Last updated: 30 June 2026
This English version is a translation provided for convenience. In the event of any discrepancy, the German version of this Cookie Policy prevails.
1. Controller
The controller responsible for this website is KudTax GmbH, Mertensstr. 26, 13587 Berlin, Germany, e-mail: [email protected], telephone: +49 176 77483716 ("KudTax", "we", "us").
2. Purpose of this Cookie Policy
This Cookie Policy provides information on which cookies and comparable technologies may be used on our website and platform, for which purposes this takes place, on which legal basis this occurs and how you can manage your settings.
3. What are cookies and comparable technologies?
Cookies are small text files that are stored on your device when you visit a website. They may be technically necessary in order to provide a website, to enable logins, to store language settings, to implement security functions or to document consent. In addition, cookies and similar technologies may also be used for analytics, statistics, convenience or marketing purposes, provided that valid consent is required for this and has been given.
Comparable technologies may include, in particular, local storage, session storage, pixels, tags, SDKs or server-side identifiers. Insofar as we use such technologies, we treat them functionally as cookies in this policy.
4. Principle: technically necessary cookies and optional services
Our website uses technically necessary cookies and comparable technologies insofar as these are necessary in order to provide the website, security functions, login functions, language settings, consent management, payment processes or other functions expressly requested by the user.
Optional cookies and services, in particular statistics, analytics or marketing services, are only used insofar as consent is required for this and you have given it. You may withdraw consent that has been given at any time with effect for the future.
5. Legal bases
Section 25 TDDDG applies to the storage of information on your device or access to information on your device. Technically necessary cookies may be used on the basis of Section 25(2) TDDDG. For non-necessary cookies and comparable technologies, your consent in accordance with Section 25(1) TDDDG is regularly required.
Insofar as personal data is processed, the legal bases of the GDPR additionally apply. Technically necessary processing takes place in particular on the basis of Art. 6(1)(b) GDPR, insofar as it is necessary for the provision of requested functions or the performance of a contract, or on the basis of Art. 6(1)(f) GDPR, insofar as there is a legitimate interest in security, stability and user-friendly provision. Consent-based services take place on the basis of Art. 6(1)(a) GDPR.
6. Consent management and withdrawal
To manage consent, we use a consent management tool. Via this tool, you can activate or deactivate optional services and withdraw consent at any time with effect for the future. You can access the settings area via the cookie icon or the corresponding link in the footer of the website.
The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
7. Browser settings
You can additionally block, delete or restrict cookies via your browser settings. Please note that the website or individual functions may not work, or only work to a limited extent, without certain cookies.
8. Categories of cookies and services used
| Category | Purpose | Consent required? | Examples |
|---|---|---|---|
| Technically necessary | Provision of the website, login, security, consent storage, payment processing, language settings | No, insofar as necessary for the requested service | Session/auth cookies, consent status, security and load-balancing cookies |
| Functional / preferences | Convenience functions and storage of voluntary settings | Yes, insofar as not technically necessary | Language, interface, voluntary settings |
| Statistics / analytics | Analysis of website usage and improvement of the user experience | Yes | Google Analytics 4 |
| Tag/service management | Technical management of optional scripts and services | Yes, insofar as optional services are controlled | Google Tag Manager |
| Payment services | Secure payment processing and fraud prevention | No, insofar as technically/contractually necessary; otherwise possibly yes | Stripe, PayPal, Apple Pay, Google Pay, Visa, Mastercard |
8.1 Cookie and service overview
The following overview lists the principal cookies and services used or potentially used. The authoritative information is the cookies, providers and durations currently disclosed via our consent management tool; individual technical values may change.
| Name / Service | Provider | Domain | Category | Purpose | Legal basis | Duration |
|---|---|---|---|---|---|---|
| Consent status (e.g. cmpconsent) | KudTax GmbH / Consentmanager | kud.tax | Technically necessary | Storage and management of the cookie/service settings | Section 25(2) TDDDG; Art. 6(1)(c)/(f) GDPR | up to 12 months |
| Session/auth cookie | KudTax GmbH | kud.tax | Technically necessary | Login, session management, security and platform use | Section 25(2) TDDDG; Art. 6(1)(b)/(f) GDPR | Session |
| Language setting / preference | KudTax GmbH | kud.tax | Functional / possibly necessary | Storage of the language setting and user preferences | Section 25(2) TDDDG or consent; Art. 6(1)(b)/(f)/(a) GDPR | up to 12 months |
| Cloudflare (e.g. __cf_bm, cf_clearance) | Cloudflare, Inc. | cloudflare.com / kud.tax | Technically necessary / security | Performance, delivery, DDoS protection, security and network functions | Section 25(2) TDDDG; Art. 6(1)(f) GDPR | __cf_bm approx. 30 minutes; cf_clearance up to 12 months |
| Framer Motion | Framer / library | kud.tax | Technical/functional | Display, animations and user guidance | Art. 6(1)(f) GDPR; possibly Section 25(2) TDDDG | No cookie |
| Google Analytics 4 (_ga, ga*) | Google Ireland Limited | google.com / google-analytics.com | Statistics / analytics | Web analytics, reach measurement, improvement of the website | Consent: Section 25(1) TDDDG; Art. 6(1)(a) GDPR | _ga up to 24 months (data retention max. 14 months) |
| Google Tag Manager | Google Ireland Limited | googletagmanager.com | Tag/service management | Management and triggering of scripts following consent | Consent: Section 25(1) TDDDG; Art. 6(1)(a) GDPR | No cookie of its own |
| Stripe (__stripe_mid, __stripe_sid) | Stripe Payments Europe Ltd. | stripe.com / checkout.stripe.com | Payment services | Payment processing, fraud prevention, transaction security | Section 25(2) TDDDG; Art. 6(1)(b)/(c) GDPR | __stripe_mid up to 12 months; __stripe_sid approx. 30 minutes |
| PayPal / Apple Pay / Google Pay / card providers | respective payment service | respective provider | Payment services | Provision of the selected payment method | Art. 6(1)(b)/(c) GDPR; possibly consent | provider-dependent |
9. Explanations of individual services
9.1 Consentmanager
We use a consent management tool to manage and document your consent decisions. The tool serves to store your selection, to activate or deactivate optional services in accordance with your selection and to ensure that consent can be demonstrated. Insofar as the tool is technically necessary, it is used on the basis of Section 25(2) TDDDG as well as Art. 6(1)(c) and (f) GDPR. Insofar as consent is concerned, the processing takes place on the basis of Art. 6(1)(a) GDPR.
9.2 Hosting, server log files and security
When the website is accessed, technically necessary access data is processed in order to deliver the website, to ensure technical operation, to prevent misuse and to be able to trace security incidents. This may include, in particular, the IP address, the time of access, the page accessed, browser and device information as well as referrer information. The legal basis is Art. 6(1)(f) GDPR; insofar as the processing is necessary for the provision of requested functions, also Art. 6(1)(b) GDPR.
9.3 Cloudflare / content delivery network
We may use a content delivery network and security services from Cloudflare in order to deliver content more quickly and reliably, to protect the website against attacks and to improve performance. In doing so, technical access data such as the IP address, time stamp, user agent, page visited and volume of data transferred may be processed. Insofar as Cloudflare is technically necessary for security and provision, it is used on the basis of Section 25(2) TDDDG as well as Art. 6(1)(f) GDPR. Insofar as optional analytics functions are used, this takes place only following consent.
9.4 JavaScript libraries / Framer Motion
We may use JavaScript libraries such as Framer Motion in order to provide animations, displays and user guidance. Insofar as no optional tracking or analytics purposes are pursued in this regard, the use takes place on the basis of our legitimate interest in a functional and user-friendly website, Art. 6(1)(f) GDPR.
9.5 Google Analytics 4
We may use Google Analytics 4 to analyse the use of our website, provided that you have consented to this. In doing so, page views, time spent, click paths, device information, approximate location and truncated IP addresses may be processed, in particular. The legal basis is your consent in accordance with Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the consent management tool.
9.6 Google Tag Manager
We may use Google Tag Manager to manage tags and scripts on the website. Tracking or analytics tags are only activated in accordance with your consent. Google Tag Manager itself serves the technical management of integrated services; insofar as personal data is processed in this regard, this takes place in accordance with the respectively applicable legal basis, in particular your consent for optional services.
9.7 Payment services / Stripe and further payment methods
If you book chargeable services or initiate payments, payment services such as Stripe as well as payment methods supported by Stripe may be used. In doing so, payment, invoicing, transaction and identification data may be processed. Payment-related cookies or comparable technologies may be technically necessary in order to enable secure payment processing. The legal bases are Section 25(2) TDDDG as well as Art. 6(1)(b) and (c) GDPR. For optional payment methods, the data protection and terms of use of the respective payment service may additionally apply.
10. Transfers to third countries
For individual services, processing outside the European Union or the European Economic Area cannot be ruled out. Insofar as a transfer to a third country takes place, it takes place in accordance with the GDPR, in particular on the basis of an adequacy decision, the EU-US Data Privacy Framework, standard contractual clauses or other appropriate safeguards.
11. Storage period
Cookies are only stored for as long as is necessary for the respective purpose or as indicated in the cookie table, in the consent management tool or in the respective service information. Session cookies are regularly deleted after the end of the browser session. Persistent cookies remain stored for the indicated duration, unless you delete them beforehand or withdraw your consent.
12. Amendment of this Cookie Policy
We may adapt this Cookie Policy if the services used, legal bases, technical processes or statutory requirements change. The authoritative version is the version published on our website at the relevant time.
13. Contact
If you have any questions about this Cookie Policy or about data protection, you can reach us at:
KudTax GmbH, Mertensstr. 26, 13587 Berlin, Germany, e-mail: [email protected], telephone: +49 176 77483716