Auto vig

Cookie Policy

Which cookies and similar storage autovig.be uses, the legal basis under Belgian law (art. 129 Loi 13 juin 2005), and how to manage consent.

Last reviewed
25 May 2026

In brief

  • This policy lists every cookie and similar tracker on autovig.be; only strictly necessary trackers load without consent, analytics runs solely after you accept, and marketing trackers are not used at prelaunch.
  • Consent is prior, specific and freely given under the ePrivacy Directive and Belgian article 129; "Accept all" and "Reject all" carry equal prominence, with no deceptive patterns.
  • You can withdraw consent as easily as giving it via Cookie Preferences; the only cookie-triggered non-EEA transfer is Google Analytics to the US under SCCs and the EU–US Data Privacy Framework.

This Cookie Policy describes the cookies and similar browser-storage entries used on autovig.be (the "Site"), their purpose, the legal basis on which they are deployed, and how you can grant, refuse or withdraw consent. It complements our Privacy Policy and forms an integral part of it.

1. What a cookie or similar technology is

A cookie is a small piece of data that a website asks your browser to store. Some cookies live for a single browser session (session cookies); others persist across visits (persistent cookies). The same legal rules apply to other browser-storage mechanisms such as localStorage, sessionStorage, IndexedDB, web beacons or pixel tags. In this Policy, the term "tracker" covers all of them.

2. Legal basis

The deployment of trackers on terminal equipment located in Belgium is governed by:

  • article 5(3) of Directive 2002/58/EC (as amended by Directive 2009/136/EC), the "ePrivacy Directive";
  • its Belgian transposition: article 129 of the Loi du 13 juin 2005 relative aux communications électroniques / Wet van 13 juni 2005 betreffende de elektronische communicatie;
  • where personal data is involved, articles 4(11), 6 and 7 of Regulation (EU) 2016/679 (GDPR).

These provisions require prior, specific, informed, freely given and unambiguous consent for any non-strictly-necessary tracker. Consent is interpreted in line with the rulings of the Court of Justice of the European Union in Planet49 (C-673/17) and Proximus (C-129/21), the EDPB Guidelines 05/2020 on consent and 03/2022 on deceptive design patterns, and the cookie guidance published by the Belgian Autorité de protection des données / Gegevensbeschermingsautoriteit (APD / GBA).

Two categories are exempted from prior consent under article 5(3) ePrivacy and article 129 of the Loi du 13 juin 2005:

  • trackers whose sole purpose is to carry out the transmission of a communication over an electronic-communications network;
  • trackers strictly necessary to provide an information-society service explicitly requested by the user.

We classify each tracker under one of those exemptions or as consent-required, never both.

3. Categories used on autovig.be

The Site groups trackers into the same three categories shown on the consent banner:

Strictly necessary

Required for the Site to load and for the consent banner itself to operate. Deployed without consent on the basis of the second exemption above. You cannot disable them without breaking core functionality.

Analytics

Loaded only after you click "Accept" or save preferences with analytics enabled. Used to count aggregated, pseudonymous page-views and to understand which guides are useful. Not linked to identifiable individuals on our side and not shared with advertising networks. If you decline or withdraw consent, the analytics script is not loaded at all.

Marketing

Not currently in use. autovig.be is in prelaunch and runs no advertising, no retargeting and no cross-site tracking. The category remains visible in the consent banner as a placeholder so the structure remains stable; until a marketing tracker is actually deployed, this toggle controls no cookies and accepting it has no effect.

4. Inventory

The following inventory reflects the autovig.be deployment at the date shown in the updatedAt field above. It is reviewed at every clean audit pass.

autovig_consent

Provider Autovig (first-party localStorage entry)
Category Strictly necessary
Purpose Records your per-category cookie choice so we do not re-prompt on every page
Type localStorage (not transmitted to the server)
Expiry Until you clear browser storage or change your choice

__cf_bm

Provider Cloudflare Inc. (CDN edge in front of OVH origin)
Category Strictly necessary
Purpose Distinguishes humans from automated traffic for bot mitigation, in support of operational security under GDPR art. 6(1)(f)
Type HTTP cookie (first-party, set by edge)
Expiry 30 minutes

_ga, ga<container-id>

Provider Google Ireland Limited (Google Analytics 4)
Category Analytics — consent required
Purpose Pseudonymous page-view measurement (page, locale, device class, referrer host)
Type HTTP cookies (first-party, set by GA4 script after consent)
Expiry 13 months (we do not extend Google's default)

We do not deploy any tracker on the Site outside this inventory. If a new tracker is added, this Policy is updated before deployment and the consent banner re-asks consent where the new tracker is consent-required.

5. Retention

Non-strictly-necessary trackers do not exceed 13 months of retention, in line with the EDPB guidance and the APD/GBA cookie guidance. The consent decision itself is stored on your device only and is removed when you clear browser storage or change your choice.

6. How consent works

  • A consent banner is shown on your first visit, before any non-strictly-necessary tracker is loaded. Strictly-necessary trackers may be deployed before consent.
  • "Accept" and "Reject" are presented with equal prominence; refusing is one click, just like accepting. No pre-ticked boxes, no consent walls, no scroll-to-consent.
  • Granular preferences are available behind a "Preferences" button on the banner: each non-essential category can be accepted or refused individually.
  • Your choice is recorded in the autovig_consent localStorage entry described in section 4. We retain this record to demonstrate compliance with GDPR article 7(1).

7. Withdrawing consent — as easy as giving it

You can change or withdraw your choice at any time:

  • via the Cookie Preferences page (link permanently available in the footer);
  • by clearing your browser's site data, which will cause the banner to reappear on your next visit;
  • by globally blocking cookies in your browser settings. Doing so does not break editorial content but the banner will reappear.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal (GDPR art. 7(3)).

8. Third-party recipients

When the Google Analytics 4 script is loaded — only after you grant analytics consent — Google Ireland Limited (Dublin, Ireland) acts as our processor under GDPR article 28. Personal data may be onward-transferred from Google Ireland Limited to Google LLC (Mountain View, United States) within the same group.

The transfer relies on the cumulative safeguards described in section 9 of our Privacy Policy: Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and the EU–US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), under which Google LLC self-certifies. Their cookie notice describes the cookies set under their own domains; we do not set them.

No other third-party tracker runs on the Site.

9. International transfers

The only third-country transfer triggered by trackers concerns Google Analytics 4 and is described in section 8 above and in section 9 of the Privacy Policy.

10. Changes to this Policy

We may update this Policy when the Site evolves. The updatedAt date in the page header reflects the latest revision. Material changes — new tracker, new processor, new transfer mechanism, change in retention — are highlighted at the top of the page for at least 30 days before they take effect. Where a change adds a consent-required tracker, the consent banner re-asks consent.

11. Sources

Related legal pages