Cookie Policy

Version: 1.0, Status: 23.01.2026

This Cookie Policy explains how and why cookies and similar technologies are used on this website. The information is intended to enable you to make informed decisions about the use and control of cookies.

1. What are cookies and similar technologies?

Cookies are files that your browser stores on your device when you visit websites. In addition, this website also uses similar technologies (e.g., local storage or pixels) that serve a similar purpose.

2. Legal basis for the use of cookies

The use of cookies and similar technologies as well as the data contained therein is exclusively based on your consent pursuant to Section 25 (1) TDDDG for collection and Art. 6 (1) lit. a GDPR for subsequent processing. Technically necessary cookies may also be used based on Art. 6 (1) lit. f GDPR in conjunction with Section 25 (2) No. 2 TDDDG. Further information on this can be found in our privacy policy.

3. Types and purposes of cookies

a) Technically necessary cookies

These cookies are required for the basic operation of the website. No consent is required for their use according to Section 25 (2) TDDDG.

b) Preference and comfort cookies

Increase the user-friendliness of the website.

c) Statistics cookies

Used for audience measurement and anonymous analysis of the use of our website to optimize the website.

d) Marketing/Tracking cookies

Record your use of the website to display personalised advertising or control marketing measures. The data from the cookies can be linked with other services (e.g., Google, Facebook).

4. Consentmo Consent Management

Purpose: Management and documentation of user consents for cookies and other tracking technologies to comply with data protection regulations

Recipient: Consentmo GmbH, Eichendorffstraße 14, 10115 Berlin

Processed data:

• Technical data (e.g., IP address, browser type)

• Consent data (e.g., granted/denied consents)

• Timestamps (e.g., date and time of consent)

• Device identifiers (e.g., cookie IDs, local storage entries)

• Usage data (e.g., interactions with the consent banner)

Legal basis:

• Fulfillment of legal obligations according to Art. 6 (1) lit. c GDPR (proof of consent)

• Legitimate interest according to Art. 6 (1) lit. f GDPR (functionality of the website and compliance with legal requirements)

Storage duration: Consent data is stored for 12 months or until consent is revoked. Anonymized statistical data may be kept longer.

Further information: https://www.consentmo.de/datenschutz/

5. Individual information on the cookies used

Cookie Name Provider Purpose Category Storage Duration
_ga Google Analytics User identification and tracking Statistics cookies 1 year 1 month
ga[ID] Google Analytics User identification and tracking in conjunction with _ga Statistics cookies 1 year 1 month
_gcl_au Google Analytics Track user interactions Statistics cookies 2 months 29 days
TESTCOOKIES ENABLED YouTube Checking cookie functionality Technically necessary cookies 1 minute
VISITOR_INFO1_LIVE YouTube Bandwidth estimation Preference and comfort cookies 5 months 29 days
VISITOR_PRIVACY_ METADATA YouTube Visitor's privacy options Preference and comfort cookies 5 months 29 days
YSC YouTube Track user interaction during use Technically necessary cookies Session
__Secure-ROLLOUT_TOKEN YouTube Ensure web application stability Preference and comfort cookies 5 months 29 days
__Secure-YNID YouTube Collection of interactions for personalised advertising Marketing/Tracking cookies 5 months 29 days
hjSessionUser 3588917 Hotjar Tracking user interactions Statistics cookies 11 months 30 days
_pk_id.[ID] Matomo User identification and recognition Marketing/Tracking cookies 1 year 28 days
_pk_ses.[ID] Matomo Temporary session recording Marketing/Tracking cookies 30 minutes
_fbp Meta Pixel Delivery of targeted advertising Marketing/Tracking cookies 2 months 29 days
SRM_B Microsoft Ads Ad delivery and performance measurement Marketing/Tracking cookies 1 year 25 days
ANONCHK Microsoft Clarity Distinguishing users for analysis purposes Statistics cookies 10 minutes
CLID Microsoft Clarity Analysis of user interaction Statistics cookies 11 months 30 days
MUID Microsoft Clarity Identification of browser sessions across Microsoft websites Statistics cookies 1 year 25 days
_clck Microsoft Clarity Storage of user interactions Statistics cookies 11 months 30 days
_clsk Microsoft Clarity Linking user sessions Statistics cookies 1 day
__kla_id Klaviyo Identification for marketing purposes Marketing/Tracking cookies 1 year and 1 month
__kla_off Klaviyo Disabling Klaviyo tracking Technically necessary cookies Session
cookieconsent_status Consentmo Storage of cookie consent status Technically necessary cookies 11 months 30 days
_tracking_consent Consentmo Storage of cookie consent status Technically necessary cookies 11 months 30 days
__cf_bm PayPal Protection against bot traffic Technically necessary cookies 30 minutes
_pinterest_ct_ua Pinterest Collection of user data for advertising Social media 11 months 30 days
ar_debug Pinterest Debugging information for app usage Social media 11 months 30 days
_pin_unauth Pinterest Cross-session recognition for users without login Social media 11 months 31 days
tld RudderStack Domain-specific tracking Marketing/Tracking cookies Session
rudder_cookies RudderStack Storage of consent preferences Marketing/Tracking cookies 11 months 30 days
AWSALBTG Typeform Load balancing for hosting services Technically necessary cookies 7 days
AWSALBTGCORS Typeform Load balancing for hosting services Technically necessary cookies 7 days
cart Shopify Storage of shopping cart contents Technically necessary cookies 14 days
cart_currency Shopify Stores the cart currency Preference and comfort cookies 14 days
cookietest Shopify Checking if cookies can be set Technically necessary cookies Session
keep_alive Shopify Extending session duration Technically necessary cookies Session
localization Shopify Stores the user's region/language Preference and comfort cookies 11 months 31 days
cookieconsent_preferences_disabled Shopify Status of the consent banner Technically necessary cookies 11 months 31 days
gfp_ref_expires Shopify Management of affiliate/referrer links Marketing/Tracking cookies 7 days
ref Shopify Storage of referrer information Marketing/Tracking cookies 7 days
_shopify_analytics Shopify Collection of shop usage data Statistics cookies 11 months 31 days
_shopify_essential Shopify Basic shop functionality Technically necessary cookies 11 months 31 days
_shopify_s Shopify Tracking user visits Statistics cookies 30 minutes
_shopify_y Shopify Analysis of user interactions Statistics cookies 1 year 6 hours
_ttp X Advertising Analysis, conversion, and tracking data for advertisements Marketing/Tracking cookies 1 year 25 days
ttcstid X Advertising Identification of unique visitors Marketing/Tracking cookies 1 year 25 days
ttcstid_[ID] X Advertising Extended identification of unique visitors Marketing/Tracking cookies 1 year 25 days
cf_clearance PayPal Authentication of user access Technically necessary cookies 11 months 30 days
tracking_session_id Typeform Assignment of user interactions to sessions Statistics cookies 30 minutes
attribution_user_id Typeform Assignment of users to form requests Statistics cookies 11 months 30 days
dd_cookie_test_2abdd2e3-ade9-4fa7-acec-90ee3bb5e7e1 Typeform Checking cookie functionality Technically necessary cookies 1 minute
tf_respondent_cc Typeform Collection of consent status for participants Technically necessary cookies 6 months 1 day

Google - Analytics 4

Purpose: Web analysis

Recipient: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Processed data:

• Device data (e.g., IP address, device type, screen resolution);

• Browser data (e.g., browser used, language, installed plug-ins like ad blockers);

• Usage data (e.g., pages viewed, time spent per page, click paths, scroll depth, entry and exit pages);

• Event data (e.g., clicks on buttons/links, forms submitted);

• Location data (e.g., country, city);

• Source and traffic data (e.g., referrer URL, access source such as search engine);

• Conversion and goal achievement data (e.g., newsletter registrations, goals achieved on the website)

Legal basis: Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG

Third-country transfer: For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Google is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, so-called Standard Contractual Clauses (SCC) have been concluded with "Google".

Further information: https://policies.google.com/privacy.

Google Ads

Purpose: Delivery of personalised advertisements, planning and optimization of advertising campaigns, and audience measurement via Google's advertising network

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Processed data:

• Online identifiers (e.g., cookie ID, advertising ID)

• IP address (truncated/anonymized)

• Browser information (e.g., language, version)

• User behavior information (e.g., clicked ads, visited pages)

• Usage data (e.g., time and duration of interaction)

• Device information (e.g., device type, operating system)

Legal basis: Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG

Storage duration: Cookies are stored for up to 90 days.

Third-country transfer: Data transfer to the USA based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additional Standard Contractual Clauses (SCCs)

Further information: https://policies.google.com/privacy

Google Tag Manager

Purpose: Managing and triggering website tags via a unified interface

Recipient: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Processed data:

• Access data (e.g., time of page view, referrer URL)

• Device data (e.g., IP address, device type)

• Browser data (e.g., browser used, language settings)

• Event data (e.g., tag triggering, interactions with embedded scripts)

• Location data (e.g., country, city – based on IP address)

Storage duration: Cookies are stored for up to 90 days.

Third-country transfer: Data transfer to the USA based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additional Standard Contractual Clauses (SCCs)

Further information: https://policies.google.com/privacyoogle Tag Manager

Tracify

Purpose: Analysis of user behavior to improve our website and optimize the user experience

Recipient: Tracify GmbH, Agnes-Pockels-Bogen 1, 80992 Munich

Processed data:

• Usage data (e.g., visited pages, time spent)

• Device information (e.g., browser type, operating system)

• Pseudonymized user IDs (e.g., randomly generated identifiers)

• Interaction data (e.g., clicks, scrolling behavior)

Legal basis: Consent according to Art. 6 (1) lit. a GDPR

Storage period: Data will be stored for 12 months and then automatically deleted

Further information: https://www.tracify.de/datenschutz

Typeform

Purpose: Creation and execution of online surveys, forms, and quizzes for data collection and interaction with users

Recipient: TYPEFORM SL, Carrer Bac de Roda, 163, 08018 Barcelona, Spain

Processed data:

• Input data (e.g., survey responses, completed forms)

• Technical data (e.g., IP address, browser type)

• Usage data (e.g., completion rate, dwell time)

Legal basis:

• For voluntary surveys: Consent pursuant to Art. 6 para. 1 lit. a GDPR

• For necessary forms: Performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR or legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR

Storage period: Data will be stored for the duration of the respective project and deleted no later than 1 year after the completion of the survey or form, unless longer retention is required

Third-country transfer: Data processing within the EU; possible transfer to the USA based on standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR

Further information: https://admin.typeform.com/to/dwk6gt

Perspective

Purpose: Analysis of user behavior to optimize our web offering and improve our marketing strategies

Recipient: Perspective

Processed data:

• Technical data (e.g., IP address, browser information)

• Usage data (e.g., click behavior, pages visited)

• Referrer data (e.g., previously visited websites)

Legal basis: Legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR

Storage period: Depends on Perspective's internal guidelines and legal requirements (exact duration not specified)

Third-country transfer: Possible data transfer to the USA and other countries outside the EEA, secured by appropriate safeguards such as certifications under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Further information:

YouTube

Purpose: Integration of videos into our website and improvement of user experience

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("YouTube")

Processed data:

• IP address

• Date and time of the request

• Visited page on our website

• Browser type and operating system used

• Technical connection data (e.g., HTTP header)

• YouTube account information (if logged in)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: According to YouTube's privacy policy

Third-country transfer: Data may be transferred to the USA. Transfers are based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and Standard Contractual Clauses (SCCs)

Further information: https://www.youtube.com/howyoutubeworks/privacy/

Matomo

Purpose: Web analysis to improve user experience and optimize our website

Recipient: Matomo SAS, 7 Allée du Chêne, 92410 Ville d'Avray, France

Processed data:

• Abbreviated IP address (e.g., 203.0.113.xxx)

• Pages visited (e.g., /homepage, /contact)

• Dwell time (e.g., 2 minutes, 30 seconds)

• Access time (e.g., 3:30 PM, 8:45 AM)

• Browser and operating system used (e.g., Chrome on Windows, Safari on macOS)

• Screen resolution (e.g., 1920x1080, 1366x768)

• Country of origin (e.g., Germany, Austria)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: 6 months, then automatic deletion or anonymization

Further information: https://matomo.org/privacy-policy/

Klaviyo

Purpose: Management and analysis of email marketing campaigns and personalization of marketing content based on user behavior

Recipient: Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA

Processed data:

• Email address

• Device information (e.g., IP address)

Legal basis: Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Third-country transfer: Data transfer to the USA based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additional Standard Contractual Clauses (SCCs).

Storage period: Until consent is revoked.

Further information: https://www.klaviyo.com/legal/privacy-policy.

RudderStack

Purpose: Collection, processing, and forwarding of user data to analysis and marketing tools to improve data-driven business processes

Recipient: RudderStack Inc., 75 Broadway, Suite 202, San Francisco, CA 94111, USA

Processed data:

• Access data (e.g., IP address, date and time of request)

• Usage data (e.g., click behavior, navigation on the website, session duration)

• Source and traffic data (e.g., referrer URL, campaign parameters)

• Device data (e.g., device type, screen resolution)

• Browser data (e.g., browser type and version)

• Event data (e.g., form usage, scroll behavior)

• Location data (e.g., country, region – based on IP address)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Third-country transfer: Data transfer to the USA based on Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR

Further information: https://www.rudderstack.com/privacy-policy

Microsoft Clarity

Purpose: Analysis of user behavior using heatmaps and session recordings to improve user experience and error analysis

Recipient: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Processed data:

• Access data (e.g., IP address, time of access)

• Usage data (e.g., dwell time, clicks, scroll behavior)

• Source and traffic data (e.g., referrer URL, entry pages)

• Device data (e.g., device type, screen resolution, device model)

• Browser data (e.g., browser type used, browser version)

• Event data (e.g., interactions with elements, mouse movements)

• Location data (e.g., country, region – based on IP address)

• Cookie data for pseudonymized recognition (e.g., session ID)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: Data (including cookies and session recordings) is generally stored for up to 13 months

Third-country transfer: Data transfer to the USA based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additionally via Standard Contractual Clauses (SCCs)

Further information: https://privacy.microsoft.com/de-de/privacystatement

Meta Pixel

Purpose: Measuring the effectiveness of Facebook ads (conversion tracking) and delivering targeted advertising

Recipient: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Processed data:

• Access data (e.g., pages visited, time of visit)

• Device data (e.g., IP address, browser information)

• Usage data (e.g., interactions with ads, click behavior).

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: Cookies are stored for up to 90 days.

Further information: https://www.facebook.com/about/privacy

X Advertising

Purpose: Displaying personalised advertisements and measuring advertising success

Recipient: X Corp. (formerly Twitter, Inc.), 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

Processed data:

• Usage data (e.g., content viewed, interactions)

• Device information (e.g., device type, operating system)

• Location data (e.g., IP address, country code)

• Demographic characteristics (e.g., age, gender, if provided)

• Interest preferences (e.g., accounts followed, topics)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: Data is stored for a maximum of 18 months

Third-country transfer: Data transfer to the USA based on Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR)

Further information: https://business.twitter.com/en/help/ads-policies/other-policy-requirements/policies-for-conversion-tracking-and-tailored-audiences.html

Hotjar

Purpose: Analysis of user behavior to optimize the website, especially content usage, click paths, and interactions.

Recipient: Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

Processed data:

• Access data (e.g., time of visit, pages accessed)

• Usage data (e.g., scroll behavior, dwell time on pages)

• Event data (e.g., clicks on buttons, mouse movements)

• Device data (e.g., device type, screen resolution)

• Browser data (e.g., browser used, language settings)

• Location data (e.g., country, city – based on IP address)

Legal basis: Consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG

Storage period: Cookies are stored for up to 90 days.

Further information: https://help.hotjar.com/hc/en-us/sections/360007966773-Data-Privacy

6. Third-country transfer and recipients

If personal data is transferred to third parties outside the EEA via cookies, this only occurs under the respective legal conditions. Further information can be found in our privacy policy: https://gardia.net/policies/privacy-policy

7. Revocation and Settings

You can revoke your given consents at any time with effect for the future by calling up the cookie banner or in the "Change cookie settings" section, or by individually adjusting them.

8. Browser Settings Configuration

Most browsers are set to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. We would like to point out that you may not be able to use all functions of our website if you deactivate cookies on our website via your browser settings. You can also delete cookies already stored in your browser or view the storage period via your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since different browsers may differ in their respective functions, please use the respective help menu of your browser for configuration options.

9. Policy Status and Changes

The Cookie Policy is regularly reviewed and adjusted to comply with current legal and technical requirements.

As of: 26.01.27