Cookies

Cookies are small text files a site stores on or reads from your device. Similar technologies include pixels, browser local storage, SDKs and tags. They may be ours („first party") or belong to providers whose services we use („third party"). Some are necessary for the site to work; others make it possible to measure traffic, analyse behaviour, or serve and evaluate advertising.

On your first visit we show a cookie dialog with two choices: “Accept” and “Decline”. Essential cookies and technologies are always on, because without them the site or the protection of the contact form cannot work properly.

To measure visits and the results of our ads we use Google Analytics 4 and Google Ads through Google’s consent mode (Consent Mode v2). Google’s script loads on every visit; what it is allowed to do depends on your choice and on where you are visiting from:

• If you visit from the EU/EEA, Switzerland or the United Kingdom, Google sets no cookies and keeps no identifiers until you click “Accept”; until then it receives only anonymous, aggregated signals without cookies.
• If you visit from Montenegro or another country outside those areas, measurement is on until you click “Decline”; Google then stops setting cookies and removes ad identifiers from its requests.

We keep your choice in the browser’s local storage for six months, and you can change it at any time through the “Cookie settings” link in the site footer — a click clears the saved choice and the dialog appears again. Withdrawing consent does not affect the lawfulness of processing carried out beforehand, but it stops further non-essential tracking through our tags. Clearing site data in your browser also removes the saved choice, and you will be asked again.

These remember your cookie choice, protect the contact form from automated abuse, and remember the source of your visit for your enquiry. The legal basis is our legitimate interest in a secure and functional site, or technical necessity. We load Google reCAPTCHA v3 only on the first touch of the contact form and never before; Google may then receive technical device data and your IP address in order to assess abuse.

Specifically, the site has:

• `vc-consent` (browser local storage, ours): your choice from the cookie dialog and the time you made it; up to 6 months.
• `vc-attr` (browser local storage, ours): campaign identifiers from the address you arrived on (gclid, gbraid, wbraid, utm parameters, match type, device type) and the landing page; up to 90 days. They are sent to nobody until you send an enquiry — then they are attached to it, so that we know which campaign brought it.
• `_GRECAPTCHA` (Google): the form protection token, up to roughly 6 months, only if you have touched the form.

The site is static and uses no session cookies.

This category helps us understand how the site is used and fix content, navigation and technical problems. We use Google Analytics 4 (Google): cookies `_ga` and `_ga_<id>`, kept for up to 2 years. When analytics is off — by your choice, or by default in the EU/EEA, Switzerland and the United Kingdom — Google Analytics sets no cookies and receives only anonymous signals without identifiers. IP addresses and online identifiers may be personal data; Google may process data on international infrastructure under its own contractual and transfer mechanisms.

Hotjar (Hotjar Ltd) is planned for analysing behaviour on the page. Until we switch it on, it does not load and sets no cookies. Once on, it will load only with your consent, may use `_hjSessionUser_<site-id>` (typically up to 1 year) and `_hjSession_<site-id>` (typically around 30 minutes), and the contact form fields will be excluded from recording. We update this page before switching it on.

This category helps us measure the results of Google Ads campaigns: which ad brought the visitor who called, wrote or sent an enquiry. We use Google Ads conversions (Google): cookies `_gcl_au` and `_gcl_aw`, kept for around 90 days. A conversion is recorded when you click a phone, WhatsApp, Viber, e-mail or Messenger link and when you send the contact form.

When you send the form, we pass the e-mail address and telephone number from it to Google in hashed (unreadable) form for more accurate conversion measurement (enhanced conversions) — only if advertising measurement is on by your choice. Google may connect this data with an account it already holds, under its own rules; we recommend reading Google’s privacy policy.

Meta Pixel (Meta) is planned for measuring ads on Meta’s platforms. Until we switch it on, it does not load and sets no cookies. Once on, it will load only with your consent and may use `_fbp` and related identifiers (typically up to 3 months); Meta may then connect events with an account it already holds, under its own rules. We update this page before switching it on.

Google: privacy policy and an explanation of its technologies

Meta: privacy policy

Hotjar: privacy policy

Hetzner: privacy policy

Following a link takes you to a third party page; that party governs its own processing of data.

Provider names, retention periods and technologies can change. That is why we run a production cookie scan before every significant change to our tags and update this page and the consent dialog. A new non-essential cookie stays blocked until it has been classified and until the visitor has chosen a category. For questions, write to office@webcenter.me.