1. Principle
Timeveo itself sets no cookies for advertising or analytics. On booking pages a business can switch on analytics and marketing services; these load only after the visitor consents (section 5).
The legal framework for access to end devices is § 25 TDDDG. Consent is required as soon as information is stored in or read from the browser that is not strictly necessary for the service the user has explicitly requested. This applies to cookies as well as to the browser’s local storage (Local Storage and Session Storage). The entries described as “strictly necessary” in this policy are permitted without consent under § 25(2) no. 2 TDDDG.
2. These legal pages (legal.timeveo.com)
Set no cookies and use neither Local Storage nor Session Storage. That is why there is no cookie banner here: there is nothing to consent to.
3. Landing page (timeveo.de)
The landing page itself sets no cookies. The pilot sign-up form is protected against automated submissions by Cloudflare Turnstile. Turnstile is loaded from Cloudflare and may set only strictly necessary cookies used to fend off bots. Details are in the Privacy Policy.
4. Timeveo application (sign-in and administration)
Signing in to the application sets strictly necessary cookies. Without them, signing in is not possible.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
timeveo-session |
Keeps the signed-in session and the settings stored in it, such as the chosen language | strictly necessary | 30 days |
XSRF-TOKEN |
Protection against cross-site request forgery on forms | strictly necessary | same as the session |
remember_web_… |
“Stay signed in”: signs you back in after the session expires; only if you choose the option | strictly necessary | 400 days |
tv_calendar_filters |
Remembers the filters in the staff calendar | strictly necessary | 60 days |
tv_calendar_place |
Remembers the day and view where you left the calendar | strictly necessary | 1 day |
The cookies are sent over encrypted connections and, except for XSRF-TOKEN and
tv_calendar_place, cannot be read by scripts in the browser. The chosen language is stored in the
session itself, not in a separate cookie.
In addition, the application stores display settings in your browser’s Local Storage and Session Storage: the chosen colour scheme, the state of the sidebar, the calendar view and filters, the height of panels in the till, progress through onboarding tours and dismissed notices. These entries never leave your browser and are strictly necessary to show the interface the way you set it up.
5. Booking pages of businesses
The booking pages that businesses publish with Timeveo are services of the respective business. The business is responsible for the cookies set there; Timeveo provides the technology (see Responsibilities). The full privacy information is in the Privacy Policy for Booking Pages.
On the first visit, the booking page asks for consent to three purposes: functional (always active), analytics and marketing. The choice can be changed at any time through the “Cookies” button at the edge of the page.
Strictly necessary, no consent required:
| Name | Purpose | Duration |
|---|---|---|
timeveo-session |
Session during booking, shopping and in the customer account, including the cart | 30 days |
XSRF-TOKEN |
Protection against cross-site request forgery on forms | same as the session |
remember_web_… |
Keeps you signed in after signing in with Google or choosing “stay signed in” | 400 days |
consent_cookie_id |
Random identifier to which the consent decision is linked. Only set once you have decided in the banner | 1 year |
storefront-theme (Local Storage) |
Chosen colour scheme | until deleted |
| Notice state (Local Storage) | Remembers that a notice about closing days was dismissed | until deleted |
tv-package-purchase-polls (Session Storage) |
Status check after buying a package | until the tab is closed |
Only after consent, and only if the business has switched the service on:
| Service | Purpose | Example cookies | Consent |
|---|---|---|---|
| Google Analytics 4 | Audience measurement and measurement of bookings | _ga, _ga_… (up to 2 years) |
Analytics |
| Meta Pixel | Measurement of advertising campaigns on Facebook and Instagram | _fbp (up to 90 days) |
Marketing |
| Google Tag Manager | Loads the measurement services configured by the business | depends on the services loaded | Analytics and marketing |
If consent is withdrawn, the booking page stops loading the affected services and deletes the
cookies they set (_ga, _ga_…, _gid, _gat, _fbp, _fbc). Cookies a browser stored for a
different domain, or that your browser settings put out of our reach, can additionally be deleted
in your browser settings.
If a booking page shows a Google Maps map, it is only loaded after you click “Load map”; nothing is transmitted to Google before that. After the click, Google may set its own cookies. Details on Google Maps and the embedded fonts are in the Privacy Policy for Booking Pages.
6. Deleting cookies
You can delete or block cookies and stored site data at any time in your browser settings. If the strictly necessary cookies are blocked, signing in to the application or the customer account is no longer possible.
7. Changes
If our use of cookies changes, we update this page beforehand. Each version carries a version number and a date; superseded versions are kept in the archive.