Cookie Policy

This policy explains how heureka uses cookies and similar browser technologies on this website. Optional services remain disabled unless you consent. We do not use advertising cookies in this consent setup.

Your choice

On your first visit, you can accept all available categories, continue with necessary technologies only, or review the individual setting. Optional statistics and diagnostics are not preselected. Closing the settings without saving does not grant consent.

Your decision is stored for 180 days in a first-party consent cookie. It contains the selected categories, the consent-version number, and the time of your decision. It does not contain a user or advertising identifier. When the disclosed services change materially, we ask you to decide again. A previous decision made before Google Analytics was added does not enable the new integration.

Necessary technologies

These technologies are required to provide functions you explicitly request or to operate the website securely. They cannot be disabled through the consent dialog.

Privacy choice

heureka_cookie_consent_v2 stores your current selection so the website can respect it on subsequent page views. The cookie expires after 180 days unless you delete it earlier. It replaces the previous heureka_cookie_consent_v1 cookie.

Language selection

i18n_redirected remembers whether you selected the German or English website. Without it, the preferred language may need to be determined again.

Form security with Cloudflare Turnstile

Public forms use Cloudflare Turnstile to detect automated abuse. When a security challenge is required, Cloudflare may use technically necessary browser storage such as cf_clearance. This processing is limited to protecting the requested form and website service.

Optional statistics and diagnostics

The following services start only after you consent to Statistics & diagnostics, and only where the respective integration is enabled.

Google Analytics 4

We use Google Analytics 4, provided by Google Ireland Limited, Ireland, to understand website usage and improve our content and navigation. Our web stream uses measurement ID G-ZX53QX8PQF.

The Google tag is not loaded before you consent or when you choose necessary technologies only. We do not send Google Analytics measurement requests or cookieless consent-mode pings before consent. After consent, only analytics storage is allowed; advertising storage, advertising user data, advertising personalization, and Google signals remain disabled in this integration.

Analytics may process pseudonymous browser and session identifiers, visited URLs and page titles, referring URLs, timestamps, engagement duration, language, browser and device information, and approximate location. Your IP address is transmitted as part of the network connection. Google states that, for users in the EU, Switzerland and the UK, it uses the IP address to derive approximate location and discards it before logging the analytics data. This does not make the remaining analytics data anonymous.

The enabled enhanced-measurement options cover the following interactions, where supported by the page and Google's automatic detection:

• Page views and navigation between pages, including browser-history changes.
• Scrolling, outbound link clicks and file-download clicks, including relevant link and file information.
• Website searches, including search terms detected in configured URL parameters.
• Video starts, progress and completion for supported embedded YouTube videos.
• Form starts and submissions, including technical form identifiers, destination URLs and submit-button text.

We do not add custom tracking that forwards contact-form field values, passwords, email addresses or an account User-ID to Google Analytics. Automatic detection is not a guarantee that every interaction is captured or that a detected form submission was successfully processed. Google's email-redaction option is enabled for this stream, but it is a best-effort safeguard, not a guarantee that all personal data is removed. URL parameters and search terms may still be processed; please do not put personal or confidential information in website search fields or URLs.

Google Analytics uses these first-party cookies:

Automatic renewal of the configured cookie expiry on each visit is disabled. Your browser may impose a shorter lifetime. These browser lifetimes are separate from retention of data already received by Google, which is controlled by the Analytics property's data-retention settings and applicable deletion rules.

Google may also process data through Google LLC in the United States and other locations outside the European Economic Area. Google describes its international-transfer safeguards, including the EU–US Data Privacy Framework and standard contractual clauses where applicable, in its data-transfer information. Further information is available in Google's privacy policy and how Google uses information from sites and apps that use its services.

Sentry

Sentry helps us identify application errors and performance problems. Before consent, client events, performance transactions, logs, session tracking, and breadcrumbs are not transmitted. After consent, technical information such as the affected page, browser and device details, error context, timing data, and the IP address required for network communication may be processed. Default transmission of personal identifiers remains disabled.

Leadfeeder by Dealfront

Leadfeeder helps us understand which companies visit the website and which content is relevant to them. After consent, the service may process the IP address, visited pages, timestamps, visit duration, browser information, device information, and referring source. Where technically possible, these signals are associated with a company rather than an individual person.

Depending on the Leadfeeder configuration, the following browser entries may be used:

• _lfa: identifies repeat visits from the same browser; regular lifetime of up to one year
• _lfa_consent: records Leadfeeder's cookie permission where its consent mode is used; lifetime of up to two years
• _lfa_test_cookie_stored: checks whether browser cookies can be stored and is removed immediately after the check
• _lfa_expiry: local-storage value supporting the expiry of the Leadfeeder browser identifier; lifetime of up to two years

Legal basis

Access to or storage on your device for strictly necessary functions is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The related processing of personal data is based on Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the requested service and security purpose.

Optional statistics and diagnostics, including Google Analytics, are based on your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Change or withdraw your choice

After making a decision, you can reopen Privacy settings at any time from the legal links in the website footer. There you can grant, change, or withdraw optional consent.

When you withdraw statistics and diagnostics consent, heureka disables Google Analytics collection immediately, removes known Google Analytics cookies (_ga and _ga_*) and Leadfeeder cookies and related browser-storage entries, and reloads the current page so optional trackers remain inactive. Necessary consent and language preferences are retained. The withdrawal applies to future processing and does not affect processing that was lawful before withdrawal or automatically erase data already received by providers.

You can also delete cookies and browser storage through your browser settings. Blocking necessary storage may prevent language selection, form protection, or consent preferences from working reliably. For questions about processing or exercising your data-protection rights, contact datenschutz@heureka.com.