Cookie and Consent Policy

Executive Summary

This policy explains how the website [openfields.ro] uses cookies and similar technologies for proper functionality, traffic analysis, and visitor experience personalization. The policy complies with Regulation (EU) 2016/679 (GDPR), Law 506/2004 on the confidentiality of electronic communications, and the requirements of Google Consent Mode V2.

Date: [November 07, 2025]  Version: [2]

1. Categories of Cookies

The website uses both first-party and third-party cookies for functionality and analytics purposes.

Category | Description | Examples of Use | Duration

Strictly Necessary | Ensure website functionality and session security. | authentication, maintaining language preferences | session / 12 months

Preferences | Store user options (language, region). | saving visitor preferences | 6 months

Analytics | Measure website performance and traffic. | Google Analytics 4 (GA4) | 14 months

Marketing | Enable the display of relevant ads and conversion tracking. | Google Ads, remarketing | up to 13 months

Strictly necessary cookies are automatically enabled, while others require your explicit consent.

2. Banner and Preference Panel

Upon the first visit to the site, a consent banner is displayed. The user may choose to:

  • Accept all cookies
  • Reject all cookies
  • Customize preferences

The preference panel allows users to grant consent by category. No pre-checked boxes are used. Consent can be changed at any time through the ‘Cookie Settings’ link available in the page footer.

3. Implementation of Google Consent Mode V2

The website [openfields.ro] complies with Google Consent Mode V2 standards, enabling consent signals to be sent to Google Ads and Google Analytics platforms.

Implementation principles:

  • The initial state of ad_storage and analytics_storage signals is ‘denied’.
  • Activation of these signals occurs only after the user provides explicit consent.
  • The system supports additional states ad_user_data and ad_personalization required by GCM V2.

GCM V2 signal mapping:

Category | Activated GCM V2 Signals

Strictly Necessary | none

Analytics | analytics_storage = granted

Marketing | ad_storage, ad_user_data, ad_personalization = granted

Preferences | managed locally within the application

Example minimal code snippet:

<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag(‘consent’, ‘default’, {
  ‘ad_storage’: ‘denied’,
  ‘analytics_storage’: ‘denied’,
  ‘ad_user_data’: ‘denied’,
  ‘ad_personalization’: ‘denied’
});
</script>

After user acceptance:

<script>
gtag(‘consent’, ‘update’, {
  ‘ad_storage’: ‘granted’,
  ‘analytics_storage’: ‘granted’,
  ‘ad_user_data’: ‘granted’,
  ‘ad_personalization’: ‘granted’
});
</script>

Verification:
Implementation can be tested using Google Tag Assistant or GA4 DebugView to confirm that consent states are correctly applied.

4. Consent Withdrawal/Modification Mechanism

The user can modify or withdraw consent at any time by accessing the ‘Cookie Settings’ link in the footer. Changes take effect immediately and are recorded in an internal consent log (date, time, banner version, preferences). Data are not used to personally identify users.

5. iPay and BT Cookies Integration

On pages where online payments are made, technical cookies managed by the iPay platform of Banca Transilvania may be used – Banca Transilvania S.A., CUI RO5022670, headquartered in Cluj-Napoca, 30–36 Calea Dorobanților Street, Romania, registered with the Trade Register under no. J12/4155/1993.

These cookies are strictly necessary for payment processing and transaction security.

They do not collect analytics or marketing data.

Banca Transilvania acts as a data processor under Article 28 of the GDPR.

The full BT policy is available at: https://www.bancatransilvania.ro/politica-confidentialitate.

6. Useful Links

[Open Fields Privacy Policy]

[Open Fields Terms and Conditions]

[GDPR Request Form]

[DPO Contact – email: [name@email.ro]]

Annexes (Cookie List, GCM V2 Code)

Example cookie list:

Cookie Name | Provider | Purpose | Duration | Type

_ga | Google Analytics | website traffic analysis | 14 months | HTTP

_gid | Google Analytics | session analysis | 24 hours | HTTP

PHPSESSID | openfields.ro | user session maintenance | session | necessary

cookie_consent | openfields.ro | saving cookie preferences | 6 months | functional

Implementation checklist:

  • Implement banner code in <head> and <body>.
  • Initialize signals as denied.
  • Activate signals upon explicit consent.
  • Log consents and preferences.
  • Test via Google Tag Assistant and GA4 DebugView.