Cookies

Cookies are small text files a site stores on or reads from your device. Similar technologies include pixels, browser local storage, SDKs and tags. They may be ours („first party") or belong to providers whose services we use („third party"). Some are necessary for the site to work; others make it possible to measure traffic, analyse behaviour, or serve and evaluate advertising.

On your first visit we show a cookie dialog. You can accept everything, reject all non-essential cookies, or choose analytics and marketing separately. Essential cookies are always on, because without them the site or its security protections cannot work properly. We do not load Google Analytics 4, Google Ads, Meta Pixel or Hotjar before your valid consent for the matching category.

You can change your choice at any time through the „Cookie settings" link in the site footer. Withdrawing consent does not affect the lawfulness of processing carried out beforehand, but it stops future non-essential tracking through our tags. Clearing cookies in your browser may also remove your saved choice, and you will be asked again.

These remember your cookie choice, maintain a technical session where one exists, distribute load, and protect the contact form from automated abuse. The legal basis is our legitimate interest in a secure and functional site, or technical necessity where that applies. We load Google reCAPTCHA only when you interact with the contact form; Google may then receive technical device data and your IP address in order to assess abuse.

Examples (they depend on the actual configuration): the cookie preference record (`wc_cookie_consent` or equivalent, up to 6 months); a technical session (`PHPSESSID` or equivalent, until the session ends); the reCAPTCHA token or cookie (`_GRECAPTCHA` or equivalent, up to roughly 6 months). We do not list a cookie as active unless it is genuinely set in production.

This category helps us understand how the site is used and fix content, navigation and technical problems. We use:

• Google Analytics 4 (Google): may use `_ga` and `_ga_<container-id>`; the typical retention is up to 2 years.
• Hotjar (Hotjar Ltd): may use `_hjSessionUser_<site-id>` (typically up to 1 year) and `_hjSession_<site-id>` (typically around 30 minutes). Contact form fields must be masked or excluded from recording.

Analytics tools are not loaded when you reject this category. IP addresses and online identifiers may be personal data. Providers may process data on international infrastructure under their own contractual and transfer mechanisms.

This category helps us measure campaign results, limit how often an ad repeats, and show more relevant content or advertising on other platforms. We use:

• Google Ads conversions (Google): may use `_gcl_au`, `_gcl_aw` and similar identifiers, typically around 90 days.
• Meta Pixel (Meta): may use `_fbp` and related identifiers for measurement and advertising, typically up to 3 months.

If you accept marketing, Google and Meta may connect these events with your account or with other data they already hold, under their own rules. In some situations these providers may have processing purposes of their own; we recommend reading their privacy policies.

Google: privacy policy and an explanation of its technologies

Meta: privacy policy

Hotjar: privacy policy

Hetzner: privacy policy

Following a link takes you to a third party page; that party governs its own processing of data.

Provider names, retention periods and technologies can change. That is why we run a production cookie scan before every significant change to our tags and update this page and the consent dialog. A new non-essential cookie stays blocked until it has been classified and until the visitor has chosen a category. For questions, write to office@webcenter.me.