Legal
Cookie Policy
Updated: June 2026
The website nexora-consulting.at uses cookies and similar technologies, including browser storage (localStorage, sessionStorage) and third-party scripts. This Cookie Policy explains which technologies we use, for what purpose, and how you can manage them.
2. What are cookies and similar technologies?
Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. Unlike cookies, they are not automatically sent with every request.
localStorage und sessionStorage
localStorage and sessionStorage are browser mechanisms for local data storage. Unlike cookies, they are not automatically sent with every HTTP request and can only be read by the same domain.
Web Beacons and Pixels
These are small, often invisible graphic elements or code snippets embedded in web pages that can record certain user interactions.
3. Technologies and services used
3.1 Technically necessary (always active)
These technologies are required for the basic operation of the website and cannot be deactivated. They do not require consent.
| Name | Purpose | Duration |
|---|---|---|
| nx-cookie-consent | Stores the cookie consent decision (accepted/declined) | 1 year |
| NEXT_LOCALE | Stores the user's selected language (UA / DE / EN) | Session / until manual deletion |
| nexora_cookie_consent | Stores your own cookie choice (statistics / marketing). Set by this website, not by a third party. Without it the banner would ask again on every page. | 1 year |
| theme (localStorage) | Stores the selected light or dark appearance. Set by this website. Kept in browser local storage, not sent to any server. | Until manual deletion |
| li_gc, bcookie, lidc | Set by LinkedIn (LinkedIn Ireland) on its own domain after consent to marketing. Used for advertising measurement. We can neither read nor delete them — only your browser can. | From session up to 2 years, set by LinkedIn |
| __cf_bm | Set by Cloudflare on LinkedIn's own domain when the LinkedIn tag loads — i.e. only after consent to marketing. Protects that service from automated traffic; it is not used to profile you. We can neither read nor delete it. | 30 minutes, set by Cloudflare on behalf of LinkedIn |
3.2 Functional
These services are required for extended website functionality (e.g. display of fonts, form processing) and are loaded automatically.
| Service | Purpose | Duration |
|---|---|---|
| Google Fonts (fonts.googleapis.com) | Loading web fonts (Plus Jakarta Sans, Inter) via Google CDN — external CDN request, user IP transferred to Google servers | Approx. 1 year (browser cache) |
| Contact form (/api/contact) | Processing of contact enquiries — the data you submit (name, email, phone, message) is sent to our own server endpoint, stored in our database (Neon, hosting within the EU) and forwarded to us by email via Google Workspace (Gmail SMTP). The data is not transferred to Web3Forms or any other external form provider. | See retention periods in the Privacy Policy |
3.3 Statistics (with consent)
The following analytics services are integrated on our website. They are loaded only after you give your explicit consent via the cookie banner. Until then they remain in a denied state under Google Consent Mode v2 (see section 3.5) and Microsoft Clarity is not loaded at all.
| Service | Purpose | Duration |
|---|---|---|
| Google Analytics 4 (Google Ireland Ltd.) | Analysis of website visits, page views and user behaviour (aggregated). Measurement ID: G-9SF3H8TXWN. Cookies: _ga, _ga_* — anonymised usage and device data. | 2 years |
| Google Tag Manager (Google Ireland Ltd.) | Management and delivery of tracking tags without direct code modification. Container ID: GTM-MXQNR2ZH. Loaded with Consent Mode v2 defaults set to denied. | Depends on embedded tags |
| Microsoft Clarity (Microsoft Ireland Operations Ltd.) | Session analysis, heatmaps and aggregated usability statistics. Loaded only after consent. Cookies: _clck, _clsk. | 1 year |
3.4 Marketing (with consent)
The following services are only used with explicit consent under Art. 6(1)(a) GDPR. They are not loaded before consent is given.
| Service | Purpose | Duration |
|---|---|---|
| Meta Pixel (Meta Platforms Ireland Ltd.) | Conversion measurement and retargeting for Facebook/Instagram campaigns. Pixel ID: 1830559287854769. Cookies: _fbp. | 3 months |
| LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) | Conversion tracking and retargeting for LinkedIn Ads campaigns. Activated only if configured and after consent. | 90 days |
3.5 Consent Mode and cookieless measurement
Our website uses Google Consent Mode v2. Before you make a cookie choice — and if you select "Necessary only" — all statistics and marketing tags are set to a denied state (analytics_storage, ad_storage, ad_user_data and ad_personalization = denied). In this state Google Analytics 4 and Google Tag Manager do not store or read any cookies on your device and transmit only aggregated, cookieless and non-personalised signals; Meta Pixel and Microsoft Clarity are not loaded at all. Cookies are set and full measurement is activated only after you actively consent ("Accept all" or enabling analytics in the settings). You can withdraw your consent at any time via the cookie banner (link in the footer).
4. Legal basis
- Art. 6(1)(f) GDPR — Legitimate interest in the technically flawless provision of the website (technically necessary technologies).
- Art. 6(1)(a) GDPR — Consent for all statistics and marketing technologies. Consent can be withdrawn at any time.
6. Managing cookie settings
You can change your cookie settings at any time via the cookie banner (link in the website footer). You can also disable or delete cookies and stored browser data in your browser settings at any time.
Please note: Deactivating certain technologies (e.g. localStorage) may impair the functionality of the website.
Instructions for common browsers:
- Google Chrome — Manage cookies
- Mozilla Firefox — Allow and block cookies
- Safari — Privacy and cookie settings
- Microsoft Edge — Delete and manage cookies
As a data subject, you have the following rights under GDPR regarding your personal data processed by NEXORA:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR) — any previously given consent can be withdrawn at any time with effect for the future.
- Right to lodge a complaint with the supervisory authority (Art. 77 GDPR) — you have the right to lodge a complaint with the Austrian Data Protection Authority (DSB).
For questions about this Cookie Policy or the processing of your personal data, please contact: NEXORA Unternehmensberatung GmbH, Franz-Josefs-Kai 27/DG/9, 1010 Wien, Österreich. E-Mail: office[at]nexora-consulting.at
Further information on data protection can be found in our Privacy Policy.