Skip to content
Legal

COOKIE POLICY

This website uses cookies and similar technologies (e.g. localStorage). Below, we inform you in accordance with GDPR Art. 13 and TTDSG § 25 about which technologies are used, for what purpose, and on what legal basis.

Technically Necessary Technologies

These technologies are strictly required for the website to function. They are set without consent (TTDSG § 25 para. 2).

Name
Provider
Purpose
Duration
Legal Basis
__cf_bm
Cloudflare (USA)
Bot protection / WAF validation
30 minutes
TTDSG § 25 Abs. 2
fh-cookie-consent
ForestHub (localStorage)
Stores your cookie consent choice
Permanent
TTDSG § 25 Abs. 2
language
ForestHub (localStorage)
Stores your language preference
Permanent
TTDSG § 25 Abs. 2

Analytics Cookies (consent required)

These cookies are only set when you click 'Accept' in the cookie banner. They are used to analyze usage behavior via Google Analytics 4 (GA4). Legal basis: your consent under GDPR Art. 6(1)(a) in conjunction with TTDSG § 25(1).

Name
Provider
Purpose
Duration
Legal Basis
_ga
Google Ireland Ltd (USA)
Distinguishing users in GA4
2 years
DSGVO Art. 6 Abs. 1 lit. a
_ga_*
Google Ireland Ltd (USA)
GA4 session state and measurement ID
2 years
DSGVO Art. 6 Abs. 1 lit. a

Cookieless Website Analytics (no consent required)

Additionally, we use Umami Analytics, a privacy-friendly tool that operates entirely without cookies. No personal data is collected — IP addresses are hashed and not stored. Data processing takes place on European servers. Legal basis: legitimate interest under GDPR Art. 6(1)(f).

Tag Management

We use Google Tag Manager (GTM) to manage analytics tags. GTM itself does not set cookies and does not process personal data. GA4 tags are only loaded via GTM after you have given your consent in the cookie banner.

Google Consent Mode v2

We use Google Consent Mode v2. If you decline analytics cookies, no cookies are set and no personal data is collected. However, Google may receive limited, cookieless signals ("consent pings") that do not allow any identification of your person. These signals are used exclusively for aggregated modeling.

Third-Country Data Transfers

Google LLC and Cloudflare Inc. are based in the USA. Data transfers are conducted on the basis of the EU-US Data Privacy Framework (EU Commission adequacy decision, July 2023). Both companies are certified under the DPF.

Revoking Your Consent

You can revoke your consent at any time with effect for the future — as easily as you gave it (GDPR Art. 7(3)). Use the button below or the "Cookie Settings" link in the footer of every page. Alternatively, you can delete cookies and localStorage entries in your browser settings.

Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). For more information, please see our Privacy Policy.