Cookie Policy

1. Scope

This Cookie Policy explains the use of cookies and similar technologies in connection with PlanEvents, including the website available at planevents.eu and the associated PlanEvents application and marketplace.

PlanEvents is operated by BrandLabel Agency, an independent business established in Belgium, with registered VAT number BE1040366570, Rue de la Marjolaine, 1120 Brussels, Belgium.

This Cookie Policy should be read together with the PlanEvents Privacy Policy, which explains more generally how PlanEvents processes personal data.

2. Legal framework

The use of cookies and similar technologies by PlanEvents is governed, where applicable, by the rules concerning confidentiality of communications and storage of or access to information on a user’s terminal equipment derived from Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning privacy and electronic communications, as amended by Directive 2009/136/EC, together with the applicable Belgian legislation implementing those requirements.

Where information collected through cookies or similar technologies constitutes personal data, the processing of that information is also governed by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

In particular, processing of personal data must comply with the principles established by Article 5 GDPR and must have an appropriate legal basis under Article 6 GDPR. Where consent is required and relied upon, the requirements of Articles 4(11) and 7 GDPR apply.

3. Definition of cookies and similar technologies

A cookie is a small piece of information stored on or accessed from a user’s computer, mobile device or other terminal equipment when a website or application is used.

Cookies may be temporary session cookies, which ordinarily cease to operate when the relevant browser session ends, or persistent cookies, which remain available for a specified period unless deleted earlier.

PlanEvents may also use technical mechanisms that perform functions similar to cookies, including browser storage, authentication tokens, security tokens and other local storage technologies. References to “cookies” in this Policy include comparable terminal-storage or terminal-access technologies where the legal rules governing cookies apply to them.

The legal classification of a technology depends on its function and use rather than merely on the technical name assigned to it.

4. Technologies currently used by PlanEvents

PlanEvents uses technologies required or reasonably necessary for operation of the Platform, account authentication, session management, security, prevention of automated abuse, storage of essential user choices and provision of functionality expressly requested by the user.

With the user’s prior consent, PlanEvents also uses Google Analytics 4 and Vercel measurement services to understand aggregate use, navigation, performance and marketplace conversions. These optional technologies remain disabled before consent and after refusal.

PlanEvents does not currently place advertising cookies for the purpose of creating advertising profiles or tracking users across unrelated websites.

PlanEvents does not currently use social-media tracking cookies for advertising audience creation or conversion tracking.

PlanEvents does not use Google Signals, Google user-provided data collection, Meta Pixel, Hotjar, behavioural advertising, cross-site tracking or remarketing technologies.

5. Strictly necessary technologies

Certain technologies are necessary for the operation and security of PlanEvents and for the provision of functionality expressly requested by the user.

These technologies may be used for purposes including authenticating a registered user, maintaining a secure authenticated session, preserving security state, protecting accounts against unauthorised access, preventing automated abuse, processing security challenges, maintaining essential application state and remembering a user’s legally necessary cookie or privacy choices where applicable.

Where storage of or access to information on a user’s device is strictly necessary for the provision of a service expressly requested by that user, PlanEvents may use the relevant technology without requesting consent to the extent permitted by applicable law.

Strictly necessary technologies are not used for behavioural advertising or unrelated marketing profiling.

A user who blocks strictly necessary technologies through browser or device configuration may be unable to register, sign in, maintain an authenticated session or use certain functions of the Platform.

6. Authentication technologies

PlanEvents uses Supabase as part of its authentication and application infrastructure.

Authentication mechanisms may require browser-side storage or access to authentication information necessary to establish and maintain a registered user’s authenticated session.

Depending on the technical implementation and browser context, authentication information may be handled through secure authentication tokens, cookies or comparable browser-storage mechanisms.

Such information is used only insofar as necessary to authenticate the user, maintain account security, preserve the authenticated session and communicate securely with the relevant application infrastructure.

Authentication information is not made available to Clients or Professionals through the PlanEvents marketplace.

Further information concerning account and authentication data is contained in the PlanEvents Privacy Policy.

7. Security and anti-abuse technologies

PlanEvents uses technical security measures intended to protect the Platform, its users and its infrastructure against automated abuse, malicious requests, credential attacks and other security threats.

PlanEvents may use Cloudflare Turnstile for this purpose.

When Turnstile is invoked, technical information necessary to assess whether a request appears to originate from a legitimate human user rather than an abusive automated system may be processed by Cloudflare. This may include information relating to the request, browser, device environment and IP address.

Any cookie, token or comparable storage mechanism used solely where necessary to provide fraud-prevention, security or bot-protection functionality is treated according to its actual technical purpose.

PlanEvents does not use Cloudflare Turnstile for the purpose of creating advertising profiles of PlanEvents users.

The processing of personal data associated with security measures is further described in the PlanEvents Privacy Policy.

8. Preference and functional storage

PlanEvents may store information necessary to preserve user-selected settings or provide functionality requested by the user.

This may include the user’s selected platform language, relevant interface preferences, cookie choices where a consent mechanism is applicable and comparable settings necessary to provide the requested user experience.

A preference mechanism will be classified as strictly necessary only where the applicable legal conditions for that exemption are satisfied.

Where a future preference or functionality mechanism is not strictly necessary and applicable law requires consent, it will not be activated before the required consent has been obtained.

9. Analytics

If the user selects ‘Accept analytics’, PlanEvents activates Google Analytics 4 and Vercel Analytics/Speed Insights to measure aggregate page use, navigation, technical performance and predefined marketplace events. Refusal does not restrict the core Platform.

The analytics implementation permits only predefined, non-identifying event parameters. PlanEvents does not send names, email addresses, phone numbers, full postal addresses, VAT numbers, contact persons, request contact details, free-text messages, claim evidence or user-provided data to Google Analytics.

Google Analytics may process technical browser, device and interaction information and coarse geographic information. It may set the _ga and _ga_<container-id> cookies, whose lifetime is controlled through the analytics configuration and may be up to two years unless removed earlier.

Google Signals, advertising personalisation and Google user-provided data collection are disabled. Consent can be changed at any time through ‘Cookie settings’; the change applies immediately and PlanEvents attempts to remove readable Google Analytics cookies when consent is withdrawn.

10. Advertising, remarketing and social-media tracking

PlanEvents does not currently use cookies or similar technologies for behavioural advertising, remarketing, cross-site advertising attribution or the creation of advertising audiences.

PlanEvents does not currently use Meta Pixel or comparable social-media advertising trackers.

If PlanEvents introduces such functionality in the future, the relevant technology will not be treated as strictly necessary merely because it has a commercial benefit to PlanEvents.

Where applicable law requires consent, the relevant advertising or tracking technology will not be activated until valid consent has been obtained.

Refusal of optional advertising technologies will not prevent access to the core PlanEvents marketplace merely because the user refused advertising tracking.

11. Future third-party technologies

PlanEvents may introduce additional service providers or technical functionality as the Platform develops.

Before introducing a new technology capable of storing information on or accessing information from a user’s device, PlanEvents will assess its purpose, technical behaviour, legal classification and any applicable consent requirement.

Where the technology processes personal data, PlanEvents will additionally assess the relevant legal basis under Article 6 GDPR, transparency requirements, processor or controller status, retention, security and any international-transfer implications.

The mere possibility that PlanEvents may use a technology in the future does not constitute present consent to that technology.

12. Consent

PlanEvents does not interpret continued use of the website, scrolling, closing a banner or accessing the Platform as consent to non-essential cookies or similar technologies where applicable law requires affirmative consent.

Where consent is legally required, it must result from a freely given, specific, informed and unambiguous indication of the user’s wishes within the meaning of Article 4(11) GDPR.

PlanEvents will not treat consent to the Privacy Policy, Terms & Conditions or use of the core Platform as consent to unrelated optional tracking technologies.

Where several materially different optional purposes exist, PlanEvents may provide separate choices or categories as necessary to allow meaningful control.

Proof of consent may be retained where necessary to demonstrate compliance with Article 7 GDPR.

13. Withdrawal and modification of consent

Where PlanEvents relies on consent for cookies or similar technologies, the user may withdraw that consent at any time.

Withdrawal must be capable of being performed as easily as consent was given.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where optional cookie categories are introduced, PlanEvents will provide an accessible mechanism allowing users to review or modify their choices.

Withdrawal of consent for optional technologies will not disable strictly necessary technologies that remain required to provide functionality expressly requested by the user or maintain the security of the Service.

14. Refusing optional technologies

Where optional cookies or similar technologies are used in the future, refusing those technologies will not prevent the user from accessing the core PlanEvents Service unless a particular optional feature objectively cannot operate without the relevant technology and this is clearly explained to the user.

Strictly necessary functionality is treated separately from optional analytics, advertising or similar processing.

PlanEvents will not design a consent mechanism in a manner intended to make refusal materially more difficult than acceptance.

15. Browser controls

Users may also control or delete cookies and other browser-stored information through the settings provided by their browser or device.

Browser controls are separate from any consent mechanism offered directly by PlanEvents.

Deleting authentication or strictly necessary application information through browser settings may sign the user out of PlanEvents, remove saved settings or prevent certain Platform functions from operating correctly.

Deleting a cookie from a browser does not necessarily withdraw a consent record already communicated to PlanEvents. Where PlanEvents provides a cookie-preference mechanism, that mechanism should be used to modify the user’s PlanEvents consent choices where applicable.

16. Third-party providers

Third-party providers involved in the technical operation of PlanEvents may process technical information associated with requests made through the Platform.

Current infrastructure includes Supabase for authentication, database and storage services; Vercel for application hosting and runtime infrastructure; Cloudflare Turnstile for applicable anti-abuse and bot-protection functionality; Stripe for payment processing; and Resend for transactional email delivery.

The fact that a third-party provider is used by PlanEvents does not necessarily mean that the provider places a cookie on every visit to planevents.eu.

The actual technical behaviour depends on the service invoked and the relevant implementation.

Further information about these providers, processing of personal data and international transfers is contained in the PlanEvents Privacy Policy.

17. Personal data processed through cookies or similar technologies

Where information collected or accessed through a cookie, authentication mechanism or comparable technology relates to an identified or identifiable natural person, it constitutes personal data and is processed in accordance with the GDPR and the PlanEvents Privacy Policy.

Depending on the technology involved, such information may include an authentication identifier, session information, IP address, User-Agent or browser information, request timestamp, language or preference information, security data and other technical identifiers necessary for the relevant purpose.

PlanEvents does not currently use these technologies to construct behavioural advertising profiles of registered Clients or Professionals.

18. Duration

The duration of a cookie or comparable technology depends on its function and technical implementation.

Session-related information may cease to operate at the end of the relevant session, while certain authentication, security or preference information may remain for the period necessary to provide the relevant function.

PlanEvents applies the principle of storage limitation in accordance with Article 5(1)(e) GDPR where the information constitutes personal data.

The retention of server-side information generated in connection with authentication, security and use of PlanEvents is separately governed by the retention periods stated in the PlanEvents Privacy Policy.

19. International transfers

Certain technical providers used by PlanEvents may process information outside Belgium or the European Economic Area.

Where cookie-related or comparable technical information constitutes personal data and is transferred to a third country, the applicable requirements of Chapter V GDPR apply.

Depending on the circumstances, transfers may rely on an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR, including applicable Standard Contractual Clauses.

Further information concerning international transfers is provided in the PlanEvents Privacy Policy.

20. Changes to this Cookie Policy

PlanEvents may amend this Cookie Policy to reflect technical changes to the Platform, changes to the cookies or similar technologies used, introduction or removal of providers, changes in applicable legislation or regulatory guidance, or changes necessary to maintain the accuracy of this Policy.

The date of the current version is stated at the beginning of this document.

A change to this Cookie Policy does not retrospectively constitute consent to an optional technology for which valid consent is legally required.

Where PlanEvents introduces a materially new cookie or tracking purpose requiring consent, the relevant consent will be requested before the technology is activated for that user.

21. Relationship with the Privacy Policy

This Cookie Policy concerns cookies, browser storage and comparable terminal technologies.

The PlanEvents Privacy Policy provides broader information concerning the processing of personal data, including account information, event requests, Professional profiles, marketplace disclosures, payments, quality claims, security records, retention periods, data-subject rights and international transfers.

In the event of uncertainty concerning personal-data processing associated with a technical mechanism, this Cookie Policy and the Privacy Policy should be read together.

22. Contact

Questions concerning this Cookie Policy or the use of cookies and similar technologies by PlanEvents may be addressed to:

BrandLabel Agency Operator of PlanEvents Rue de la Marjolaine 1120 Brussels Belgium VAT: BE1040366570 Email: support@planevents.eu