1. Scope
This policy describes cookies and similar browser storage on x25pronto.at and supplements the privacy policy. In Austria, storage of information on terminal equipment or access to information already stored there is governed in particular by section 165(3) TKG 2021. We do not use advertising cookies to sell or market user profiles.
2. Strictly necessary functions
Necessary cookies or comparable storage may be used for login, account activation, session and CSRF protection, language, pricing and booking flows, the driver portal, app/portal state, consent records and security functions. Where storage or access is strictly necessary to provide a digital service expressly requested by the user, no separate optional consent is required under section 165(3) TKG 2021.
3. SessionStorage
The AI Bot chat and certain communication or interface states may be stored in sessionStorage. This allows them to remain available during reloads and page changes within the same browser session. sessionStorage is not intended as permanent, cross-browser storage.
4. First-party statistics and enhanced analytics
Data-minimised operational baseline statistics are processed through x25pronto infrastructure without an optional persistent browser identifier. Enhanced first-party analytics using a linked visitor/session identifier is enabled only according to the choice made in cookie settings. Refusing optional analytics does not prevent login, account activation, price calculation, booking or the driver portal.
5. Google Tag Manager
With consent to enhanced analytics, Google Tag Manager with container ID GTM-5XQMWR58 is enabled. x25pronto.at additionally verifies this release server-side using signed consent information. The GTM bootstrap is delivered through /api/privacy/gtm.js only after a successful backend check; without valid consent, this endpoint remains blocked. Google Tag Manager is a container for delivering approved tags. Google Analytics is not configured on x25pronto.at.
6. Contract, security, referral and portal events
Technical events such as account activation, security status, order acceptance, portal status, delivery/bounce status and referral activation, open and click events may be processed server-side for contract performance, security, deliverability, evidence, misuse prevention or programme administration as described in the privacy policy. Refusal of optional website analytics does not disable technically or contractually necessary system processes.
7. Other external services
Stripe, mapping/routing services, WhatsApp, embedded media or other external services may use their own cookies or similar technologies when actually used. Where an optional integration requires consent, it is loaded only after the relevant approval. Necessary payment, mapping, security or communications functions may use technically required storage provided by the relevant service.
8. Changing your choice
Cookie settings can be reopened at any time from the footer. Changes apply to future optional processing. Data already transmitted to external services cannot be retrieved retroactively by changing the setting later. Local browser data can additionally be deleted through browser functions.