Privacy Policy

Draft for review. It does not replace legal review of internal business processes.

Privacy policy draft

This draft describes website privacy information for http://demo-cookie-rookie.local/ based on project data, scan findings and confirmed review decisions.

Controller

The controller for this website is Demo GmbH.

Website domain: demo-cookie-rookie.local.

Controller address: TO BE CONFIRMED: Controller address

Privacy contact

For privacy questions, visitors can use privacy@demo-cookie-rookie.local or the contact page: /contact.

Legal basis overview

Optional cookies, browser storage and third-party services are described as consent-based where the scan indicates they are not strictly necessary. Other legal bases for internal processing must be confirmed before final publication.

Cookies and browser storage

The following cookies and browser storage items were detected or confirmed for this website.

Name/keyTypeProvider/domainCategory
_gaCookieGoogle LLCAnalytics
crk_sessionCookieDemo GmbHFunctional
mystery_optCookieunknown-cdn.example.invalidNeeds confirmation
crk_languagelocalStoragehttp://demo-cookie-rookie.local/Functional
mystery_widget_statelocalStoragehttp://demo-cookie-rookie.local/external-servicesFunctional

Third-party services

The following external services or domains were detected during the scan. Unknown services must be confirmed before final publication.

Some external services are still unknown or require confirmation.

ServiceProvider/domainCategoryDetected items
Google AnalyticsGoogle LLCAnalytics1
Google AnalyticsGoogle LLCAnalytics1
Google MapsGoogle Ireland LimitedExternal media1
YouTubeGoogle Ireland LimitedExternal media1
Google FontsGoogle Ireland LimitedFunctional1
Google Tag ManagerGoogle LLCFunctional1
Contact RequestWebsite formaFunctional1
Cover LetterWebsite formaFunctional1
EmailWebsite formaFunctional1
File UploadWebsite formaFunctional1
Job ApplicationWebsite formaFunctional1
MessageWebsite formaFunctional1
NameWebsite formaFunctional1
PhoneWebsite formaFunctional1
Privacy AcknowledgementWebsite formaFunctional1
Meta PixelMeta Platforms Ireland LimitedMarketing1
unknown-cdn.example.invalidunknown-cdn.example.invalidOther external2

Forms and submitted data

Detected forms and data fields are summarized below. Purposes and fields marked for confirmation should be reviewed before publication.

PagePurposeData fields
1 pages / 1 occurrencesContact requestConsent checkbox (Consent checkbox), Email (Email), Message (Message), Name (Name)
1 pages / 1 occurrencesContact requestConsent checkbox (Consent checkbox), Email (Email), Message (Message), Name (Name), Phone (Phone)
1 pages / 1 occurrencesJob applicationConsent checkbox (Consent checkbox), Cover letter (Cover letter), Cv resume (CV / resume), Email (Email), Name (Name), Phone (Phone)

Job applications

A job application form was detected or confirmed. Application-specific retention and recipients must be confirmed before final publication.

Analytics

Analytics services were detected and should remain inactive until valid consent is given.

ServiceProvider/domainCategoryDetected items
Google AnalyticsGoogle LLCAnalytics1
Google AnalyticsGoogle LLCAnalytics1

Marketing

Marketing or advertising services were detected and should remain inactive until valid consent is given.

ServiceProvider/domainCategoryDetected items
Meta PixelMeta Platforms Ireland LimitedMarketing1

External media

External media or embeds were detected. Loading these services may disclose visitor data to external providers.

ServiceProvider/domainCategoryDetected items
Google MapsGoogle Ireland LimitedExternal media1
YouTubeGoogle Ireland LimitedExternal media1

Functional services

Functional services were detected. They should be described by purpose and loaded only where the selected consent category allows it.

ServiceProvider/domainCategoryDetected items
Google FontsGoogle Ireland LimitedFunctional1
Google Tag ManagerGoogle LLCFunctional1
Contact RequestWebsite formaFunctional1
Cover LetterWebsite formaFunctional1
EmailWebsite formaFunctional1
File UploadWebsite formaFunctional1
Job ApplicationWebsite formaFunctional1
MessageWebsite formaFunctional1
NameWebsite formaFunctional1
PhoneWebsite formaFunctional1
Privacy AcknowledgementWebsite formaFunctional1

Retention

Retention periods depend on the confirmed business process. Missing periods are marked for review.

Recipients and processors

Processors, recipients and international transfers must be based on confirmed provider and process information.

User rights

Visitors may have rights to access, rectification, erasure, restriction, portability and objection under applicable GDPR rules. They may also contact the competent supervisory authority.

Consent withdrawal

Visitors should be able to change or withdraw consent through the website's consent preferences once the banner is installed.

Updates

This policy draft should be updated when the website, scan findings, service setup or review decisions change.