Cookie Policy

1. Scope

This Cookie Policy explains the use of cookies and similar technologies in connection with PlanEvents, including the website available at planevents.eu and the associated PlanEvents application and marketplace.

PlanEvents is operated by BrandLabel Agency, an independent business established in Belgium, with registered VAT number BE1040366570, Rue de la Marjolaine, 1120 Brussels, Belgium.

This Cookie Policy should be read together with the PlanEvents Privacy Policy, which explains more generally how PlanEvents processes personal data.

2. Legal framework

The use of cookies and similar technologies by PlanEvents is governed, where applicable, by the rules concerning confidentiality of communications and storage of or access to information on a user’s terminal equipment derived from Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning privacy and electronic communications, as amended by Directive 2009/136/EC, together with the applicable Belgian legislation implementing those requirements.

Where information collected through cookies or similar technologies constitutes personal data, the processing of that information is also governed by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

In particular, processing of personal data must comply with the principles established by Article 5 GDPR and must have an appropriate legal basis under Article 6 GDPR. Where consent is required and relied upon, the requirements of Articles 4(11) and 7 GDPR apply.

3. Definition of cookies and similar technologies

A cookie is a small piece of information stored on or accessed from a user’s computer, mobile device or other terminal equipment when a website or application is used.

Cookies may be temporary session cookies, which ordinarily cease to operate when the relevant browser session ends, or persistent cookies, which remain available for a specified period unless deleted earlier.

PlanEvents may also use technical mechanisms that perform functions similar to cookies, including browser storage, authentication tokens, security tokens and other local storage technologies. References to “cookies” in this Policy include comparable terminal-storage or terminal-access technologies where the legal rules governing cookies apply to them.

The legal classification of a technology depends on its function and use rather than merely on the technical name assigned to it.

4. Technologies currently used by PlanEvents

PlanEvents uses technologies required or reasonably necessary for operation of the Platform, account authentication, session management, security, prevention of automated abuse, storage of essential user choices and provision of functionality expressly requested by the user.

With the user’s prior consent, PlanEvents also uses Google Analytics 4 and Vercel measurement services to understand aggregate use, navigation, performance and marketplace conversions. These optional technologies remain disabled before consent and after refusal.

With the user’s separate prior consent for ChatGPT ads measurement, PlanEvents uses the OpenAI Measurement Pixel to attribute selected registrations, submitted event requests, checkout starts and completed purchases to eligible ChatGPT ad interactions.

PlanEvents does not use the OpenAI Measurement Pixel to create PlanEvents advertising audiences, for behavioural advertising or for tracking users across unrelated websites.

PlanEvents does not use Google Signals, Google user-provided data collection, Meta Pixel, Hotjar, behavioural advertising, cross-site tracking or remarketing technologies.

5. Strictly necessary technologies

Certain technologies are necessary for the operation and security of PlanEvents and for the provision of functionality expressly requested by the user.

These technologies may be used for purposes including authenticating a registered user, maintaining a secure authenticated session, preserving security state, protecting accounts against unauthorised access, preventing automated abuse, processing security challenges, maintaining essential application state and remembering a user’s legally necessary cookie or privacy choices where applicable.

Where storage of or access to information on a user’s device is strictly necessary for the provision of a service expressly requested by that user, PlanEvents may use the relevant technology without requesting consent to the extent permitted by applicable law.

Strictly necessary technologies are not used for behavioural advertising or unrelated marketing profiling.

A user who blocks strictly necessary technologies through browser or device configuration may be unable to register, sign in, maintain an authenticated session or use certain functions of the Platform.

6. Authentication technologies

PlanEvents uses Supabase as part of its authentication and application infrastructure.

Authentication mechanisms may require browser-side storage or access to authentication information necessary to establish and maintain a registered user’s authenticated session.

Depending on the technical implementation and browser context, authentication information may be handled through secure authentication tokens, cookies or comparable browser-storage mechanisms.

Such information is used only insofar as necessary to authenticate the user, maintain account security, preserve the authenticated session and communicate securely with the relevant application infrastructure.

Authentication information is not made available to Clients or Professionals through the PlanEvents marketplace.

Further information concerning account and authentication data is contained in the PlanEvents Privacy Policy.

7. Security and anti-abuse technologies

PlanEvents uses technical security measures intended to protect the Platform, its users and its infrastructure against automated abuse, malicious requests, credential attacks and other security threats.

PlanEvents may use Cloudflare Turnstile for this purpose.

When Turnstile is invoked, technical information necessary to assess whether a request appears to originate from a legitimate human user rather than an abusive automated system may be processed by Cloudflare. This may include information relating to the request, browser, device environment and IP address.

Any cookie, token or comparable storage mechanism used solely where necessary to provide fraud-prevention, security or bot-protection functionality is treated according to its actual technical purpose.

PlanEvents does not use Cloudflare Turnstile for the purpose of creating advertising profiles of PlanEvents users.

The processing of personal data associated with security measures is further described in the PlanEvents Privacy Policy.

8. Preference and functional storage

PlanEvents may store information necessary to preserve user-selected settings or provide functionality requested by the user.

This may include the user’s selected platform language, relevant interface preferences, cookie choices where a consent mechanism is applicable and comparable settings necessary to provide the requested user experience.

A preference mechanism will be classified as strictly necessary only where the applicable legal conditions for that exemption are satisfied.

Where a future preference or functionality mechanism is not strictly necessary and applicable law requires consent, it will not be activated before the required consent has been obtained.

9. Analytics

If the user selects ‘Accept analytics’, PlanEvents activates Google Analytics 4 and Vercel Analytics/Speed Insights to measure aggregate page use, navigation, technical performance and predefined marketplace events. Refusal does not restrict the core Platform.

The analytics implementation permits only predefined, non-identifying event parameters. PlanEvents does not send names, email addresses, phone numbers, full postal addresses, VAT numbers, contact persons, request contact details, free-text messages, claim evidence or user-provided data to Google Analytics.

Google Analytics may process technical browser, device and interaction information and coarse geographic information. It may set the _ga and _ga_<container-id> cookies, whose lifetime is controlled through the analytics configuration and may be up to two years unless removed earlier.

Google Signals, advertising personalisation and Google user-provided data collection are disabled. Consent can be changed at any time through ‘Cookie settings’; the change applies immediately and PlanEvents attempts to remove readable Google Analytics cookies when consent is withdrawn.

10. Advertising, remarketing and social-media tracking

After separate ChatGPT ads measurement consent, a successfully created Client account is also reported through the OpenAI Conversions API from our server. This sends the registration event, time, registration-page URL, a random event identifier and the existing OpenAI attribution/browser references when available. The server does not add names, email addresses, passwords or other account details. The same event identifier is used by the Pixel to prevent double-counting. Refusal or withdrawal prevents future server-side registration measurement, and the opt-out from future user-level personalisation remains enabled.

If the user separately enables ‘ChatGPT ads measurement’, PlanEvents loads the OpenAI Measurement Pixel. It records selected conversion events and can associate them with an eligible ChatGPT ad interaction using the OpenAI click reference (oppref) and a browser reference.

The Pixel may set the first-party __oppref cookie for 30 days and the first-party __obref cookie for 365 days. Withdrawing ChatGPT ads measurement consent instructs the Pixel to stop measurement and remove these cookies.

This optional measurement includes automatic advanced matching. After consent, the Pixel detects supported customer information from recognizable forms and other website sources, such as email addresses, phone numbers and names. It normalizes and hashes that information in the browser using SHA-256, then sends the hashes to OpenAI with conversion events to match conversions to ads, including when a click identifier is unavailable. Raw customer information is not sent through automatic advanced matching. Hashes are not anonymous data.

PlanEvents sends predefined event types and, for a completed purchase, the confirmed amount and EUR currency. It does not manually add free text, VAT numbers or claim evidence to Pixel events. The opt-out from future user-level personalisation remains enabled but does not disable matching for attribution. Earlier advertising approvals do not activate this expanded use: users must consent to the updated notice. Existing refusals remain respected. Cookie settings allows consent to be withdrawn at any time.

PlanEvents does not use Meta Pixel, behavioural advertising, remarketing, cross-site audience creation or advertising personalisation through this implementation. Refusing ChatGPT ads measurement does not restrict the core Platform.

11. Future third-party technologies

PlanEvents may introduce additional service providers or technical functionality as the Platform develops.

Before introducing a new technology capable of storing information on or accessing information from a user’s device, PlanEvents will assess its purpose, technical behaviour, legal classification and any applicable consent requirement.

Where the technology processes personal data, PlanEvents will additionally assess the relevant legal basis under Article 6 GDPR, transparency requirements, processor or controller status, retention, security and any international-transfer implications.

The mere possibility that PlanEvents may use a technology in the future does not constitute present consent to that technology.

12. Consent

PlanEvents does not interpret continued use of the website, scrolling, closing a banner or accessing the Platform as consent to non-essential cookies or similar technologies where applicable law requires affirmative consent.

Where consent is legally required, it must result from a freely given, specific, informed and unambiguous indication of the user’s wishes within the meaning of Article 4(11) GDPR.

PlanEvents will not treat consent to the Privacy Policy, Terms & Conditions or use of the core Platform as consent to unrelated optional tracking technologies.

PlanEvents provides separate choices for audience analytics and ChatGPT ads measurement so that either purpose can be accepted or refused independently.

Proof of consent may be retained where necessary to demonstrate compliance with Article 7 GDPR.

13. Withdrawal and modification of consent

Where PlanEvents relies on consent for cookies or similar technologies, the user may withdraw that consent at any time.

Withdrawal must be capable of being performed as easily as consent was given.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where optional cookie categories are introduced, PlanEvents will provide an accessible mechanism allowing users to review or modify their choices.

Withdrawal of consent for optional technologies will not disable strictly necessary technologies that remain required to provide functionality expressly requested by the user or maintain the security of the Service.

14. Refusing optional technologies

Where optional cookies or similar technologies are used in the future, refusing those technologies will not prevent the user from accessing the core PlanEvents Service unless a particular optional feature objectively cannot operate without the relevant technology and this is clearly explained to the user.

Strictly necessary functionality is treated separately from optional analytics, advertising or similar processing.

PlanEvents will not design a consent mechanism in a manner intended to make refusal materially more difficult than acceptance.

15. Browser controls

Users may also control or delete cookies and other browser-stored information through the settings provided by their browser or device.

Browser controls are separate from any consent mechanism offered directly by PlanEvents.

Deleting authentication or strictly necessary application information through browser settings may sign the user out of PlanEvents, remove saved settings or prevent certain Platform functions from operating correctly.

Deleting a cookie from a browser does not necessarily withdraw a consent record already communicated to PlanEvents. Where PlanEvents provides a cookie-preference mechanism, that mechanism should be used to modify the user’s PlanEvents consent choices where applicable.

16. Third-party providers

Third-party providers involved in the technical operation of PlanEvents may process technical information associated with requests made through the Platform.

Current infrastructure includes Supabase for authentication, database and storage services; Vercel for application hosting, runtime and optional measurement services; Cloudflare Turnstile for applicable anti-abuse and bot-protection functionality; Stripe for payment processing; Resend for transactional email delivery; Google for optional audience analytics; and OpenAI for optional ChatGPT ads conversion measurement.

The fact that a third-party provider is used by PlanEvents does not necessarily mean that the provider places a cookie on every visit to planevents.eu.

The actual technical behaviour depends on the service invoked and the relevant implementation.

Further information about these providers, processing of personal data and international transfers is contained in the PlanEvents Privacy Policy.

17. Personal data processed through cookies or similar technologies

Where information collected or accessed through a cookie, authentication mechanism or comparable technology relates to an identified or identifiable natural person, it constitutes personal data and is processed in accordance with the GDPR and the PlanEvents Privacy Policy.

Depending on the technology involved, such information may include an authentication identifier, session information, IP address, User-Agent or browser information, request timestamp, language or preference information, security data, an advertising click reference, a random browser reference and other technical identifiers necessary for the relevant purpose.

PlanEvents does not currently use these technologies to construct behavioural advertising profiles of registered Clients or Professionals.

18. Duration

The duration of a cookie or comparable technology depends on its function and technical implementation.

Session-related information may cease to operate at the end of the relevant session, while certain authentication, security or preference information may remain for the period necessary to provide the relevant function.

PlanEvents applies the principle of storage limitation in accordance with Article 5(1)(e) GDPR where the information constitutes personal data.

The retention of server-side information generated in connection with authentication, security and use of PlanEvents is separately governed by the retention periods stated in the PlanEvents Privacy Policy.

19. International transfers

Certain technical providers used by PlanEvents may process information outside Belgium or the European Economic Area.

Where cookie-related or comparable technical information constitutes personal data and is transferred to a third country, the applicable requirements of Chapter V GDPR apply.

Depending on the circumstances, transfers may rely on an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR, including applicable Standard Contractual Clauses.

Further information concerning international transfers is provided in the PlanEvents Privacy Policy.

20. Changes to this Cookie Policy

PlanEvents may amend this Cookie Policy to reflect technical changes to the Platform, changes to the cookies or similar technologies used, introduction or removal of providers, changes in applicable legislation or regulatory guidance, or changes necessary to maintain the accuracy of this Policy.

The date of the current version is stated at the beginning of this document.

A change to this Cookie Policy does not retrospectively constitute consent to an optional technology for which valid consent is legally required.

Where PlanEvents introduces a materially new cookie or tracking purpose requiring consent, the relevant consent will be requested before the technology is activated for that user.

21. Relationship with the Privacy Policy

This Cookie Policy concerns cookies, browser storage and comparable terminal technologies.

The PlanEvents Privacy Policy provides broader information concerning the processing of personal data, including account information, event requests, Professional profiles, marketplace disclosures, payments, quality claims, security records, retention periods, data-subject rights and international transfers.

In the event of uncertainty concerning personal-data processing associated with a technical mechanism, this Cookie Policy and the Privacy Policy should be read together.

22. Contact

Questions concerning this Cookie Policy or the use of cookies and similar technologies by PlanEvents may be addressed to:

BrandLabel Agency Operator of PlanEvents Rue de la Marjolaine 1120 Brussels Belgium VAT: BE1040366570 Email: support@planevents.eu