COOKIE NOTICE
This Cookie Notice explains how GRANSHAN Foundation e.V. uses cookies and similar technologies (such as browser local storage) on granshan.com (the "Website"), what each one does, who sets it and how long it lasts. It supplements our Privacy Policy, which describes how we process personal data more generally.
Last updated: 10 June 2026.
1. Consent comes first
We do not load any analytics or advertising technologies until you have given your consent. When you first visit the Website you are shown a consent banner where you can accept all categories, reject all categories, or choose individual categories. Until you make a choice, only the strictly necessary cookies listed below are set, and no data is sent to Google or any other third party.
The legal basis for strictly necessary cookies is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR) together with § 25(2) TDDDG. The legal basis for analytics and advertising cookies is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG), which you can withdraw at any time.
2. Strictly necessary (always active)
These are required for the Website to function and cannot be switched off. They are set by us (first-party) and are not used for tracking.
granshan_session — keeps your session active while you browse (e.g. form submissions). Provider: granshan.com (first-party). Retention: expires when you close your browser, and at most 2 hours of inactivity.
XSRF-TOKEN — protects forms against cross-site request forgery (CSRF). Provider: granshan.com (first-party). Retention: same session as above (max. 2 hours).
Consent preferences — your cookie choices are stored in your browser's local storage (not an actual cookie, and never sent to a server) so the banner does not reappear on every page. Provider: granshan.com (first-party). Retention: kept until you withdraw consent, clear your browser storage, or we ask you to re-confirm after a policy change.
3. Analytics (only with your consent)
If you allow the Analytics category, we load Google Analytics 4 through Google Tag Manager to understand how the Website is used in aggregate. These are only set after you consent. Provider: Google Ireland Limited.
_ga — distinguishes individual visitors by storing a randomly generated client identifier. Retention: 2 years.
_ga_N9WZZ97C09 — used by Google Analytics 4 to persist session state for our specific property. Retention: 2 years.
4. Advertising (only with your consent)
If you allow the Ads & tracking, User data or Ad personalization categories, Google may set cookies used to measure and personalise advertising. These are only set after you consent and are not set if you reject this category. Provider: Google Ireland Limited.
_gcl_au — used by Google for conversion linking, i.e. attributing actions on the Website to an advertisement. Retention: 90 days.
Because these technologies are provided by Google, your data may be transferred to and processed in the United States. Such transfers rely on the EU Standard Contractual Clauses and Google's certification under the EU–US Data Privacy Framework. You can read more in Google's Privacy Policy.
5. Changing or withdrawing your consent
You can change your mind at any time using the link below. Withdrawing consent stops any further analytics and advertising technologies from loading; it does not affect the lawfulness of processing carried out before you withdrew. You can also delete cookies through your browser settings.
We may update this Cookie Notice to reflect changes to the technologies we use or to legal requirements. The current version is always available on this page.