Cookie and Technology Policy
This document explains when and for what purposes digiosveny.hu uses cookies, local or session storage, tracking codes, pixels, service workers, push endpoints, and other technologies.
1. The Data Controller
- Data Controller
- Márton Horváth
- Business Name
- DigiXRAY Labs Web Development & Web Design
- Brand Name and Website
- Digital Trail – https://digiosveny.hu/
- Title
- Wallstraße 37, 55122 Mainz, Germany
- hello@digiosveny.hu
- Phone
- +36 70 802 4667
2. What technologies can the website use?
A cookie A small data file stored in the browser. Local or session storage, browser identifiers, measurement pixels, service workers, push subscription endpoints, and other technical terms can serve a similar function.
These can ensure page loading, security, the retention of language or consent settings, user-requested customer service, PWA, and AI features, as well as statistical or advertising tracking, subject to separate consent.
3. Legal Framework
Section 25 of the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG) governs the storage of information on terminal equipment and access to such information.
- Technologies that are not required: They may be activated for functional, analytical, or marketing purposes only after voluntary consent has been given. The legal basis for the related processing of personal data is Article 6(1)(a) of the GDPR.
- Essential technologies: They may be used without consent only if they are strictly necessary for the data transfer or are essential for the digital service specifically requested by the visitor. Depending on the purpose, the legal basis for the processing of personal data is Article 6(1)(b), (c), or (f) of the GDPR.
A legitimate interest alone does not replace the consent to access the equipment required under the TDDDG.
4. Managing Consent Using the CookieYes System
On the CookieYes panel, visitors can accept or reject non-essential technologies by category. This decision can be modified or revoked later via the CookieYes settings interface or by using the cookie settings icon displayed on the website.
CookieYes may use a technical identifier to record your selection. According to the service provider, the consent log may include, among other things, a consent identifier, country, status, date and time, proof data, and a masked IP address.
Withdrawal does not affect the lawfulness of previous data processing. Unnecessary technologies will be disabled going forward, and the deletion of data already generated by third-party service providers will be governed by the rules of the respective service provider.
5. Categories and Service Areas
| Category | Service or Technology | Goal | Activation |
|---|---|---|---|
| Required | WordPress, session management, CookieYes, WP Cerber Security, Security Optimizer, Cloudflare Turnstile, and other security features | Page loading, form security, fraud prevention, storage of consent decisions, requested customer service session. | Without consent, only to the extent necessary. |
| Preference and Functional | TranslatePress, AI chat session, SupportCandy portal, PWA/service worker, Gravitec web push | Language settings, conversation continuity, requested portal features, installable web application, and browser notifications. | After explicitly using a feature or—where necessary—after providing separate consent and browser authorization. |
| Statistical | Google Analytics 4 / Site Kit, Microsoft Clarity, if they are actually active | Traffic, performance, navigation patterns, heat maps, and session replays. The contents of input fields must not be recorded for measurement purposes. | Only after providing statistical consent. |
| Marketing | Google Ads, Meta Pixel, and Microsoft Advertising UET managed by PixelYourSite, provided they are actually configured and active | Conversion tracking, campaign attribution, audience targeting, and remarketing. | Only after providing consent for marketing purposes. |
6. Typical Identifiers and Retention Periods
The actual provider, purpose, category, and expiration date information valid at the time of consent is displayed in the CookieYes panel. Provider updates may result in new names or different durations; therefore, the operator performs regular cookie scans and technical checks.
| Service | Attribute identifier or storage | Intended Use | Typical duration |
|---|---|---|---|
| CookieYes | cookieyes-consent and consent log |
Selection of a category and the ability to prove consent. | The retention period is typically up to 1 year; the evidence log is retained for as long as necessary to support a legal claim. |
| WordPress and Security | Session, test, login, or security tokens | Basic operations, login, form protection, and fraud prevention. | Until the end of the session or for a short, configured safety period. |
| TranslatePress | Language preference, for example trp_language |
Note on the selected language. | A session or the specified preference period. |
| Google Analytics 4 | _ga, _ga_* |
Anonymized visitor and session statistics. | Depending on the configuration, typically up to 2 years at the cookie level. |
| Microsoft Clarity | _clck, _clsk and associated Microsoft IDs |
Linking user sessions, heat maps, and UX analysis. | _clsk typically about 1 day; _clck up to 1 year. Record retention is governed by Microsoft's current policies. |
| Microsoft Advertising UET | _uetsid, _uetvid and click IDs |
Campaign, conversion, and remarketing measurement. | Depending on the ID, from one session to approximately 13 months. |
| Meta Pixel | _fbp and campaign parameters |
Conversion Tracking and Remarketing. | Typically up to 3 months, depending on the service provider's settings. |
| Google Ads | _gcl_au and advertising identifiers |
Conversion Tracking and Ad Attribution. | Depending on the ID and configuration, typically up to 3 months. |
| AI Chat | Local or session ID | The continuity of a conversation initiated by the user. | Until the end of the session or for the short duration indicated in the consent panel. |
| SupportCandy | Session ID, login ID, or ticket ID | The customer service portal and ticket continuity requested by the user. | Until the end of the session or according to the portal's security settings. |
| Gravitec Web Push | Push endpoint, browser key, service worker, and local storage | Delivery of browser notifications that have been specifically requested. | Until you unsubscribe, revoke your browser consent, or the data is deleted for technical reasons. |
| PWA | Service Worker, Cache, and Local App Settings | Installable web application, with offline or accelerated operation. | Until the cache is cleared, the app is uninstalled, or the time period specified in the configuration expires. |
7. External Service Providers and Transfers to Third Countries
Data may be transmitted to the service provider as part of the necessary infrastructure and authorized measurement, advertising, AI, push notification, or security functions. Some service providers may process data outside the European Economic Area, particularly in the United States.
Transfers may only take place on the basis of a mechanism provided for in Chapter V of the GDPR: an adequacy decision—including the EU-U.S. Privacy Shield Framework for recipients participating in it—or on the basis of standard contractual clauses adopted by the European Commission and, where necessary, supplementary measures.
The detailed rules governing service providers' processing of personal data are set forth in the In the Privacy Notice can be found.
8. Settings, Revocation, and Browser-Level Deletion
- You can change or revoke your previous selection at any time in the CookieYes settings interface.
- In your browser settings, you can delete cookies and website data that have already been stored, or restrict their storage in the future.
- Browser push notifications can also be disabled separately in the browser's or operating system's notification settings.
- The installed PWA can be uninstalled, and the service worker and cache can be deleted in the browser's site data settings.
- Completely disabling the necessary technologies may prevent certain requested features—such as forms, login, customer service sessions, or consent settings—from working.
9. Updates and Related Documents
Identifiers, providers, and durations are subject to change due to technical updates. You should regularly compare CookieYes’s current scan results and the codes that are actually activated with this information sheet.
Document version: COOKIE-2026-08-10. This document must be reviewed in the event of any significant changes to the services, the technical system, or applicable law.