PERGOLA Studios · Developer Handoff · Rev. 1
Legal & Cookie Briefing
Companion document to the One-Pager Link Map. It covers the three mandatory legal pages, the cookie/consent setup with Real Cookie Banner (devowl.io), the lightbox behaviour, font self-hosting, and contains the ready-to-use German legal texts.
Single-page site · Consent: Real Cookie Banner (devowl.io) · Hosting: united-domains GmbH · Analytics: Google Analytics 4 · Stand: 07 Jun 2026
1
What & why
Scope
Three parts are mandatory for this site and are covered here:
- Impressum — required by § 5 DDG (formerly § 5 TMG). Missing/incomplete = fines up to €50,000 plus Abmahnung risk.
- Datenschutzerklärung — required by Art. 13 GDPR as soon as personal data is processed (IP, server logs, embedded services).
- Cookie consent — required by § 25 TDDDG because Google Analytics, Vimeo, Google Maps and Calendly access the visitor’s device / set cookies.
AGB is not legally required and is out of scope for now. No Widerrufsbelehrung is needed (no B2C online shop; Calendly is scheduling only).
2
For the developer
Implementation rules
2.1 — Legal pages open in a lightbox
To keep the one-pager character, Impressum and Datenschutzerklärung open in an in-page lightbox / modal — not as separate pages or new tabs. The same applies to the future Team page. The three legal links sit in the footer next to the copyright line.
Footer — Impressum, Datenschutz, AGB, Cookie-Einstellungen sit bottom-right. AGB can be hidden for now.
2.2 — Cookie consent with Real Cookie Banner (devowl.io)
Use Real Cookie Banner by devowl.io (German, self-hosted, free plan is enough to start). Steps:
- Install Real Cookie Banner and choose Opt-in (GDPR) mode.
- Run the built-in scanner, then add the ready-made service templates for the services below.
- Set all non-essential services so they load only after consent.
- Turn on the Content Blocker for the Vimeo and Google Maps embeds — it shows a branded placeholder/consent box (pairs nicely with our in-page video lightbox).
- Keep everything self-hosted (no third-party CDN). Complete an AVV with devowl.io if required.
| Service | RCB template | Category | Behaviour |
|---|---|---|---|
| Google Analytics 4 | “Google Analytics” | Statistik / Analytics | Block until consent |
| Vimeo (videos) | “Vimeo” | Externe Medien | Block until consent + Content Blocker (placeholder) |
| Google Maps | “Google Maps” | Externe Medien | Block until consent + Content Blocker (placeholder) |
| Calendly (booking) | RCB template or custom Content Blocker | Externe Medien / Funktion | Block until consent |
2.3 — “Cookie-Einstellungen” footer link
Wire the footer link Cookie-Einstellungen to Real Cookie Banner’s “change consent” trigger (RCB provides a ready block / shortcode / CSS class for this). It re-opens the consent dialog so visitors can change or withdraw consent. No custom modal needed.
2.4 — Self-host all fonts (no Google Fonts)
The Hausschrift Modern Gothic is self-hosted. The fallback fonts Cormorant Garamond and Manrope are Google Fonts and must also be self-hosted or replaced with system fonts. In Elementor, set Google Fonts to Load Locally or disable them.
fonts.googleapis.com transfers visitor IP addresses to Google (US). Without consent this is a real Abmahnung risk in Germany (LG München I, 2022). Self-hosting removes the issue entirely.2.5 — Auftragsverarbeitungsverträge (reminder)
Not a website page, but required (Art. 28 GDPR): conclude an AVV with each processor — united-domains (hosting), Google (Analytics), Vimeo, Calendly, devowl.io (if applicable), and the email/CRM provider.
3
Legal text · mandatory
Impressum
→ Copy the German text below verbatim into the Impressum lightbox. Replace only the highlighted tokens. Do not put any [bracket tokens] on the live site.
Angaben gemäß § 5 DDG
Blutenburgstr. 59
80636 München
Deutschland
Vertreten durch den Geschäftsführer:
Kontakt:
E-Mail: ciao@pergolastudios.com
Registereintrag:
Umsatzsteuer-Identifikationsnummer gemäß § 27 a Umsatzsteuergesetz:
Redaktionell verantwortlich (§ 18 Abs. 2 MStV):
Verbraucherstreitbeilegung / Universalschlichtungsstelle:
5
Legal text · mandatory
Cookie-Hinweise
→ Copy the German text below verbatim. The services table is auto-maintained by Real Cookie Banner once live — this version is orientation only.
Diese Seite ergänzt Ziffer 4 der Datenschutzerklärung.
Kategorien
Notwendig: für den Grundbetrieb erforderlich (Art. 6 Abs. 1 lit. f DSGVO, § 25 Abs. 2 TDDDG), ohne Einwilligung. Statistik: Google Analytics, nur mit Einwilligung. Externe Inhalte/Funktionen: Vimeo, Google Maps, Calendly, nur mit Einwilligung.
Einwilligung und Widerruf
Beim ersten Besuch erscheint ein Consent-Banner (Real Cookie Banner) mit gleichwertigen Optionen „Alle akzeptieren” und „Alle ablehnen” sowie Einzelauswahl. Nicht notwendige Dienste laden erst nach Zustimmung; Vimeo und Google Maps werden bis zur Einwilligung über den Content-Blocker gesperrt und durch einen Platzhalter ersetzt. Änderung/Widerruf jederzeit über „Cookie-Einstellungen” im Footer.
Eingesetzte Dienste
| Dienst | Kategorie | Anbieter | Einwilligung |
|---|---|---|---|
| Real Cookie Banner | Notwendig | devowl.io GmbH (self-hosted) | Nein |
| Google Analytics 4 | Statistik | Google Ireland Ltd. | Ja |
| Vimeo | Externe Inhalte | Vimeo, Inc. (USA) | Ja |
| Google Maps | Externe Inhalte | Google Ireland Ltd. | Ja |
| Calendly | Externe Funktion | Calendly LLC (USA) | Ja |
6
Before go-live
Checklist
- HRB number — add to the Impressum once the registration at Amtsgericht München is complete.
- VAT ID (USt-IdNr.) — insert it, or delete the line if none exists.
- Hosting: ask united-domains for the server-log retention period and enter it; conclude the AVV.
- Real Cookie Banner: set up in opt-in mode; add templates for GA4, Vimeo, Maps, Calendly; enable the Content Blocker for Vimeo/Maps; wire the “Cookie-Einstellungen” link to RCB’s re-open dialog.
- Google Analytics 4: install the GA4 WordPress plugin; Michael will provide the access data (Measurement ID / property access) ASAP. Then: IP shortening on, Signals/ads off, retention minimal, load only after consent.
- Fonts: self-host the fallbacks (Cormorant Garamond, Manrope) or use system fonts; in Elementor set Google Fonts to load locally / disable.
- Data-processing agreements (Art. 28 GDPR) with united-domains, Google, Vimeo, Calendly, devowl.io and the email/CRM provider.
- Lightbox: Impressum + Datenschutz open in the in-page lightbox (one-pager character).
- Final review of the texts via a generator/lawyer; set the publication date.