Cookie Policy
How and why we use cookies on this site
1. Scope and legal basis of this policy
This Cookie Policy describes how Regular & Integral, Lda (VentoFix), as data controller, uses cookies and similar technologies on the website ventofix.pt.
The applicable legal framework is as follows:
- Directive 2002/58/EC of the European Parliament and of the Council (Directive on Privacy and Electronic Communications — "ePrivacy"), as amended by Directive 2009/136/EC, implemented in Portugal by Law no. 41/2004, of 18 August (as amended by Law no. 46/2012)
- Regulation (EU) 2016/679 (GDPR), implemented in Portugal by Law no. 58/2019, of 8 August
- Guidelines of the European Data Protection Board (EDPB), in particular Guidelines 05/2020 on consent and Guidelines 03/2022 on dark patterns
- Judgment of the Court of Justice of the EU in the Planet49 case (C-673/17, of 1 October 2019): consent for non-analytical cookies must be given by a clear affirmative action; pre-ticked boxes do not constitute valid consent
2. What cookies and similar technologies are
Cookies are small text files that a website places on the user's device (computer, tablet, smartphone) when they visit it, allowing the site to remember information between sessions. In addition to cookies proper, functionally equivalent technologies such as web beacons, pixel tags or local storage (localStorage) may be used. For the purposes of this policy, all of these technologies are referred to collectively as "cookies".
Classification by duration:
- Session cookies: automatically deleted when you close the browser
- Persistent cookies: remain on the device for the indicated period until expiry or manual deletion
Classification by origin:
- First-party cookies: set directly by ventofix.pt
- Third-party cookies: set by external domains (e.g. Google)
3. Complete inventory of cookies used
CATEGORY A — Strictly Necessary Cookies
These cookies are technically indispensable to the operation of the website. Without them, essential features (forms, security, preferences) do not work correctly. Under Article 5(3) of the ePrivacy Directive, these cookies are exempt from prior consent because they are intended "to carry out the transmission of a communication over an electronic communications network" or are "strictly necessary in order for the provider to supply an information society service explicitly requested by the subscriber or user". They cannot be disabled through the consent panel.
| Name | Purpose | Duration | Provider | Legal basis |
|---|---|---|---|---|
| vf_cookie_consent | Stores the cookie preferences expressed by the user in the consent banner | 12 months | VentoFix (first-party) | Necessary — Art. 5(3) ePrivacy |
| __session | Form session management; prevents duplicate submissions and CSRF attacks | Session | Netlify, Inc. (USA) | Necessary — Art. 5(3) ePrivacy |
| __Host-nf-session | Form security protection (Cross-Site Request Forgery — CSRF) | Session | Netlify, Inc. (USA) | Necessary — Art. 5(3) ePrivacy |
CATEGORY B — Analytics Cookies (require consent)
These cookies are used to analyse visitors' browsing behaviour in an aggregated and statistical manner, for the sole purpose of improving the content and structure of the website. Under the Planet49 judgment (C-673/17) and EDPB Guidelines 05/2020, these cookies require the user's prior, freely given, specific, informed and unambiguous consent. They are not activated before consent is obtained. They do not identify individual users; IP addresses are anonymised before any analytical processing.
| Name | Purpose | Duration | Provider | Legal basis |
|---|---|---|---|---|
| _ga | Distinguishes unique sessions (Google Analytics 4); assigns a random anonymous identifier; IP anonymised | 2 years | Google LLC (USA) — policy | Consent — Art. 6(1)(a) GDPR |
| _ga_[ID] | Maintains GA4 session state; groups visit data for statistical reports | 2 years | Google LLC (USA) | Consent — Art. 6(1)(a) GDPR |
International transfers — Google Analytics: The data is processed by Google LLC in the United States of America, under the EU–U.S. Data Privacy Framework (Adequacy Decision of July 2023). The IP Anonymization feature is active, ensuring that the full IP address is never transmitted to Google. VentoFix does not use data signals features or demographic reports that would allow individual users to be identified.
CATEGORY C — Third-Party Resources (no third-party cookies and no data transfer to third parties)
All typographic fonts are loaded from ventofix.pt's own server, as locally hosted files. The website does not use external CDNs (such as Google Fonts) and does not transmit the user's IP address to any third-party servers for typography. There is therefore no transfer of personal data outside the website's own hosting for this purpose.
Express declaration: the website ventofix.pt does not use advertising, retargeting, social-media or behavioural-marketing cookies, nor any form of tracking for advertising purposes.
4. Consent validity requirements
The consent for Category B cookies collected by VentoFix is obtained in accordance with the requirements of Article 4(11) and Article 7 of the GDPR, as well as EDPB Guidelines 05/2020 and 03/2022:
- Freely given: use of the website is not conditional on the acceptance of non-essential cookies. The user can access all website content while refusing Category B and C cookies (prohibition of "cookie walls")
- Specific: consent is requested separately for each cookie category; accepting analytics cookies does not imply accepting other categories that may be added in the future
- Informed: the cookie banner contains clear information about the purposes, providers and retention periods before any action by the user
- Unambiguous: consent is given through a clear affirmative action (clicking "Accept" or equivalent); no pre-ticked boxes or deceptive design patterns (dark patterns) are used to induce the user to consent without intending to
- Revocable: withdrawing consent is as easy as giving it — available at any time through the "Manage cookies" panel in the website footer or by email to info@ventofix.pt
The consent records (timestamp, policy version, options selected, anonymous session identifier) are retained for 3 years for the purpose of demonstrating compliance (Art. 5(2) GDPR — accountability principle).
5. How to manage your cookie preferences
5.1 Through the VentoFix consent panel
On your first visit, a cookie banner is displayed with the following options:
- Accept all — activates Category A and B cookies
- Reject all optional — activates only Category A cookies (strictly necessary)
- Customise preferences — lets you choose category by category which to activate
You can review and change your choices at any time by clicking "Manage cookies" in the website footer. Changing your preferences applies immediately to all future browsing sessions.
5.2 Through your browser settings
You can also configure, block or delete cookies directly in your browser. Note that blocking Category A cookies may affect the operation of the website's forms. Instructions by browser:
5.3 Google Analytics-specific opt-out
You can specifically disable Google Analytics tracking across all websites through Google's official extension: Google Analytics Opt-out Browser Add-on.
6. Cookie data retention periods
The data collected through cookies is retained for the periods indicated in the inventory table (Section 3). After those periods have elapsed, the data is automatically deleted or anonymised. VentoFix retains consent records for 3 years to demonstrate compliance, under Article 5(2) of the GDPR.
7. No cookies aimed at minors
The website ventofix.pt is not directed at minors under 16 years of age, does not knowingly collect data from minors and does not use analytics cookies to track users under 16. Should a minor use the website without parental authorisation, parents or legal guardians can contact us to have the data deleted at info@ventofix.pt.
8. Updates to this policy
This Cookie Policy is updated whenever there are changes to the technologies used, to the applicable legislation, to guidance from supervisory authorities or to our cookie-use practices. The "last updated" date in the header identifies the version in force. In the event of materially significant changes involving the collection of new types of cookies or new processing purposes, the user will be asked for new consent through the cookie banner.
9. Further information and contact
For questions about cookies, privacy or to exercise your rights as a data subject:
📧 info@ventofix.pt — subject: "Cookies — consent management"
📞 +351 913 068 775
Please also see our full Privacy Policy and our Terms and Conditions.
Competent supervisory authority for cookie and privacy matters: CNPD — Comissão Nacional de Proteção de Dados · www.cnpd.pt