Cookie Policy

Last updated: 18 April 2026

1. Introduction

This Cookie Policy explains how Corvalys LTD (company being incorporated under the laws of the Republic of Cyprus, reachable at info@corvalys.eu — hereinafter "Corvalys", "we" or "us") uses cookies and similar technologies on the website https://corvalys.eu (the "Site").

The Policy has been drafted in accordance with:

  • Regulation (EU) 2016/679 (GDPR);
  • Directive 2002/58/EC (ePrivacy Directive);
  • the Guidelines of the Italian Data Protection Authority (Garante Privacy) of 10 June 2021 on the use of cookies and other tracking tools;
  • the EDPB Guidelines 03/2022 on deceptive design patterns and Guidelines 2/2023 on Article 5(3) ePrivacy.

2. What Are Cookies?

Cookies are small text files that a website places on the user's device (computer, tablet, smartphone) when visited. They are widely used to make websites work efficiently, to remember the user's preferences and to provide information to the website operators.

Similar technologies (such as local storage, session storage, pixels and SDKs) may store or access information on the user's device and are subject to the same legal regime as cookies when used for non-strictly-necessary purposes.

3. Categories of Cookies

We use three main categories of cookies, classified according to their purpose:

  1. Strictly necessary — required for the Site to function properly. They do not require consent.
  2. Functional — improve the user experience by remembering choices such as language.
  3. Analytics / Marketing — used to measure traffic or deliver personalised content. They always require prior, specific and informed consent.

4. Cookies Used on This Site

Name Purpose Owner Duration Type
XSRF-TOKEN Session security — prevents Cross-Site Request Forgery (CSRF) attacks Corvalys (first-party) 2 hours Strictly necessary
corvalys_session Session identifier — links requests from the same browser during a single browsing session Corvalys (first-party) 2 hours Strictly necessary
lang Stores the user's selected interface language (EN / IT / FR) Corvalys (first-party, localStorage) 1 year Functional
cookie_consent Records the consent preferences expressed in the banner Corvalys (first-party, localStorage) 1 year Strictly necessary

5. Analytics Cookies (currently not active)

At the date of this Policy we do not use analytics cookies of any kind. Should we activate a privacy-respecting analytics tool (such as Plausible, Matomo or a GA4 configuration with IP anonymisation and consent), this Policy will be updated accordingly and an explicit consent prompt will be shown before any such technology is loaded.

6. Marketing Cookies (currently not active)

We do not currently use marketing, advertising, retargeting or profiling cookies. No third-party advertising SDK is embedded in the Site. Should we introduce any such tool in the future, it will only be loaded after you have provided specific, informed and unambiguous consent.

7. Third-Party Cookies

Some pages of the Site offer the possibility to book a call through Calendly. When you interact with the Calendly widget, Calendly LLC may place its own cookies on your device to operate the booking flow. Corvalys has no access to those cookies and no control over them.

For more information, please consult:

Other third-party requests (such as Google Fonts, if used) are configured to avoid the installation of cookies where technically possible.

8. Managing Your Preferences

You can accept or refuse non-strictly-necessary cookies at any time:

  • through the cookie preferences modal available at the bottom of the Site (link "Cookie preferences" in the footer) or automatically shown on your first visit;
  • by changing your browser settings — every modern browser allows you to block cookies entirely, to block third-party cookies only, to delete cookies already installed or to receive an alert before a cookie is installed;
  • by activating any "Do Not Track" or "Global Privacy Control" signals, which we honour where technically feasible.

Please note that blocking strictly necessary cookies may impair basic features of the Site, such as form submission.

Useful browser-specific guides:

9. Data Subject Rights

Insofar as cookies and similar technologies involve the processing of personal data, you are entitled to exercise all the rights listed in our Privacy Policy (access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority).

10. Updates

This Cookie Policy may be updated from time to time to reflect changes in the technologies we use, in the law or in our organisation. The "Last updated" date at the top of the page always identifies the latest version.

11. Contact

For any question about this Cookie Policy, please write to info@corvalys.eu.