Cookie policy

1. What is a cookie or a tracker?

A cookie is a small file or a piece of information stored or read on a device when an online service is used. This policy also covers similar technologies, such as local storage, pixels, identifiers and certain measurement techniques.

2. Who uses the trackers?

PIM S.A., under the Pacto brand, determines the use of the trackers belonging to the site. Some providers may also receive or read information when their service is enabled. They are identified in the inventory below.

Contact: dpo@pacto.global

3. Categories

3.1 Strictly necessary trackers

They serve only to provide a requested function or to ensure indispensable technical operation, for example:

• remembering the language choice where necessary;
• keeping an authenticated session;
• protecting a form and preventing abuse;
• balancing the technical load;
• recording consent preferences.

They cannot be used for general measurement, advertising or profiling purposes under cover of necessity.

3.2 Audience measurement

These trackers serve to understand how the site is used, for example the pages viewed and aggregated journeys. They are only enabled after consent, unless a documented legal and technical analysis shows that a given mechanism genuinely benefits from an exemption.

Provider currently declared: None.

No audience measurement tracker is currently used.

3.3 Advertising, profiling and social networks

As at the date of this version, Pacto declares that it uses no advertising tracker and no advertising profiling. No social button places a third party tracker before a valid action and consent.

4. Actual inventory of cookies and trackers

• Audience measurement: no tracker in this category.
• Advertising, profiling and social networks: no tracker in this category.

The inventory covers local storage and pixels even where they are not technically called cookies. No optional tracker may be deployed unless it appears in this public inventory, checked at every deployment. The counting of site visits is anonymous: it places no cookie, no identifier, and keeps no IP address.

5. Giving or declining consent

On the first visit, the banner offers at the same level "Decline all", "Accept all" and "Customise". The "Decline all" and "Accept all" buttons have the same size, the same contrast and the same visual importance. No optional choice is pre-ticked. Closing the banner, carrying on browsing or staying inactive does not amount to consent.

The second level allows a separate choice by purpose. Necessary trackers are shown as "Always on", with a precise explanation. The other categories are switched off by default.

6. Withdrawing or changing your choice

A permanent "Manage my cookies" link sits in the footer and reopens the preference centre in one click.

Withdrawal is as simple as acceptance. It prevents any further optional reading or writing and triggers, where technically possible, the deletion of trackers already placed by Pacto.

The consent choice is kept for a limited time only. A new choice is requested no later than six months after the previous decision, unless the data protection authority moves or another duration is documented and justified.

7. Consequence of a refusal

Declining optional trackers does not prevent the use of the essential functions of the site. Its only consequence is to switch off the refused purposes, for example audience measurement.

Where a genuinely optional function requires a tracker, that consequence is explained before the choice and, where possible, a tracker free alternative is offered.

8. Browser settings

Users may also delete or block cookies in their browser. Those settings complement the preference centre but do not replace it.

Blocking strictly necessary trackers through the browser may prevent certain requested functions, in particular signing in or remembering a choice.

9. Transfers and third party providers

For each third party provider, the inventory states:

• its identity;
• its purpose;
• the data accessible;
• the duration;
• the recipients;
• the relevant location;
• the transfer mechanism outside the EEA, if any;
• a link to its privacy policy.

A mere mention of "partners" without an accessible list is not sufficient.

10. Changes

The policy and the banner configuration are dated and versioned. The history of the versions of the policy, of the banner text, of the categories and of the providers is kept.

A new consent is requested where the addition of a purpose or of a provider materially changes the initial choice.

Version 1.0, updated on 30/08/2026.