Cookie Policy | RESTITUIT Holdings SE

Necessary cookie inventory

The production service uses restituit_production_session to maintain an encrypted, host-only authenticated or anonymous session for up to 120 minutes after the last activity; it is Secure, HttpOnly and SameSite=Lax. XSRF-TOKEN supports cross-site request-forgery protection for up to 120 minutes; it is Secure and SameSite=Lax and must be readable by the application where required. After a visitor saves cookie choices, restituit_consent_subject stores a random reference to the server-side consent receipt for one year; it is Secure, HttpOnly and SameSite=Lax. The provider for these first-party cookies is RESTITUIT Holdings, SE through its managed hosting environment.

Why necessary cookies do not require consent

The session and CSRF technologies are strictly necessary to transmit communications securely and provide functions expressly requested by the visitor, including forms, authentication and protected access. The consent-reference cookie is necessary to remember and enforce the visitor’s recorded choice. They rely on the strictly-necessary exception in section 109(8) of Slovak Act No. 452/2021 Coll. and, for associated personal-data processing, Article 6(1)(f) GDPR. Blocking them may terminate a session or prevent a requested secure function.

Optional technologies remain off

Analytics, advertising, social-media pixels, chat and comparable optional integrations are disabled in the launch configuration and do not load merely because a page is opened. Google Analytics, Meta Pixel and Intercom are not active. A future optional technology may be enabled only after its provider, purpose, data, lifetime and transfer terms are documented and the applicable legal basis and any required prior consent are in place. Refusal must not prevent access to necessary website functions.

Choices, withdrawal and updates

Cookie Settings allows visitors to save or change analytics, marketing and support choices; all optional categories are unticked by default. Withdrawal is effective for future processing and is as easy as granting consent. Browser settings can also remove or block cookies. The company records the policy version and the selected categories to demonstrate and enforce the choice. The inventory is rechecked after provider or configuration changes and this policy receives a new revision if the deployed behaviour changes.