Legal
Cookie policy
Last updated: October 2026
1. What is a cookie?
A cookie is a file that is installed in the browser of your device (computer, mobile phone, etc.) in order to store and retrieve data. Cookies can serve many purposes depending on how they have been configured: for example, saving preferences, collecting usage statistics or enabling technical features, among others.
2. Who is responsible?
The controller of the information collected through cookies is IRISTRACE B.V., with tax ID number 854122564B01 and address at The Hague Security Delta, Wilhelmina van Pruisenweg 104, 2595 AN The Hague.
If you have any questions, you can write to contracts@iristrace.com.
3. What data is collected through cookies?
- Device information: we collect information about the device from which you access the Website, such as the model, the operating system and its version, the unique device identifier and the network.
- Location information: we obtain the IP address, the time zone and, where applicable, the mobile service provider, which allows us to determine a general location.
- Browsing information: we collect information about how you use the Website, such as how often you use it, the sections you visit or the use of specific features.
4. What types of cookies are there?
By purpose
- Technical: strictly necessary to browse the Website; they enable basic functions such as moving from one section to another.
- Statistical: they measure and collect information about how the user uses the Website, such as time spent, number of visits or content viewed.
- Preference or personalisation: they allow the Website to remember information about the user so that they access the service with features that may set their experience apart from that of other users.
- Behavioural advertising: they allow the management of any advertising spaces included on the Website.
By managing entity
- First-party: sent to the user’s device from a computer or domain managed by IRISTRACE.
- Third-party: sent to the user’s device from a computer or domain that is not managed by IRISTRACE, but by another entity that processes the data obtained through the cookies.
By duration
- Session: they collect and store data while the user browses the Website and are deactivated when browsing ends.
- Persistent: they store data that can be accessed and processed for a period defined by the party responsible for the cookie, which can range from a few minutes to several years.
5. Which cookies do we use on our website?
You can see the details of each cookie (provider, purpose and expiry), grouped by category, in the tables below.
Technical and necessary
They make the Website work and store the preferences you ask for yourself, such as your choice about cookies. They do not require consent and cannot be disabled.
| Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| it_consent | Iristrace | First-party | Stores which cookie categories you have accepted or rejected, and when, so that we respect your choice and do not ask you again on every visit. | 12 months |
| iristrace-espacio | Iristrace | First-party localStorage | Remembers the workspace you typed when logging in from the website, so you don’t have to type it again. It is only stored if you log in. | Until you delete it |
Statistics
They help us understand how visitors interact with the Website, providing information about the sections visited and the time spent on them.
| Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| _pk_id.*, _pk_ses.*, _pk_ref.* | Iristrace (Matomo) | First-party | Set by Matomo, the tool we use to measure how the website is used, to count visits and see which pages are viewed: _pk_id tells you apart from other visitors with a random identifier, _pk_ses groups the pages of a single visit and _pk_ref remembers which website you came from. | 30 minutes to 13 months |
Marketing
They allow us to measure the effectiveness of our campaigns: which ad, campaign or website brought you here.
| Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| it_attrib | Iristrace | First-party | Remembers how you first reached the website (campaign, ad or referring website) so that, if you contact us, we know which campaign brought you here. | 90 days |
Third-party content
They are set by the services that host the videos and podcasts embedded in the Website. They are not loaded until you accept this category or click “Load content” on the video.
| Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| VISITOR_INFO1_LIVE, YSC, VISITOR_PRIVACY_METADATA, yt-* | YouTube (Google) | Third-party | Set by YouTube when you play an embedded video: player statistics and quality settings. Videos are loaded in its privacy-enhanced mode (youtube-nocookie.com). | Session to 6 months |
| vuid, __cf_bm | Vimeo | Third-party | Set by Vimeo when a video loads: playback measurement and bot protection. The player is loaded with the “do not track” option. | 30 minutes to 2 years |
| datr, fr, sb | Meta (Facebook) | Third-party | Set by Facebook when a video from its platform embedded in the blog loads: account security and advertising. | 90 to 400 days |
| sp_t, sp_landing | Spotify (Anchor) | Third-party | Set by Spotify when an episode of the podcast embedded in the blog loads: player identification and listening statistics. | 1 day to 1 year |
6. Legal basis and mandatory nature
The information we collect through cookies and other tracking devices is based on your consent, which we request through a notice when you access the Website. You can withdraw your consent at any time, as explained in section 8.
Technical cookies cannot be disabled, as otherwise the proper functioning of the Website would be compromised. In general, they are only set in response to actions you take when requesting services from us, such as setting your preferences, logging in or filling in forms. Disabling them could limit the use of some features of the Website.
7. Who do we share your information with? Are there international transfers?
We use some third-party cookies (those collected and managed by a third party), so these entities receive the personal data collected through them. These cookies are marked as “Third-party” in the tables in section 5.
You can find out about any transfers to third countries made by the third parties identified in their respective policies.
8. How can you accept, refuse or withdraw consent?
When you first access our Website, you are shown a notice in which you can indicate whether you accept cookies, wish to configure them or prefer to reject them, except for those that are strictly necessary. You can withdraw any consent previously given at any time in two ways:
- By withdrawing your consent with the “Cookie settings” button in this Cookie Policy or in the footer of any page of the Website.
- By deleting the cookies stored on your device from your browser settings.
Please note that if you accept third-party cookies, you will have to delete them from your browser options or from the system offered by the third party itself.
Links to manage cookies in your browser
9. What rights can you exercise?
The rights you have as a data subject in relation to the protection of your personal data are set out in the section “What rights can you exercise as a data subject?” of our Privacy Policy.
10. Changes to this policy
We may update the Cookie Policy of our Website from time to time. We recommend that you review it each time you access the Website so that you are properly informed about how and why we use cookies.