Cookie information
A transparent, provider-level description of the cookies, web beacons, local storage, and other device-based technologies used on the DigiXRAY Labs website.
1. Scope and Basic Principle
This information sheet is the digixray-labs.com This applies to cookies and similar technologies used on the domain and its subpages. The data controller is: Márton Horváth – DigiXRAY Labs Webentwicklung & Webdesign, Wallstraße 37, 55122 Mainz, Germany.
In this privacy notice, the term „cookie” is used as an umbrella term that includes cookies, localStorage and sessionStorage elements, pixels, tags, session IDs, browser notification IDs, and other technologies that store data on or read data from a visitor’s device.
2. Legal Framework
Pursuant to Section 25(1) of the German TDDDG, the storage of data on terminal equipment or access to information already stored there generally requires prior consent. Without such consent, only technology that is strictly necessary for data transmission or for a digital service expressly requested by the visitor, as defined in Section 25(2) of the TDDDG, may be used.
If the technology also processes personal data, a separate legal basis under the GDPR is required for such data processing. The primary legal basis for optional analytics and marketing is consent under Article 6(1)(a) of the GDPR; strictly necessary security and operational data processing is generally based on Article 6(1)(f) of the GDPR.
3. Technology Categories
| Category | Goal | Consent |
|---|---|---|
| Absolutely necessary | Page loading, session management, security, spam and bot protection, load balancing, basic form functionality, and storage of consent decisions. | It is not necessary if the technology truly meets the requirements of Section 25(2) of the TDDDG. |
| Functional | Language preference, optional chatbot, external media, browser notifications, or convenience features. | This is required if the feature is not essential to the service requested by the visitor. |
| Statistical / Analytical | Page usage, scrolling, clicks, session and performance metrics, heat map. | Prior consent is required. |
| Marketing | Conversion tracking, remarketing, campaign and ad identifiers. | Prior consent is required. |
4. DigiXRAY Technology Inventory
The following services are available within the DigiXRAY technical environment or are present as active plugins. The fact that a plugin is active does not in itself prove that data is actually being sent on every page; this is determined by the configuration of the specific service and its execution on a per-page basis.
| Service / System | Possible goal | Category and Terms and Conditions |
|---|---|---|
| WordPress, Elementor, Hostinger, caching and security systems | Website display, server connection, security, session, and performance. | It is absolutely necessary, but only to the extent required for operation. |
| WP Consent API | Technical transmission of consent status to compatible plugins. | Technical infrastructure. On its own, it does not constitute a visible consent banner or a complete CMP. |
| Cloudflare Turnstile, WP Cerber, and other security solutions | Bot, spam, brute-force, and abuse detection. | It is either necessary or functional, depending on the specific operation and a needs assessment. |
| TranslatePress | Language settings and saving the selected language. | Functional; consent may be required for long-term storage of preferences. |
| Microsoft Clarity | Heat maps, session analysis, and UX statistics. | Analytical; only with prior approval. |
| PixelYourSite PRO, Google and Meta Integrations | Analytics, conversion tracking, ad events, and remarketing. | Analytics / marketing; only with prior consent. |
| Microsoft UET / Bing | Conversion tracking and event tracking for advertising purposes. | Marketing; only with prior consent. |
| Gravitec Browser Notification | Send push notifications. | Functional / marketing; separate browser permission and cookie consent as needed. |
| OpenAI and Chatbot Integrations | User-initiated AI conversation or content processing. | Functional; requires separate activation, prior notification, and a legal basis appropriate for the specific data processing. |
Technical Compliance Requirement: The legal notice alone does not replace prior blocking. Unnecessary analytics and marketing codes must remain inactive until the visitor makes a valid decision.
5. Consent Management
The consent interface must provide a genuine choice: the options to accept, reject, or configure settings by category must not be misleading or disproportionate. Withdrawing consent must be just as easy as granting it.
If the website displays a consent panel, the selection can be changed through it. If no such panel appears, the optional analytics and marketing tools must not be activated. A suspected error is the hello@digixray-labs.com You can report it at this address.
6. Identifiers and Retention Periods
The specific cookie names, domains, and lifetimes may vary depending on the service provider’s version, settings, and consent configuration. For this reason, DigiXRAY publishes a provider-level inventory, and a browser-level cookie scan is required after any significant technical changes. Data may only be processed for as long as necessary to fulfill the documented purpose or until consent is withdrawn.
7. Third Countries
Some service providers may process data outside the European Economic Area. Such data transfers may only take place under the conditions set forth in Chapter V of the GDPR, such as an adequacy decision, the EU–U.S. Data Privacy Framework, standard contractual clauses, or other appropriate safeguards. The specific safeguard depends on the current legal status of the service provider in question.
8. Browser Settings
You can view, delete, or block cookies in your browser settings. Disabling cookies entirely may prevent certain basic functions of the website from working. Deleting cookies from your browser does not constitute a withdrawal of consent, and withdrawing consent does not automatically delete previously stored local data.
9. Contact and Updates
Questions about data protection or cookie policy: hello@digixray-labs.com. We update this information when there are changes in the technological or legal environment.
Effective and last updated: August 10, 2026.