Skip to content

Cookie Policy

1. General information

This Cookie Policy describes how cookies and similar technologies are used on the marketing website of Rivadesk, operated by File system with registered office at Via Cavour, 66 - 81030 Orta di Atella (CE).

It applies to the public pages of this site (pre-registration marketing site) and supplements the privacy notice, which describes personal data processing more broadly. If there is any inconsistency between the two documents regarding cookies and tracking technologies, this Cookie Policy prevails.

Document version: 1. The date of the last material update is indicated in the “Changes” section.

For questions about cookies or consent, contact allbrand.italia@gmail.com.

2. What cookies and similar technologies are

Cookies are small text files that a website or a third-party provider stores on your device (computer, tablet, smartphone) when you visit a page. They allow the site to recognise your device, store preferences, or collect information about how the service is used.

Similar technologies include, for example: browser local storage and session storage, identifiers stored in local memory, tracking pixels or tags, and scripts that store or read information on your device.

First-party cookies are set by the domain you are visiting (Rivadesk). Third-party cookies are set by different domains (for example analytics providers).

Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them manually.

3. Legal basis and applicable law

Our use of cookies and similar technologies complies with the ePrivacy Directive (2002/58/EC, as amended) and Regulation (EU) 2016/679 (the “GDPR”), as well as applicable national law.

Cookies and technologies that are strictly necessary for the operation of the site or to provide a service explicitly requested by you may be used without consent, within the limits permitted by law.

Analytics cookies and marketing/attribution cookies or technologies that are not essential are used only after your free, specific, informed and revocable consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive). Without consent, such technologies are not activated.

4. Categories of cookies we use

We organise cookies and similar technologies into the following categories, aligned with the site’s consent banner:

• Essential (necessary): required for security, load balancing, language preferences, cookie consent management, and technical functions without which the site would not work properly. They do not require consent and cannot be disabled in the preferences panel.

• Analytics: help us understand how visitors use the site (pages viewed, aggregated interactions, performance) in order to improve content and usability. They are activated only if you consent to the “Analytics” category.

• Marketing and attribution: measure campaign effectiveness, link visits to referrals or affiliate partners and, where configured, support promotional activities. They are activated only if you consent to the “Marketing” category.

A detailed list with the name, duration and purpose of each cookie is shown in the “Cookie inventory” table at the bottom of this page when dynamic inventory is enabled.

5. How to give, refuse or change consent

On your first visit (or after a relevant policy update) we show you a native Rivadesk cookie consent banner. You can:

• accept all non-essential cookies; • reject non-essential cookies (only essential cookies remain active); • customise preferences by category (Analytics, Marketing).

You can reopen preferences at any time via the “Manage cookies” link in the site footer. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing based on consent before withdrawal.

Your choices are stored in a preference cookie (for example rivadesk_cookie_consent) for a configurable period (typically up to 12 months), unless you delete it manually or a policy version update requires renewed consent.

For Google Analytics 4, where enabled, we apply Google Consent Mode v2: analytics tags are loaded or activated in line with the categories you select.

6. Third-party providers and transfers

Some cookies or scripts may be provided by third parties acting as independent controllers or processors on behalf of File system, depending on the service.

Google Analytics 4 (Google Ireland Limited / Google LLC): used only if a valid measurement ID is configured and only after consent to the Analytics category. Google may process usage data (e.g. cookie identifiers, aggregated navigation events) for statistical purposes. Information: policies.google.com/privacy. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards (e.g. Standard Contractual Clauses approved by the European Commission) where applicable.

Affiliate partners or marketing attribution tools: active only with Marketing consent and within the limits described in the inventory.

We do not sell your personal data obtained through cookies. We do not use non-essential cookies for invasive behavioural profiling beyond what is described in this policy and the banner.

7. Retention periods

The duration of each cookie or similar technology is shown in the inventory table below, expressed in days, months, or “session” (deleted when you close the browser).

The cookie that stores consent preferences has a configurable maximum duration (commonly 365 days), after which we may ask for your preferences again.

Data collected through analytics tools may be retained according to the retention periods configured in the respective tool and our settings, in line with the data minimisation principle (Article 5 GDPR).

8. Your rights

As a data subject, where the GDPR applies you have the right to: access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests (where applicable), and withdrawal of consent at any time.

To exercise your rights or for information about processing: allbrand.italia@gmail.com. Data Protection Officer (where appointed): — — allbrand.italia@gmail.com.

You also have the right to lodge a complaint with a supervisory authority. In Italy: Garante per la protezione dei dati personali (www.garanteprivacy.it). If you reside in another EU/EEA Member State, you may contact your local authority.

For general information on categories of data, purposes and legal bases beyond cookies, see our privacy notice on this site.

9. Browser controls

You can configure your browser to block, delete or warn you before cookies are installed. Procedures vary by browser and version (Chrome, Firefox, Safari, Edge, etc.); see your browser’s “Help” or “Privacy” section.

Disabling all cookies, including essential ones, may prevent the site from working correctly (e.g. storing consent, language preference, security).

For third-party cookies you may also visit the respective providers’ websites for opt-out tools where available.

10. Changes to this Cookie Policy

We may update this notice to reflect technical, legal or organisational changes. The version in force is always the one published on this page with the label 1.

In case of material changes (new categories, new providers, different purposes) we will update the version and, where necessary, ask for renewed consent via the banner or preferences panel.

We encourage you to review this page periodically.

11. Contact

Data controller: File system Address: Via Cavour, 66 - 81030 Orta di Atella (CE) Privacy and cookies email: allbrand.italia@gmail.com

For requests relating to cookies, consent or GDPR rights, use the subject line “Cookies / GDPR” and, if possible, include the URL of the page visited and a description of your request.

Cookie inventory

Up-to-date list of cookies and similar technologies declared for this site.

Cookie / technology Category Duration Purpose
_ga Analytics 2 years Google Analytics 4 — distinguishes users.
_ga_* Analytics 2 years Google Analytics 4 — persists session state.
rivadesk_aff_ref Marketing 90 days Affiliate referral attribution cookie (?ref= parameter).
XSRF-TOKEN Essential Session Laravel CSRF token for form protection.
rivadesk-session Essential 120 minutes (idle) Laravel session for merchant auth, CSRF and flash messages.
rivadesk_cookie_consent Essential 365 days Stores the visitor cookie consent preferences (native CMP).
rivadesk_locale Essential 365 days Marketing site locale preference for shared routes.