Privacy policy

Overview

We are The Cookie Labs GmbH and operate the website thecookielabs.com. We process personal data only to the extent necessary to run the website and to answer your enquiries.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

The Cookie Labs GmbH
Stahlgruberring 3
81829 Munich
Germany

Managing directors: Michael Stepper and Paul Radtke
Email: hello@thecookielabs.com
Phone: +49 (0)89 / 215 469 89 - 0

Data protection officer

You can reach our data protection officer by email at datenschutz@thecookielabs.com or by post at:

The Cookie Labs GmbH
Datenschutzbeauftragter
Stahlgruberring 3
81829 Munich

Hosting and server log files

Our website is hosted by Linevast and Hetzner. The servers are located in Germany. We have data processing agreements with both providers.

When you visit the website, the server processes technically necessary access data in log files. This includes the IP address, date and time, the page requested, browser and operating system, and the referrer. The purpose is the secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR. The log files are stored only for as long as necessary for this purpose.

Consent management (CCM19)

We use CCM19 to manage your consents. CCM19 runs on an instance that we operate ourselves (ccm19.storycore.cloud). The tool stores your choices about cookies and services. This is technically necessary.

The legal basis is Art. 6(1)(c) GDPR and Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). You can change your choices at any time via the "Cookies" link in the footer.

Web analytics with Matomo

We use Matomo to measure reach and to improve the website. We operate Matomo ourselves. IP addresses are anonymised. Matomo is loaded only after you have given consent. We do not pass any data on to third parties.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw it at any time via the "Cookies" link in the footer.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager is used solely to integrate Matomo. No other tags run through it. The Tag Manager itself does not create user profiles. For technical reasons, your IP address is transmitted to Google when the script is retrieved.

The legal basis is your consent (Art. 6(1)(a) GDPR) where the Tag Manager is loaded only after you have given consent, and otherwise our legitimate interest in the simple management of integrated services (Art. 6(1)(f) GDPR).

Contact form and getting in touch

If you contact us via the contact form, by email or by phone, we process the data you give us, for example your name, email address and message. We use it to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures and otherwise Art. 6(1)(f) GDPR for general enquiries. We store the data until your enquiry has been dealt with and no statutory retention obligations apply.

Your rights

You have the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise them, write to datenschutz@thecookielabs.com. We do not make automated decisions and do not carry out profiling.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Status of this policy

As of: November 2026