Responsible Party
Globaloilshock.com, Inh. Jörg Dässler
Teufenerstrasse 61
9000 St. Gallen
Switzerland
Email (Data Protection): contact@globaloilshock.com
This is the party responsible for processing personal data under revDSG Art. 6 Sec. 13.
What Data We Process
- Automatically Collected Data: IP address, browser type, operating system, access timestamp, visited pages (server logs)
- Functional Cookies: lang_chosen (language preference), brent_cache (oil price cache with expiry)
- Affiliate Tracking: Amazon affiliate parameters are forwarded when you click a product link
- Voluntarily Submitted Data: If you use a contact form (if implemented): name, email, message
- Calculator Input: Parameters you enter (country, consumption, patterns) are processed temporarily; no persistent storage occurs
- Google Analytics 4: Anonymized IP, click events (Wizard, Affiliate, language, glossary), device type, approximate region. Details: see Analytics section below.
Purposes of Data Processing
We process personal data only for the following lawful purposes:
- Website Operation and Functionality: Provision of the website, error diagnosis, performance optimization
- Language Preference: Storage of your preferred language via lang_chosen cookie
- Oil Price Caching: Temporary storage of Brent price to reduce API requests (10-minute TTL)
- Affiliate Commissions: Forwarding affiliate link information to Amazon Partner Programs (DE/UK/FR/ES/COM) to calculate referral commissions
- Security: Detection and prevention of abuse and cyberattacks
- Anonymous Reach Statistics: Aggregated access numbers to improve the website (IP addresses are not stored individually)
- Anonymous Reach and Funnel Statistics: Aggregated access numbers via Google Analytics 4 to improve the website. IP addresses are anonymized before storage; individual users are not identifiable.
Legal Basis (revDSG)
The processing of personal data is based on the following revDSG legal grounds:
- Art. 6 Sec. 1 lit. a revDSG: Voluntary consent (e.g., via this privacy policy)
- Art. 6 Sec. 1 lit. b revDSG: Performance of a contract or preparation thereof (e.g., website provision)
- Art. 6 Sec. 1 lit. c revDSG: Compliance with a legal obligation (e.g., logging for security)
- Art. 6 Sec. 1 lit. d revDSG: Protection of vital interests (e.g., security incidents)
- Art. 6 Sec. 1 lit. e revDSG: Performance of a task in the public interest or exercise of public authority
- Art. 6 Sec. 1 lit. f revDSG: Legitimate interests (e.g., business operation, affiliate commissions)
Affiliate links to Amazon are classified as legitimate business interest. Tracking is governed by Amazon's own privacy policies.
Cookies and Tracking
Technically necessary cookies:
- lang_chosen: Stores your preferred language setting (DE/EN/FR/ES). Expiration: 12 months. Necessary for usability.
- brent_cache: Internal cache cookie to reduce API requests for the Brent oil price. Expiration: 10 minutes. Purely functional, no user tracking.
Analytics cookies (Google Analytics 4):
- _ga: Identifies returning users (anonymized). Expiration: 13 months.
- _ga_<CONTAINER-ID>: GA4 session state. Expiration: 13 months.
- _gid: Daily user aggregation. Expiration: 24 hours.
Affiliate tracking:
When you click on an Amazon affiliate link, you are redirected to Amazon. Amazon's tracking parameters are passed in the URL. This allows Amazon to correctly attribute the referral and pay us a commission. Amazon processes this data according to its own privacy policies; we have no access to individual click data.
Google Analytics 4 (Audience Measurement)
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure reach and understand user interaction.
Data collected:
- Anonymized IP address (last octet truncated before storage)
- Browser type, version, operating system, screen resolution
- Pages visited and dwell time
- Device type (Desktop/Mobile/Tablet) and approximate region (country-level)
- Click events on Wizard, Affiliate links, language switch, glossary terms (anonymized aggregate)
- Referrer URL
IP Anonymization: The anonymize_ip feature is enabled by default. Full IP addresses are not stored.
Retention: 14 months (GA4 default). Aggregated statistics retained indefinitely.
Data Transfer: Data may be transferred to servers in the United States. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection.
Legal Basis: Legitimate interest pursuant to revDSG Art. 6(1)(f) (business optimization) and voluntary consent through continued use.
Opt-Out: You can disable GA tracking via the Google Analytics Opt-Out Browser Add-On or by blocking _ga cookies.
More: Google Privacy Policy
In addition to Google Analytics 4, this website uses Plausible Analytics, a cookie-less analytics service provided by Plausible Insights OÜ (Tartu, Estonia), hosted on servers within the EU. Plausible collects only aggregated, anonymised traffic statistics and does not create individual user profiles or use any tracking identifiers. We also use Microsoft Clarity, a service provided by Microsoft Ireland Operations Ltd. (Dublin, Ireland), which records anonymised session replays and generates heatmaps to help us understand how visitors interact with the site. Microsoft Clarity is loaded only after you have given your consent through the cookie banner. Likewise, Google Analytics 4 is activated only with your consent, managed through Google Consent Mode v2. You may withdraw your consent to GA4 and Microsoft Clarity at any time with effect for the future via the cookie settings available on this website.
Affiliate Links (Amazon)
This website participates in the Amazon Associates Program (also called Amazon Partner Program). When you purchase a product from Amazon through an affiliate link on this website, we receive a referral commission. This has no impact on the price for you, the purchase price is identical.
Participating Amazon Stores:
- Amazon.de (Germany)
- Amazon.co.uk (United Kingdom)
- Amazon.fr (France)
- Amazon.es (Spain)
- Amazon.com (USA/International)
When you click an affiliate link, you are redirected to the respective Amazon domain. Amazon sets its own cookies and processes your data according to Amazon's Privacy Notice. We have no access to personal data you enter on Amazon.
Opt-Out: You can avoid affiliate links by going directly to Amazon's search bar instead of purchasing through our links. This has no impact on your shopping experience.
Third-Party Services and External APIs
This website uses the following external services and data sources:
- Brent Oil Price APIs: Yahoo Finance, Stooq, U.S. Energy Information Administration (EIA), TwelveData, provide current crude oil market prices (public data, no access to personal information)
- Amazon Associates: Affiliate link tracking (see Affiliate Links section)
- Server Hosting: cPanel Hosting (Switzerland), web server logs for operation and security
- Google Analytics 4 (Google Ireland Ltd.): Audience measurement and funnel analysis. Detailed explanation in the separate Analytics section.
These third-party services are governed by their respective privacy policies. We do not forward personal data without your knowledge.
Sending the energy guide via email
When you use the wizard’s “Send via email” feature, we process the following data:
- Your email address: used solely to send the PDF guide to you once. The address is not stored after the message has been delivered (exception: newsletter opt-in).
- Hashed IP address: SHA256 hash for technical abuse protection (rate limit: max 3 sends per IP per hour). Retention: 1 hour.
- Language preference: to send the guide in your language.
- PDF content: not stored, only processed to send the file to you.
Legal basis: Art. 6(1)(b) GDPR / Swiss FADP Art. 31(1) (contractual performance, you initiated the send yourself).
Email service: delivery via our hosting provider’s mail server (Helloly, Switzerland). Sender address is report@globaloilshock.com.
Recipient: only you, at the address you provided.
Newsletter opt-in (optional): if you tick the newsletter checkbox during send, we additionally store your email address to occasionally send further energy-saving tips. You can unsubscribe at any time via the unsubscribe link in each email or by writing to contact@globaloilshock.com.
Audit log: we log only timestamp, language, hashed IP, hashed email and PDF size to operate the feature and detect abuse. No plaintext addresses in the log.
Newsletter delivery
If you subscribe to the newsletter via the checkbox during PDF send or via our website, we process the following data:
- Email address (plaintext): required for delivery. Retention: until you unsubscribe. For unconfirmed signups: max 7 days, then automatic deletion.
- Language preference: so you receive the newsletter in your language.
- Confirmation token: 40-character hex code to verify the subscription (double opt-in) and for the unsubscribe link in each email.
- Hashed IP address: SHA256 hash for technical abuse protection (rate limit: max 5 signups per hour).
- Timestamps: signup, confirmation, possibly unsubscribe.
Double opt-in is mandatory: After signup, you receive a confirmation email with a personal link. Only after clicking that link is your address added to the active list. This ensures that nobody else can subscribe you.
Frequency: Maximum one email per month (seasonal savings tips + Brent trend update) plus rare ad-hoc alerts when the Brent oil price spikes. You will never receive third-party advertising.
Legal basis: Art. 6(1)(a) GDPR / Swiss FADP Art. 31(1)(a) (explicit consent).
Right to withdraw: Each newsletter email contains a personal unsubscribe link. One click removes your address immediately and completely from the list. Audit log uses anonymous hash only, no plaintext address. Alternatively: email contact@globaloilshock.com with the word "unsubscribe".
Email service: Delivery via our hosting providers mail server (Helloly, Switzerland). Sender address is report@globaloilshock.com. We do not pass your address to third parties and we do not sell data.
Audit log: We log only timestamp, language code, hashed token and hashed IP to operate the service and detect abuse. On unsubscribe, plaintext is deleted immediately; only the anonymous hash remains for statistics.
Your Rights (revDSG Art. 25 ff.)
Under revDSG, you have the following rights regarding your personal data:
- Art. 25 revDSG, Right to Information: You may request information about personal data we process concerning you at any time.
- Art. 26 revDSG, Right to Correction: You may request correction of inaccuracies in your data.
- Art. 27 revDSG, Right to Deletion: You may request deletion of your data (unless a legal retention obligation exists).
- Art. 28 revDSG, Right to Data Portability: You may request that we provide your data in a structured format.
- Right to Object: You may object to processing of your data for certain purposes where not required for website operation.
To exercise these rights, contact us at: contact@globaloilshock.com
Privacy Contact
For all questions regarding data protection and to exercise your rights:
Privacy Contact:
Email: contact@globaloilshock.com
We will endeavor to respond to requests within 30 days. If we require additional information, we will inform you.
Changes to This Policy
This privacy policy may be updated at any time without prior notice. Significant changes will be published on this page and the modification date will be updated.
The current version of this policy is always available on this page. Your continued use of the website after publication of changes constitutes your acceptance of those changes.