resolved.

Blogs and Publication Media

We operate blogs and similar online communication and publication platforms (hereinafter referred to as “publication media”). Readers’ personal data is processed only to the extent necessary to provide and display the publication media, facilitate communication between authors and readers, and ensure the security and proper functioning of the service. For additional information regarding the processing of visitor data, please refer to the relevant sections of this Privacy Policy.

Categories of Data Processed

  • Master data (e.g., full name, address, contact information, customer number)
  • Contact data (e.g., postal addresses, email addresses, telephone numbers)
  • Content data (e.g., text-based or image-based messages, comments, posts, and related information such as authorship and creation dates)
  • Usage data (e.g., page views, time spent on pages, click paths, frequency and intensity of use, device types, operating systems, interactions with content and website features)
  • Metadata, communication data, and procedural data (e.g., IP addresses, timestamps, identification numbers, and involved parties)

Categories of Data Subjects

  • Users (e.g., website visitors and users of online services)

Purposes of Processing and Legitimate Interests

  • Collecting and processing feedback (e.g., via online forms)
  • Providing and improving our online content and publication services
  • Ensuring user-friendly website functionality
  • Implementing and maintaining security measures

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Basis

  • Legitimate interests (Article 6(1)(f) GDPR)

Further Information on Processing Activities, Procedures, and Services

UpdraftPlus

We use UpdraftPlus for website backup creation and backup storage. This service helps ensure the availability, integrity, and recoverability of website data in the event of technical issues, data loss, or security incidents.

Service Provider: Simba Hosting Ltd., 11 Barringer Way, St. Neots, Cambridgeshire, PE19 1LW, United Kingdom.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Website: https://teamupdraft.com/updraftplus/

Privacy Policy: https://teamupdraft.com/privacy/

Contact and Inquiry Management

When you contact us (e.g., by post, contact form, email, telephone, or via social media) and within the context of existing user or business relationships, we process the personal data provided by you to the extent necessary to respond to your inquiries and carry out any requested actions.

Categories of Data Processed

  • Contact data (e.g., postal addresses, email addresses, and telephone numbers)
  • Content data (e.g., text-based or image-based messages, inquiries, submissions, and related information such as authorship and timestamps)
  • Metadata, communication data, and procedural data (e.g., IP addresses, timestamps, identification numbers, and involved parties)

Categories of Data Subjects

  • Communication partners
  • Individuals making inquiries
  • Customers and business contacts

Purposes of Processing and Legitimate Interests

  • Responding to inquiries and communications
  • Managing communication processes
  • Administrative and organizational procedures
  • Collecting and processing feedback (e.g., through online forms)
  • Providing and improving our online services and user experience

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Bases

  • Legitimate interests (Article 6(1)(f) GDPR)
  • Performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR)

Further Information on Processing Activities, Procedures, and Services

Contact Form and Communication Requests

When you contact us via our contact form, email, telephone, social media channels, or other communication methods, we process the personal data you provide in order to respond to and handle your request.

This typically includes your name, contact information, and any additional information you choose to provide that is necessary for us to process your inquiry appropriately. We use this information solely for the purpose of responding to your request and maintaining communication with you.

Legal Bases:

  • Performance of a contract and pre-contractual measures (Article 6(1)(b) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)

Audio Content

We use hosting services provided by third-party providers to make audio content available for streaming and download. These platforms enable us to upload, store, and distribute audio materials to our users.

Categories of Data Processed

  • Usage data (e.g., page views, time spent on pages, click paths, frequency and intensity of use, device types, operating systems, interactions with content and features)
  • Metadata, communication data, and procedural data (e.g., IP addresses, timestamps, identification numbers, and involved parties)
  • Log data (e.g., server log files relating to logins, data access, downloads, and access times)

Categories of Data Subjects

  • Users (e.g., website visitors and users of online services)

Purposes of Processing and Legitimate Interests

  • Audience measurement and analytics (e.g., access statistics and recognition of returning users)
  • Creation of user-related profiles and usage analysis
  • Provision and optimization of our online services
  • Improving user experience and content delivery

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Basis

  • Legitimate interests (Article 6(1)(f) GDPR)

Marketing Communications via Email, Postal Mail, Fax, or Telephone

We process personal data for marketing and promotional communications that may be carried out through various channels, including email, telephone, postal mail, or fax, in accordance with applicable legal requirements.

Recipients have the right to withdraw any consent previously given at any time and may object to receiving marketing communications free of charge using the contact methods provided above.

Following a withdrawal of consent or objection, we may retain the data necessary to demonstrate our previous authorization to contact the individual for up to three years after the end of the year in which the withdrawal or objection was received. This storage is based on our legitimate interests and is limited to the purpose of establishing, exercising, or defending legal claims.

In addition, based on our legitimate interest in permanently respecting an individual’s withdrawal of consent or objection, we may retain the information necessary to prevent future communications. Depending on the communication channel, this may include an email address, telephone number, or name.

Categories of Data Processed

  • Master data (e.g., full name, address, contact information, customer number)
  • Contact data (e.g., postal addresses, email addresses, and telephone numbers)
  • Content data (e.g., messages, correspondence, marketing preferences, and related information)

Categories of Data Subjects

  • Communication partners
  • Prospective customers
  • Customers and business contacts

Purposes of Processing and Legitimate Interests

  • Direct marketing (e.g., by email, telephone, or postal mail)
  • Marketing and promotional activities
  • Customer relationship management
  • Business development and sales promotion

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Bases

  • Consent (Article 6(1)(a) GDPR)
  • Legitimate interests (Article 6(1)(f) GDPR)

Social Media Presence

We maintain online profiles on social media platforms and process user data within these platforms in order to communicate with users, provide information about our services, and engage with our audience.

Please note that user data may be processed outside the European Union. As a result, users may face certain risks, including potential difficulties in enforcing their data protection rights.

Furthermore, social media platforms generally process user data for market research and advertising purposes. For example, user behavior and resulting interests may be used to create user profiles. These profiles may then be used to display advertisements both within and outside the respective platforms that are presumed to match users’ interests. For these purposes, cookies and similar technologies are typically stored on users’ devices. In addition, user profiles may contain information that is independent of the devices used by the users, particularly when users are registered members of the relevant platforms and logged into their accounts.

For detailed information about the respective processing activities and available opt-out options, please refer to the privacy policies of the respective platform operators.

Please also note that requests for information and the exercise of data subject rights can generally be handled most effectively directly by the respective platform providers, as only they have direct access to the user data and can take appropriate action. However, if you require assistance, you may contact us at any time.

Categories of Data Processed

  • Contact data (e.g., postal addresses, email addresses, and telephone numbers)
  • Content data (e.g., messages, comments, posts, images, videos, and related information such as authorship and timestamps)
  • Usage data (e.g., page views, interactions, engagement statistics, click behavior, device types, operating systems, and platform activities)

Categories of Data Subjects

  • Users (e.g., website visitors and users of online services)

Purposes of Processing and Legitimate Interests

  • Communication with users and interested parties
  • Collection and analysis of feedback
  • Public relations and corporate communications
  • Promotion of our services and content

Storage and Deletion

Data is deleted in accordance with the information provided in the section “General Information on Data Storage and Deletion.”

Legal Basis

  • Legitimate interests (Article 6(1)(f) GDPR)

Further Information on Processing Activities, Procedures, and Services

LinkedIn

We operate a profile on LinkedIn. For the collection of visitor data used to generate “Page Insights” (statistics), we act as a joint controller with LinkedIn Ireland Unlimited Company. This joint responsibility is limited to the collection and transmission of data to LinkedIn. Any further processing is carried out solely by LinkedIn.

The data collected for Page Insights may include information about content viewed or interacted with by users, actions taken on the platform, device information such as IP addresses, browser types, operating systems, language settings, and cookie information, as well as profile-related information such as job function, industry, country, company size, and employment status.

LinkedIn and we have entered into a Joint Controller Agreement (“Page Insights Joint Controller Addendum”), which defines the respective responsibilities regarding data protection and the exercise of data subject rights. Users may exercise their rights directly with LinkedIn.

Service Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Website: https://www.linkedin.com

Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Joint Controller Agreement: https://legal.linkedin.com/pages-joint-controller-addendum

International Data Transfers: Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

YouTube

We operate a presence on YouTube, a social media and video-sharing platform. Interactions with our YouTube content may result in the processing of personal data by YouTube and its affiliated companies.

Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).

Privacy Policy: https://business.safety.google/privacy/

International Data Transfers: Data Privacy Framework (DPF).

Opt-Out: https://myadcenter.google.com/