Cookie and Tracking Technologies Policy
This policy describes cookies, local storage and similar technologies used on the Firmato website and platform. Choices relating to non-essential tracking are managed separately from strictly necessary technologies.
1. Technology categories
Firmato may use HTTP cookies, local/session storage and technical identifiers. Strictly necessary technologies support sessions, authentication, load balancing, security, CSRF, essential preferences, language and recording of privacy choices.
2. Strictly necessary cookies
Necessary technologies are used to provide the service requested and, under applicable ePrivacy rules, do not require consent where an exemption applies. Blocking them in the browser may prevent login, security or other essential functionality.
3. Analytics, personalisation and marketing
Non-exempt analytics, optional personalisation, advertising and cross-site tracking are activated only after consent where required. Firmato aims to provide substantially equivalent choices to accept and reject and an easy means of withdrawal.
4. Consent management
The platform records the user’s choice, CMP/banner version, accepted purposes and timestamp. Withdrawal does not affect earlier lawful processing. Where new incompatible purposes or relevant new parties are introduced, renewed consent is obtained where required.
5. Third parties
Stripe, PayPal, KYC providers, support tools or other third parties may place their own cookies in environments they control. Firmato seeks to avoid loading non-essential third-party tools before a choice has been made and links to provider information where relevant.
6. Duration
Cookie duration is proportionate to purpose. Session cookies normally end with the session; preference or consent cookies may persist longer to remember a choice. Actual retention periods for optional trackers should be available in the cookie panel or current service list.
7. Browser controls and preference signals
Users may also configure browser settings, which can operate differently from the Firmato consent panel. Technical preference signals recognised by applicable law or standards are assessed as part of platform configuration.
8. Contacts
Questions about cookies and tracking: privacy@uese.eu; DPO: dpo@uese.it.
9. National supplement — Portugal
Cookies and terminal equipment
Portuguese ePrivacy implementation, including electronic communications privacy rules, governs storage/access on terminal equipment; non-essential tracking is subject to applicable information and consent requirements.
10. Versioning, precedence and evidence retention
Firmato records the version made available and, where the application flow provides for acceptance, the corresponding acceptance evidence including date, account and technical audit information. Material changes may require renewed acknowledgement or acceptance. Language and country are separate variables: language determines the linguistic version, while country determines the applicable national supplement.