Current website baseline
By default, this website is structured around technically necessary functionality, security-related processing, and clearly scoped first-party components. Optional audience measurement with Google Analytics is loaded on the live website only after explicit consent.
- Language preference for multilingual handling via WPML when users actively switch languages
- Technical WordPress or session cookies only where needed for operation, form security, or login
- Security and form protection through risk-based technical checks against misuse, spam, and automated attacks
- Google Analytics only after explicit consent for audience measurement
Current consent logic
For optional audience measurement with Google Analytics, the live website shows a consent banner. Analytics is loaded only after explicit approval. Without consent, the website remains limited to technically necessary functionality, language handling, form functionality, and security processing.
- Users can approve or decline analytics without affecting the core website experience
- The setting can be reopened through the cookie settings control
- The consent choice is stored in the first-party cookie ea_consent_analytics for 180 days
- On withdrawal, the consent choice is set to denied and the website attempts to delete existing _ga and _ga_* cookies for the live domain
Technically necessary and security-related technologies
Technically necessary cookies and comparable technologies may be used so that the website can be delivered, language settings can be maintained, forms can work securely, login areas can be protected, and abuse detection against spam, bots, credential attacks, phishing, fraud, and other attacks remains possible. These technologies are not used for advertising purposes.
- WPML language cookie wp-wpml_current_language: language handling, usually session-based
- WordPress test or login cookies: only where required for login, session, or technical checks
- AegisPress form protection: technical abuse detection for form submissions, without analytics or marketing purpose
- The legal basis for necessary terminal-device access is Section 25(2) TDDDG; related processing is based, where applicable, on Article 6(1)(f) GDPR
Analytics and statistics cookies
Analytics and statistics cookies help understand how the website is used and which content should be improved. For this purpose, Google Analytics 4 may be used on the live domain, but only after active consent. Without consent, the website remains limited to necessary functionality and security-related processing.
- ea_consent_analytics: stores the analytics consent choice for 180 days
- _ga: distinguishes returning users for website statistics, set by Google Analytics only after consent
- _ga_*: supports session-related usage analysis, set by Google Analytics only after consent
- After withdrawal, the website attempts to delete Google Analytics cookies where technically possible and does not set them again on later page views unless consent is renewed
- Google Analytics is not activated for advertising or personalization purposes
Separation of security and analytics
Security processing and audience measurement serve different purposes. Security logs and abuse detection protect the website and communication channels. Google Analytics is used only for optional statistical analysis of website usage after consent and is not activated for advertising or marketing tracking.
- Security processing remains technically necessary or a legitimate interest in secure operations
- Analytics processing remains voluntary and consent-based