Cookie Policy
Overview
This policy covers cookies and comparable technologies, meaning any storage of information in your browser and any access to it, for example through local storage, session storage or IndexedDB (§ 25 TDDDG). This applies whether or not the information is personal data.
Our consent banner has three categories. We use "Necessary Cookies" without consent because they are strictly necessary for the service you request (§ 25(2) No. 2 TDDDG). We use "Statistics Cookies" and "Marketing Cookies" only with your prior consent, which you give or refuse separately for each of the two categories. The scripts of Google and Meta load only on our public pages and on the checkout page. Inside the signed-in application we use these categories only for purchases and capacity requests in billing: for the purchase report and, with your consent to Marketing Cookies, to read Meta's cookies on our domain and send them to Meta with the event.
Necessary Cookies
| Purpose | Provider | Form | Maximum duration | Third-party access |
|---|---|---|---|---|
| Sign-in and session, two-factor step, trusted device, completing setup after registration | us | Cookies | 30 days (session 7 days; trusted device 30 days; setup 24 hours; short-lived caches seconds to minutes) | no |
| Settings (language, colour scheme, sidebar) | us | Cookies, local storage | Cookies up to 1 year; local storage until you delete the entries | no |
| Consent storage (your decision, the version of the consent banner and a random consent ID) | us | Cookie, local storage | 6 months | no |
| Working data (unfinished entries in wizards, dismissed notices) | us | Local storage, session storage | Until you close the tab; unfinished entries in the registration wizard until it is completed or you delete them, used for at most 7 days; the step indicator of the property wizard until the wizard is completed or you delete it | no |
| Payment (fraud prevention, only on pages with a payment function) | Stripe | Cookies on our domain, set by Stripe's payment form | 30 minutes to 1 year | Yes: Stripe reads them under its own responsibility for fraud prevention |
If you sign in with Google or open the map on a share page, Google may set cookies on its own domain under its own responsibility; we have no access to them.
Legal basis: § 25(2) No. 2 TDDDG. Where personal data is processed, the legal basis is Art. 6(1)(b) GDPR insofar as the entries serve your use of the platform under your contract with us, and Art. 6(1)(f) GDPR otherwise. Our legitimate interest lies in a secure and functioning service and in respecting your cookie decision.
Statistics Cookies
- Provider: Google Ireland Limited (Google Analytics), as our processor.
- Purpose: statistics on the use of our public pages and the checkout page, and evaluating which of our advertising campaigns lead to registrations and purchases. A pseudonymous profile of your visit is formed for this.
- Form: cookies on our domain, set and read by the Google tag we embed.
- Storage duration: until your consent ends, at most 6 months. An entry for the current session can outlast the end of your consent by the length of your last visit; it is not read after that.
- Third-party access: yes. Google receives the content of the cookies with each measurement and also processes the data in the USA.
- Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR.
If you withdraw your consent, Google Analytics is no longer loaded and the cookies are deleted. If your consent has expired, we delete them the next time you open a public page or the checkout page.
Marketing Cookies
- Provider: Meta Platforms Ireland Limited (Meta Pixel). We and Meta are joint controllers for collecting the data and transmitting it to Meta (Art. 26 GDPR).
- Purpose: measuring and targeting our advertising on Facebook and Instagram. Meta links your visit with data from other websites into a usage profile.
- Form: cookies on our domain, set and read by the Meta Pixel; in addition, a cookie that Meta sets on its own domain if your browser allows third-party cookies.
- Storage duration: 90 days from your last visit, including the cookie on Meta's domain.
- Third-party access: yes. Meta receives the content of the cookies with each event and also processes the data in the USA. Only Meta reads the cookie on its own domain.
- Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR.
If you withdraw your consent, the Meta Pixel is no longer loaded and the cookies on our domain are deleted. If your consent has expired, we delete them the next time you open a public page or the checkout page. We cannot delete the cookie on Meta's domain; our website no longer addresses it, and you can delete it in your browser.
Purchase Report (only with consent)
If you have consented to Statistics or Marketing Cookies, we store the ID and amount of a purchase in session storage until you return from the payment confirmation, at most until you close the tab. Google or Meta receive the details as a report of the purchase. The legal basis is your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR.
Managing Your Decision
Through the "Cookie settings" link in the footer of our website you can change your decision at any time and withdraw a consent as easily as you gave it (Art. 7(3) GDPR). Withdrawal takes effect immediately for the future; it does not affect the lawfulness of processing before the withdrawal. After six months we ask you again. If we introduce a new recipient or purpose, we also ask you again before we set the new cookies. If you refuse, every function of the platform remains available to you unchanged.
You can also view and delete cookies and site data in your browser. If you block necessary cookies, you can no longer sign in.
Our Privacy Policy describes how we record your decision on our servers, who receives the data and what rights you have.
The effective date of this version is displayed above this document.