Privacy Policy

1. Privacy at a Glance

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

Controller within the meaning of the GDPR:

The Holding OÜ
Redderkoppel 13
24159 Kiel, Germany
Email: ceo@theholding.ee

3. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit our website, your personal data (e.g., IP address) is processed on Vercel's servers. This is necessary to deliver the website to your browser.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website delivery). Vercel participates in the EU-US Data Privacy Framework and processes data based on EU Standard Contractual Clauses.

More information: Vercel Privacy Policy

4. Google Analytics 4

This website uses Google Analytics 4 (GA4) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for statistical analysis of website usage.

GA4 Property ID: G-L4W3VTLBVZ

Consent: Google Analytics is only loaded after your explicit consent via our cookie consent banner (Art. 6(1)(a) GDPR). Without your consent, no tracking takes place.

IP Anonymization: GA4 anonymizes your IP address by default before it is stored. A full IP address is not transmitted to Google servers in the USA.

Data processed:

• Anonymized IP address
• Pages visited and time spent
• Referrer URL
• Browser type and operating system
• Screen resolution
• Language setting

Retention period: Data is automatically deleted after 14 months.

Third-country transfer: Google may process data in the USA. The transfer is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Withdrawal: You can withdraw your consent at any time by deleting the cookie_consent entry in your browser's localStorage or by visiting our website in a private browsing window.

More information: Google Privacy Policy

5. Cookies

This website only sets cookies after your explicit consent. Without consent, no cookies are set.

Cookie	Provider	Purpose	Duration
_ga	Google	User differentiation (GA4)	2 years
_ga_L4W3VTLBVZ	Google	Session state (GA4)	2 years

Additionally, the consent decision is stored in localStorage under the key cookie_consent. This is not a cookie but local browser storage that does not transmit data to any server.

6. Affiliate Links

This website contains affiliate links to Auvesta Edelmetalle AG. When you click on such a link, you will be redirected to the Auvesta website. Auvesta may set its own cookies and collect data.

We may receive a commission for referred purchases. Affiliate links can be identified by the redirection to auvesta.de.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in financing the website). Auvesta is solely responsible for data processing on its own website.

7. Server Log Files

The hosting provider (Vercel) automatically collects and stores information in server log files that your browser transmits automatically:

• IP address
• Date and time of the request
• Requested URL
• HTTP status code
• Amount of data transferred
• Referrer URL
• Browser and operating system

Legal basis: Art. 6(1)(f) GDPR. This data is not combined with other data sources.

8. Your Rights (Art. 15–21 GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You can request information about your stored data.
• Right to rectification (Art. 16 GDPR) — You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You can request the deletion of your data, unless a legal retention obligation exists.
• Right to restriction of processing (Art. 18 GDPR) — You can request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR) — You can request your data in a machine-readable format.
• Right to object (Art. 21 GDPR) — You can object to the processing of your data.

To exercise your rights, please contact: ceo@theholding.ee

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is the supervisory authority of the country in which you reside.

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect changes in the law or modifications to the service. Last updated: March 2026.