Checked on 8/30/2026 · https://www.drwindows.de/
Critical items: 2.
| Third-party CDN: Google Hosted Libraries | -5 |
| Tag manager: Google Tag Manager | -12 |
| No link to the privacy policy found | -15 |
| Result | 68 / 100 |
Multiple services of the same kind count on a sliding scale. The score is a guide, not a legal verdict.
Analytics, advertising or social services load without any consent solution being detectable.
What you should do: Add a consent tool that loads these services only after active consent (not just displays a banner). Until then, remove the scripts or switch to consent-free alternatives.
§ 25 (1) TDDDG together with Art. 6 (1) GDPR — access to terminal equipment only with prior consent.
A privacy policy must be directly reachable from every page.
What you should do: Place a “Privacy” link permanently in the footer so it is visible on every subpage.
Art. 13 GDPR — duty to inform when collecting personal data.
| Service | Purpose | Vendor | Country | Legal basis |
|---|---|---|---|---|
| Google Hosted Libraries ajax.googleapis.com |
Delivery of libraries or maps via third-party servers | Google LLC | US ⚠ | Grey area — better to self-host; otherwise consent |
| Google Tag Manager www.googletagmanager.com |
loads further scripts — content depends on the configuration | Google LLC | US ⚠ | Consent required once it loads non-essential items |
⚠ Established outside the EU/EEA — the transfer needs an additional basis (e.g. the EU-US Data Privacy Framework or standard contractual clauses).
Weekly re-scan, email as soon as a new tracker appears — coming soon.
On 8/30/2026 we checked the HTML that www.drwindows.de delivers on first load without a login (normal desktop browser, EU location). Detected: services embedded in the source (scripts, stylesheets, iframes, pixels), a cookie banner based on known providers, cookies from the server response, and links to the privacy policy and legal notice.
Not checked: anything that loads only via JavaScript, content behind a login, subpages, behaviour after clicking “Accept”/“Reject”, server locations and data-processing agreements. The result is an automated snapshot and not a substitute for legal advice.