Cookie Policy

This Cookie Policy is part of the Privacy Policy of VESSANO S.R.L.S. and describes the use of cookies and similar technologies on www.vessano.com in accordance with the e‑Privacy Directive and EU Regulation 2016/679 (GDPR).

1. What are Cookies

Cookies are small text files sent by websites to the user’s device (computer, tablet, smartphone), stored and then sent back to the same sites on the next visit. They allow websites to remember actions and preferences for a certain period of time.

1.1 Similar technologies

  • Local Storage: store data in the browser
  • Session Storage: temporary data for the session
  • Web Beacons: transparent images to track usage
  • Tracking Pixels: analytics and marketing
  • Fingerprinting: identification based on device characteristics

2. Cookie Classification

2.1 By purpose

Technical Cookies (necessary)

Essential for the website to work. Do not require consent.

  • User session management
  • Cart functionality
  • Security and authentication
  • Load balancing
  • Accessibility preferences

Performance Cookies

Collect information on how visitors use the site. Require consent.

  • Traffic analysis
  • Usage statistics
  • Performance monitoring
  • A/B testing and optimizations

Marketing Cookies

Used to track visitors to show relevant ads. Require consent.

  • Personalized advertising
  • Retargeting and remarketing
  • Campaign measurement
  • Behavioral profiling

Functionality Cookies

Allow the site to remember user choices. May require consent.

  • Language and region preferences
  • Display settings
  • Personalized content
  • Social media integration

2.2 By duration

  • Session cookies: deleted when the browser closes
  • Persistent cookies: stored for a defined period

2.3 By origin

  • First‑party: installed by vessano.com
  • Third‑party: installed by other domains

3. Cookies used on our site

3.1 Technical (always active)

Cookie name Purpose Duration Type
PHPSESSID User session management Session First‑party
cart_token Cart persistence 30 days First‑party
csrf_token CSRF protection Session First‑party
user_preferences User settings (language, currency) 1 year First‑party
security_token Secure authentication 24 hours First‑party

3.2 Performance (with consent)

Service Cookie Purpose Duration Privacy Policy
Google Analytics _ga, _ga_*, _gid Traffic and behavior analytics 2 years / 24 hours Google Privacy
Google Tag Manager _gtm Tracking tag management Session Google Privacy
Hotjar _hjid, _hjSession* User behavior analysis, heatmaps 1 year / 30 min Hotjar Privacy

3.3 Marketing (with consent)

Service Cookie Purpose Duration Privacy Policy
Facebook Pixel _fbp, _fbc Conversion tracking, remarketing 3 months Meta Privacy
Google Ads _gcl_au, _gcl_aw Ad conversion tracking 3 months Google Privacy
Pinterest _pin_unauth Remarketing activity 1 year Pinterest Privacy
TikTok Pixel _ttp Conversion tracking and remarketing 13 months TikTok Privacy

3.4 Functionality

Name Purpose Duration Type/Service
YSC YouTube - video session ID Session Functionality/YouTube
VISITOR_INFO1_LIVE YouTube - bandwidth estimation 5 months Functionality/YouTube
vuid Vimeo - user identification 2 years Functionality/Vimeo
ig_did Instagram - device ID 1 year Functionality/Instagram

4. Legal basis

4.1 Technical

Installed without consent under Art. 122 of the Italian Privacy Code.

4.2 Performance

Installed with user consent under Art. 6(1)(a) of GDPR.

4.3 Marketing

Always require explicit user consent.

5. Managing cookie preferences

5.1 Preference center

You can change preferences at any time via the banner/drawer visible on the site.

5.2 Via browser

  • Chrome: Settings → Privacy and security → Cookies
  • Firefox: Options → Privacy and security → Cookies and site data
  • Safari: Preferences → Privacy → Manage website data
  • Edge: Settings → Privacy, search and services → Cookies

6. Opt‑out tools

7. Consequences of disabling

  • Technical: site operation may be impaired
  • Performance: reduced ability to improve performance and usability
  • Marketing: less relevant ads

8. International transfers

  • USA: Google Analytics, Facebook Pixel, Google Ads - guarantees: SCC, adequacy decisions
  • China: TikTok Pixel - guarantees: SCC

9. Cookie security

  • Secure: only over HTTPS
  • HttpOnly: not accessible via JavaScript
  • SameSite: CSRF protection
  • Encryption: sensitive data always encrypted
  • Automatic expiration: deleted at expiry
  • Monitoring: constant checks for suspicious activity

10. Cookies and minors

Our services are not intended for minors under 16. We do not knowingly install cookies on minors’ devices without parental or legal guardian consent.

11. Updates

This Cookie Policy may be updated to reflect regulatory changes, new technologies or changes in third‑party services.

12. User rights

  • Right to informed consent
  • Right of withdrawal
  • Right of access
  • Right to erasure
  • Right to data portability
  • Right to object

13. Legal information

Data Controller: VESSANO S.R.L.S.

Tax Code and VAT: 03019600992

Registered Office: Via Giuseppe Casaregis 30/6, 16129 Genoa (GE), Italy

Email: support@vessano.com

PEC: vessano@pec.it

14. Version

Last update: 20 September 2025

Version: 2.0