Cookie policy.
Notice on the use of cookies under Articles 12 and 13 of Regulation (EU) 2016/679 and Article 122 of Italian Legislative Decree 196/2003.
This notice is reviewed periodically, so please check it regularly.
This Cookie Policy explains to users (the “Users” or “Data Subjects”) the types, purposes and ways of use of the cookies employed by the website www.offcarr.com and its subdomains *.offcarr.com (the “Site”).
Please note from the outset that this Site uses only technical cookies (and/or analytics cookies treated as equivalent to them) and does NOT use profiling cookies or any other tracking tools for advertising or marketing purposes.
This notice is an integral part of the Site's general Privacy Policy, available at: www.offcarr.com/en/privacy.
1. Data controller and Data Protection Officer (DPO)
The controller of the personal data collected through this Site is:
- Company name: OFFCARR srl
- Registered office: Via dell'Artigianato II 29, 35010 Villa del Conte (PD), Italy
- Tax code / VAT number: 03704650286
- Contact e-mail: commerciale[at]offcarr.com
2. What cookies are
Cookies are short strings of text that the Site sends to the device of the User visiting it (computer, tablet, smartphone or other mobile device used for browsing). The device stores the cookies in its web browser and sends them back to the Site on the same User's next visit.
In the rest of this document, the term “Cookie” refers to both cookies and similar technologies.
3. Types of cookies used by the Site, purposes and legal basis
3.1. Technical cookies
In accordance with the applicable law, the Site uses only technical and functionality cookies, that is, the cookies strictly necessary for the Site to work.
Technical cookies are those used solely to:
“carry out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide that service” (Legislative Decree 196/2003, Art. 122).
They are used for no other purpose and are set directly by the Controller or, on its behalf, by the providers of the Site's technical services; the one exception is the third-party technical cookie of Bergh Special Products for the spoke-guard catalogue. They fall into two groups:
- Browsing or session cookies: ensure normal and secure browsing and use of the Site (allowing, for example, a purchase, keeping the session active or signing in to reserved areas);
- Functionality cookies: let the User browse according to a set of chosen criteria (for example the language or other display settings) to improve the service provided.
3.2. Statistics and browser local storage
The Site does NOT use analytics cookies. Visit statistics are collected with Umami without cookies and without storing data on the User's device; Cloudflare Web Analytics measures visits and performance, also without cookies. Details are given in the Privacy Policy. Contact forms are checked with Cloudflare Turnstile, which processes technical browser signals to tell real users from automated systems. The Site also uses the browser's local storage for features the User asks for (favourites, comparison, filters, preferences, drafts and the spare-parts list), listed in section 4. This data stays on the device and can be deleted at any time from the browser settings.
3.3. No consent requirement and no banner
Since the Site uses only technical cookies (and/or analytics cookies treated as equivalent to them), under Article 122(1) of Legislative Decree 196/2003 the User's prior consent is not required for them to be set, and no blocking banner is shown on the first visit.
The legal basis for the processing is the provision of a service explicitly requested by the User (Art. 6(1)(b) GDPR and Art. 122(1) of Legislative Decree 196/2003) and the Controller's legitimate interest in keeping the Site secure and technically sound (Art. 6(1)(f) GDPR).
Providing data through these cookies is necessary to browse the Site properly; disabling them in the browser settings may impair some features.
4. Identifier coding criteria and detailed list of the cookies on the Site
Below are the coding criteria for the identifiers used by the Site and the full list of the technical cookies in use, with their nature, purpose, duration (period of activity and retention) and any access by third parties.
| Cookie name / identifier | Provider (first or third party) | Specific purpose | Duration / retention period | Third-party access |
|---|---|---|---|---|
cpq_session | First party (OFFCARR srl, offcarr.com domain) | Technical session cookie: signs the User in to the order portal (reserved area) and keeps the session active. It holds only a random code and is set only after sign-in. | 30 days from sign-in; the server ends the session after 7 days of inactivity or 30 days overall; deleted at sign-out | No |
__cf_bm | First party (offcarr.com domain), managed by Cloudflare, Inc. | Technical security cookie: tells human traffic from automated traffic (bots) | 30 minutes | Yes: Cloudflare (data processor) |
cf_clearance | First party (offcarr.com domain), managed by Cloudflare, Inc. | Technical security cookie: records that a security check was passed, so that it is not repeated on every request | Up to 1 year in the browser; how long the check stays valid is set by the Controller's security settings | Yes: Cloudflare (data processor) |
__cf_ob | First party (offcarr.com domain), managed by Cloudflare, Inc. | Technical security cookie: keeps the state of a security check in progress; it is partitioned, so it cannot be used on other sites | Session (deleted when the browser is closed) | Yes: Cloudflare (data processor) |
__cf_bm | Third party: Cloudflare, Inc. on behalf of Bergh Special Products (iframe.bspshop.com domain) | Technical security cookie of the BSP design catalogue: tells human traffic from automated traffic (bots) | About 30 minutes of inactivity | Yes: Cloudflare, Bergh Special Products |
Bergh Special Products' privacy and cookie policies are available on its website: https://bspshop.com/pages/privacy-policy and https://bspshop.com/pages/cookie-policy respectively.
More about the cookies managed by Cloudflare: developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/
The Site also uses the browser's local storage (localStorage, sessionStorage and IndexedDB). This data stays on the User's device and is not sent to the server automatically, except for drafts and offline data, which are synchronised when the User is connected.
| Name / technology | Provider (first or third party) | Specific purpose | Duration / retention period | Third-party access |
|---|---|---|---|---|
offcarr_favorites (localStorage) | First party | Products saved as favourites | Until the User removes it | No |
offcarr_compare (localStorage) | First party | Products chosen for comparison | Until the User removes it | No |
offcarr_* (sessionStorage) | First party | Filters, search and sort order of the product catalogue | Until the browser tab is closed | No |
lang, optionView (localStorage) | First party | Language and display preferences | Until the User removes it | No |
ricambi_cart_v1 (localStorage) | First party | Spare-parts list being prepared | Until the request is sent or the User removes it | No |
offcarr-cpq (IndexedDB) | First party | Configuration draft and data for offline use | Until replaced, synchronised or deleted | No |
prints_catalog_cache_* (localStorage) | Third party: Bergh Special Products (spoke-guard catalogue embedded in the Site) | Copy of BSP's public design catalogue, to speed up loading | Refreshed about every 30 minutes; kept until replaced or until the browser data is cleared | Yes: Bergh Special Products |
5. Managing and disabling cookies in the browser
Although technical cookies are needed for the Site to work properly, the User can block or delete cookies at any time in the browser settings. Please note that disabling technical cookies entirely may prevent the Site, or parts of it, from working properly.
Instructions for managing cookies in the main browsers:
Disabling cookies completely may make some features of the Site unavailable. Even with all cookies disabled, the browser keeps storing a small amount of information needed for the Site's basic features. All major browsers offer a “private” browsing mode that does not record history; cookies set in that mode are normally deleted when it is closed.
6. Your data protection rights
Under the GDPR, with regard to the processing of their personal data, Data Subjects have the right to ask the Controller for:
- Access: confirmation of whether data concerning them is being processed, and further details on the information in this notice;
- Rectification: correction or completion of the data provided, if inaccurate or incomplete;
- Erasure: deletion of the data when it is no longer needed for the purposes of the processing, when consent is withdrawn or the processing is objected to, when the processing is unlawful, when there is a legal obligation to erase it, or when the data concerns minors under sixteen;
- Restriction: that the data be processed for storage only, with no other processing, for the time needed to rectify it; when the processing is unlawful and the Data Subject opposes erasure; when the Data Subject needs the data held by OFFCARR srl to exercise their rights in court; and, finally, when processing has been objected to, while it is checked whether OFFCARR srl's legitimate grounds override those of the Data Subject.
These rights can be exercised at any time by writing to OFFCARR srl at commerciale[at]offcarr.com.
Data Subjects have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, if they believe their rights have been infringed by OFFCARR srl and/or a third party, or are not satisfied with the reply to their requests.