{ "schema": "https://saferpage.de/schemas/technology-detection.v1", "generated_at": "2026-06-29T00:56:18+00:00", "domain": "bmd.at", "available": true, "scan": { "id": "8ddb4c8d-de0f-4d07-96c9-8da81cbe32df", "checked_at": "2026-06-28 21:11:44.172115+02" }, "summary": "bmd.at: 22 sichtbare Technik-/Anbietersignale, 7 mit hoher Datenschutzrelevanz, 1 CMS-/Shop-Hinweis(e).", "metrics": { "technology_count": 22, "high_privacy_relevance_count": 7, "cms_or_shop_count": 1, "external_script_count": 0, "request_count": 142, "third_party_domain_count": 21, "infrastructure_finding_count": 0 }, "signals": { "server_header": "Apache", "generator": "TYPO3 CMS", "x_powered_by": "", "asset_hosts": [ "www.bmd.com" ], "external_scripts": [], "tls_version": "TLSv1.2", "certificate_issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "renderer": "playwright-chromium" }, "category_counts": { "Analytics/Werbung": 5, "Werbung": 1, "tag_manager": 1, "other": 7, "CMS": 1, "Server": 2, "session_replay": 2, "social_tracking": 2, "Bibliothek": 1 }, "technologies": [ { "id": "google_analytics", "name": "Google Analytics", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: google-analytics.com" ], "source": "technology_analysis" }, { "id": "provider_google_analytics", "name": "Google Analytics", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "region1.analytics.google.com", "3 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_google_doubleclick", "name": "Google DoubleClick", "category": "advertising", "category_label": "Werbung", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "stats.g.doubleclick.net", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "google_tag_manager", "name": "Google Tag Manager", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "Signal: googletagmanager.com", "Script-Domain: googletagmanager.com" ], "source": "technology_analysis" }, { "id": "provider_google_tag_manager", "name": "Google Tag Manager", "category": "tag_manager", "category_label": "tag_manager", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "googletagmanager.com", "4 Request(s)" ], "source": "browser_analysis" }, { "id": "tracking_google_tag_manager", "name": "Google Tag Manager", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "high", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "google_tag_manager", "GTM-TTKGHT" ], "source": "privacy_analysis" }, { "id": "provider_matomo", "name": "Matomo", "category": "analytics", "category_label": "Analytics/Werbung", "confidence": "browser", "risk_score": 80, "privacy_relevance": "hoch", "evidence": [ "matomo.bmd.com", "2 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_google.com", "name": "google.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 58, "privacy_relevance": "mittel", "evidence": [ "google.com", "10 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_google.de", "name": "google.de", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 58, "privacy_relevance": "mittel", "evidence": [ "google.de", "6 Request(s)" ], "source": "browser_analysis" }, { "id": "typo3", "name": "TYPO3", "category": "cms", "category_label": "CMS", "confidence": "high", "risk_score": 52, "privacy_relevance": "mittel", "evidence": [ "Meta generator: TYPO3 CMS", "Signal: typo3conf/" ], "source": "technology_analysis" }, { "id": "apache", "name": "Apache", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "Server-Header: Apache" ], "source": "technology_analysis" }, { "id": "server_header", "name": "Apache", "category": "server", "category_label": "Server", "confidence": "medium", "risk_score": 42, "privacy_relevance": "niedrig", "evidence": [ "Server-Header: Apache" ], "source": "technology_signals" }, { "id": "provider_hotjar", "name": "Hotjar", "category": "session_replay", "category_label": "session_replay", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "static.hotjar.com", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_linkedin", "name": "LinkedIn", "category": "social_tracking", "category_label": "social_tracking", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "px4.ads.linkedin.com", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_meta_facebook", "name": "Meta/Facebook", "category": "social_tracking", "category_label": "social_tracking", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "facebook.com", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_microsoft_clarity", "name": "Microsoft Clarity", "category": "session_replay", "category_label": "session_replay", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "scripts.clarity.ms", "1 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_bat.bing.com", "name": "bat.bing.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "bat.bing.com", "11 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_bat.bing.net", "name": "bat.bing.net", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "bat.bing.net", "7 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_bmd.com", "name": "bmd.com", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "bmd.com", "74 Request(s)" ], "source": "browser_analysis" }, { "id": "jquery", "name": "jQuery", "category": "library", "category_label": "Bibliothek", "confidence": "high", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "Signal: jquery-", "Asset: /typo3conf/ext/theme/Resources/Public/js/jquery-3.7.1.min.js?1781858395" ], "source": "technology_analysis" }, { "id": "provider_webcache-eu.datareporter.eu", "name": "webcache-eu.datareporter.eu", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "webcache-eu.datareporter.eu", "2 Request(s)" ], "source": "browser_analysis" }, { "id": "provider_webcachex-eu.datareporter.eu", "name": "webcachex-eu.datareporter.eu", "category": "other", "category_label": "other", "confidence": "browser", "risk_score": 35, "privacy_relevance": "niedrig", "evidence": [ "webcachex-eu.datareporter.eu", "1 Request(s)" ], "source": "browser_analysis" } ], "operator_actions": [ { "id": "action_google_analytics", "technology": "Google Analytics", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_provider_google_analytics", "technology": "Google Analytics", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_provider_google_doubleclick", "technology": "Google DoubleClick", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_provider_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_tracking_google_tag_manager", "technology": "Google Tag Manager", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_provider_matomo", "technology": "Matomo", "priority": "hoch", "owner": "Marketing/IT/Datenschutz", "action": "Tracking-, Werbe- und Tag-Manager-Dienste bis zur aktiven Einwilligung blockieren und in Consent, Datenschutzhinweis und Anbieterregister erklären.", "guide_url": "https://saferpage.de/consent/bmd.at" }, { "id": "action_provider_google.com", "technology": "google.com", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" }, { "id": "action_provider_google.de", "technology": "google.de", "priority": "mittel", "owner": "Website-Betrieb/Datenschutz", "action": "Techniksignal fachlich einordnen, Zweck, Anbieter, Datenarten und notwendige Nachweise ergänzen.", "guide_url": "https://saferpage.de/guides/datenschutz-webseiten-pruefkatalog" }, { "id": "action_typo3", "technology": "TYPO3", "priority": "mittel", "owner": "Webbetrieb/IT", "action": "CMS, Themes, Plugins und sichtbare Versionshinweise aktualisieren, unnötige Plugins entfernen und Re-Scan nach Deployment ausführen.", "guide_url": "https://saferpage.de/guides/sichtbare-versionen-und-cves-beheben" } ], "cms_playbooks": [ { "id": "typo3", "platform": "TYPO3", "summary": "TYPO3-Extensions, Sitepackage, Fluid-Templates, Consent-Extension und Caching müssen zusammen geprüft werden.", "steps": [ "TYPO3 Core und Extensions gemäß Wartungsstatus aktualisieren; Composer-/Extension-Lockfile sichern.", "Sitepackage und Fluid-Templates nach externen Fonts, Maps, Videos, Analytics und Tag-Manager-Snippets durchsuchen.", "Consent-Extension so konfigurieren, dass externe Skripte und Iframes erst nach passender Einwilligung laden.", "Security-Header und TLS/HSTS auf Webserver-/Proxy-Ebene testen; TYPO3-Caches nach Änderung leeren." ], "acceptance": [ "Extension-Liste und Wartungsstatus dokumentiert.", "Pflichtseiten werden im Seiteninventar gefunden.", "Consent-Zustände sind im Re-Scan stabil." ], "owner": "Webbetrieb/IT/Datenschutz", "guide_url": "https://saferpage.de/guides/cms-plugin-patchstand-nachweisen", "rescan_url": "https://saferpage.de/?url=bmd.at" } ], "infrastructure": { "risk_level": "low", "positive_signals": [ "Moderne TLS-Version aktiv: TLSv1.2.", "HSTS ist aktiv.", "DMARC ist für die Domain vorhanden.", "CAA-Records begrenzen Zertifikatsaussteller." ], "findings": [] }, "links": { "technology_center": "https://saferpage.de/technik/bmd.at", "json": "https://saferpage.de/technik/bmd.at/export", "csv": "https://saferpage.de/technik/bmd.at/export-csv", "markdown": "https://saferpage.de/technik/bmd.at/stack-md", "report": "https://saferpage.de/bmd.at", "vendors": "https://saferpage.de/anbieter/bmd.at", "consent": "https://saferpage.de/consent/bmd.at", "findings": "https://saferpage.de/befunde/bmd.at", "evidence": "https://saferpage.de/nachweise/bmd.at" }, "disclaimer": "Technik-Erkennung ist passiv: SaferPage wertet sichtbare Header, HTML-, Script-, Asset- und Browserkontakte aus. Nicht sichtbare Servertechnik, interne Plugins und Logins werden nicht behauptet." }