Privacy Policy | Busuttil & Company

The protection and security of your personal data are important to us. We strictly adhere to the applicable data protection regulations. The following information explains how and for what purposes we process data, as well as the rights you have as a customer.

Further information on the use of your personal data can be found in our detailed privacy notices.

Last updated: 06.06.2026

Who We Are

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection regulations is:

Busuttil & Company GmbH
Ernst-August-Platz 10
30159 Hannover
Germany
+49 511 515 22 180
hallo@busuttilcompany.de
https://busuttilcompany.de/

Contacting the Data Protection Officer

The data protection officer of the data controller is:

DataCo GmbH
Sandstr. 33
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de

On this page, we inform you about the processing of your personal data on our website.

How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data when we have a legitimate purpose and a legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6(1), first sentence, point (a) GDPR): You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. Further information on how to withdraw your consent can be found in the subsections entitled “Exercising Your Rights” in the following sections of this Privacy Policy.
Contract (Art. 6(1), first sentence, point (b) GDPR): We need to use your data to perform a contract we have entered into with you. Alternatively, it is necessary to use your data because we have asked you to take certain steps, or you have taken certain steps yourself, before entering into this contract.
Legal Obligation (Art. 6(1), first sentence, point (c) GDPR): We need to use your data to comply with the law.
Vital Interests (Art. 6(1), first sentence, point (d) GDPR): The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public Task (Art. 6(1), first sentence, point (e) GDPR): The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a legally established task, such as a statutory function.
Legitimate Interests (Art. 6(1), first sentence, point (f) GDPR): The processing of your data is necessary to pursue a legitimate interest that we or another party have, provided that your own interests do not override those interests.

Please note that we may not be able to provide you with our website services if your data is processed for the performance of a contract or compliance with a legal obligation and you do not provide the requested data.

Your Rights

If your personal data is processed, you are considered a data subject within the meaning of the General Data Protection Regulation (GDPR) and have the following rights vis-à-vis the data controller:

1. Right of Access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and obtain the following information:

Purposes of the processing
Categories of personal data
Recipients or categories of recipients
Envisaged retention period or the criteria used to determine that period
Existence of the rights to rectification, erasure, restriction of processing or objection
Right to lodge a complaint with the competent supervisory authority
Where applicable, the source of the data (if collected from a third party)
Where applicable, the existence of automated decision-making, including profiling, with meaningful information about the logic involved, as well as the significance and envisaged consequences
Where applicable, the transfer of personal data to a third country or an international organisation

2. Right to Rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you have the right to request the immediate correction or completion of your personal data.

3. Right to Restriction of Processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request the restriction of the processing of your personal data:

You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful, and you oppose the erasure of your personal data and request the restriction of its use instead.
We no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims.
You have objected to the processing, pending verification of whether our legitimate grounds override your grounds.

4. Right to Erasure (“Right to Be Forgotten”) (Art. 17 GDPR)

If one of the following grounds applies, you have the right to request the immediate erasure of your personal data:

Your data is no longer necessary for the purposes for which it was originally collected.
You withdraw your consent, and there is no other legal basis for the processing.
You object to the processing, and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR.
Your personal data has been unlawfully processed.
Erasure is necessary to comply with a legal obligation under European Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.

Please note that the above grounds do not apply to the extent that processing is necessary:

For exercising the right of freedom of expression and information.
For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
For reasons of public interest in the area of public health.
For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.
For the establishment, exercise or defence of legal claims.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another data controller.

6. Right to Object to Certain Data Processing (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1), first sentence, point (e) or (f) GDPR. This also applies to profiling based on these provisions.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing.

7. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website
Browser types and versions used by the accessing system
Operating system used
Search engine robots
Page views per page
Duration of access to the website
Bounce rate

This data is stored in our system’s log files.

This does not include the user’s IP address or other data that would allow the data to be associated with a specific user. This data is not stored together with other personal data of the user.

This data is not stored together with other personal data of the user.

2. Purpose of Data Processing

Data is stored in log files to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

3. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1), first sentence, point (f) GDPR.

4. Retention Period

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session ends.

In the case of data stored in log files, deletion takes place after seven days at the latest. Storage beyond this period is possible. In such cases, users’ IP addresses are deleted or anonymised so that it is no longer possible to identify the accessing client.

5. Exercising Your Rights

The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Users may object to this processing. Whether such an objection is successful will be determined by balancing the respective interests involved.

Use of Cookies

1. Description and Scope of Data Processing

When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you access our website and at any time thereafter, you can choose whether to allow cookies in general or which individual additional functions you wish to enable. You can make changes in your browser settings or via our Consent Manager.

Cookies are text files or information stored in a database on your hard drive and associated with the browser you use, allowing certain information to be transmitted to the entity that sets the cookie. Below, we describe the types of cookies we use:

We use technically necessary cookies that are required for the technical operation of the website. Without these cookies, our website cannot be displayed (completely correctly), or support functions may not be available.

The following data is stored and transmitted by technically necessary cookies:

Language settings
Search terms entered
Frequency of page views
Use of website functions

We also use cookies on our website that are not technically necessary. Technically non-essential cookies are text files that do not serve solely to ensure the functionality of the website but also collect other data.

The following data is processed through the use of technically non-essential cookies:

IP address
Location of website users
Date and time of access to the website
Personalisation of advertisements for the user
Tracking of browsing behaviour
Linking website visits to other social media platforms

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognised even after navigating to another page.

We require technically necessary cookies for the following applications:

Retaining language settings
Remembering search terms
Ensuring website functionality

Technically non-essential cookies are used to improve the quality of our website, its content and, consequently, our reach and economic efficiency. By setting these cookies, we learn how the website is used and can continuously optimise our services. In particular, these cookies serve the following purposes:

Marketing purposes

3. Legal Basis for Data Processing

The provisions of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG) apply to the storage of information on the end user’s device and/or access to information already stored on the end user’s device.

Where the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your device is based on Section 25(2), No. 2 TDDDG.

The storage of and access to information on your device serve to facilitate your use of our website and enable us to provide our services as requested by you. Some functions of our website would not work without these cookies and therefore could not be offered.

As a general rule, cookies are deleted when the session ends (e.g. when logging out or closing the browser) or after a specified period has expired. Information about different cookie retention periods can be found in the following sections of this Privacy Policy.

Where cookies are used that are not technically necessary, this is based on your explicit consent, which you can provide via the cookie banner. In this case, the legal basis for storing and accessing information is Section 25(1) TDDDG in conjunction with Art. 6(1), point (a), and Art. 7 GDPR.

You can withdraw your consent at any time with effect for the future or grant it again at a later date by adjusting your cookie settings accordingly. Alternatively, you can prevent cookies from being stored by configuring the appropriate settings in your browser software.

Please note that browser settings only apply to the browser in which they are configured.

If personal data is processed following the storage of and access to information on your device, the provisions of the GDPR apply. Further information can be found in the following sections of this Privacy Policy.

4. Exercising Your Rights

You can withdraw your consent to the use of cookies at any time and manage your consent preferences via the following link:

Email Contact

1. Description and Scope of Data Processing

You can contact us via the email address provided on our website. In this case, the personal data transmitted by the user in the email will be stored.

The data is used exclusively for processing the correspondence.

2. Purpose of Data Processing

If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal Basis for Data Processing

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1), point (f) GDPR. Our legitimate interest is to respond to your enquiry sent by email in the best possible way.

If the email contact is aimed at concluding a contract, Art. 6(1), point (b) GDPR serves as an additional legal basis for processing.

4. Retention Period

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data transmitted by email, this is the case when the respective correspondence with the user has ended. The correspondence is considered concluded when it can be inferred from the circumstances that the matter in question has been fully resolved.

Any additional personal data collected during the sending process will be deleted after seven days at the latest.

5. Exercising Your Rights

If a user contacts us by email, they may object to the storage of their personal data at any time. In this case, the correspondence cannot be continued.

All personal data stored in connection with the contact will be deleted in this case.

Contact Form

1. Description and Scope of Data Processing

Our website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the form is transmitted to us and stored.

The following data is stored when the message is submitted:

Email address
Last name
First name
Telephone/mobile phone number
Company name
Job title
Industry
IP address of the accessing device
Date and time

2. Purpose of Data Processing

The processing of personal data entered in the contact form or transmitted via the email address provided serves exclusively to handle your enquiry.

The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest is to respond to your enquiry submitted via the contact form in the best possible way.

If the email contact is aimed at concluding a contract, Art. 6(1), first sentence, point (b) GDPR serves as an additional legal basis for processing.

4. Retention Period

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data entered in the contact form and data transmitted by email, this is the case when the respective correspondence with the user has ended. The correspondence is considered concluded when it can be inferred from the circumstances that the matter in question has been fully resolved.

Any additional personal data collected during the submission process will be deleted after seven days at the latest.

5. Exercising Your Rights

If a user contacts us via the contact form, they may object to the storage of their personal data at any time by sending an email to hallo@busuttilcompany.de

All personal data stored in connection with the contact will be deleted in this case.

Corporate Social Media Profiles

YouTube

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our corporate profile, we provide information and offer YouTube users the opportunity to communicate with us.

If you perform an action on our corporate YouTube profile (e.g. comments, posts, likes, etc.), you may make personal data (e.g. your real name or profile picture) publicly available.

However, as we generally have little or no influence over the processing of your personal data by YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

We use our corporate presence on social networks to communicate and exchange information with (potential) customers. In particular, we use our corporate profile for:

Providing information about our company and webinars.

Publications on our corporate profile may include the following content:

Information about services
Advertising
Customer contact
Case studies
Blog

Each user is free to publish personal data through their activities.

Where we process your personal data to analyse your online behaviour, offer you competitions or conduct lead generation campaigns, this is based on your explicit consent pursuant to Art. 6(1), first sentence, point (a), and Art. 7 GDPR.

The legal basis for processing personal data for the purpose of communicating with customers and prospective customers is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest is to respond to your enquiry in the best possible way or to provide the information you have requested.

If the contact is aimed at concluding a contract, Art. 6(1), point (b) GDPR serves as an additional legal basis for processing.

For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46(2), point (c) GDPR. You can request a copy of these standard data protection clauses from us.

You may object at any time to the processing of your personal data that we collect in connection with your use of our corporate profile and exercise your rights as a data subject, as outlined in the “Your Rights” section of this Privacy Policy. To do so, please send us an informal email to hallo@busuttilcompany.de.

Further information about the processing of your personal data by YouTube and the corresponding options for objection can be found here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=en

Use of Corporate Profiles on Professional Networks

1. Scope of Data Processing

Our corporate profile is used for recruitment applications, information/public relations and active sourcing. We have no information regarding the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policy of:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

On our corporate profile, we provide information and offer users the opportunity to communicate with us.

If you perform an action on our corporate profile (e.g. comments, posts, likes, etc.), you may make personal data (e.g. your real name or profile picture) publicly available.

2. Legal Basis for Data Processing

If the contact is aimed at concluding a contract, Art. 6(1), point (b) GDPR serves as an additional legal basis for processing.

3. Purpose of Data Processing

Our corporate profile serves to inform users about our services. Each user is free to publish personal data through their activities.

4. Retention Period

The data generated through our corporate profile is not stored in our own systems.

5. Exercising Your Rights

Further information on exercising your rights can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Hosting

The website is hosted on servers operated by a service provider commissioned by us.

Our service provider is:

OVH GmbH
Oskar-Jäger-Str. 173/K6
50825 Köln
Deutschland
VAT ID No.: DE245768940

Commercial Register: Local Court of Saarbrücken – HRB 15369

Further information can be found in the provider’s Privacy Policy: https://www.ovhcloud.com/de/personal-data-protection/?_gl=1*fmakkb*_gcl_au*MTQ1OTEzNzIyMi4xNzEwNzY3ODky

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information includes:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website
Browser types and versions used by the accessing system
Operating system used
Search engine robots
Page views per page
Duration of access to the website
Bounce rate

This data is not combined with other data sources. The collection of this data is based on Art. 6(1), point (f) GDPR. Our legitimate interest in processing this data is to ensure that our website is displayed without errors and to optimise its functionality.

The website’s server is geographically located in Germany.

Geotargeting

We use the IP address and other information provided by the user (in particular, the postal code provided during registration or ordering) for regional audience targeting (so-called “geotargeting”).

Regional audience targeting is used, for example, to automatically display regional offers or advertisements that are often more relevant to users. The legal basis for using the IP address and, where applicable, other information provided by the user (in particular, the postal code) is Art. 6(1), point (f) GDPR, based on our interest in ensuring more precise audience targeting and thereby providing offers and advertisements that are more relevant to users.

In this process, part of the IP address and the additional information provided by the user (in particular, the postal code) are only read and are not stored separately.

You can prevent geotargeting by using, for example, a VPN or proxy server that prevents precise location identification. In addition, depending on the browser you use, you can disable location tracking in the corresponding browser settings (provided that your browser supports this function).

We use geotargeting on our website for the following purposes:

Advertising purposes

Integrated Third-Party Services

We use various service providers to deliver the services offered on our website.

In general, we have a legitimate interest in sharing your data with the relevant service providers where these services are essential for providing the basic services offered on our website.

Where such services are required for additional services, enhanced features or other purposes, your personal data will only be shared with service providers if you have given your consent.

You can withdraw your consent to the use of integrated third-party services at any time and manage your consent preferences here:

Use of Google Marketing Platform

1. Scope of Personal Data Processing

We use the Google Marketing Platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

Google places a cookie on your computer. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and operating system), data about advertisements displayed (in particular, which advertisements were shown and whether the user clicked on them), as well as data from advertising partners (in particular, pseudonymised user IDs).

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers.

We have no influence over the scope and further use of the data collected by Google through this tool and therefore provide you with information based on our current knowledge. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address.

Further information about data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The Google Marketing Platform is used to display relevant advertisements to users, improve campaign performance reports and prevent users from seeing the same advertisements repeatedly.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Google Marketing Platform stores your data until the stated purpose has been fulfilled, with a maximum retention period of 18 months.

5. Exercising Your Rights

You can prevent Google from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de/anonymous?hl=de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google AdWords

1. Scope of Personal Data Processing

We use Google AdWords provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

We use this service to display advertisements. Google places a cookie on your computer. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and operating system), data about advertisements displayed (in particular, which advertisements were shown and whether the user clicked on them), as well as data from advertising partners (in particular, pseudonymised user IDs).

Further information about data processing by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

We only receive information about the total number of users who have responded to our advertisement. No information is shared that would allow us to identify you. The service is not used to track individual users.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de/anonymous?hl=de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Ads Remarketing

1. Scope of Personal Data Processing

We use Google Ads Remarketing provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

Google Remarketing is used to retarget visitors to our online presence for advertising purposes through Google Ads advertisements. With the help of Google Ads Remarketing, target groups (“Similar Audiences”) can be created, for example, consisting of users who have visited certain pages. This makes it possible to identify users on other websites and display targeted advertising to them.

Google places a cookie on the user’s computer. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and operating system), data about advertisements displayed (in particular, which advertisements were shown and whether the user clicked on them), as well as data from advertising partners (in particular, pseudonymised user IDs).

Further information about data processing by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The purpose of processing personal data is to target specific audiences. The cookies stored on users’ devices recognise them when they visit a website, allowing advertisements tailored to their interests to be displayed.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de/

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics 4 (GA 4)

1. Scope of Personal Data Processing

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

Google Analytics analyses, among other things, how visitors use our website. Google places cookies on your device. During your visit, user behaviour is recorded in the form of “events”. As a result, personal data may be stored and analysed, including:

First visit to the website
Interaction with the website, navigation path
Clicks on external links
Video usage
File downloads
Advertising impressions and clicks
Scrolling behaviour (when scrolling to the bottom of a page)
Searches on the website
Language selection
Page visits
Location (region)
Your IP address (in shortened form)
Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
Your internet service provider
Referrer URL

We use the User-ID feature. With the help of the User-ID, we can assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.

We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalised advertisements (interests and demographic data) and enables advertisements to be delivered to these users in cross-device remarketing campaigns.

IP address anonymisation is enabled by default in GA 4. This means that your IP address is shortened by Google within the Member States of the European Union or other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Further information about data processing by Google can be found here: https://policies.google.com/privacy

2. Purpose of Data Processing

We use GA 4 to evaluate the use of our online presence and generate reports on activities on our website. These reports are used to analyse the performance of our website and to display targeted advertising to individuals who have already expressed an initial interest by visiting our website.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal data will be deleted after two months. This deletion takes place automatically once a month.

5. Exercising Your Rights

You can prevent Google from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Use of Google Maps

1. Scope of Personal Data Processing

We use the online mapping service Google Maps provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

We use the Google Maps plugin to visually display geographical data and embed it on our website. When you use Google Maps on our website, information about your use of our website, your IP address and addresses entered when using the route planning function are transmitted to a Google server and stored there.

Further information about data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The Google Maps plugin is used to improve user-friendliness and provide an appealing presentation of our website.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Exercising Your Rights

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

Use of Google reCAPTCHA

1. Scope of Personal Data Processing

We use Google reCAPTCHA provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland.

This tool is intended to verify whether data entry is legitimate and has not been carried out by a bot. To do so, Google reCAPTCHA analyses and authenticates the behaviour of website visitors based on various characteristics. As a result, personal data may be stored and analysed, particularly user activity (in particular, mouse movements and which elements have been clicked on) and device and browser information (in particular, the time, IP address and operating system).

The data is not linked to data that may be collected or used in connection with the simultaneous use of authenticated Google services such as Gmail.

Further information about data processing by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

Google reCAPTCHA is used to protect our website against misuse.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

Use of Google Web Fonts

1. Scope of Personal Data Processing

We use Google Web Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

When you access our website, the web fonts are transferred to your browser’s cache to enable a visually enhanced presentation of various information. If your browser does not support Google Web Fonts or blocks access to them, the text will be displayed in a standard font.

No cookies are stored on the visitor’s device when accessing the website. Data transmitted in connection with accessing the website is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com.

As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on) and device and browser information (in particular, the IP address and operating system).

The data is not linked to data that may be collected or used in connection with the simultaneous use of authenticated Google services such as Gmail.

Further information about data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

Google Web Fonts are used to provide an appealing presentation of our text content. If your browser does not support this feature, a standard font from your computer will be used for display.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

Use of Hotjar

1. Scope of Personal Data Processing

We use the web analytics service Hotjar provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (hereinafter referred to as “Hotjar”). Hotjar uses cookies, among other technologies. These are small text files that are stored locally in your web browser’s cache on your device and enable us to analyse how you use our website. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and operating system), and a tracking code (pseudonymised user ID).

The information collected in this way is transmitted by Hotjar to a server in Ireland, where it is stored in anonymised form.

Further information about data processing by Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy

2. Purpose of Data Processing

The Hotjar plugin is used to better understand the needs of our users and to optimise the services and content offered on our website.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Exercising Your Rights

You can prevent Hotjar from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable the use of your personal data by Hotjar using the following link: https://www.hotjar.com/legal/compliance/opt-out

Further information about options for objection and removal in relation to Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy

Use of HubSpot

1. Scope of Personal Data Processing

We use features provided by HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as “HubSpot”).

HubSpot is an integrated software solution that enables us to manage various aspects of our online marketing activities. These include, among others Email marketing (newsletters and automated emails, for example, to provide downloadable content), Social media publishing and reporting, Reporting (in particular, traffic sources, website visits, etc.), Contact management (in particular, user segmentation and CRM), Landing pages and contact forms. HubSpot places a cookie on your computer. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and operating system), data about advertisements displayed (in particular, which advertisements were shown and whether the user clicked on them), as well as data from advertising partners (in particular, pseudonymised user IDs).

Further information about data processing by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

2. Purpose of Data Processing

The HubSpot plugin is used exclusively to optimise our marketing activities.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You can prevent HubSpot from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information about options for objection and removal in relation to HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

Use of LinkedIn

1. Scope of Personal Data Processing

We use features provided by the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”). Whenever you access one of our pages that contains LinkedIn features, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited our website using your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn may associate your visit to our website with you and your user account. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on) and device and browser information (in particular, the IP address and operating system). Please note that, as the website operator, we have no knowledge of the content of the data transmitted or how LinkedIn uses this data.

Further information about data processing by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

2. Purpose of Data Processing

The LinkedIn plugin is used to improve the user-friendliness of our website.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You can prevent LinkedIn from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can also prevent data transmission by logging out of your LinkedIn account before visiting our website.

You can disable the use of your personal data by LinkedIn using the following link: https://www.linkedin.com/psettings/guest-controls

Further information about options for objection and removal in relation to LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

Use of YouTube

1. Scope of Personal Data Processing

We use the YouTube plugin operated by Google, provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and its representative in the European Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). We use the YouTube plugin to embed YouTube videos on our website. When you visit our website, your browser establishes a connection to YouTube’s servers. As a result, personal data may be stored and analysed, particularly user activity (in particular, which pages have been visited and which elements have been clicked on) and device and browser information (in particular, the IP address and operating system).

We have no influence over the content of the plugin. If you are logged into your YouTube account while visiting our website, YouTube may associate your visit with your account. When you interact with the plugin, the corresponding information is transmitted directly to YouTube and stored there.

Further information about data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The YouTube plugin is used to improve the user-friendliness of our website and provide an appealing presentation of its content.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, for example, for tax and accounting purposes.

5. Exercising Your Rights

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You can prevent Google from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

Use of Google Tag Manager

1. Scope of Personal Data Processing

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”).

Google Tag Manager allows tags from Google services and third-party providers to be managed and integrated collectively into a website. Tags are small pieces of code on a website that are used, among other things, to measure visitor numbers and behaviour, track the impact of online advertising and social media channels, implement remarketing and audience targeting, and test and optimise websites.

When a user visits the website, the current tag configuration is sent to the user’s browser. This configuration contains instructions specifying which tags should be triggered.

Google Tag Manager triggers other tags, which may themselves collect data. Information about this can be found in the sections of this Privacy Policy relating to the use of the respective services. Google Tag Manager does not access this data.

Further information about Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing personal data is to enable the centralised and transparent management and efficient integration of third-party services.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law. Advertising data stored in server logs is anonymised. According to Google, this is achieved by deleting parts of IP addresses and cookie information after 9 and 18 months, respectively.

5. Exercising Your Rights

You can disable the use of your personal data by Google using the following link: https://adssettings.google.de

Further information about options for objection and removal in relation to Google can be found here: https://policies.google.com/technologies/partner-sites

Use of LinkedIn Analytics

1. Scope of Personal Data Processing

We use the analytics service LinkedIn Analytics provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”). The use of LinkedIn Analytics enables the creation of pseudonymised user profiles. These profiles are used to analyse user behaviour and optimise our services. The following data is processed:

Operating system information
Device identifier
Internet service provider
IP address
Referrer URL
Browser information

Further information about data processing by LinkedIn can be found here:

https://www.linkedin.com/legal/privacy-policy

2. Purpose of Data Processing

The processing of users’ personal data through LinkedIn Analytics enables us to analyse the browsing behaviour of our users. By evaluating the data collected, we are able to compile information about how individual components of our services are used. This helps us continuously improve our website and enhance its user-friendliness.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

4. Retention Period

Your personal information is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Exercising Your Rights

You can prevent LinkedIn from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a browser that supports it, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable the use of your personal data by LinkedIn using the following link: https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences

Further information about options for objection and removal in relation to LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

Use of Borlabs Cookie

1. Scope of Personal Data Processing

We use Borlabs Cookie, a cookie consent management tool provided by Borlabs GmbH, 22305 Hamburg, Germany. Borlabs Cookie helps us manage and document website visitors’ consent to the use of cookies and similar technologies. When visitors interact with the consent banner, Borlabs Cookie processes data including their cookie preferences, device and browser information, IP address and consent history. This data is essential for us to comply with legal requirements and respect the privacy preferences of our visitors.

2. Purpose of Data Processing

The primary purpose of using Borlabs Cookie is to enable our website to comply with the legal obligations under the GDPR and the German Telecommunications-Telemedia Data Protection Act (TTDSG). By effectively managing cookie consent, we ensure that our website respects visitors’ decisions regarding privacy and the use of cookies and related technologies.

3. Legal Basis for the Processing of Personal Data

The processing of personal data by Borlabs Cookie is based on the legal requirement to obtain and document website visitors’ consent to the use of cookies and similar technologies pursuant to Art. 6(1), point (c) GDPR and Section 25 TTDSG.

4. Retention Period

Personal data collected by Borlabs Cookie is stored for as long as necessary to document consent and comply with legal obligations. The retention period is determined by the legal requirements for documenting consent. The data is securely deleted once it is no longer required for its intended purpose or when the statutory retention periods expire.

5. Exercising Your Rights

Further information about how Borlabs Cookie processes personal data and about visitors’ rights can be found in the Borlabs Cookie Privacy Policy: Borlabs Privacy Policy

This Privacy Policy was created with the assistance of DataGuard.

Privacy Policy | Busuttil & Company

Who We Are

Contacting the Data Protection Officer

Table of Contents

What do we mean by legal basis?

Data Sharing and International Transfers

Your Rights

1. Right of Access (Art. 15 GDPR)

2. Right to Rectification (Art. 16 GDPR)

3. Right to Restriction of Processing (Art. 18 GDPR)

4. Right to Erasure (“Right to Be Forgotten”) (Art. 17 GDPR)

5. Right to Data Portability (Art. 20 GDPR)

6. Right to Object to Certain Data Processing (Art. 21 GDPR)

7. Right to Lodge a Complaint with a Supervisory Authority

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

2. Purpose of Data Processing

3. Legal Basis for Data Processing

4. Retention Period

5. Exercising Your Rights

Use of Cookies

1. Description and Scope of Data Processing

2. Purpose of Data Processing

3. Legal Basis for Data Processing

4. Exercising Your Rights

Newsletter

1. Description and Scope of Data Processing

2. Purpose of Data Processing

3. Legal Basis for Data Processing

4. Retention Period

5. Exercising Your Rights

Email Contact

1. Description and Scope of Data Processing

2. Purpose of Data Processing

3. Legal Basis for Data Processing

4. Retention Period

5. Exercising Your Rights

Contact Form

1. Description and Scope of Data Processing

2. Purpose of Data Processing

3. Legal Basis for Data Processing

4. Retention Period

5. Exercising Your Rights

Corporate Social Media Profiles

YouTube

Use of Corporate Profiles on Professional Networks

1. Scope of Data Processing

2. Legal Basis for Data Processing

3. Purpose of Data Processing

4. Retention Period

5. Exercising Your Rights

Hosting

Geotargeting

Integrated Third-Party Services

Use of Google Marketing Platform

1. Scope of Personal Data Processing

2. Purpose of Data Processing

3. Legal Basis for the Processing of Personal Data

4. Retention Period

5. Exercising Your Rights

Use of Google AdWords

1. Scope of Personal Data Processing

2. Purpose of Data Processing

3. Legal Basis for the Processing of Personal Data

4. Retention Period

5. Exercising Your Rights

Use of Google Ads Remarketing

1. Scope of Personal Data Processing

2. Purpose of Data Processing

3. Legal Basis for the Processing of Personal Data

4. Retention Period

5. Exercising Your Rights

Use of Google Analytics 4 (GA 4)

1. Scope of Personal Data Processing

2. Purpose of Data Processing

3. Legal Basis for the Processing of Personal Data

4. Retention Period

5. Exercising Your Rights

Use of Google Maps

1. Scope of Personal Data Processing