GDPR-compliant tracking
GDPR-compliant tracking with valid consent protects you from warning letters and fines. Our consent management keeps data loss as low as possible.
Legal basis
Under section 25 of Germany’s TDDDG, setting or reading cookies and similar identifiers requires consent unless they are technically necessary. Further processing falls under the GDPR. For US services, we check certification under the EU-US Data Privacy Framework or other safeguards.
Consent management
Equal options to accept or reject on the first layer
No tags before consent, technically verified
Consent Mode v2 for Google services
Documentation of consents as proof
We use established platforms such as Usercentrics, Cookiebot or consentmanager. The banner matches the website, is accessible and uses clear categories without pushing for consent.
Data protection review
We check which services load and where data goes, before and after consent. We compare the findings with the privacy policy and hand them to your data protection advisers. This does not replace legal advice.
Less dependence on the banner
Server-side tagging and data-minimising tools such as self-hosted Matomo reduce data flows to third parties. They do not automatically remove the need for consent. For pure audience measurement, aggregated data without profiling is often enough.