Responsible entity (site administrator): NERO STUDIO (hereinafter: 'we', 'the service'). Contact: [e-mail], [address].
1) What are cookies and similar technologies
Cookies are small text files saved on your device when you use the service. We also use related technologies (e.g., localStorage, beacons, SDKs, pixels). Regulations require prior user consent for saving/reading non-essential cookies; the exception applies only to files necessary for providing a service requested by the user. This applies not only to classic cookies—the regulations are technologically neutral and cover other trackers.
2) Legal bases and consent rules
Consent must be voluntary, informed, specific, and unambiguous; lack of consent or silence (scrolling, continued browsing) is not valid consent. Default-checked boxes are prohibited. Cookie walls generally do not provide valid consent. In the EU/UK, it is required that rejecting and accepting non-essential cookies be equally easy (e.g., the first layer of the banner must offer 'Reject All' as prominently as 'Accept All'). In Switzerland (FADP) and many non-EU countries, similar standards of transparency and user control over trackers apply.
3) How we manage consent (CMP)
On the first layer of the banner, we show three equivalent options: Accept All • Reject All • Manage Preferences. In 'Manage Preferences,' you can enable/disable categories and save your choice. Consent is not required for cookies strictly necessary for the service to function (e.g., maintaining a session/login).
4) Categories of cookies we use
- Strictly necessary – required for the site to function and for security (session, load-balancing, fraud protection). Consent is not required.
- Preferences/Functional – remember settings (language, region). Consent is required if they are not essential for a service requested by the user.
- Analytical/Measurement – help understand how you use the service (statistics, diagnostics). Consent is required in many jurisdictions; there are limited exceptions for measurements conducted solely for the publisher and meeting specific conditions (e.g., CNIL in France).
- Marketing/Advertising – ad personalization, remarketing, campaign measurement, advertising identifiers. Prior consent is required.
5) The 'audience measurement' exception (applies to selected EU countries)
In France, the CNIL allows a narrow exemption from the consent requirement for strictly limited audience measurements performed solely for the publisher, if technical conditions are met (including no combination with other data, limited purposes, informing the user, and the ability to object). If we use such a configuration, we will describe the tool and the conditions here.
6) We respect Global Privacy Control (GPC) signals – California (CPRA)
For visitors from California, we treat the GPC browser signal as a valid 'Do Not Sell or Share' request, i.e., an opt-out of the 'sale/sharing' of data for targeted advertising. In practice, this means disabling the relevant tags/partners and storing the choice. We also place a 'Do Not Sell or Share My Personal Information' link in the footer (CPRA).
7) How you can manage cookies
The 'Change Cookie Settings' link in our footer opens the consent panel (you can change your decision or withdraw consent). You can also change settings in your browser (blocking/deleting cookies). Helpful guides are published by the UK's ICO and industry organizations.
8) List of our partners/cookies
The table below is a template—fill it with real data from your configuration (names, providers, purpose, validity). If you use a CMP, this list may be generated automatically.
| Category | Cookie Name / Provider | Purpose | Type (1st/3rd party) | Lifespan |
|---|---|---|---|---|
| Necessary | __Host-session (Nero Studio) | Maintain session/login | 1st party | session |
| Preferences | locale (Nero Studio) | Remember language | 1st party | 6 months |
| Analytical | *_ga (Google Analytics) | Visit statistics | 3rd party | 13 months |
| Marketing | *_fbp (Meta), *_tt (TikTok) | Remarketing and campaign measurement | 3rd party | 3–24 months |
9) When we load tags
Before consent: we only load necessary cookies (e.g., for security, login). After giving consent: we load the relevant categories (analytics/marketing). After 'Reject All' or a GPC signal: we do not load marketing tags; we respect the user's choice on every page.
10) We avoid 'dark patterns'
Our banners do not 'push' for consent (no making refusal difficult, no misleading colors/sizes). Rejection is as easy as acceptance. CNIL and ICO explicitly require and enforce this (including financial penalties).
11) Storage period and re-requesting consent
The lifespan of cookies is indicated for each item (see table). From time to time, we will ask you to verify your choice (e.g., when purposes/providers change). We keep a record of consents (audit log) for accountability.
12) Changes to this policy
We may update this policy, e.g., if providers or regulations change. We always show the current date; for major changes, we will inform you with a banner or email.
13) Contact
For matters regarding cookies and privacy: [DPO/Privacy e-mail], [correspondence address].