Current website baseline
By default, this website is structured around technically necessary functionality and security-related processing. This includes custom components and Cloudflare Turnstile to protect contact forms. Optional audience measurement with Google Analytics is loaded on the live website only after explicit consent.
- Language preference for multilingual handling via WPML when users actively switch languages
- Technical WordPress or session cookies only where needed for operation, form security, or login
- Security and form protection through risk-based technical checks against misuse, spam, and automated attacks
- Google Analytics only after explicit consent for audience measurement
Current consent logic
For optional audience measurement with Google Analytics, the live website shows a consent banner. Analytics is loaded only after explicit approval. Without consent, the website remains limited to technically necessary functionality, language handling, form functionality, and security processing.
- Users can approve or decline analytics without affecting the core website experience
- The setting can be reopened through the cookie settings control
- The consent choice is stored in the first-party cookie ea_consent_analytics for 180 days
- On withdrawal, the consent choice is set to denied and the website attempts to delete existing _ga and _ga_* cookies for the live domain
Technically necessary and security-related technologies
Technically necessary cookies and comparable technologies may be used so that the website can be delivered, language settings can be maintained, forms can work securely, login areas can be protected, and abuse detection against spam, bots, credential attacks, phishing, fraud, and other attacks remains possible. These technologies are not used for advertising purposes.
- WPML language cookie wp-wpml_current_language: language handling, usually session-based
- WordPress test or login cookies: only where required for login, session, or technical checks
- wpEmojiSettingsSupports in session storage: short-lived technical detection of WordPress emoji support
- Form protection: local abuse detection with AegisPress and Cloudflare Turnstile for bot detection, neither used for analytics or marketing purposes
- Turnstile processes technically necessary browser and connection characteristics; the deployed configuration does not use pre-clearance
- The legal basis for necessary terminal-device access is Section 25(2) TDDDG; related processing is based, where applicable, on Article 6(1)(f) GDPR
Browser storage in the AI-Readiness Quick Check
The current AI-Readiness Quick Check does not use cookies or persistent or session-based browser storage for assessment answers or result values. The information exists only in the volatile memory of the open browser tab and is discarded when the page is reloaded or the tab is closed. PDF or PNG files downloaded by the user remain in the storage location selected by the user.
- No storage of assessment answers or result values in cookies, local storage, session storage, or IndexedDB
- No sharing of assessment answers or result values with Cloudflare Turnstile or Google Analytics
Analytics and statistics cookies
Analytics and statistics cookies help understand how the website is used and which content should be improved. For this purpose, Google Analytics 4 may be used on the live domain, but only after active consent. Without consent, the website remains limited to necessary functionality and security-related processing.
- ea_consent_analytics: stores the analytics consent choice for 180 days
- _ga: distinguishes returning users for website statistics, set by Google Analytics only after consent
- _ga_*: supports session-related usage analysis, set by Google Analytics only after consent
- After withdrawal, the website attempts to delete Google Analytics cookies where technically possible and does not set them again on later page views unless consent is renewed
- Google Analytics is not activated for advertising or personalization purposes
Separation of security and analytics
Security processing and audience measurement serve different purposes. Security logs and abuse detection protect the website and communication channels. Google Analytics is used only for optional statistical analysis of website usage after consent and is not activated for advertising or marketing tracking.
- Security processing remains technically necessary or a legitimate interest in secure operations
- Analytics processing remains voluntary and consent-based