Cookie Policy

1. Legal basis

Storing information on terminal equipment or accessing information stored there is governed in particular by § 165(3) TKG 2021. Technologies that are not strictly necessary are used only after active, informed consent. Consent requirements follow in particular from Article 4(11) and Article 7 GDPR.

2. Strictly necessary functions

The website may use first-party storage for necessary functions, especially consent choices and language/display preferences. Such functions are not used for advertising profiling. Specific storage names and lifetimes are shown in the current consent-management tool/browser storage.

3. Analytics – only after consent

According to NEXORA's currently published technical description, Google Analytics 4 and Microsoft Clarity are used for statistics/analytics; Google Tag Manager may be used for technical tag management. Google Analytics, Clarity and other non-essential analytics functions may be activated only after the relevant consent. Google Tag Manager is not an independent legal basis and must not activate optional analytics or marketing tags contrary to the consent choice. If loading or using the Tag Manager itself causes access to terminal equipment requiring consent under § 165(3) TKG 2021 or other non-essential processing, that activity may also take place only after valid consent. Specific cookies/identifiers and their retention periods depend on the actually activated configuration and must be displayed in the consent management.

4. Marketing – only after consent

According to the currently published NEXORA description, Meta Pixel is used for conversion measurement and possible retargeting. Marketing technologies must activate only after marketing consent. Specific identifiers/lifetimes must be shown in consent management.

5. Consent management

Users must be able to reject non-essential technologies as easily as accepting them. Consent must not be preselected or obtained through misleading design. Non-essential analytics/marketing tags must not activate before consent. Consent can be changed/withdrawn at any time for the future, and withdrawal must be as easy as giving consent.

6. Third countries

External providers may involve third-country processing. Data-transfer safeguards are governed by Articles 44 et seq. GDPR and described in the Privacy Policy. Third-country safeguards do not replace consent required under § 165(3) TKG 2021.

7. Keeping this Policy current

This Policy must match actual consent management and technical deployment. It must be updated before or when a new analytics, marketing or other third-party tag is enabled.

8. Contact

Questions about cookies or privacy: office@nexora-consulting.at.