Required Cookies

These services and technologies are essential for operating Herando and enable, for example, security-related functionalities. They also help us recognize whether you want to stay logged in to your profile so we can provide our services more quickly when you visit again.

Without these cookies, the website cannot be operated properly. Therefore, deactivation is not possible.

Used required cookies

Cookie name	Provider / lifetime	Purpose
herando	Herando / Session	Required so a user can stay signed in. Enables access to protected areas without signing in again.
herando-backend	Herando / Session	Ensures authentication in the backend area and access control for protected functions.
frontend	Herando / 2 hours	Required to maintain frontend sessions and avoid signing in again.
frontend_cid	Herando / 2 hours	Assigns the current session to the consent ID in the frontend area.
cc	Herando / 1 year	Stores your cookie consent settings.
cid	Herando / 1 year	Stores a unique ID for documenting your cookie consent.
_GRECAPTCHA	Google reCAPTCHA / 6 months	Protects the website from automated access, spam, fraud, and abuse.

Legal basis:
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation of the website) and § 165(3) TKG (AT) / § 25(2) TTDSG (DE).

Statistics (optional)

To further improve our services, we collect anonymized data for statistics and analysis. Using this data, we can, for example, measure visitor numbers and the effectiveness of specific pages on our website and optimize our content.

Providers:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Purpose:
Analysis of user behavior, reach measurement, content optimization, and evaluation of individual page usage.

Processed data:
IP address (shortened/anonymized), device and browser information, visit duration, page views, interactions, referrer URL.

Legal basis:
Your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG (AT) / § 25(1) TTDSG (DE).

Third-country transfer:
Transfer to third countries (e.g. USA) cannot be ruled out. Providers are certified under the EU–US Data Privacy Framework.

Storage period:
Up to 14 months unless otherwise stated.

Verwendete Cookies

Cookie name	Provider / lifetime	Purpose
_ga	Google Analytics / 2 years	Identifies unique users
_gid	Google Analytics / 24 hours	User behavior analysis
_gat_*	Google Analytics / 1 minute	Request rate throttling
_gat_UA-*	Google Analytics / 1 minute	Controls data transmission
OTZ	Google Analytics / 1 month	Aggregated website traffic information
AEC	Google / 6 months	Protection against spam, fraud and abuse
NID	Google / up to 10 years	Embedding external content (e.g. YouTube)
_fbp	Meta (Facebook) / 6 months	Page view analysis
datr	Meta (Facebook) / 9 months	Security and fraud prevention
locale	Meta (Facebook) / 1 week	Stores language settings
oo	Meta (Facebook) / 13 months	Stores opt-out status
sb	Meta (Facebook) / 11 months	Browser identification
m_pixel_ratio	Meta (Facebook) / Session	Website performance testing