Cookies & storage

Data minimisation from the outset.

We do not ourselves use analytics, marketing or personalisation cookies, and we do not use local storage to track users.

Technically necessary storage

Depending on the hosting and security configuration, technically necessary session or security mechanisms may be used. These must be documented before the website goes live.

Legal basis

Technically necessary cookies and similar technologies are used on the basis of Section 25(2), point 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as they are necessary to provide a telemedia service expressly requested by you. The associated processing of personal data is generally based on Article 6(1)(f) GDPR (legitimate interest in providing a secure and functional website).

Examples of technically necessary cookies:

• Session cookies (for example, PHPSESSID): Maintaining selected states across page requests. Duration: until the end of the session.
• Security cookies (for example, __cfruid): Protection against misuse and attacks. Duration: 30 minutes to the end of the session.
• Consent cookies: Storing your cookie preferences. Duration: usually 180 days.

Future extensions

If analytics, marketing, video, maps or other third-party services are integrated in future, their access to storage must be assessed and, where required, an effective consent management system must be put in place.

Technologies requiring consent

Cookies and similar technologies that are not strictly necessary require prior active consent. A mere opt-out or objection mechanism is not sufficient. As a rule, technologies requiring consent may only be loaded after active consent has been given.

Requirements for the cookie banner

If a cookie banner is used, it must meet the following requirements:

• Equivalent option to refuse: A “Reject all” button must be just as visible as the option to consent.
• Informed choice: Information must be provided on the number of partners using cookies, on data processing in third countries and on the possibility of withdrawing consent.
• Freely given consent: No misleading design (“nudging”).
• Option to withdraw consent: You can change your choices on the website at any time and withdraw consent with effect for the future.

Documentation requirement

The specific storage operations (name, purpose, duration, recipient and legal basis) must be documented before the website goes live and added to this policy.

Last updated: 22 September 2026