COOKIE AND LOCAL STORAGE POLICY

Cookies, local storage, session storage and similar identifiers may be strictly necessary or optional. Necessary items provide transmission, login, security, language choice, load balancing, session state and consent evidence. Consent is not required for these but information is provided.

Analytics, personalisation and marketing technologies are neither set nor read before consent. Accept and Reject buttons must be in the same layer and equally easy; choices can be changed through a permanently available Cookie Settings control. Withdrawal is as easy as consent and does not affect prior lawfulness.

Before publication, automated and manual scans of every production domain must confirm each exact name, provider, purpose, category, first/third-party status, duration, host and transfer. Potential necessary Cloudflare items include security/Access sessions, bot management, load balancing and Turnstile; only actually detected items are published, not a generic list.

A new visitor starts with necessary technologies only. Consent is not inferred from scrolling, closing a banner or a pre-selected box. The selected preference is recorded for six months or until a material purpose or provider change, whichever occurs first; consent is then requested again.

The portal may use Cloudflare Access cookies or an equivalent authentication session for secure login. They cannot be refused while retaining login because they are necessary. Logout ends the session; server-side revocation and maximum lifetime must be confirmed in operational configuration.

Necessary technical logs and security identifiers are processed for legitimate interests and service security; optional data on consent. Recipients, transfers and rights are in the Privacy Notice. Browser controls may delete local items but do not replace the banner choice for server-held consent.