feat: add google analytics to privacy policy (#789)

docs/privacypolicy.md

@@ -155,6 +155,25 @@ A link to cancel the newsletter can be found at the end of each newsletter.
 
 For instructions to take this step, please refer to the confirmation e-mail and each newsletter.
 
+## Web Analysis
+For the purpose of demand-oriented design, business management evaluation and control of the website and the continuous optimisation of our pages, we use the services described below on the basis of Art. 6 para. 1 lit. f GDPR. We may process your personal data until our legitimate interest ceases to exist.
+
+### Use of Google Analytics with anonymisation
+Based on our legitimate interests (i.e. interest in analysis, optimisation and economic analysis), we set a high value on the quality of our services. Operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR) Google Analytics, a web analytics service of Google LLC (“Google”). The use includes the “Universal Analytics” operating mode.
+Google uses cookies. The information generated by the cookie about usage of the online offer by the users are usually transferred to a Google server in the USA and stored there.
+
+Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European data protection law
+(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
+
+Google uses this information at the request of, and on behalf of, the operator of this website to evaluate your use of the website, to create reports on the website activities, and to provide the website’s operator with additional services connected with the use of the website and the Internet.
+Pseudonymous user profiles can be created from the processed data.
+
+We only use Google Analytics with IP anonymisation enabled. This means that the IP address of the users will be transferred by Google within Member States of the European Union or in other States Parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there.
+
+The IP address transmitted by the user’s browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly. In addition, you can disable the cookie’s sending of the data it has created concerning your use of this website (including your IP address) to Google and the processing of this data by Google if you download and install the browser plugin that is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
+
+Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 26 months. Data whose retention period has been reached is automatically deleted once a month.
+
 ## Link to third parties
 ### Embedding of external platforms
 You will find links to other websites on this website, directly or indirectly by means of links. The legal basis for such processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. We may process your personal data until our legitimate interest ceases to exist.