Cookie settings

Under GDPR and the German TTDSG, only strictly necessary cookies (site function, security, shopping cart) may be active before the visitor makes a choice. Any cookie used for functional convenience, analytics, or marketing/advertising purposes must default to OFF and may only activate after the visitor explicitly opts in.

A banner that starts with these categories switched on — even if the visitor could technically switch them off — is not compliant and creates real legal exposure (Abmahnung risk).

Modify your cookie choices below. You can change your choices at any time — they take effect immediately.

The default visual and functional consent settings are established in the table below. Functional, Analytics, and Marketing categories must default to OFF.

Important Warning: Do not pre-enable Functional, Analytics, or Marketing categories or any individual service under them. Only Necessary may be on and locked.

The cookie banner must contain exactly the following texts and elements:

• Title: Cookie settings
• Intro text: We use cookies to run this website and, with your consent, to understand how it is used. You can change your choices at any time — they take effect immediately.
• Necessary (always on, locked): Required for the website and shopping cart to work — session handling, security, and basic functionality. These cannot be switched off.
• Functional (off by default): Remember your settings, such as language preference and cart contents, so you do not have to set them again.
• Analytics (off by default): Anonymised usage statistics that show which pages are useful and where the site can be improved.
• Marketing (off by default): Set only with your explicit consent, and used to measure the performance of our campaigns.
• Footer links: Privacy Policy | Legal Notice (Impressum)
• Buttons: Save preferences / Accept all / Reject non-essential

• Blocking, not hiding: Scripts belonging to Functional, Analytics, and Marketing services must not load at all until the visitor consents — do not load the script and hide its effect, and do not rely on the toggle's visual state alone.
• Persisted choice: Once saved, the visitor's preferences should be remembered on return visits (no repeat prompt each session) until they clear cookies or the policy changes.
• No dark patterns: 'Accept all' and 'Reject non-essential' must be equally easy to find and select — neither button should be visually dominant over the other.
• Cookie Settings access: Cookie Settings must remain accessible after the first visit — via a persistent footer link — so a visitor can change their mind at any time, not just on first load.
• Language versions: This banner must be translated and shown correctly for each site language (DE, EN, FR, NL) — do not default non-German visitors to the German version.
• Testing: Confirm actual script-blocking behaviour by testing in a fresh incognito/private window with no prior cookies, and check the browser's network tab to verify Analytics/Marketing scripts genuinely do not fire until consent is given.

Once the actual third-party tools are confirmed (analytics provider, advertising/remarketing pixels, Trusted Shops, etc.), each service should be listed individually under its correct category on the “Services” tab, following the same category logic as Section 2 — each service defaults to OFF unless it falls under Necessary.

Zollner's own cookie banner (zollner-hotelwaesche.de) was reviewed as a design reference, but its Functional and Marketing categories — including live analytics and remarketing services — default to ON. This is a compliance issue on their site and should not be replicated.

Their visual layout and category structure are otherwise a reasonable design reference.