{
    "schema": "https://saferpage.de/schemas/tracker-decision-workflow.v1",
    "generated_at": "2026-06-23T01:35:43+00:00",
    "domain": "lto.de",
    "available": true,
    "summary": "Publish/Review/Ignore-Workflow fuer sichtbare Anbieter, Cookies und Tracker.",
    "metrics": {
        "decision_count": 24,
        "publish_count": 1,
        "review_count": 23,
        "ignore_count": 0
    },
    "workflow": {
        "schema": "https://saferpage.de/schemas/tracker-decision-workflow.v1",
        "summary": "Publish/Review/Ignore-Workflow fuer sichtbare Anbieter, Cookies und Tracker.",
        "allowed_decisions": [
            "publish",
            "review",
            "ignore"
        ],
        "counts": {
            "publish": 1,
            "review": 23,
            "ignore": 0
        },
        "rules": [
            {
                "decision": "publish",
                "rule": "Niedriges Risiko, klare Rolle, kein starkes Cookie-/Transfer-/Tracking-Signal."
            },
            {
                "decision": "review",
                "rule": "Tracking, Cookie, AVV/DPA, Drittlandtransfer, hohes Risiko oder unklare Betreiberrolle."
            },
            {
                "decision": "ignore",
                "rule": "Kein belastbares aktuelles Signal; beim naechsten Scan erneut beobachten."
            }
        ]
    },
    "decisions": [
        {
            "id": "region1_google_analytics_com",
            "provider": "Google Analytics",
            "domain": "region1.google-analytics.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Hohes Risikosignal; Veröffentlichung erst nach Legal-/Datenschutz-Review.",
            "owner": "Legal/Datenschutz",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 100,
            "evidence": "2 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/region1.google-analytics.com"
        },
        {
            "id": "googletagmanager_com",
            "provider": "Google Tag Manager",
            "domain": "googletagmanager.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Hohes Risikosignal; Veröffentlichung erst nach Legal-/Datenschutz-Review.",
            "owner": "Legal/Datenschutz",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 100,
            "evidence": "2 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/googletagmanager.com"
        },
        {
            "id": "letscast_fm",
            "provider": "letscast.fm",
            "domain": "letscast.fm",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Hohes Risikosignal; Veröffentlichung erst nach Legal-/Datenschutz-Review.",
            "owner": "Legal/Datenschutz",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 76,
            "evidence": "11 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/letscast.fm"
        },
        {
            "id": "cp_pushwoosh_com",
            "provider": "cp.pushwoosh.com",
            "domain": "cp.pushwoosh.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 66,
            "evidence": "6 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/cp.pushwoosh.com"
        },
        {
            "id": "consentcdn_cookiebot_com",
            "provider": "consentcdn.cookiebot.com",
            "domain": "consentcdn.cookiebot.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 64,
            "evidence": "5 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/consentcdn.cookiebot.com"
        },
        {
            "id": "consent_cookiebot_com",
            "provider": "consent.cookiebot.com",
            "domain": "consent.cookiebot.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 62,
            "evidence": "4 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/consent.cookiebot.com"
        },
        {
            "id": "backend_lto_de",
            "provider": "backend.lto.de",
            "domain": "backend.lto.de",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 55,
            "evidence": "10 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/backend.lto.de"
        },
        {
            "id": "engine_lto_de",
            "provider": "engine.lto.de",
            "domain": "engine.lto.de",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 55,
            "evidence": "12 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/engine.lto.de"
        },
        {
            "id": "img06_en25_com",
            "provider": "img06.en25.com",
            "domain": "img06.en25.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 50,
            "evidence": "2 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/img06.en25.com"
        },
        {
            "id": "cdnjs_cloudflare_com",
            "provider": "Cloudflare",
            "domain": "cdnjs.cloudflare.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 48,
            "evidence": "1 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/cdnjs.cloudflare.com"
        },
        {
            "id": "collectcdn_com",
            "provider": "collectcdn.com",
            "domain": "collectcdn.com",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Datenschutz/Marketing/IT",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 48,
            "evidence": "1 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/collectcdn.com"
        },
        {
            "id": "lcdn_letscast_fm",
            "provider": "lcdn.letscast.fm",
            "domain": "lcdn.letscast.fm",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 48,
            "evidence": "1 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser",
            "target_url": "https://saferpage.de/anbieter/lcdn.letscast.fm"
        },
        {
            "id": "images_lto_de",
            "provider": "images.lto.de",
            "domain": "images.lto.de",
            "decision": "publish",
            "decision_label": "veröffentlichen",
            "reason": "Niedriges öffentliches Risiko; Zweck und Rolle als Transparenzzeile veröffentlichen.",
            "owner": "Datenschutz/Content",
            "next_action": "In Datenschutzhinweis, Cookie-Erklärung und Anbieterregister konsistent veröffentlichen.",
            "risk_score": 35,
            "evidence": "1 Request(s), 0 Cookie(s).",
            "source_block": "vendor_processor_register|vendor_due_diligence|vendor_lifecycle_risk|browser|browser|evidence",
            "target_url": "https://saferpage.de/anbieter/images.lto.de"
        },
        {
            "id": "anbieter_27",
            "provider": "Anbieter 27",
            "domain": "anbieter 27",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "13 Anbieterregister-Eintrag/Einträge, 13 Drittanbieter-Domain(s), 165 Browser-Request(s).",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2027"
        },
        {
            "id": "anbieter_28",
            "provider": "Anbieter 28",
            "domain": "anbieter 28",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Vendor-Due-Diligence mit 13 Anbieter(n), 2 hohem Risiko, 13 AVV-/DPA-Prüfung(en) und 10 Transfer-/Jurisdiktionsfrage(n).",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2028"
        },
        {
            "id": "anbieter_29",
            "provider": "Anbieter 29",
            "domain": "anbieter 29",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "13 AVV-/DPA-Prüfung(en), 13 Anbieter.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2029"
        },
        {
            "id": "anbieter_30",
            "provider": "Anbieter 30",
            "domain": "anbieter 30",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Transferfragen 10, hohe Risiken 2, unbekannte Transfers 7.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2030"
        },
        {
            "id": "anbieter_31",
            "provider": "Anbieter 31",
            "domain": "anbieter 31",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Assessment-Automation-Readiness 94/100; 10/11 Kontrollpunkt(e) erfüllt, 1 Lücke(n) oder manuelle Nachweise offen.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2031"
        },
        {
            "id": "anbieter_32",
            "provider": "Anbieter 32",
            "domain": "anbieter 32",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Alerts 0, Regulatory-Pflichten 10.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2032"
        },
        {
            "id": "anbieter_33",
            "provider": "Anbieter 33",
            "domain": "anbieter 33",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Incident-/Breach-Readiness 35/100; 5 Szenario(s), 2 kritisch, 3 hoch/kritisch und 4 offene Nachweisposition(en).",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2033"
        },
        {
            "id": "anbieter_34",
            "provider": "Anbieter 34",
            "domain": "anbieter 34",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Retention-/Deletion-Readiness 81/100; 8/10 Kontrollpunkt(e) erfüllt, 2 Lücke(n) oder manuelle Nachweise offen.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2034"
        },
        {
            "id": "anbieter_35",
            "provider": "Anbieter 35",
            "domain": "anbieter 35",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Nachweis-Workflow mit 8 Nachweisposition(en): 8 sofort starten, 0 einplanen, 0 im Backlog.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2035"
        },
        {
            "id": "anbieter_36",
            "provider": "Anbieter 36",
            "domain": "anbieter 36",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Prüfbeleg vorhanden, Root-Hash e4afd2ea2c86524a.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2036"
        },
        {
            "id": "anbieter_37",
            "provider": "Anbieter 37",
            "domain": "anbieter 37",
            "decision": "review",
            "decision_label": "prüfen",
            "reason": "Datenschutzrelevanz, AVV/DPA-, Transfer-, Cookie- oder Tracking-Signal erfordert Betreiberfreigabe.",
            "owner": "Legal/Vendor-Verantwortung",
            "next_action": "Zweck, Rechtsgrundlage, Consent-Status, AVV/DPA, Transfer und Datenschutzhinweis-Abgleich bestätigen.",
            "risk_score": 28,
            "evidence": "Aus öffentlichem Website-Scan nicht beweisbar.",
            "source_block": "vendor_lifecycle_risk",
            "target_url": "https://saferpage.de/anbieter/anbieter%2037"
        }
    ],
    "links": {
        "vendor_disclosure": "https://saferpage.de/anbieter/lto.de/offenlegung",
        "json": "https://saferpage.de/anbieter/lto.de/entscheidungen-json",
        "csv": "https://saferpage.de/anbieter/lto.de/entscheidungen-csv",
        "markdown": "https://saferpage.de/anbieter/lto.de/entscheidungen-md",
        "cookies": "https://saferpage.de/cookies/lto.de"
    },
    "disclaimer": "Automatische Entscheidungsvorschlaege aus oeffentlicher SaferPage-Evidenz. Review- und Publish-Entscheidungen muessen Betreiber fachlich freigeben."
}