Website processing and your privacy choices.
Last updated: November 2026
We use Google Analytics 4 (G-4RYGHMFEES) to measure website use and contact interactions. Google Consent Mode v2 runs in advanced mode: the Google tag loads before you choose. Analytics storage, advertising storage, advertising user-data use and advertising personalization default to denied. Cookieless measurements continue before consent, after Reject and after withdrawal while analytics storage is denied. Accept grants analytics storage only; all advertising consent types remain denied. Google Signals and advertising-personalization signals are disabled in the site configuration.
Consent permits Google Analytics cookie-based processing under Article 6(1)(a) GDPR and non-essential storage/access under § 165(3) TKG 2021. You can withdraw that consent using Cookie settings and Reject analytics cookies. This changes analytics storage to denied; it does not stop cookieless Google measurements, delete existing browser storage or erase previously processed data. Cookieless does not mean no processing or guarantee anonymity.
Events include page_view, page_not_found, generate_lead, begin_checkout and sign_up_click. Lead labels cover booking and email links, booking completion and newsletter interactions. Checkout and registration clicks use distinct events. Page and event data can include the page path, full page URL, page title, referring page, link destination, button text and form label. Booking completion uses generate_lead with the calendly_booked form label; newsletters also use generate_lead. Missing-page events contain only the pathname in their custom payload, without query or fragment.
Google may also receive consent state, timestamps and browser/device information through its tag and requests. A network connection makes your IP address available to Google. Page URLs, link URLs and referrers can contain additional information; denied storage does not filter those fields. We do not describe these measurements as universally anonymous.
Google provides the Analytics service; Google group companies can be involved, including Google Ireland Limited and Google LLC in the USA. Processing outside the EEA, including in the USA, is possible. Google publishes information about data-processing terms, the EU-US Data Privacy Framework and Standard Contractual Clauses. You can contact contact@tagbase.io for information about safeguards relevant to your data.
According to Google, EU, Swiss and UK visitor IP addresses are used for approximate geolocation and discarded before logging. For other regions, Google also describes service uses such as spam detection and routing and disposal of raw IP addresses after use. This does not mean no IP reaches Google, or that all Analytics data are anonymous.
Browser storage remembers your cookie choice (tagbase_cookie_consent), theme (theme) and language preferences (tagbase_language) in localStorage. Your cookie choice has no automatic expiry. During redirects, tb_orig_ref in sessionStorage can store an external referring page before consent for attribution; the first normal page view consumes it. This attribution storage is not described as necessary.
Session storage also records whether a chat has started (tagbase_chat_started) and whether a failed page-resource load has already triggered a reload (tagbase_chunk_reloaded). A sidebar:state cookie remembers the sidebar display. Session storage ordinarily lasts for the tab session; localStorage persists until cleared. Google Analytics may use _ga and measurement-specific _ga cookies when analytics storage is granted. Reject or withdrawal sets analytics storage to denied but does not remove existing cookies or browser storage.
If PostHog is available on the website, our event forwarding sends the same website events to it only when analytics consent is accepted. Rejecting or withdrawing that consent stops this forwarding. This choice is not an all-services blocking control.
Website hosting may also provide usage measurements separately from Google Analytics. The analytics-cookie choice described here must not be understood as stopping all hosting measurements.
The website links to Calendly for meeting bookings. Opening Calendly allows that service to process data under its privacy information. The site measures Calendly link clicks and handles a Calendly booking-completed message; booking processing is distinct from website click measurements.
The Brevo newsletter form sends an email address, a monthly or quarterly frequency choice, through a TAGBASE newsletter function. It uses an email-confirmation flow. A legacy newsletter form also sends an email address through a separate function. Submitting a newsletter form is separate from the banner choice; related lead measurements can be sent in denied and granted states. No newsletter or booking data are submitted merely by opening Cookie settings.
Cookie lifetimes and server-side data retention are separate. Withdrawal does not automatically erase previously processed information. For details about retention applicable to your data, and requests for access or erasure where the legal conditions are met, contact contact@tagbase.io.
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction and portability. You can withdraw analytics-cookie consent for future activity through Cookie settings without affecting prior consent-based processing. Cookieless measurements continue after that withdrawal. For objections under Article 21 GDPR where applicable, including objections to cookieless measurements, and other rights requests, contact contact@tagbase.io. An objection to direct marketing does not require grounds relating to your situation.
The website has no immediate browser control that blocks all Google measurements. A contact request is not an automatic technical block. You can complain to a competent supervisory authority, including the Austrian Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, at dsb.gv.at.