{
    "schema": "https://saferpage.de/schemas/privacy-notice-draft.v1",
    "generated_at": "2026-06-19T14:10:32+00:00",
    "domain": "gastrotel.de",
    "scan": {
        "id": "de4cd813-d882-46fb-be0c-8e5523369024",
        "checked_at": "2026-06-19 12:32:59.250169+02"
    },
    "summary": "Entwurf aus Scan-Evidenz: 16 Cookie(s), 24 Drittanbieter-Domain(s), 2 Storage-Key(s).",
    "status": "prüfen",
    "score": 54,
    "links": {
        "privacy_center": "https://saferpage.de/datenschutz/gastrotel.de",
        "draft_json": "https://saferpage.de/datenschutz/gastrotel.de/entwurf",
        "draft_csv": "https://saferpage.de/datenschutz/gastrotel.de/entwurf-csv",
        "draft_markdown": "https://saferpage.de/datenschutz/gastrotel.de/entwurf-md",
        "report": "https://saferpage.de/gastrotel.de",
        "cookie_declaration": "https://saferpage.de/cookies/gastrotel.de",
        "vendor_register": "https://saferpage.de/anbieter/gastrotel.de",
        "consent_center": "https://saferpage.de/consent/gastrotel.de",
        "rights_center": "https://saferpage.de/rechte/gastrotel.de",
        "operator_board": "https://saferpage.de/betreiber/gastrotel.de",
        "background": "https://saferpage.de/guides/datenschutzerklaerung-verbessern"
    },
    "text_blocks": [
        {
            "title": "Cookies und ähnliche Technologien",
            "text": "Beim passiven SaferPage-Erstaufruf von gastrotel.de wurden 16 Cookie(s) und 2 Web-Storage-Key(s) dokumentiert. Prüfen Sie, welche Einträge technisch erforderlich sind und welche erst nach Einwilligung gesetzt werden dürfen.",
            "status": "Entwurf fachlich freigeben",
            "source": "SaferPage Scan-Evidenz"
        },
        {
            "title": "Drittanbieter",
            "text": "Der Chromium-Aufruf kontaktierte 24 Drittanbieter-Domain(s). Nennen Sie Anbieter, Zwecke, Empfänger, Rechtsgrundlage, Drittlandtransfer und Widerrufsmöglichkeit in der Datenschutzerklärung.",
            "status": "Entwurf fachlich freigeben",
            "source": "SaferPage Scan-Evidenz"
        },
        {
            "title": "Einwilligung und Widerruf",
            "text": "Nicht notwendige Cookies, Tracking, Werbung, Tag Manager und vergleichbare Web-Storage-IDs sollten vor Zustimmung blockiert werden. SaferPage bewertet den Consent-Audit aktuell mit 0 Punkten.",
            "status": "Entwurf fachlich freigeben",
            "source": "SaferPage Scan-Evidenz"
        },
        {
            "title": "Formulare und Eingaben",
            "text": "Auf der geprüften Seite wurden Hinweise auf folgende Datenarten erkannt: E-Mail (3 Signal(e)), Newsletter (2 Signal(e)), Kontaktformular (2 Signal(e)), Adresse, Login/Passwort. Erklären Sie Zweck, Pflichtfelder, Speicherfrist, Empfänger und Kontaktweg für Betroffenenrechte direkt in der Datenschutzerklärung.",
            "status": "Entwurf fachlich freigeben",
            "source": "SaferPage Scan-Evidenz"
        }
    ],
    "purposes": [
        "Analytics",
        "Unklar",
        "Werbung",
        "Drittanbieter-Einbindungen",
        "Formular-/Eingabeverarbeitung"
    ],
    "data_types": [
        {
            "id": "email",
            "count": "3",
            "label": "E-Mail"
        },
        {
            "id": "newsletter",
            "count": "2",
            "label": "Newsletter"
        },
        {
            "id": "contact",
            "count": "2",
            "label": "Kontaktformular"
        },
        {
            "id": "address",
            "count": "1",
            "label": "Adresse"
        },
        {
            "id": "login",
            "count": "1",
            "label": "Login/Passwort"
        }
    ],
    "cookies": [
        {
            "name": "test_cookie",
            "party": "Drittanbieter",
            "domain": "doubleclick.net",
            "secure": "ja",
            "purpose": "Werbung",
            "lifetime": "kurz (0 Tage)",
            "provider": "Google DoubleClick",
            "same_site": "None",
            "pre_consent": "ja"
        },
        {
            "name": "_ga",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Analytics",
            "lifetime": "lang (399 Tage)",
            "provider": "Google",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "_ga_6LKFXB758L",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Analytics",
            "lifetime": "lang (399 Tage)",
            "provider": "Google",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "_gat_gtag_UA_118869937_1",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Analytics",
            "lifetime": "kurz (0 Tage)",
            "provider": "Google",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "_gid",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Analytics",
            "lifetime": "kurz (0 Tage)",
            "provider": "Google",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "UserID1",
            "party": "Drittanbieter",
            "domain": "adfarm1.adition.com",
            "secure": "ja",
            "purpose": "Unklar",
            "lifetime": "mittel (89 Tage)",
            "provider": "adfarm1.adition.com",
            "same_site": "None",
            "pre_consent": "ja"
        },
        {
            "name": "C",
            "party": "Drittanbieter",
            "domain": "adform.net",
            "secure": "ja",
            "purpose": "Unklar",
            "lifetime": "kurz (29 Tage)",
            "provider": "adform.net",
            "same_site": "None",
            "pre_consent": "ja"
        },
        {
            "name": "uid",
            "party": "Drittanbieter",
            "domain": "adform.net",
            "secure": "ja",
            "purpose": "Unklar",
            "lifetime": "mittel (59 Tage)",
            "provider": "adform.net",
            "same_site": "None",
            "pre_consent": "ja"
        },
        {
            "name": "_gcl_au",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "mittel (89 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "axd",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "mittel (89 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "stg_last_interaction",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "lang (364 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Strict",
            "pre_consent": "ja"
        },
        {
            "name": "stg_returning_visitor",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "lang (364 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Strict",
            "pre_consent": "ja"
        },
        {
            "name": "stg_traffic_source_priority",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "kurz (0 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Strict",
            "pre_consent": "ja"
        },
        {
            "name": "tis",
            "party": "First-Party",
            "domain": "gastrotel.de",
            "secure": "nein",
            "purpose": "Unklar",
            "lifetime": "mittel (89 Tage)",
            "provider": "gastrotel.de",
            "same_site": "Lax",
            "pre_consent": "ja"
        },
        {
            "name": "axd",
            "party": "Drittanbieter",
            "domain": "theadex.com",
            "secure": "ja",
            "purpose": "Unklar",
            "lifetime": "mittel (89 Tage)",
            "provider": "theadex.com",
            "same_site": "None",
            "pre_consent": "ja"
        },
        {
            "name": "tis_GgI",
            "party": "Drittanbieter",
            "domain": "theadex.com",
            "secure": "ja",
            "purpose": "Unklar",
            "lifetime": "kurz (6 Tage)",
            "provider": "theadex.com",
            "same_site": "None",
            "pre_consent": "ja"
        }
    ],
    "third_parties": [
        {
            "host": "dmp.theadex.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "dmp.theadex.com",
            "request_count": "5",
            "privacy_relevant": "nein"
        },
        {
            "host": "googletagmanager.com",
            "purpose": "Tag-Manager",
            "category": "tag_manager",
            "provider": "Google Tag Manager",
            "request_count": "4",
            "privacy_relevant": "ja"
        },
        {
            "host": "static.xx.fbcdn.net",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "static.xx.fbcdn.net",
            "request_count": "4",
            "privacy_relevant": "nein"
        },
        {
            "host": "api.theadex.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "api.theadex.com",
            "request_count": "3",
            "privacy_relevant": "nein"
        },
        {
            "host": "ad.doubleclick.net",
            "purpose": "Werbung",
            "category": "advertising",
            "provider": "Google DoubleClick",
            "request_count": "2",
            "privacy_relevant": "ja"
        },
        {
            "host": "c1.adform.net",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "c1.adform.net",
            "request_count": "2",
            "privacy_relevant": "nein"
        },
        {
            "host": "connect.facebook.net",
            "purpose": "Social/Tracking",
            "category": "social_tracking",
            "provider": "Meta/Facebook",
            "request_count": "2",
            "privacy_relevant": "ja"
        },
        {
            "host": "facebook.com",
            "purpose": "Social/Tracking",
            "category": "social_tracking",
            "provider": "Meta/Facebook",
            "request_count": "2",
            "privacy_relevant": "ja"
        },
        {
            "host": "google.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "google.com",
            "request_count": "2",
            "privacy_relevant": "nein"
        },
        {
            "host": "ml314.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "ml314.com",
            "request_count": "2",
            "privacy_relevant": "nein"
        },
        {
            "host": "sync.smartadserver.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "sync.smartadserver.com",
            "request_count": "2",
            "privacy_relevant": "nein"
        },
        {
            "host": "5366353.fls.doubleclick.net",
            "purpose": "Werbung",
            "category": "advertising",
            "provider": "Google DoubleClick",
            "request_count": "1",
            "privacy_relevant": "ja"
        },
        {
            "host": "adservice.google.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "adservice.google.com",
            "request_count": "1",
            "privacy_relevant": "nein"
        },
        {
            "host": "cm.g.doubleclick.net",
            "purpose": "Werbung",
            "category": "advertising",
            "provider": "Google DoubleClick",
            "request_count": "1",
            "privacy_relevant": "ja"
        },
        {
            "host": "dsp-cookie.adfarm1.adition.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "dsp-cookie.adfarm1.adition.com",
            "request_count": "1",
            "privacy_relevant": "nein"
        },
        {
            "host": "google-analytics.com",
            "purpose": "Analytics",
            "category": "analytics",
            "provider": "Google Analytics",
            "request_count": "1",
            "privacy_relevant": "ja"
        },
        {
            "host": "gstatic.com",
            "purpose": "CDN",
            "category": "cdn",
            "provider": "Google Static",
            "request_count": "1",
            "privacy_relevant": "nein"
        },
        {
            "host": "ib.adnxs.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "ib.adnxs.com",
            "request_count": "1",
            "privacy_relevant": "nein"
        },
        {
            "host": "image6.pubmatic.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "image6.pubmatic.com",
            "request_count": "1",
            "privacy_relevant": "nein"
        },
        {
            "host": "lib.selfcampaign.com",
            "purpose": "Sonstige",
            "category": "other",
            "provider": "lib.selfcampaign.com",
            "request_count": "1",
            "privacy_relevant": "nein"
        }
    ],
    "storage": {
        "local_storage_total": 2,
        "session_storage_total": 0,
        "tracking_key_hints": []
    },
    "missing_items": [
        "Drittanbieter mit Anbietername, Zweck, Rechtsgrundlage, Empfänger und Transferhinweisen dokumentieren.",
        "LocalStorage und SessionStorage zusätzlich zur Cookie-Tabelle inventarisieren.",
        "Consent-Status technisch nachvollziehbar machen, z. B. über CMP-/TCF- oder gleichwertige Consent-Signale."
    ],
    "operator_review_checklist": [
        {
            "id": "controller",
            "label": "Verantwortlichen und Datenschutzkontakt ergänzen",
            "responsibility": "Datenschutz/Legal",
            "required": true
        },
        {
            "id": "legal_basis",
            "label": "Rechtsgrundlagen je Zweck prüfen",
            "responsibility": "Datenschutz/Legal",
            "required": true
        },
        {
            "id": "retention",
            "label": "Speicher- und Löschfristen ergänzen",
            "responsibility": "Fachbereich/IT",
            "required": true
        },
        {
            "id": "vendors",
            "label": "Empfänger, AVV/DPA, Rolle und Transfergrundlage abgleichen",
            "responsibility": "Legal/Procurement",
            "required": true
        },
        {
            "id": "consent",
            "label": "CMP, Ablehnen, Widerruf und GPC gegen Technik testen",
            "responsibility": "Marketing/IT",
            "required": true
        },
        {
            "id": "versioning",
            "label": "Version, Änderungsdatum, Freigabe und Re-Scan dokumentieren",
            "responsibility": "Datenschutz/Content",
            "required": true
        }
    ],
    "publication_policy": {
        "audience": "Website-Besucher im deutschsprachigen Raum",
        "tone": "klar, konkret, ohne juristische Floskeln wo möglich",
        "do_not_publish_without_review": true,
        "review_note": "Automatisch abgeleiteter Entwurf. Betreiber muss Identität, Zwecke, Rechtsgrundlagen, Speicherfristen und Empfänger fachlich freigeben."
    },
    "disclaimer": "Automatisch aus einem passiven technischen Scan abgeleitet. Keine Rechtsberatung; Inhalte vor Veröffentlichung fachlich und rechtlich prüfen."
}