Cookie Notice
Last updated: 1 August 2026
This cookie notice explains how the nextsure platform uses cookies and similar storage technologies such as localStorage. It supplements our privacy policy.
1. Consent management and strictly necessary storage
We store your cookie-banner choice in your browser's localStorage under nextsure-cookie-consent. The stored record contains your decision for each individual service (Google Tag Manager, PostHog), a version number, and the time of your choice. This storage is necessary so that we can respect your decision and avoid showing the banner on every page view. It remains on your device until you change or delete it through the cookie settings or your browser.
Our hosting provider or security services may also use strictly necessary cookies or comparable information where required to provide the website securely and reliably, for example for load balancing and abuse prevention. The legal basis is section 25(2) TDDDG together with Article 6(1)(f) GDPR.
2. Analytics only with your consent
Google Tag Manager and PostHog load only after you expressly consent to that service in the cookie banner. You decide on each service separately; no service is pre-selected, and dismissing the banner counts as a rejection. Before consent and after rejection, this website sends no requests to the service concerned. The legal basis for accessing your device is section 25(1) TDDDG; the legal basis for subsequent processing of personal data is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. Open “Cookie Settings” in the footer and disable the service concerned. On withdrawal, the website stops analytics processing and reloads the page so that previously started tags cannot continue running. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
3. PostHog
We use PostHog for product and usage analytics and to identify technical errors. The provider is PostHog Inc.; our project uses PostHog's EU Cloud with data hosted in Germany. Data processed may include pages viewed, interactions, timestamps, browser and device information, referrer, and pseudonymous visitor and session identifiers. The IP address may also be processed as a technical consequence of transmitting data to the service. After consent, this website stores PostHog identifiers in localStorage only.
Our website does not send contact or lead-form content such as names, email addresses, telephone numbers, or free text to PostHog. We send only events and context that does not directly identify the visitor, such as form type, language, category, and successful delivery.
PostHog may process data outside the European Economic Area as part of its corporate and service-provider structure. PostHog states that it uses appropriate safeguards such as Standard Contractual Clauses and the EU-US Data Privacy Framework. More information: PostHog privacy policy.
4. Google Tag Manager
We use Google Tag Manager (container GTM-K2ML7QW6), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to centrally manage approved analytics tags. The container loads only after you consent to Google Tag Manager. Storage and processing signals for advertising, advertising user data, and personalisation remain denied.
Google Tag Manager is not itself a standalone analytics service. Google may process aggregated information about tag firing and standard HTTP request logs for operation, stability, and diagnostics. Google states that these request logs are deleted within 14 days. Tags deployed through the container may fire only after the necessary consent and must be described in this notice. More information: Google Tag Manager data privacy and security and the Google privacy policy.
5. Anonymous reach and performance measurement (Vercel)
Regardless of your choice in the cookie banner, we use Vercel Web Analytics and Vercel Speed Insights, provided by Vercel Inc., to measure how often our pages are opened and how quickly they load. Both services are cookieless: they store no identifier on your device and read no identifier stored there, so no access within the meaning of section 25(1) TDDDG takes place. Results are aggregated; you are not recognised as an individual and not followed across websites.
Data may include route and URL, referrer, network speed, browser, device type, operating system, country, web-vital value and attribution, SDK information, and the server-received event time. To count returning views, Vercel states that it derives a daily-rotating checksum from request data, which is not placed on your device. Dashboard retention is no more than 90 days, depending on the Vercel plan. The legal basis is our legitimate interest in statistical reach measurement and in the technical optimisation of the website, Article 6(1)(f) GDPR. You may object to this processing at any time under Article 21 GDPR at datenschutz@nextsure.de. More information: Vercel Speed Insights privacy and compliance and Vercel Web Analytics privacy and compliance.
6. Embedded content and partner websites
On individual pages, such as the video blog, we embed videos from YouTube, a service of Google Ireland Limited. When a video is played, YouTube and Google may set cookies and process personal data such as your IP address. The Google privacy policy applies.
Application processes and appointment bookings operated by our sales partners may run on their own platforms. The cookie and privacy notices of the relevant sales partner apply there.
7. Managing your settings
You can change your choice at any time through “Cookie Settings” in the footer. Independently of this, you can view and delete cookies and localStorage entries in your browser settings and restrict or block new cookies.
8. Contact
Our data protection organisation answers questions about cookies and data processing at datenschutz@nextsure.de. Further information about the controller, data-subject rights, and complaint options can be found in our privacy policy.