Cookie Policy
Which cookies and similar storage autovig.eu uses, the Belgian legal basis (art. 129 Loi 13 juin 2005), the per-cookie inventory, and how to manage consent.
This Cookie Policy describes the cookies and similar browser-storage entries used on autovig.eu (the "Site"), their purpose, the legal basis on which they are deployed, and how you can grant, refuse or withdraw consent. It complements our Privacy Policy and forms an integral part of it.
1. What a cookie or similar technology is
A cookie is a small piece of data that a website asks your browser to store. Some cookies live for a single browser session (session cookies); others persist across visits (persistent cookies). The same legal rules apply to other browser-storage mechanisms such as localStorage, sessionStorage, IndexedDB, web beacons, pixel tags or fingerprinting techniques. In this Policy, the term "tracker" covers all of them — this is the reading confirmed by the Court of Justice of the European Union in Planet49 (C-673/17).
2. Legal basis
The deployment of trackers on terminal equipment located in the European Union is governed by:
These provisions require prior, specific, informed, freely given and unambiguous consent for any non-strictly-necessary tracker. Consent is interpreted in line with the rulings of the Court of Justice of the European Union in Planet49 (C-673/17) and Proximus (C-129/21), the EDPB Guidelines 05/2020 on consent and 03/2022 on deceptive design patterns, and the cookie guidance published by the Belgian Autorité de protection des données / Gegevensbeschermingsautoriteit (APD / GBA).
Two categories are exempted from prior consent under article 5(3) ePrivacy and article 129 of the Loi du 13 juin 2005:
We classify each tracker under one of those exemptions or as consent-required, never both.
3. Categories used on autovig.eu
The Site groups trackers into the same three categories shown on the consent banner:
Strictly necessary
Required for the Site to load and for the consent banner itself to operate. Deployed without consent on the basis of the second exemption above. You cannot disable them without breaking core functionality.
Analytics
Loaded only after you click "Accept" or save preferences with analytics enabled. Used to count aggregated, pseudonymous page-views and to understand which guides are useful. Not linked to identifiable individuals on our side and not shared with advertising networks. If you decline or withdraw consent, the analytics script is not loaded at all.
Marketing
Not currently in use. autovig.eu is in prelaunch and runs no advertising, no retargeting and no cross-site tracking. The category remains visible in the consent banner as a placeholder so the structure remains stable; until a marketing tracker is actually deployed, this toggle controls no cookies and accepting it has no effect.
4. Inventory
The following inventory reflects the autovig.eu deployment at the date shown in the updatedAt field above. It is reviewed at every clean audit pass.
autovig_consentAutovig (first-party localStorage entry)Strictly necessaryRecords your per-category cookie choice so we do not re-prompt on every pagelocalStorage (not transmitted to the server)Until you clear browser storage or change your choiceClient-side only (your device)_cfbmCloudflare Inc. (CDN edge in front of OVH origin)Strictly necessaryDistinguishes humans from automated traffic for bot mitigation, in support of operational security under GDPR art. 6(1)(f)HTTP cookie (first-party, set by edge)30 minutesEU edge (with global anycast routing)ga, ga_<container-id>Google Ireland Limited (Google Analytics 4)Analytics — consent requiredPseudonymous page-view measurement (page, locale, device class, referrer host)HTTP cookies (first-party, set by GA4 script after consent)13 months (we do not extend Google's default)Ireland (EU), with onward transfer to United States — see section 7We do not deploy any tracker on the Site outside this inventory. If a new tracker is added, this Policy is updated before deployment and the consent banner re-asks consent where the new tracker is consent-required.
5. Consent capture
autovig_consent localStorage entry described in section 4. We retain this record to demonstrate compliance with GDPR article 7(1).6. Withdrawing consent — as easy as giving it
You can change or withdraw your choice at any time, in compliance with GDPR article 7(3) and EDPB Guidelines 05/2020 § 74 (withdrawal as easy as the initial consent):
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. Third-country transfers triggered by cookies
When the Google Analytics 4 script is loaded — only after you grant analytics consent — Google Ireland Limited (Dublin, Ireland) acts as our processor under GDPR article 28. Personal data may be onward-transferred from Google Ireland Limited to Google LLC (Mountain View, United States) within the same group.
The transfer relies on the cumulative safeguards described in section 9 of our Privacy Policy: Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and the EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), under which Google LLC self-certifies. No other third-party tracker runs on the Site, so no other third-country transfer is triggered by trackers.
8. Retention
Non-strictly-necessary trackers do not exceed 13 months of retention, in line with the EDPB guidance and the APD/GBA cookie guidance. The per-tracker expiry is stated in the inventory table at section 4. The consent decision itself is stored on your device only and is removed when you clear browser storage or change your choice.
9. Children
The Site is not directed at children and we do not knowingly process personal data of children below the digital-consent threshold. In Belgium, where the controller is established, article 7(1) of the Loi du 30 juillet 2018 sets that threshold at 13 years; thresholds in other Member States may be higher (up to 16 years), and the higher national threshold applies to children resident in those Member States. If you believe that a child below the applicable threshold has provided personal data to us through cookies, please write to contact@autovig.eu.
10. Changes to this Policy
We may update this Policy when the Site evolves. The updatedAt date in the page header reflects the latest revision. Material changes — new tracker, new processor, new transfer mechanism, change in retention — are highlighted at the top of the page for at least 30 days before they take effect. Where a change adds a consent-required tracker, the consent banner re-asks consent. Previous versions of this Policy are available on request at contact@autovig.eu.