Cookie Policy

This policy explains how CarpaThin Logic uses cookies and similar technologies on our website. The policy complies with the General Data Protection Regulation (GDPR — EU 2016/679), Law 506/2004 on the processing of personal data in the electronic communications sector, as well as the guidelines of the European Data Protection Board (EDPB).

1. What are cookies?

Cookies are small text files, made up of letters and numbers, that are stored on your device (computer, tablet, phone) when you visit a website. They allow the site to recognise your device on subsequent visits, retain your preferences and improve the browsing experience.

Cookies do not contain viruses, cannot access files on your computer and cannot run programs. They are simply passive data files.

2. How do we use cookies?

We use cookies for:

• Basic site functionality (sessions, security, protection against CSRF attacks);
• Retaining your technical preferences (screen resolution, time zone) for optimal display;
• Aggregated statistical analysis of traffic through Google Analytics, to understand how the site is used and improve it.

3. Types of cookies used

3.1. Essential cookies (strictly necessary)

These cookies are necessary for the operation of the site and cannot be deactivated from our systems. They are activated only in response to actions you take: opening the site, filling in forms, authentication in protected areas. For these cookies, your consent is not required, in accordance with article 4(5)(a) of Law 506/2004.

3.2. Analytics and performance cookies

These cookies allow us to measure and improve the performance of the site by collecting information about how it is used (pages visited, time spent, traffic source, device used). The collected data is used exclusively in aggregated form, does not individually identify visitors and is processed through Google Analytics 4.

These cookies are activated only with your explicit consent, expressed through your action in the cookie banner. You can withdraw your consent at any time from the cookie settings.

Data transfer to the USA: Google Analytics involves the transfer of personal data (anonymised IP address, device identifier) to Google LLC in the United States. This transfer is made under the EU-U.S. Data Privacy Framework, with Google certified accordingly. For details, consult the Google Privacy Policy.

3.3. Marketing and advertising cookies

Our site does NOT use marketing, remarketing or behavioural advertising cookies. We do not use Meta Pixel (Facebook), Google Ads conversion tracking, LinkedIn Insight Tag or other advertising profiling technologies.

3.4. Third-party cookies

Our site includes external resources that may place their own cookies or collect technical information at load time:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — for delivering the fonts used in the design (Manrope, Inter, Material Symbols). According to the official Google Fonts FAQ, font loading does not set cookies, but the IP address is technically collected for delivery.
• Cloudflare CDN (cdnjs.cloudflare.com) — for delivering the Font Awesome library. Cloudflare may collect technical information (browser type, IP) for CDN security.
• Google Analytics (described in section 3.2) — collects traffic analytics data.

We recommend consulting the privacy policies of each third-party provider for full details.

4. Persistent cookies vs. session cookies

• Session cookies – are automatically deleted when you close the browser. Most of the technical cookies on our site are of this type.
• Persistent cookies – remain on the device for a specified period (from a few days up to 2 years) or until you manually delete them. On our site, only the Google Analytics cookies (`_ga`, `_ga_AAAAAA`), the admin authentication cookie (`_identity-backend`) and the consent cookie (`cookieConsent`) are persistent.

5. Legal basis for the use of cookies

• For strictly necessary cookies – the legal basis is our legitimate interest in providing a functional, secure site that meets user expectations (art. 6(1)(f) GDPR), in accordance with the exemption provided in art. 4(5)(a) of Law 506/2004 (cookies necessary for the transmission of electronic communication or strictly necessary to provide a service requested by the user).
• For analytics and performance cookies (Google Analytics) – the legal basis is your explicit consent (art. 6(1)(a) GDPR and art. 4(5) Law 506/2004), expressed through your action in the cookie banner displayed on the first visit.

6. Cookie control

6.1. Through the cookie banner

On your first visit to the site, the cookie banner allows you to accept, reject or granularly configure the types of cookies you allow. Refusing analytics cookies does not affect the operation of the site.

You can modify your preferences at any time by pressing the cookie management link in the site footer.

6.2. From browser settings

All modern browsers allow you to control cookies (view, delete, block). Instructions for the most used browsers:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari (Mac)
• Safari (iOS)

Caution: deactivating strictly necessary cookies may affect the operation of some sections of the site — in particular, the contact forms and the administration area.

6.3. Global opt-out for Google Analytics

You can install the official Google Analytics Opt-out Browser Add-on to block data collection by Google Analytics on all sites you visit.

7. Your rights under GDPR

As a data subject, you have the following rights regarding personal data collected through cookies:

• The right of access to your data;
• The right to rectification;
• The right to erasure ("the right to be forgotten");
• The right to restriction of processing;
• The right to data portability;
• The right to object to processing;
• The right to withdraw your consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal;
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise these rights, please consult the Privacy Policy or contact us at [email protected].

8. Modification of the cookie policy

This policy may be updated periodically to reflect changes in the technology used, in legislation, or in our practices. The current version is always published on this page, with the date of the last update at the end.

Significant changes affecting how we process personal data through cookies will be notified to you by reactivating the cookie banner to obtain renewed consent.

9. Contact

For any questions regarding this policy or the processing of personal data through cookies, you can contact us:

• Email: [email protected]
• Phone: +40 332 633 588
• Address: Iași, Str. Fântânilor nr. 43, bl. B14, ap. B39

Updated version: 30 April 2026.
This policy applies to all users of the CarpaThin Logic website.