Last updated: August 24, 2026
Additionally: Section 25 of the TDDDG
For users in Germany, a distinction must be made between two legal levels regarding cookies and similar technologies:
According to § 25(1) TDDDG, prior, informed consent is required for cookies and similar technologies that are not strictly necessary.
According to Section 25(2) of the TDDDG, consent is not required only if the sole purpose is to transmit a message via a public telecommunications network, or if storage or access is absolutely necessary to provide a digital service expressly requested by the user. Analytics, statistics, marketing, and similar tracking technologies are therefore used only with prior consent.
Necessary cookies and similar technologies that do not require consent under Section 25(1) of the TDDDG.
| Cookie | Publicly Available Privacy Notice | Retention Period | Legal basis in Germany |
|---|---|---|---|
| __cfruid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests, prevent misuse, and ensure the website is provided in a stable and secure manner. | Until the end of the session | Section 25(2)(2) of the German Telemedia Act (TDDDG); to the extent that personal data is processed: Article 6(1)(f) of the General Data Protection Regulation (GDPR). Legitimate interest: secure, stable, and abuse-free provision of the website. |
| __cfuvid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests and support the secure operation of the website. | Until the end of the session | Section 25(2)(2) TDDDG; to the extent that personal data is processed: Article 6(1)(f) GDPR. Legitimate interest: technical security and availability of the website. |
| __cf_bm | This cookie serves to protect against automated access and bots. It helps detect and prevent abusive or technically harmful access to the website. | 30 minutes | Section 25(2)(2) TDDDG; to the extent that personal data is processed: Article 6(1)(f) GDPR. Legitimate interest: Protection of the website against misuse, attacks, and automated access. |
| __hs_opt_out | This cookie records that a visitor has declined the use of non-essential cookies or should not be prompted for consent again. It contains the value “yes” or “no.” | 6 months | Section 25(2)(2) of the TDDDG; Article 6(1)(f) of the GDPR. Legitimate interest: Storing and implementing the user’s cookie preference, as well as providing evidence of consent management in compliance with data protection regulations. |
| __hs_do_not_track | This cookie may be set to prevent the tracking code from transmitting information to HubSpot. It stores the corresponding opt-out or “do not track” decision. | 6 months | Section 25(2)(2) TDDDG; Art. 6(1)(f) GDPR. Legitimate interest: technical implementation of the opt-out from tracking and preservation of the user’s preference. |
| __hs_initial_opt_in | This cookie prevents the cookie banner from reappearing in strict mode every time a page is loaded. It contains the value “yes” or “no.” | 7 days | Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Legitimate interest: user-friendly and technically sound management of the cookie prompt. |
| __hs_cookie_cat_pref | This cookie stores which cookie categories the visitor has consented to or declined. It is used for the technically necessary management of cookie preferences. | 6 months | Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Legitimate interest: Storing and implementing the user’s decision to consent or refuse. |
| __hs_gpc_banner_dismiss | This cookie records that the Global Privacy Control prompt has been closed. It contains the value “yes” or “no.” | 180 days | Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Legitimate interest: Managing data protection preferences and preventing repeated notifications. |
| __hs_notify_banner_dismiss | This cookie records that a “Notify” notification banner has been closed. It contains a Boolean value. | 180 days | Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Legitimate interest: user-friendly management of technically necessary notifications. |
| hs_ab_test | This cookie is used to display the same version of an A/B test page to a visitor during a session that was previously assigned to them. | Until the end of the session | Justifiable as a necessary cookie only if the test serves exclusively to ensure the consistent technical delivery of the page accessed by the user and does not pursue any analysis or profiling purposes: Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Otherwise, consent is required. |
| wg-translations | This local storage entry is used by the translation feature to save translations that have already been loaded or generated in the browser and to display the website in the language selected by the user. | Depending on the provider’s or browser’s configuration; specified in the document as “stored indefinitely.” | Section 25(2)(2) of the German Telemedia Act (TDDDG), provided that the storage is absolutely necessary for the explicitly requested language function; Article 6(1)(f) of the GDPR. Legitimate interest: multilingual and user-friendly provision of the website. |
| wg-slugs | This local storage entry is used by the translation feature to store translated URLs in the browser and to provide navigation in the selected language. | Depending on the provider’s or browser’s configuration; specified in the document as “stored indefinitely.” | Section 25(2)(2) of the German Telemedia Act (TDDDG), provided that the storage is absolutely necessary for the explicitly requested language function; Article 6(1)(f) of the GDPR. Legitimate interest: consistent language-based navigation. |
| wglang | This cookie stores the language selected by the user so that the website can be displayed in the preferred language. | Until the end of the session | Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR. Legitimate interest: Providing the language version selected by the user. |
These are non-essential cookies that are managed via the cookie banner. As a visitor to a website powered by HubSpot, you can object to the use of these cookies by not giving your consent.
| Cookie / Storage entry | Privacy Notice Suitable for Publication | Retention Period | Legal Basis in Germany |
|---|---|---|---|
| __hmpl | This storage entry contains metadata on tracking events that HubSpot collects while you use the website. It is used to analyze website usage and is only used if the appropriate consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration | Section 25(1) TDDDG; Article 6(1)(a) GDPR. Use is based solely on prior, voluntary, informed, and revocable consent. |
| hublytics_events_53 | This cookie is temporarily used by HubSpot to store tracking events until they are technically transmitted. It is used for analytical purposes and is only used if consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. This is used only with prior consent. |
| __hstc | This HubSpot cookie is used to recognize and track visitors across multiple sessions. In particular, it stores the domain, visitor ID, times of visits, and session numbers. | 6 months | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. Consent is required because the cookie is used for analytics and recognition purposes. |
| hubspotutk | This HubSpot cookie is used to recognize a visitor. It may be transmitted to HubSpot when a form is submitted and helps identify and merge duplicate contacts. | 6 months | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. Consent is required because the cookie is used for visitor recognition and CRM/analytics mapping. |
| __hssc | This HubSpot cookie is used to track sessions and page views within a session. It supports the analysis of user behavior on the website. | 30 minutes | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. Consent is required because the cookie is used for analytics purposes. |
| __hssrc | This HubSpot cookie is set to determine whether a visitor has restarted their browser and whether a new session should be initiated. | Until the end of the session. | Section 25(1) TDDDG; Article 6(1)(a) GDPR. Consent is required if the cookie is used in connection with HubSpot analytics tracking. |
| _ga | This Google Analytics 4 cookie is used to distinguish individual users and to compile statistical information about website usage. | By default, 2 years, subject to different browser settings or a different configuration | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. Consent is required because the cookie is used for analytics and recognition purposes. |
| _ga_<container-id> | This Google Analytics 4 cookie is used to store the session status and to statistically analyze website usage. | By default, 2 years, subject to different browser settings or a different configuration | Section 25(1) TDDDG; Art. 6(1)(a) GDPR. Consent is required because the cookie is used for analytics purposes. |
