COOKIES POLICY

(Compliant with GDPR & ePrivacy Directive)

Effective Date: 15 May 2025
Website: www.coral-farm.eu
Controller: CORAL FARM REEF SRL (Romania | CUI: RO34971709 | Reg. J23/3141/2015)


1. Definition & Legal Framework

Cookies are small text files stored on your device (computer, tablet, or mobile) when visiting our website. This Policy complies with:

  • Regulation (EU) 2016/679 (GDPR)

  • ePrivacy Directive 2002/58/EC (as amended)

  • ANSPDCP Guidelines (Romania)

  • IAB Europe Transparency & Consent Framework (TCF v2.2)


2. Legal Basis for Cookie Usage

Under Art. 5(3) ePrivacy Directive, we only process cookies if:

  • Strictly necessary (no consent required) – Essential for website functionality (e.g., shopping cart).

  • With explicit consent (Art. 6(1)(a) GDPR) – For analytics, preferences, or marketing.

Cookie TypeLegal BasisConsent Required?
EssentialContract (Art. 6(1)(b) GDPR)❌ No
AnalyticsConsent (Art. 6(1)(a))✅ Yes
MarketingConsent (Art. 6(1)(a))✅ Yes

3. Cookie Categories & Purposes

3.1 Strictly Necessary Cookies

Required for core functionality.

NameProviderPurposeDuration
PHPSESSIDcoral-farm.euSession managementSession
cart_idcoral-farm.euShopping cart retention24h

3.2 Preferences Cookies

Enhance user experience (opt-in).

NameProviderPurposeDuration
langcoral-farm.euLanguage preference1 year

3.3 Analytics Cookies

Pseudonymized data only (IP anonymization enabled).

NameProviderPurposeDuration
_gaGoogle AnalyticsUser distinction2 years
_gidGoogle AnalyticsSession tracking24h

⚠️ Note: We use Google Analytics 4 (GA4) with data processing terms aligned to GDPR Art. 28.

3.4 Marketing Cookies

Used only with consent.

NameProviderPurposeDuration
_fbpMeta (Facebook)Ad targeting90 days
IDEGoogle AdsRemarketing1 year

4. Consent Management

  • First Visit: A granular cookie banner (IAB TCF-compliant) prompts you to:

    • Accept all

    • 🚫 Reject non-essential

    • ⚙️ Customize preferences

  • Withdrawal: Revoke consent anytime via Cookie Settings (website footer).


5. Third-Party Cookies

Embedded services (e.g., PayPal, YouTube) may set independent cookies. We recommend reviewing their policies:


6. User Controls

Browser Settings

Manage cookies via:

  • Chrome: Settings > Privacy > Cookies

  • Firefox: Options > Privacy & Security

  • Safari: Preferences > Privacy

Global Opt-Outs


7. Data Retention

  • Session cookies: Deleted after browser closure.

  • Persistent cookies: Retained per duration in tables above.


8. Policy Updates

Changes will be notified via:

  • Website banner (for material updates).

  • Email (if required by law).


9. Contact & Complaints

For questions or to exercise GDPR rights:
Data Protection Officer (DPO)
[email protected]
+40 729 154 576

Romanian Supervisory Authority:
ANSPDCP – www.dataprotection.ro


Key Improvements:

  1. EU Law Precision – Explicit references to GDPR/ePrivacy articles.

  2. ANSPDCP Alignment – Matches Romanian DPA expectations.

  3. Structured Tables – Clear cookie details (provider/purpose/duration).

  4. Enhanced Transparency – Links to third-party policies.

  5. Professional Tone – Concise, legally robust, and user-friendly.