COOKIE USAGE

This website uses cookies to improve your browsing experience, measure traffic and provide customer support through an online chat. In accordance with the General Data Protection Regulation (GDPR) and French law (the Data Protection Act), you may manage your preferences at any time.

1. What is a cookie?

A cookie is a small text file stored on your device when you visit a website. It allows the site to remember certain information about you (language, preferences, sign-in status and so on).

2. Cookies used on this site

a) Strictly necessary cookies

These cookies are essential for the site to work. They cannot be disabled.

• Purpose: storing your consent choices, access to secure areas of the site
• Legal basis: these cookies are strictly necessary for the site to function and, being essential, fall outside the GDPR consent mechanism (exemption provided by Article 82 of Act No. 78-17 of 6 January 1978 — the French Data Protection Act)
• Retention: session duration, or 6 months at most
  Network protection cookies (Cloudflare):

The following cookies are set by Cloudflare as part of DDoS protection and network optimisation:

• __cflb — identifies the nearest CDN server (duration: session)
• cf_clearance — validates the Cloudflare security challenge (duration: 30 minutes to 24 hours)
• __cf_bm — protection against automated bots (duration: 30 minutes)

These cookies are strictly necessary. Controller: Cloudflare, Inc. (United States) — certified under the EU-US Data Privacy Framework (DPF).

Anti-bot protection cookie (Cloudflare Turnstile):

We use Cloudflare Turnstile, an alternative to CAPTCHA, to protect our forms (contact, ordering, sign-in) against automated submissions and abuse.

• Purpose: verifying that the user is not a bot, protection against spam and fraud
• Legal basis: strictly necessary to the security of the service — exempt from consent (Article 82 of Act No. 78-17 of 6 January 1978)
• Cookie set: cf_clearance — security challenge validation (duration: 30 minutes to 24 hours)
• Data processed: Turnstile performs no advertising tracking and no cross-site tracking
• Controller: Cloudflare, Inc. (United States) — certified under the EU-US Data Privacy Framework (DPF)
• Privacy policy: https://www.cloudflare.com/privacypolicy/

b) Audience measurement cookies (Google Analytics)

We use Google Analytics to measure our site's audience (number of visitors, page views, visit duration and so on). These cookies help us improve the site and your interactions with it.

• Purpose: pseudonymised statistical analysis (pages visited, visit duration and so on)
• Legal basis: consent (Art. 6(1)(a) GDPR)
• Retention: 13 months at most
• Controller: Google LLC (United States)
• Transfer outside the EU: yes, framed by the EU-US Data Privacy Framework (DPF), adequacy decision of the European Commission dated 10 July 2023
• Privacy policy: https://policies.google.com/privacy
• Opt-out: https://tools.google.com/dlpage/gaoptout

You can refuse these cookies through the consent banner.

c) Tag management cookies (Google Tag Manager)

We use Google Tag Manager to manage the firing of tags (such as Google Analytics). It collects no personal data directly, but it triggers scripts that are subject to consent.

• Purpose: technical management of analytics scripts
• Legal basis: consent (Art. 6(1)(a) GDPR) — tied to the same consent as the analytics cookies
• Retention: session duration
• Controller: Google LLC (United States)
• Transfer outside the EU: yes, framed by the EU-US Data Privacy Framework (DPF), adequacy decision of the European Commission dated 10 July 2023
• Privacy policy: https://policies.google.com/privacy

d) Customer support cookies (Tidio)

We use Tidio, an online chat tool, to assist you and handle your support requests.

• Purpose: conversation with customer service, ticket handling
• Legal basis: consent (Art. 6(1)(a) GDPR)
• Data collected: IP address, messages sent
• Retention: 12 months at most
• Controller: Tidio LLC (United States)
• Transfer outside the EU: yes, framed by the EU-US Data Privacy Framework (DPF), adequacy decision of the European Commission dated 10 July 2023; the standard contractual clauses approved by the European Commission apply as an additional safeguard
• Privacy policy: https://www.tidio.com/privacy-policy/

e) Preference cookies (functional)

These cookies are set only by winheberg.com (first-party cookies). They remember your display choices so that the site is presented in the configuration you asked for. They collect no personal data and are shared with no third party.

• Purpose: remembering your language, currency and price display mode (excluding or including tax)
• Legal basis: exempt from consent under Article 82 of Act No. 78-17 of 6 January 1978 and the CNIL guidelines — these cookies are strictly necessary to deliver the service you expressly requested (interface personalisation)
• Controller: Winheberg

Cookie	Purpose	Duration
i18n_redirected	Remembers the chosen language and prevents automatic language redirection	12 months
lang-pref	Preferred interface language	6 months
lang-suggestion	Remembers that the language suggestion has been dismissed	6 months
currency	Preferred display currency (EUR, USD, GBP)	12 months
price-mode	Price display mode (excluding or including tax)	12 months

3. Consent

On your first visit, a cookie banner informs you that trackers are in use. You may choose to:

• Accept
• Refuse
• Customise your preferences

Your consent is collected in accordance with the GDPR and can be changed or withdrawn at any time, simply, by clicking the "Manage cookies" link available at the bottom of every page of the site.

Your choice is kept for a maximum of 6 months.

4. Managing your preferences

At any time, you may:

• Change your consent choices through the banner (or the cookie management link in the footer).
• Delete cookies through your browser settings.
• Object to Google Analytics tracking at: https://tools.google.com/dlpage/gaoptout

5. Contact

For any question about our cookie policy or the handling of your personal data, you can reach us at:
dpo@winheberg.com