ompliance Advisory Team

Cookie policy

Revision date: 08.12.2025

1. The Purpose of this Policy

This policy explains how COMPLIANCE ADVISORY TEAM SRL uses cookies and similar technologies on its website (https://complianceat.ro/), in accordance with Regulation (EU) 2016/679 and Law no. 190/2018.

Through this policy, COMPLIANCE ADVISORY TEAM SRL informs you about:

○ The categories of cookies present on the website;

o The duration for which they operate in visitors’ browsers;

○ The categories of data/information that are tracked through the implemented cookies;

○ The purpose of the implemented cookies;

○ How to refuse the use of cookies at the user level.

2. What are cookies?

We use the term “cookies” to refer to cookie modules and similar technologies through which information can be collected automatically.

An “Internet Cookie” (also known as a “browser cookie” or “HTTP cookie”) is a small file consisting of letters and numbers that is stored on a user’s device when accessing the internet or visiting a website. They allow the site to recognize the device, ensure the proper and secure functioning of pages, and, where applicable, improve the browsing experience.

Types of cookies according to their purpose, duration, and source

Depending on their purpose, cookies can be:

○ Strictly necessary (essential) cookies – ensure the proper and secure functioning of the website. These cookies are set automatically when you visit our page and cannot be disabled. They do not store personal information that can directly identify the visitor.

○ Preference (functional) cookies – enhance the browsing experience and remember the settings chosen by the visitor, such as language, region, or display mode. If disabled, some website functions may not work properly.

○ Analytics and performance cookies – help us understand how the site is used (for example, which pages are visited most often) and improve content. The information collected is anonymous and aggregated. If you disable them, we will no longer be able to evaluate and improve site performance.

○ Marketing cookies – are used to show you relevant content or advertisements and may be placed by third-party partners (e.g., Google). These cookies are activated only with your express consent.

Depending on their source, cookies can be:

○ First-party cookies – placed directly by our website;

○ Third-party cookies – provided by external vendors that offer integrated services, such as analytics tools, security, or video display.

By duration, cookies can be:

○ Session cookies – stored temporarily and automatically deleted when the browser is closed;

○ Persistent cookies – remain saved for a limited period (usually up to 12 months) or until you manually delete them from your browser.

You can change your cookie preferences at any time using the consent banner displayed on the website.

3. The purposes for which we use cookies

We use cookies to provide visitors to our website with a better browsing experience and functionalities tailored to the needs and interests of each user, namely for:

○ managing consent for cookies;

○ ensuring security, protecting against unauthorized actions, and maintaining the website’s functionality;

○ monitoring and technical maintenance of the website, improving the use of the website, including by identifying any errors that occur during users’ visits/usage;

○ providing anonymous statistics to COMPLIANCE ADVISORY TEAM SRL, as the owner of this website, regarding how the website is used;

○ identifying new functionalities/services that can be offered to users through this website, based on the services/products accessed;

○ measuring the effectiveness of advertising campaigns and analyzing user interactions with the ads displayed through Google Ads services, including tracking conversions resulting from these campaigns, when the user gives their consent for marketing cookies.

Based on feedback collected through cookies regarding how the website is used, COMPLIANCE ADVISORY TEAM SRL may take measures to make this website more efficient and accessible to facilitate the delivery of information to users. As we respect your right to privacy, you may choose not to allow certain types of cookies.

However, blocking certain types of cookies may affect your experience with our website and the services we can offer. Marketing and advertising cookies are activated solely on the basis of your explicit consent.

4. Cookie Categories Utilised on Our Website

cookiebot_declaration

We reserve the right to update this list of cookies in the event that additional functionalities or external services are added to the website that involve the use of other types of cookies. Any changes will be reflected in this policy.

5. Data Collection and Sources

When you visit our website, certain information may be collected automatically through cookies and similar technologies. These cookies help us ensure the secure functioning of the site and, if you consent, understand how it is used to improve it over time.

We automatically collect technical information during your visit, such as the truncated IP address, browser type, device information, and session usage data. These data are collected in an anonymous and aggregated form and are used only to ensure the proper functioning of the site and, where applicable, for general analysis of our pages’ performance.

Data collected through cookies do not directly identify visitors and are not used for marketing or profiling. If you provide personal data through the contact form, this information is processed separately, solely to respond to your request, and is not combined with data collected through cookies.

6. Your Consent for Cookies

When you access our website, only strictly necessary cookies, which ensure the functioning and security of the page, are activated.

Other types of cookies, such as analytics or marketing cookies, are used only if you give explicit consent through the banner displayed on your first visit.

You can choose to:

○ accept all cookies (including analytics and marketing cookies, if available);

○ refuse non-essential cookies;

○ or change your preferences at any time using the Cookie Settings button.

If your browser offers a “Do Not Track” option, we will respect this choice to the extent technically possible.

Consent given for cookies is valid for a maximum of 12 months, after which you will be asked to provide consent again. If you do not make a choice, only necessary cookies will be used, and the cookie banner will reappear on subsequent visits.

7. Managing Cookies

You can control or delete cookies at any time using the options provided by your browser or the consent banner displayed on our website.

○ Deleting cookies from your device. You can delete all cookies already on your device by clearing your browser’s browsing history. This will remove all cookies from all websites you have visited. However, note that you may also lose some saved information (e.g., saved login details, site preferences).

○ Managing cookies specific to our website. Necessary cookies are important for the website’s functionality and cannot be disabled. For all other categories of cookies, you can give or withdraw consent at any time using the Cookie Settings option in the banner displayed on the site. For additional control, you can also check and adjust privacy and cookie settings directly in your browser.

○ Blocking cookies. Most modern browsers allow you to completely block the installation of cookies. If you do this, some parts of the website may not function properly (e.g., forms or maintaining an active session).

○ The “Do Not Track” option is an optional feature provided by some browsers, which sends a signal to visited websites indicating that you do not want your online activity to be tracked for analytics or advertising purposes. If this feature is enabled, we will respect your preference to the extent allowed by browser settings and site technology.

You can enable the “Do Not Track” option in the following browsers:

○ Firefox

○ Edge or Internet Explorer (in older versions)

○ Chrome

○ Safari

○ Opera

8. How long we retain cookie data?

Our website retains data collected through cookies only for the period necessary for the purpose for which they are used, not exceeding 1 year.

○ Session cookies are temporary and are automatically deleted when the browser is closed or at the latest after 24 hours.

○ Persistent cookies are kept for a maximum period of 1 year, after which they automatically expire or are renewed only if you give your consent again.

Fully anonymized data sets, which do not contain personal data, may be retained indefinitely, solely for statistical or general analysis purposes.

9. Cookies and Profiling

Our website does not use cookies for individual profiling or for carrying out advanced behavioral analyses that could lead to automated decisions with legal effects on visitors. The active necessary cookies are exclusively technical and security-related, used for the proper functioning of the website and for protection against automated or unauthorized access. In addition to these, the site may use analytics cookies and marketing cookies (for example, those associated with Google Analytics and Google Ads services) solely on the basis of the visitors’ explicit consent, for the purpose of measuring the performance of the web page and evaluating the effectiveness of advertising campaigns.

These cookies are not used to create individual visitor profiles and do not lead to automated decisions that produce legal or similar effects on individuals.

If in the future other cookie types or similar technologies are introduced, they will be activated only with the explicit consent of visitors, and the information will be updated in this policy prior to implementation.

10. With whom we share your cookie data

Our website does not share the data collected through cookies with third parties for the purpose of individual profiling. The data collected through the cookies used on this page is limited to technical information (such as the truncated IP address, browser type, and session duration) and is used exclusively for the functioning, security, and performance improvement of the website.

When the user gives their consent for analytics or marketing cookies, certain technical data may be transmitted to the providers of these services, exclusively for the purpose of measuring traffic and the effectiveness of advertising campaigns.

To ensure proper functioning and protection of the site, we work only with trusted technical service providers:

○ Cookiebot (Usercentrics A/S, Denmark) – manages the cookie consent banner and records user preferences. Cookiebot complies with European data protection legislation (GDPR) and acts as a processor on our behalf.

○ Google reCAPTCHA (Google Ireland Ltd.) – helps protect the site against automated access and abuse. Data collected is used exclusively for security purposes.

○ Google Analytics and Google Ads (Google Ireland Ltd., respectively Google LLC) – provide analytics and advertising campaign performance measurement services, used only on the basis of the users’ explicit consent. The technical data collected may include anonymous session identifiers, conversion parameters, or information about interaction with the website.

The data collected through these services may be temporarily stored in the European Union or, in some cases, may be transferred to servers outside the EU, in accordance with the applicable data protection standards, including mechanisms such as the Standard Contractual Clauses approved by the European Commission, or the EU–US Data Privacy Framework, where applicable.

11. International Data Transfers

Most of the data collected through the cookies used on our website is processed and stored within the European Economic Area (EEA). However, for some technical data collected through the services provided by Google (such as Google reCAPTCHA, Google Analytics, or Google Ads), there may be a data transfer to the United States of America, since Google’s infrastructure operates globally and Google LLC (USA) may receive certain technical data necessary for the provision and improvement of these services.

These transfers are based primarily on the EU–US Data Privacy Framework (DPF), to which Google LLC is a participating entity, or, where applicable, on the Standard Contractual Clauses (SCC) approved by the European Commission, together with additional protective measures implemented by Google to ensure an adequate level of security and confidentiality.

12. Your rights

We ensure that you can exercise your rights under Regulation (EU) 2016/679 (GDPR) free of charge:

Withdrawal of consentYou can change your options for non-essential cookies at any time via the “Cookie Settings” button (consent banner) or through your browser settings. Necessary cookies remain active for the functioning of the website. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Right to be informedYou have the right to be informed about how your personal data is collected and processed. This includes knowing the purposes of processing, who is processing your data, and how long it will be retained.
Right of accessYou can find out whether we are processing your data, obtain details about the processing, and receive a copy of your data.
Right to rectificationYou can request the correction of inaccurate data.
Right to erasureYou have the right, under certain circumstances, to have your data deleted.
Right to restrict processingYou have the right, under certain circumstances, to restrict the processing of your data. In this case, we will not process the data for any purpose other than storage.
Right to objectYou can object to processing based on legitimate interests; however, for strictly necessary cookies, objection may prevent the website from functioning.
Right to data portabilityGenerally, this is not relevant for technical data collected through cookies, but we will review it upon your request.
Automated Decisions & ProfilingYou have the right not to be subject to automated decision-making processes, including profiling, which significantly affect you. We do not use cookies for profiling or automated decision-making that produces legal or similar effects.
Right to lodge a complaintYou have the right to lodge a complaint with ANSPDCP (National Supervisory Authority for Personal Data Processing) or directly in court.

To contact us regarding the exercise of your rights, you can write to dataprotection@complianceat.ro. We will review your request and respond within 1 month of receiving it. If necessary, this period may be extended by up to 2 additional months, depending on the complexity of the request — we will inform you within one month if this is the case. While we respect all data subject rights, there may be situations where we cannot comply with a request, for example, if it conflicts with other legal obligations or the rights of other individuals. In such cases, we will explain the reasons for the refusal and the applicable legal basis.

13. Updates to the Cookie Policy

We may periodically update this Policy to reflect technical, legal, or compliance changes. The most recent version will be available on this page, and the date of the latest update will be indicated at the top of the document.

We recommend that you review this policy periodically to stay informed of any changes. Any significant changes regarding the types of cookies used or their purposes will be communicated through an update to the consent banner displayed on the website.