Privacy Policy

1. Data Controller

The controller responsible for personal data processing on this website is:

2. Overview

We take the protection of your personal data seriously. This privacy policy explains what data we collect on https://bruttonetto24.de, why we collect it, and your rights under the GDPR.

Everything you enter into the calculator — salary, tax class, federal state, insurance details, and all other fields — is calculated entirely within your browser. This data is never transmitted to our servers, never stored, never logged, and never analyzed. We have no access to your inputs whatsoever.

3. Data We Collect and Why

3.1 Server Log Files

When you visit our website, our hosting provider automatically stores the following data in server log files:

• IP address (anonymized)
• Date and time of access
• Page requested / URL
• Browser type and operating system
• HTTP status code

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the secure and error-free operation of our website.
Retention: 7 days, then automatically deleted.

3.2 Cookies & Consent Management (Cookiebot)

We use Cookiebot (Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark) as our consent management platform. Cookiebot stores your cookie preferences in a first-party cookie (CookieConsent) for 12 months.

Legal basis: Art. 6(1)(c) GDPR — legal obligation to document consent.
Cookiebot privacy policy: https://www.cookiebot.com/en/privacy-policy/

3.3 Google Tag Manager

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). GTM itself sets no cookies and collects no personal data. It manages other tags (e.g. Google Analytics, Google AdSense) which are only loaded after you have given consent via Cookiebot (Google Consent Mode v2).

Legal basis: Art. 6(1)(a) GDPR (consent) for the tags managed by GTM.

3.4 Google Analytics (GA4)

With your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze how visitors use our website. Google Analytics sets cookies (_ga, _ga_*) and transfers data to Google servers in the USA. IP anonymization is enabled.

Data processed: Anonymized IP address, browser and device information, pages visited, time on site, approximate geographic origin.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Retention: 14 months (GA4 default).
US transfer: Google LLC is certified under the EU-US Data Privacy Framework.
Opt-out: Adjust cookie settings or use the Google Analytics Opt-out Browser Add-on.
Google Privacy Policy: https://policies.google.com/privacy

3.5 Google AdSense

With your consent, we display advertisements via Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). AdSense uses cookies and web beacons to show relevant ads and measure clicks. Without consent, only non-personalized ads are shown.

Data processed: Cookie data, IP address, device information, browsing behavior (with consent).
Legal basis: Art. 6(1)(a) GDPR (consent for personalized ads); Art. 6(1)(f) GDPR (legitimate interest for non-personalized ads).
US transfer: Google LLC is certified under the EU-US Data Privacy Framework.
Google Privacy Policy: https://policies.google.com/privacy

4. Cookies

For detailed information about the cookies we use, please see our Cookie Policy. You can adjust your preferences at any time via the "Cookie Settings" link in the footer.

5. Data Sharing

We share personal data only when:

• You have given explicit consent (Art. 6(1)(a) GDPR),
• it is necessary for contract performance (Art. 6(1)(b) GDPR),
• we are legally obliged to do so (Art. 6(1)(c) GDPR), or
• we have a legitimate interest (Art. 6(1)(f) GDPR).

Our data processors include: Google Ireland Limited (Analytics, AdSense, Tag Manager), Cybot A/S / Cookiebot (Consent Management), Vercel Inc. (Hosting, USA; transfer based on SCCs).

6. International Transfers

Some of the services mentioned above process data outside the European Economic Area (EEA), particularly in the USA. Transfers are based on the EU-US Data Privacy Framework adequacy decision (July 10, 2023) or EU Standard Contractual Clauses (SCCs).

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (Art. 17 — "right to be forgotten")
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise your rights, contact: hello@bruttonetto24.de

As the controller is based in Switzerland, the competent supervisory authority is:
Federal Data Protection and Information Commissioner (FDPIC / EDÖB)
Feldeggweg 1, CH-3003 Bern — www.edoeb.admin.ch

Data subjects in Germany may also contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI): www.bfdi.bund.de

8. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Security

Our website uses SSL/TLS encryption. All calculator inputs remain in your browser and are never transmitted to our servers.

10. Changes to This Policy

We may update this privacy policy to reflect changes in law or our services. The current version is always available at https://bruttonetto24.de/en/datenschutz.