Supplement: Google Analytics 4

This supplement forms part of the privacy policy linked here. We use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse and improve our shop. Google processes analytics data on our behalf under agreed data processing terms.

Google Analytics is loaded only after your voluntary consent in the privacy dialog. The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. You can use the shop without consenting and withdraw consent at any time using the fingerprint icon, with effect for the future. Processing before withdrawal remains lawful.

Measurement includes pseudonymous cookie identifiers, visits, public page views, timestamps, browser/device information, approximate location and the referring domain. Home, product and catalogue pages are measured, along with a purchase event after an order is completed. This event contains a pseudonymous unique transaction identifier (derived from the internal order ID using a secret key), product IDs, quantities, net prices, net merchandise value excluding shipping and tax, and currency. Readable order numbers, names, email and postal addresses are not transmitted. Customer accounts, the cart and individual checkout steps are not measured. Query parameters and fragments are removed from page addresses; only a valid Google Merchant click identifier (srsltid) may be retained for product click attribution. The order completion URL is sent without an order token. Page titles are generic. Google technically receives the IP address but states that GA4 does not store it. Our Analytics property is linked to Google Merchant Center to attribute purchases to product clicks.

The cookies _ga and _ga_VJGBC4TE6P expire after no more than 180 days, without automatic renewal on return visits. GA4 user and event data retention is 14 months; renewal following new activity is disabled. This period does not apply to aggregated standard reports. We store aggregated daily metrics in our own database for long-term comparisons, without individual user or cookie identifiers. Google Signals, advertising personalisation and enhanced measurement such as form interactions are disabled.

Processing by Google LLC and other providers outside the EEA, particularly in the USA, is possible. Google LLC states that it is certified under the EU-US Data Privacy Framework. For covered transfers Google relies on the adequacy decision; otherwise it relies on standard contractual clauses. The Google information linked linked here describes further details and safeguards. The privacy policy linked here provides the controller, contact details, individual rights and complaint information.

Google: Privacy · Google: Data transfers · Google: Data processing terms