Cookie Policy & GDPR Compliance

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function properly, remember your preferences, analyse traffic, and deliver relevant content. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain for a defined period).

In addition to traditional cookies, we may also use web beacons, pixel tags, local storage, and similar tracking technologies. This policy covers all such technologies collectively.

2. Categories of Cookies We Use

2.1 Strictly Necessary Cookies Always Active

These cookies are essential for the website to function and cannot be disabled. They enable core features such as security, network management, and accessibility. They do not store any personally identifiable information.

Cookie Name	Purpose	Duration
PHPSESSID	Maintains user session state across page requests	Session
csrf_token	Cross-site request forgery protection on forms	Session
consent_prefs	Stores your cookie consent preferences	12 months
st_lang	Remembers your language preference (EN/DE)	12 months

2.2 Functional Cookies Opt-In Required

These cookies enable enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we use. If you disable them, some features may not work as intended.

Cookie Name	Purpose	Duration
chat_session	Maintains live chat session state for support conversations	30 days
form_prefill	Saves partially completed contact form data to prevent loss	7 days
ui_prefs	Remembers UI customisation preferences (dark/light mode)	6 months

2.3 Analytics & Performance Cookies Opt-In Required

These cookies help us understand how visitors use our website by collecting anonymous information. We use this data to improve website performance and user experience. All data is aggregated and anonymised — no individual visitor is identified.

Cookie Name	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique users for traffic analysis	2 years
_ga_*	Google Analytics	Maintains session state for Analytics	2 years
_gid	Google Analytics	Stores page view information	24 hours
_gat	Google Analytics	Rate limiting of Analytics requests	1 minute
_hjSession*	Hotjar	Heatmap and session recording analytics	30 minutes
_hjSessionUser*	Hotjar	User session tracking for UX analytics	365 days

2.4 Marketing & Targeting Cookies Opt-In Required

These cookies track your browsing activity to show you relevant advertisements and measure the effectiveness of our marketing campaigns. They may be set by third-party advertising partners.

Cookie Name	Provider	Purpose	Duration
_fbp	Meta (Facebook)	Tracks conversions from Facebook ads	3 months
_gcl_au	Google Ads	Conversion tracking for Google Ads campaigns	3 months
li_fat_id	LinkedIn	LinkedIn Insight Tag for B2B campaign tracking	30 days
muid	Microsoft	Microsoft Advertising conversion tracking	13 months

3. Manage Your Cookie Preferences

You can choose which categories of cookies you accept. Strictly necessary cookies cannot be disabled as they are essential for the website to operate.

You can also manage cookies through your browser settings. Note that disabling certain cookies may affect your experience on our website. Learn how to manage cookies in your browser →

4. Third-Party Cookies & Services

Our website may include content and features from third parties that may place their own cookies on your device. These third parties have their own privacy policies, and we encourage you to review them:

• Google Analytics & Ads — Google Privacy Policy
• Meta (Facebook) Pixel — Meta Privacy Policy
• LinkedIn Insight Tag — LinkedIn Privacy Policy
• Microsoft Advertising — Microsoft Privacy Statement
• Hotjar — Hotjar Privacy Policy

5. Legal Basis for Cookie Processing

We process cookies on the following legal bases under GDPR Article 6:

• Legitimate Interest (Art. 6(1)(f)): Strictly necessary cookies are processed on the basis of legitimate interest to maintain website security and functionality.
• Consent (Art. 6(1)(a)): All non-essential cookies (functional, analytics, marketing) are processed only with your explicit, informed, freely-given, unambiguous consent.

Under India's DPDP Act 2023, we process personal data (including through cookies) on the basis of consent, which you can withdraw at any time without affecting the lawfulness of processing before withdrawal.

6. Cross-Border Data Transfers

Some third-party services that we use (such as Google Analytics) may transfer data to servers outside India and the European Economic Area. Where this occurs, SchwettmannTech ensures appropriate safeguards are in place including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Compliance with India's DPDP Act provisions on cross-border data transfer

7. Children's Privacy

Our website is not directed at children under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal data from children through cookies or any other means. If you believe a child has provided us with personal data, please contact us immediately.

8. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our practices. When we make significant changes, we will notify you through a prominent notice on our website or by email. The "Last Updated" date at the top of this page indicates when the policy was last revised.

Your continued use of our website after any changes constitutes your acceptance of the revised policy. We recommend reviewing this policy periodically.

9. Regulatory Complaints

If you are unsatisfied with how we handle your cookie preferences or personal data, you have the right to lodge a complaint with the relevant supervisory authority:

• India: The Data Protection Board of India (under the DPDP Act 2023)
• European Union: Your local Data Protection Authority (DPA). A list is available at European Data Protection Board
• Germany: Landesbeauftragte für Datenschutz und Informationsfreiheit