Cookie policy

1. What cookies are

Cookies are small text files that a website stores in your browser. They let the site remember your actions and settings between pages and visits.

Similar technologies include the browser's Local Storage and Session Storage, advertising pixels, device identifiers and embedded widgets from external services. In this Policy all of them are referred to simply as "cookies".

2. Cookie categories

Category	Purpose	Consent required
Strictly necessary	User session, protection of forms against request forgery, security, storing your privacy settings. The site does not work without them.	No — the legal basis is necessity
Functional	Remembering language, region and optional interface settings.	Yes
Analytics	Visit statistics, on-site behaviour, heatmaps, A/B testing.	Yes
Marketing	Advertising pixels, retargeting, conversion tracking, profiling.	Yes
External services and media	Embedded maps, videos and social network widgets that send data to their providers.	Yes

3. The cookies we use

At present the site sets only strictly necessary cookies. All of them are first-party: they are set by iterrakidsacademy.eu itself, are not passed to third parties and are processed within the European Economic Area.

Name	Purpose	Lifetime
iterra-kids-academy-session	Session identifier. Links your actions across pages and is required for the forms to work correctly.	120 minutes
XSRF-TOKEN	Protects forms against cross-site request forgery (CSRF). Forms cannot be submitted without it.	120 minutes
cookie_consent	Stores your cookie category choice and the pseudonymous consent identifier, so the banner is not shown again and your choice is respected.	180 days
country	Stores the country you chose in the site header: displayed prices, operator details and the document version depend on it. Set only when you choose.	365 days

The pseudonymous consent identifier is a random string. It does not contain your name, phone number or email and is used only to link your choice to a record in the consent log.

4. External services

A Google Maps embed is placed on the pages listing branch addresses. It is a third-party widget: when it loads, the provider receives your IP address and browser details.

On the branches page the map is provided by OpenStreetMap, and the route to the nearest branch is calculated by the OSM routing service. Both receive your IP address and, for the route, the coordinates you confirm in the browser yourself. Without consent the map does not load.

The Google Ads tag measures advertising performance: it records the fact that a form was sent, without your name, phone number or e-mail. It loads in Consent Mode v2, so until you give consent it neither writes nor reads advertising cookies.

Service	Provider	Category	Basis
Google Maps	Google Ireland Limited, Ireland. Google privacy policy	External services and media	Your prior consent
OpenStreetMap	OpenStreetMap Foundation, United Kingdom. OSM privacy policy	External services and media	Your prior consent
Google Ads (gtag.js)	Google Ireland Limited, Ireland. Google privacy policy	Marketing	Your prior consent (Consent Mode v2)

Before you consent the map does not load: a placeholder with a button is shown instead. Branch addresses are available as text without the map, so declining restricts nothing.

5. What we do not use

So that this description matches the site's actual behaviour, to be clear:

• analytics and marketing cookies are not set until you give consent;
• we do not use Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity or session replay;
• we do not use advertising profiling of children;
• we do not use Local Storage; Session Storage is used only to keep the campaign tags (utm, gclid) from the address you arrived by for the duration of your visit — they are sent with your request and disappear when the tab is closed;
• we do not use browser fingerprinting or cross-device matching;
• we do not pass data to advertising networks.

If we connect such services, they will be added to this Policy and will load only after your consent for the relevant category.

6. How we ask for consent

On your first visit you see a banner with the equally weighted buttons "Accept all" and "Reject optional", plus a "Customise" button for choosing individual categories.

• All optional categories are off by default and no optional script loads before you make a choice.
• No category is pre-ticked, and declining takes no more actions than accepting.
• Closing the banner or continuing to browse is not treated as consent.
• Consent is given separately for each category.

To demonstrate that processing is lawful, we store a record of your choice: the pseudonymous consent identifier, date and time, the categories chosen, the version of the banner text, the version of this Policy, the interface language, the source of the consent, the IP address and browser details. Records are kept for 24 months and are used only as proof of consent.

7. How to change or withdraw your choice

Withdrawing consent is as easy as giving it. The "Cookie settings" link is available in the footer of every page, and via the button below.

Cookie settings

After withdrawal the site stops loading the relevant services and deletes the cookies it is able to delete on its side. Cookies previously set by an external provider in its own domain are removed through your browser — see section 8.

8. How to delete cookies in your browser

You can delete cookies that are already saved and block them from being set through your browser settings. The relevant sections are in the privacy settings: Chrome, Firefox, Safari, Edge and Opera each have their own instructions.

9. Changes to the Policy

We update this Policy when new services are connected or legal requirements change. Every version has a number and an effective date. For substantial changes we show the banner again and ask for your consent.

Questions about this Policy should be sent to iterraacademy@gmail.com.