1. General / Data Controller
The data controller under the General Data Protection Regulation (GDPR) is:
Georg Ortner
Rigaer Straße 47A
10247 Berlin
info@dory-ai.com
2. Overview & Purpose
We use Google Tag Manager on our website to centrally manage and deploy website tags (e.g. Google Analytics). Through this mechanism, we also use Google Analytics to analyze user interaction on our website, generate statistics, and optimize our services.
Below you will find details on which data is collected, for what purpose, on which legal basis, and what rights you have.
3. Google Tag Manager
Google Tag Manager itself does not set cookies and does not collect personal data. It merely serves to load and manage scripts and tracking tags.
The tags that are deployed via the Tag Manager (e.g. Google Analytics) can collect personal data.
This makes the use of Google Tag Manager relevant under data protection law, as it acts as a conduit.
Legal basis: We rely on your prior consent (Article 6(1)(a) GDPR) via a consent tool, and in certain cases on legitimate interests (Article 6(1)(f) GDPR), if such interests override the rights and freedoms of data subjects.
4. Google Analytics
4.1 General / Functionality
Google Analytics is a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Through Google Analytics, we collect usage data such as page views, session duration, bounce rate, user origin, etc., in order to analyze user behavior.
We use that data to improve our website, tailor content more effectively, and detect technical issues.
We have enabled IP anonymization, meaning your IP address is truncated before being sent to Google (so it cannot be tied to you directly).
Google processes these data on our behalf and provides us with reports on the website activity.
4.2 Legal Basis & Consent
The deployment of Google Analytics is only activated after you grant your consent (Art. 6(1)(a) GDPR).
You may withdraw your consent at any time (e.g. via cookie settings or by deleting cookies).
4.3 Data Processing Agreement & Cross-Border Transfers
We have concluded a Data Processing Agreement (DPA) with Google, which ensures that Google processes data only on our instructions and in compliance with GDPR.
Transfer of personal data to third countries (e.g. to the USA) is based on the Standard Contractual Clauses adopted by the European Commission, and in Google’s case also on its certification under the EU-US Data Privacy Framework (DPF).
Even with IP anonymization, in exceptional circumstances truncated IPs may still be transferred; Google will further truncate data in such cases.
4.4 Opt-Out / Browser Plugin
You can block the collection of your data by Google Analytics by installing the “Google Analytics Opt-Out” browser plugin:
https://tools.google.com/dlpage/gaoptout?hl=en
Alternatively, you can disable tracking cookies in your browser settings or via your consent tool.
Please note: Disabling Google Analytics may reduce the functionality of our site analytics.
5. Purpose Limitation & Retention Period
The data collected is used solely for analytics and optimization of our website.
We retain data only as long as necessary. As a rule, Google Analytics holds data for 14 months by default (depending on configuration).
After that period, data are deleted or anonymized.
6. Rights of the Data Subject
You have the following rights under GDPR:
Right to access the personal data we hold about you
Right to rectification of inaccurate data
Right to erasure (when no legal obligations prevent it)
Right to restriction of processing
Right to data portability
Right to withdraw your consent at any time (without affecting the lawfulness of processing prior to withdrawal)
Right to object to processing (in particular for direct marketing)
Right to lodge a complaint with a supervisory authority
7. Changes & Updates
We reserve the right to modify this Privacy Policy to reflect changes in technical or legal developments. The current version is always available on our website.
Effective as of: 14.10.2025
