Privacy

For online booking, the name, phone number, optional email address, requested appointment and optional notes are processed in order to manage the booking. SMTP notifications are not yet enabled in production.

Website and server statistics: public page views, entries, booking attempts, successful bookings, error classes, coarse response times, source categories and device classes are stored long-term only as aggregated daily values. No person or device is recognised. For these statistics, no visitor identifier, IP address, browser identification (user agent), full referrer address, URL parameters or exact event time is stored. Multiple visits by the same person may therefore be counted more than once; the values are not a count of unique visitors.

The website and ad statistics set no analytics or marketing cookies, write no statistics data to localStorage or sessionStorage and load no third-party scripts. Google Tag Manager, Google Analytics and Google conversion tags are not loaded.

Google Ads attribution: when someone opens the website through an ad, the server checks only the visible URL parameters utm_source, utm_medium, utm_campaign, utm_term, matchtype, adgroupid and targetid, as well as the common misspelling tm_source. Only valid values (source google, medium cpc, numeric campaign ID, ad group ID, target ID, cleaned ad keyword and match type) are carried through public page links within the current navigation and sent with the reservation and the booking request. For the Google click identifiers gclid, wbraid and gbraid, only whether one was present is recorded; their value is neither stored nor passed on.

Short-term ad visit log: to troubleshoot ad URLs, the server stores, aggregated per hour, which public page path was opened with which validated campaign, ad group and target IDs, which ad keyword and match type, whether the parameters were valid, a fixed error reason and whether a click identifier was present. Invalid raw values and free text from invalid visits are not stored. These entries are deleted automatically after 30 days.

Long-term ad statistics: only daily values per stage (entry, booking page, reservation, booking request, successful booking and rejected booking request with a coarse error class) by campaign, ad group and target ID, ad keyword, match type and validity are stored permanently, together with monthly values containing the number of bookings, total booked value and currency. Successful bookings are counted in the same storage operation as the booking itself.

IP addresses, browser identifiers, full referrer or page addresses, unknown URL parameters, Google click identifiers, visitor or session identifiers, reservation, appointment or customer identifiers, contact details, notes, the management link and the exact booking time are not stored. No statistics row contains a link to a specific booking or person. On days with very few bookings, a daily value may nevertheless arithmetically correspond to a single booking; the values are therefore visible only in the protected administration area. The transmitted ad keyword is a keyword from the Google Ads account and is not necessarily the actual search query of an individual.

Google Search Console data is retrieved server-side and read-only. It contains aggregated organic clicks, impressions, search terms, landing pages, countries and devices, is kept separate from the ad statistics and is not assigned to an individual booking.