Cookie Policy Framework 1. Understanding Cookies What Is a Cookie Policy? A cookie policy is a crucial legal document that provides comprehensive details about how a website utilizes cookies and similar technologies. It outlines the specific functions of each cookie, the reasons for their use, and the methods available for users to manage their cookie preferences. Under various regulations, including the EU ePrivacy Directive, the UK’s Privacy and Electronic Communications Regulations (PECR), and the General Data Protection Regulation (GDPR), such a policy is mandatory when cookies are deployed to collect personal data. The main objective of a cookie policy is to equip users with the necessary information to make informed decisions regarding the acceptance and management of cookies on their devices. This Cookie Policy specifically pertains to the C.I.A.S.I.S. domain, which is operated by DEMDERAW PRO LTD. It encompasses all cookies and related technologies utilized on the platform, including those deployed by our organization and those set by third-party vendors. By accessing and using our platform, users indicate their acknowledgment of having read and understood this policy, thus consenting to the implementation of cookies as detailed herein. For cookies that necessitate explicit user consent, we implement a consent banner to capture this agreement. This Cookie Policy functions in conjunction with our Privacy Policy, General Terms Policy, and Public Use Policy. In instances where there may be overlap between this policy and another associated document, the more specific document will take precedence. We are committed to maintaining the accuracy and relevance of this policy; therefore, we conduct an annual review and will make timely updates whenever there are significant changes in our cookie usage or shifts in the regulatory landscape that affect how cookies are managed. GDPR & ePrivacy Requirement The use of cookies on the C.I.A.S.I.S. domain is governed by two interconnected legal frameworks, ensuring user privacy and consent regarding data collection practices. The first framework is the ePrivacy Directive, which has been implemented in the UK as the Privacy and Electronic Communications Regulations (PECR). This legislation specifically addresses the conditions under which cookies are placed on a user’s device. According to PECR, it is mandatory to provide users with clear and comprehensive information regarding the purpose and function of each cookie prior to its placement. Furthermore, users must actively consent to the use of any cookie that is not strictly necessary for the functioning of the website. The second framework, the General Data Protection Regulation (GDPR), regulates the handling and processing of personal data collected via cookies. Under GDPR, any processing of personal data requires a lawful basis, meaning there must be specific legal grounds justifying the collection and use of that data. Additionally, users must be informed in a transparent manner about how their data will be utilized, and they must be made aware of their rights as outlined in our Privacy Policy. This includes the right to access their data, the right to rectify inaccuracies, and the right to withdraw consent at any time. To adhere to these legal requirements, we implement a robust consent mechanism that ensures we obtain explicit consent from users before any non-essential cookies are placed on their device. We provide detailed information about each type of cookie used on our site, including its purpose, the duration it will remain on the user’s device, and the data it collects. This comprehensive approach allows users to make informed decisions regarding their privacy. Our consent mechanism is powered by Google Consent Mode, which aligns with the IAB Transparency and Consent Framework (TCF) to guarantee compliance with industry standards. Each user’s consent is recorded based on their IP address to maintain accountability and traceability. Additionally, consent is set to automatically renew upon expiration, ensuring that users are continually informed and in control of their cookie preferences without needing to resubmit their consent frequently. This diligent approach to cookie management demonstrates our commitment to protecting user privacy while maintaining compliance with applicable regulations. Service User And Trust Trust serves as the cornerstone of the relationship between our platform and our users. We prioritize transparency and user experience when it comes to our use of cookies, which are small data files stored on your device to enhance your interaction with our services. Our primary aim is to deliver a better and more personalized service, rather than to exploit user data in any way. We want to assure our users that we do not use cookies to collect sensitive personal information, such as financial details or personal identification data. Additionally, we do not create user profiles based on this data for making decisions that could significantly impact your experience or choices. Furthermore, we do not share cookie-derived information with third parties for purposes that users would not reasonably expect or have not explicitly consented to. Each cookie we implement is used for a specific, clear, and legitimate purpose. In circumstances where a less intrusive alternative exists, we choose not to utilize cookies, thereby respecting user privacy. We are committed to being fully transparent about how cookies are utilized on our platform. To aid users in making informed decisions, we provide comprehensive information regarding our cookies and how they function. Should any user have questions or concerns regarding our use of cookies, we encourage them to reach out via our Contact page. We take all inquiries seriously and respond in good faith, ensuring that all concerns are addressed appropriately. Moreover, we want our users to feel safe in voice their concerns. We maintain a strict policy against retaliation; users who raise questions or express concerns about our cookie practices will not be tracked or penalized in any way. Your trust is paramount to us, and we are dedicated to fostering an open and respectful dialogue over any aspect of our service. Platform Compliance Platform compliance is a comprehensive process designed to guarantee that the implementation and usage of cookies on the C.I.A.S.I.S. domain adhere to the stringent requirements set forth by the ePrivacy Directive, the General Data Protection Regulation (GDPR), and the UK’s Privacy and Electronic Communications Regulations (PECR). This process involves scrutinizing cookie practices, obtaining informed consent from users, providing transparent information about cookie usage, and implementing appropriate measures to safeguard user privacy. By adhering to these regulations, we aim to foster trust with our users while ensuring lawful and responsible management of their data. Our compliance framework includes: Cookie audit: a periodic audit of every cookie on the platform, to ensure that the inventory is accurate and up to date. Categorisation: the categorisation of each cookie by type, to ensure that the consent mechanism treats each cookie correctly. Consent mechanism: a consent banner that meets the standards of the ePrivacy Directive and the GDPR, including the requirement that consent is freely given, specific, informed, and unambiguous. Preference management: a way for users to change their cookie preferences at any time, through the consent banner or through the browser settings. Documentation: documentation of the cookies, the consent records, and the compliance process, to demonstrate compliance to regulators and to users. Compliance is an ongoing process, and we update our framework as the law and best practice evolve. We cooperate with regulatory authorities in the investigation of any concern about our use of cookies. SEO & Penalty Avoidance The use of cookies on our platform has significant implications for search engine optimization (SEO) as well as compliance with regulatory standards. Proper cookie management is essential to mitigate potential risks, including penalties from regulatory authorities. To address the SEO aspect, we prioritize the placement of strictly necessary cookies before obtaining user consent. This strategic approach ensures that the core functionalities of our platform remain unaffected by the consent mechanism, thereby maintaining optimal user experience and site performance. Additionally, we integrate Google Consent Mode, which is designed to modify the behavior of Google tags in accordance with the user’s consent status. This means that we can still gather aggregate and anonymized analytics data even if a user opts out of analytics cookies, ensuring that we do not collect any personally identifiable information. On the compliance front, we rigorously ensure that our consent mechanism aligns with the standards set forth in the ePrivacy Directive and the General Data Protection Regulation (GDPR). By adhering to these regulations, we significantly reduce the risk of facing enforcement actions from regulators. We are proactive in monitoring the evolving regulatory landscape, which includes staying informed about changes in the law and guidance related to cookie usage. As part of our commitment to compliance, we regularly update our consent mechanism to reflect these changes and ensure ongoing adherence. Furthermore, in the event that a regulatory body raises any concerns regarding our practices, we respond promptly and in good faith. We prioritize transparency and collaboration with regulators, and we take necessary corrective actions when any concerns are validated. This proactive and responsive approach helps us maintain compliance while safeguarding user trust and ensuring the integrity of our platform. 2. Cookie Types Cookie Types Explained Cookies are small text files that websites store on a user’s device, such as a computer or mobile phone, when they visit. These files are crucial for enhancing user experience, as they remember various pieces of information about the user. This can include preferences like language or layout choices, login information to keep users signed in, and details about the specific pages that have been visited, allowing for a more personalised browsing experience. Cookies can be categorized based on their purpose, duration, and origin. Strictly Necessary Cookies: These cookies are essential for the basic functioning of the website. Without them, certain features or services may not work, making it impossible for users to complete actions like online transactions. Functional Cookies: These cookies enhance the functionality of the website by enabling features such as remembering user preferences, ensuring that the site can provide a more customised experience. Analytics Cookies: These are used to collect information about how visitors interact with a website. They help in understanding user behavior by tracking metrics such as page views, time spent on pages, and traffic sources, which ultimately assists in improving the website. Marketing Cookies: Used to track visitors across websites, these cookies are aimed at delivering advertisements that are more relevant to individual users. They help in measuring the effectiveness of marketing campaigns. Session Cookies: These cookies are temporary and only remain on the user’s device while they are actively navigating the website. They are deleted automatically once the browser is closed, helping manage user sessions. Persistent Cookies: In contrast, persistent cookies are stored on the user’s device for a set duration, even after the browser is closed. They are used for remembering information like login details over multiple sessions, ensuring a more seamless user experience. First-Party Cookies: These cookies are set by the website that the user is visiting directly. They can typically only be read by that site and are primarily used to enhance the browsing experience. Third-Party Cookies: These cookies are created by domains other than the one the user is visiting. They are commonly used for tracking and online advertising purposes, providing advertisers with the ability to deliver targeted ads based on the user’s browsing habits across multiple sites. On the C.I.A.S.I.S. domain, we utilize cookies from each of these categories to optimise user experience and gather valuable insights. Each type of cookie serves specific functions that contribute to the overall interactivity and usability of the site. For cookies that are not strictly necessary, we ensure that they are only placed on a user’s device after obtaining explicit consent through a user-friendly consent banner. This approach reflects our commitment to user privacy and compliance with applicable regulations. Strictly Necessary Cookies Strictly necessary cookies are a type of cookie that play a crucial role in the fundamental operation of an online platform. These cookies are indispensable because, without them, the platform would be unable to function properly, preventing users from accessing essential services and features. Specifically, strictly necessary cookies are responsible for a variety of functions that enhance user experience and maintain the platform’s integrity. For instance, they remember the user’s login state, ensuring that users remain authenticated throughout their session. This functionality is vital for seamless navigation and interaction with the platform, as it eliminates the need for users to log in repeatedly. Additionally, these cookies help maintain the security of the user session by providing protection against security threats such as cross-site request forgery (CSRF). They also store the user’s cookie consent preferences, allowing the platform to respect the user’s choices regarding their privacy settings. Importantly, strictly necessary cookies do not require explicit consent from users, as they are essential for the core functionalities of the platform. By using the platform, users inherently provide implied consent for these cookies to be used, as their absence would hinder the user’s ability to utilize the services effectively. Therefore, these cookies are integral to a secure and functional user experience. The strictly necessary cookies used on the C.I.A.S.I.S. domain name include: Session cookie: maintains the user’s session, including the login state, and expires when the browser is closed. Consent cookie: remembers the user’s cookie consent preference for 14 days, based on the IP address. Security cookie: protects the platform against cross-site request forgery (CSRF) and other security threats. Strictly necessary cookies are not used for tracking, profiling, or advertising, and they do not collect personal data beyond what is necessary for the operation of the platform. Functional Cookies Functional cookies play a significant role in improving the overall user experience on a platform by adding extra features that enhance its functionality, though they are not critical for the platform’s basic operations. These cookies are designed to remember specific user settings and preferences, such as the language a user chooses to interact with, the display options that suit their viewing needs, and any saved content like bookmarks or personalised itineraries. Importantly, functional cookies are only activated after obtaining explicit consent from the user, as they fall outside the category of essential cookies required for the platform to function. The functional cookies used on the C.I.A.S.I.S. domain name include: Language preference cookie: remembers the user’s language preference for the duration of the session. Display preference cookie: remembers the user’s display preferences, such as light or dark mode, for 30 days. Functional cookies are not used for tracking, profiling, or advertising, and they do not collect personal data beyond what is necessary for the functionality they provide. Analytics Cookies Analytics cookies are specialized tracking cookies designed to gather detailed information about user interactions with the platform. They monitor various aspects of usage, such as which pages users visit, the duration of their visits on each page, and the specific features they engage with. This collected data is aggregated and anonymised, ensuring that individual user identities remain protected. The insights gained from analytics cookies are instrumental in helping us comprehend user behaviour and preferences, allowing us to make informed decisions for enhancing the platform’s overall functionality and user experience. It’s important to note that these cookies are only activated once the user has provided explicit consent, and users retain the option to withdraw their consent at any time, thereby ensuring control over their personal data. The analytics cookies used on the C.I.A.S.I.S. domain name include: Page view cookie: records the pages visited, for the purpose of aggregate analytics. Session duration cookie: records the time spent on the platform, for the purpose of aggregate analytics. Feature usage cookie: records the features used, for the purpose of improving the platform. Analytics cookies do not identify the user, and the data collected is not used for profiling or for advertising. Where Google Consent Mode is active, aggregate, anonymised analytics data is collected even where the user has not consented to analytics cookies, in a way that does not identify the user. Marketing And Advertising Cookies Marketing and advertising cookies are specialized tracking technologies designed to deliver personalised advertisements that align closely with the interests and preferences of individual users. These cookies serve multiple purposes, including monitoring how users interact with advertisements, creating detailed profiles based on their interests and behaviours, and facilitating the distribution of targeted advertisements across various third-party platforms. Importantly, these marketing and advertising cookies are only activated once users have provided explicit consent, ensuring that their privacy and autonomy are respected. Users retain the right to withdraw their consent at any point, allowing them to control their data and advertising preferences. At C.I.A.S.I.S., we are committed to transparency and user control regarding our use of marketing and advertising cookies. We exclusively implement these cookies in situations where the user has opted in, and our sole intention is to assess the effectiveness of our own newsletters and promotional content. We want to emphasize that we do not use marketing and advertising cookies to construct user profiles for any third-party platforms, nor do we share user data with such platforms for their targeted advertising purposes. Furthermore, in cases where users have chosen not to opt in, we ensure that no marketing or advertising cookies are deployed, thus safeguarding user privacy and maintaining the integrity of their online experience. 3. Sector Contexts Cookies The implementation of cookies differs across various sectors, and the C.I.A.S.I.S. domain operates within a wide range of these sectors. In this section, we will delve into the specific ways cookies are utilized within each sector, highlighting the unique purposes they serve. Additionally, we will outline how our practices regarding cookies in each sector are regulated by this policy, ensuring transparent and responsible use of this technology. Media & Entertainment Cookies The corporate platform meticulously regulates the dissemination, streaming, and monitoring of multimedia assets to align with the evolving landscape of global copyright laws, intellectual property directives, and stringent digital privacy mandates. This comprehensive framework establishes a series of legal protocols designed to govern the transmission of digital assets, ensuring that audience engagement methods and analytical tracking mechanisms adhere to international standards. By implementing these robust compliance structures, the enterprise affirms its commitment to ensuring that content distribution networks consistently meet telecommunication standards, electronic commerce regulations, and jurisdictional codes pertaining to information society services, thereby fostering a secure environment for all stakeholders involved. The digital architecture of the platform employs a combination of specialized content delivery networks (CDNs) and advanced security tokens to meticulously manage data pipelines. These tools authorize media access and actively prevent any violations related to digital rights management (DRM). Such technological mechanisms are essential for addressing and mitigating various operational risks that could arise, including unauthorized asset replication, exploitation of bandwidth resources, and the illicit redistribution of proprietary streams through peer-to-peer networks. By maintaining these defensive layers, the platform aims to create a thoroughly protected environment where media consumers and corporate partners can safely engage with broadcast materials, all while upholding high standards of data security and preserving the integrity of copyright protections. In adherence to international standards governing digital entertainment, data tracking technologies are employed through a well-defined consent capture framework. These technologies are further categorized into essential playback drivers, which facilitate seamless viewing experiences, streaming optimization tools that enhance delivery efficiency, audience measurement metrics that assess viewer engagement levels, and targeted marketing scripts designed to deliver personalized content and advertisements. Operational trackers play a crucial role in managing bandwidth allocation, ensuring efficient data flow, and stabilizing playback interfaces to prevent disruptions. Additionally, supplementary data gathering technologies are utilized to analyze user behavior, generate content recommendations, and support cross-platform promotional campaigns. Importantly, these activities require explicit consent from users prior to any data collection commencing, thus respecting user autonomy and privacy. End users are empowered with the autonomy to manage their viewing profiles and adjust their tracking preferences according to their individual needs. The digital platform features a user-friendly preference interface that allows users to modify, restrict, or even completely revoke tracking permissions without compromising their core service experience. The service provider is firmly committed to prohibiting any unauthorized monetization, data brokering, or third-party distribution of media consumption analytics. These structures underscore the organization’s dedication to providing a legally compliant, interactive entertainment experience that prioritizes user rights and defines a new standard in the digital content landscape. E-commerce & Finance Cookies The corporate platform orchestrates its commercial and transactional operations within a robust framework that adheres to a variety of international statutory mandates and stringent financial data security protocols. This comprehensive regulatory framework functions as a legal benchmark that governs the complex workflows of electronic commerce, the intricate processes of monetary data handling, and the precise mechanisms for tracking merchant activities. By implementing these compliance structures, the organization meticulously ensures that all digital financial interactions conform to established anti-money laundering directives, maintain the highest standards of payment card security, and adhere to the varying jurisdictional monetary codes applicable across different regions. To support these regulatory requirements, the platform’s underlying digital architecture is fortified with state-of-the-art encryption technologies and sophisticated session validation tools. These advanced security measures are designed to protect financial communications from potential breaches, authorize secure checkout processes efficiently, and mitigate transactional latency that could hinder the user experience. The technical protocols in place are strategically developed to address and reduce enterprise risk factors, which include the unauthorized acquisition of credit, fraudulent entries in financial ledgers, and the automated interception of sensitive information related to corporate accounts. Through the enforcement of these protective mechanisms, the platform creates a secure and reliable environment conducive to the execution of trade agreements and the meticulous management of billing distributions. In order to comply with global fiscal transparency mandates, the platform employs a series of tracking instruments and data-capturing technologies that operate within a highly audited consent framework. This framework ensures that all data collection and processing activities are conducted transparently and ethically. These technologies are classified into distinct categories, including core transactional utilities that handle primary financial operations, billing verification components that authenticate transaction details, risk mitigation elements designed to identify and address potential vulnerabilities, and macroeconomic analytics that provide insights into broader economic trends. Key elements of these technologies are deployed automatically to ensure a seamless checkout experience while maintaining secure portal encryption throughout the transaction lifecycle. Moreover, secondary tracking mechanisms, which are intended for user behaviour analysis or market optimization purposes, are only activated with the explicit consent of the corporate buyer, reinforcing the importance of user privacy and choice. Corporate clients retain full legal control over their organizational data profiles through the platform’s user-friendly digital interface. This interface empowers clients to make immediate modifications, implement restrictions, or withdraw operational consent without impacting their existing contractual obligations. Furthermore, the service provider strictly prohibits the unauthorized monetization, secondary leasing, or distribution of any fiscal data collected during the course of the trade lifecycle to third parties. This commitment to data protection underscores the organization’s mission to deliver secure, legally compliant commercial services tailored to the needs of each corporate client. Social & Professional Cookies The legal enterprise responsible for overseeing this corporate platform diligently fulfills its data processing responsibilities in accordance with a comprehensive framework of international legal requirements and digital compliance standards. This regulatory framework provides a clear and detailed codification for the data tracking mechanisms that are implemented across professional networking sites and social connectivity features. By placing a strong emphasis on statutory transparency, the organization ensures that every aspect of its digital integration aligns with contemporary e-privacy regulations and the jurisdictional requirements that govern interactive corporate environments. The architectural design of the platform employs a range of specialized identifiers specifically designed to enhance peer-to-peer communication, promote effective business networking, and ensure the stability of the interface. These established protocols are crucial in mitigating various risk factors, including the potential for fraudulent profile creation, unauthorized credential harvesting, and automated scraping activities that may threaten corporate communications. By instituting these advanced technological safeguards, the platform’s infrastructure guarantees a legally protected setting where corporate entities can engage securely, fully safeguarding proprietary information and intellectual property. To comply with global data protection standards, the platform employs a rigorous consent governance system to manage data tracking instruments effectively. These technologies are carefully categorized into four distinct clusters: core operational components, performance evaluation tools, behavioral analytics mechanisms, and external network integration systems. Standard functional items are programmed to deploy automatically, stabilizing session states and ensuring secure access to the portal. In contrast, more sophisticated tracking mechanisms, which are intended for extensive analytical research or facilitating cross-platform professional interaction, necessitate a clear and affirmative action from the user before any data collection commences. End users are granted complete statutory autonomy concerning their personal information ecosystem, reflecting the platform’s commitment to user privacy. The architecture features a dynamic preference center, where users can easily alter, limit, or completely withdraw their tracking permissions without facing any institutional penalties or repercussions. Furthermore, the corporate legal service provider imposes a stringent prohibition against the monetization, unauthorized distribution, or algorithmic profiling of any data collected for purposes of independent commercial gain. By rigorously enforcing these established rules and principles, the organization strives to fulfill its primary objective: to deliver secure, legally compliant, and highly accountable corporate communication services that prioritize the rights and privacy of its users. Productivity & Developer Cookies The productivity and developer environment framework establishes comprehensive and rigorous protocols designed to optimize, protect, maintain, and enforce the legal rights associated with proprietary software properties. This advanced infrastructure implements enterprise-grade security extensions aimed at completely eliminating the risk of malicious script execution. It further seeks to mitigate unauthorized use of application programming interfaces (APIs) and ensures the integrity and legitimacy of the entire corporate coding infrastructure. Users engaging with these platforms can do so with absolute legal assurance, confident that the extensive software development architecture is fortified against cyber vulnerabilities, deceptive duplication, and any malicious operational interference tactics. In conjunction with these security measures, the regulatory developer cookie policy enforces a methodical, lawful, and consent-driven approach to specialized workflow tracking and the safeguarding of technical visitor privacy. Adhering strictly to the guidelines of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant international legal standards, the official website utilizes specific tracking technologies exclusively to enhance compilation performance and protect user data. These tracking technologies are transparently categorized into four distinct classifications: necessary cookies, functional cookies, diagnostic cookies, and development telemetry cookies. Mandatory cookies are automatically executed to ensure the seamless operation of essential portal functions, while analytical or performance cookies are strictly contingent upon explicit and uncoerced user consent before they are activated. The enterprise is committed to granting users comprehensive legal control over their individual data rights. Users possess the unalienable right to inspect their data, modify it, limit its use, or withdraw their consent regarding cookies at any moment. This process is facilitated through a secure privacy management interface, allowing for user-friendly navigation and management of privacy settings. Furthermore, the legal corporate service provider maintains a strict policy that prohibits any unauthorized selling, licensing, renting, or transferring of user data acquired through tracking mechanisms to external corporate entities. Through these stringent frameworks and protocols, the institution consistently upholds its professional commitments to absolute confidentiality, adherence to legally sound corporate practices, and a steadfast fiduciary responsibility to its users. Domain Name & Regulatory Cookies Our domain name regulatory framework is designed with a set of robust protocols that govern the registration, protection, maintenance, and legal enforcement of our proprietary web properties. These measures are critical in ensuring the integrity of our digital presence across the internet. To enhance security, we may deploy enterprise-grade Domain Name System Security Extensions (DNSSEC), which play a vital role in eliminating malicious redirections and mitigating unauthorized use of intellectual property. This comprehensive approach safeguards our corporate digital landscape from threats such as cyber squatting, fraudulent duplication, and phishing attacks. As a result, clients can engage confidently with our platforms, assured that our entire corporate domain architecture is legally protected and fortified against potential cyber threats. In addition to our domain management policies, we adhere to a stringent regulatory cookie policy that emphasizes a lawful and consent-driven approach to user data tracking and visitor privacy. Our operations align fully with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international legal standards. On our official corporate website, we utilize specific tracking technologies that serve the dual purpose of optimizing system performance and safeguarding client data. These technologies are systematically categorized into four types: necessary, functional, diagnostic, and administrative. Necessary cookies are automatically activated to ensure essential portal operations remain unaffected. On the other hand, the deployment of analytical or performance cookies is contingent upon obtaining explicit, informed consent from users, ensuring that their rights and preferences are fully respected prior to any data collection activities. We take the utmost care to guarantee our clients comprehensive legal control over their personal data rights. Users maintain the inherent right to inspect, modify, limit, or withdraw their cookie consent at any time through our secure privacy management interface system. C.I.A.S.I.S. Legal Corporate and Professional Service enforces a strict policy against the unauthorized selling, licensing, renting, or transferring of user data acquired through tracking mechanisms to any external entities. This commitment to data protection reinforces our professional obligations, ensuring absolute confidentiality, adherence to legally sound corporate practices, and unwavering fiduciary duties. Through these rigorous frameworks, we steadfastly uphold our pledges of integrity and responsibility in all our corporate dealings. 4. Implementation & Compliance Use of Domain Name And Website Services The use of cookies on the C.I.A.S.I.S. domain name is tied to the domain name of the platform, and the cookies are set only for the domain of the platform, except where a third-party service requires a cookie to be set for a different domain. In those cases, the third-party cookie is set only after the user has given consent, and the third-party service is bound by a data processing agreement that requires it to protect the user’s data in accordance with the GDPR. The website services that use cookies include the content delivery network, the analytics service, the email delivery service, and the payment service. Each service is vetted before it is used, to ensure that it meets our privacy and security standards, and each service is reviewed periodically. Where a service is found to be non-compliant, we replace it with a compliant alternative. Audit All Cookies on Your Website We conduct a periodic audit of every cookie on the C.I.A.S.I.S. domain name, to ensure that the inventory is accurate and up to date. The audit is conducted at least annually, and whenever a material change occurs in the platform, such as the addition of a new feature or a new third-party service. The audit identifies every cookie, its purpose, its duration, its origin, and the lawful basis for its use. The audit is documented, and the documentation is used to maintain this policy and to demonstrate compliance to regulators. The audit is conducted using a combination of automated tools and manual review. The automated tools scan the platform for cookies and identify their characteristics. The manual review verifies the findings of the automated tools and assesses the lawful basis for each cookie. Where a cookie is found to be non-compliant, it is removed or modified, and the consent mechanism is updated to reflect the change. Categorise Cookies by Type Every cookie on the C.I.A.S.I.S. domain name is categorised by type, to ensure that the consent mechanism treats each cookie correctly. The categories are strictly necessary, functional, analytics, and marketing, as described in the Cookie Types section. The categorisation is based on the purpose of the cookie, not on the technology used to set it, so that a cookie that is used for analytics is categorised as analytics, regardless of whether it is a first-party or a third-party cookie. The categorisation is documented in the cookie inventory, and the inventory is used to configure the consent mechanism. Where a cookie is re-categorised, the consent mechanism is updated, and the user’s existing consent is reviewed to ensure that it covers the new categorisation. Where the re-categorisation results in a cookie that requires consent where it previously did not, the cookie is removed until the user has given consent. Clear Descriptions for Each Category For each cookie, we provide a clear description that explains the purpose of the cookie, the data it collects, the duration of the cookie, and the origin of the cookie. The description is written in plain language, so that the user can understand what the cookie does without needing technical knowledge. The descriptions are available in the consent banner and in this policy, and they are updated whenever a cookie is added, removed, or modified. The clear descriptions are part of our commitment to transparency. We do not use vague or generic descriptions, such as “this cookie helps us improve the platform”, because they do not give the user the information they need to make an informed choice. Instead, we describe the specific purpose of each cookie, such as “this cookie records the pages you visit, so that we can understand which content is popular”. User Choices and Controls Users have choices and controls over the use of cookies on the C.I.A.S.I.S. domain name. The choices and controls include: Accept or reject non-essential cookies: through the consent banner, the user can accept or reject all non-essential cookies, or can choose to accept some categories and reject others. Change preferences at any time: the user can change their cookie preferences at any time by reopening the consent banner through the cookie preferences link in the footer, or through the browser settings. Clear cookies: the user can clear cookies through the browser settings, which removes all cookies from the device, including the consent preference cookie. Block cookies: the user can block cookies through the browser settings, which prevents cookies from being placed on the device. Blocking strictly necessary cookies may affect the functionality of the platform. Browse in private: the user can browse in private or incognito mode, which does not store cookies after the session is closed. Where a user has chosen to reject non-essential cookies, the platform continues to function, with the exception of the features that depend on non-essential cookies. We do not limit access to the platform for users who reject non-essential cookies, and we do not use a cookie wall that requires the user to accept non-essential cookies to access the platform. Implement a Compliant Consent Banner Our consent banner is implemented in accordance with the standards of the ePrivacy Directive and the GDPR. The banner appears on the first visit to the platform, and it provides clear and comprehensive information about the cookies used, the purposes of the cookies, and the choices available to the user. The banner is built on Google Consent Mode, with IAB TCF compliance (CMP ID 300), and it is designed to be accessible, responsive, and unobtrusive. The consent banner provides the following options: Accept all cookies, reject all non-essential cookies, and manage preferences, which allows the user to accept or reject each category of non-essential cookies. The banner does not use pre-ticked boxes, does not use vague language, and does not use a design that nudges the user towards accepting cookies. Consent is freely given, specific, informed, and unambiguous, in accordance with the GDPR. Where the user has not made a choice, no non-essential cookies are placed, and the platform operates with strictly necessary cookies only. Where the user has made a choice, the choice is recorded for 14 days, based on the IP address, and the cookies are placed or withheld in accordance with the choice. The user can change their choice at any time, through the cookie preferences link in the footer. Accessible Cookies And Updates The consent banner and the cookie preferences interface are designed to be accessible to all users, including users with disabilities. The banner is built with semantic HTML, is navigable by keyboard, and is compatible with screen readers. The contrast and font size meet the standards of the Web Content Accessibility Guidelines (WCAG) 2.1, at level AA. We test the banner with assistive technology before each release, to ensure that it is accessible. This Cookie Policy is updated whenever a material change occurs in our use of cookies, in the regulatory landscape, or in the third-party services we use. Material changes are announced at least 30 days before they take effect, through a notice on the platform and, where appropriate, by email. Non-material changes (clarifications, formatting, or corrections) may be made without prior notice. The effective date at the top of this page indicates when the policy was last updated. The previous version of the policy is archived and available on request.