Data protection
Is the data (e.g. IP address, if applicable) genuinely anonymized, i.e. no further reference to a person is possible, or only pseudonymized (i.e. reference to a person is only possible with the help of further information)?
As a matter of principle, we do not store IP addresses. Therefore, we also have no personal reference to the end customer (visitors to the website).
At what point is the cookie set, already when you surf to the webshop or a product subpage?
As soon as a visitor lands on a product page from which our widget can be loaded, the cookie is (automatically) generated. The cookie is empty at this point, we don't store any info in the local storage at this point.
When a user opens the sizing widget, nothing is stored in the local storage.
Only when the user has entered his gender, height, arm length, inseam and ride style preference (only when these pieces of information have been entered), then these pieces of information are stored in the local storage. Furthermore, it is saved whether the client has changed the default values or not.
Is this a session cookie?
No. It is the Local Storage.
[Main reason: When a user clicks on a recommended wheel in our Recommendation Engine results list, this new wheel is typically opened in a new tab. So that the user doesn't have to re-enter the identical data into our sizing widget in the new tab, we take the values from the local storage here. If we were to store the data in the Session Storage, this would not be possible].
The session cookie contains an ID that can be assigned to the respective user?
No. We do not store user-assignable IDs
What data is transferred via the cookie? Under the link is only "gender, height, arm and leg length"? What about the session ID and IP address etc.?
We actually only store the 4 data fields mentioned. No session ID, no IP address.
What does the "renewal" of the "token" (is this in the cookie?) after four hours mean? Does it mean that recognition is no longer possible after four hours because the cookie "expires"?
Yes, the local storage is simply deleted after 4 hours of inactivity. If a user clicks through our widget again after 4h of inactivity, all data must be entered again and the new data is saved.
Do I need cookie consent from the user
Since this is a technically necessary cookie and neither personal data nor data for marketing purposes are collected, it is not necessary to obtain the customer's consent.