Cookie Policy
This Cookie Policy has been drafted in accordance with Regulation (EU) 2016/679 ("GDPR"), Article 122 of Legislative Decree No. 196/2003 (the Italian Privacy Code), and the Guidelines issued by the Garante per la protezione dei dati personali (Italian Data Protection Authority) on 10 June 2021 concerning cookies and other tracking tools.
This Policy is based on the cookies and tracking tools set out in the technical documentation provided by the Data Controller referred to below.
Cookies are text strings that the websites visited by the user send to the device used for browsing (computer, smartphone, tablet), where they are stored and subsequently re-transmitted to the same websites upon the next visit.
They may serve a variety of functions, including enabling the website to operate, storing preferences, collecting statistical information in aggregate form or, subject to consent, carrying out profiling and marketing activities.
1. Data Controller
European Conservatives and Reformists Group (ECR Group)
Rue Wiertz 60, B-1047, Brussels, Belgium
Email: ECR.Press@europarl.europa.eu
Legal representatives:
Tomasz SZATKOWSKI — Secretary General
Endrik MARFIA — Deputy Secretary General
DATA PROTECTION OFFICER
The Data Protection Officer (DPO) is Ralph PACKET.
Email: ralph.packet@europarl.europa.eu
2. Types of Cookies Used
The website uses:
• Technical and functionality cookies
• Security cookies
• Third-party analytics cookies
• Cookies for embedded content
• Marketing and profiling cookies
The list of cookies is updated on the basis of the technical configuration of the website and may vary over time.
3. Technical and Security Cookies (no consent required)
3.1 Google Tag Manager
Google Tag Manager is a technical tag management tool that does not directly install profiling cookies. Any third-party scripts activated through this tool are loaded only with the user’s prior consent, where required.
• Cookie: _gtm, dc_gtm*
• Party: Third party
• Provider: Google Ireland Ltd.
• Purpose: tag management and distribution
• Data processed: technical script execution data
• Duration: session
• IP anonymised: No
• Privacy: https://policies.google.com/privacy
3.2 Google reCAPTCHA
• Cookie: _GRECAPTCHA
• Party: Third party
• Provider: Google Ireland Ltd.
• Purpose: spam protection
• Data collected: IP, user behaviour, device info
• Duration: 6 months
• IP anonymised: No
• Privacy: https://policies.google.com/privacy
3.3 Technical WordPress and System Cookies
WordPress (First party)
• wordpress_logged_in_* (session)
• wordpress_sec_* (session)
• wp-settings-* (1 year)
• wp-settings-time-* (1 year)
Purpose: user authentication and backend preferences
IP anonymised: No
Privacy: https://wordpress.org/about/privacy/
PHPSESSID
• Party: First party
• Provider: Hosting provider
• Purpose: server session management
• Duration: session
• IP anonymised: No
The Events Calendar (if active)
• tribe_events_*
• Party: First party
• Purpose: booking/event management
• Duration: session
• Privacy: https://theeventscalendar.com/privacy-policy/
Directorist (if active)
• directorist_*
• Party: First party
• Purpose: directory functionality
• Duration: session
• Privacy: https://directorist.com/privacy-policy/
4. Third-Party Analytics Cookies
Google Analytics
• Cookie: _ga, ga*
• Party: Third party
• Provider: Google Ireland Ltd.
• Purpose: website traffic and performance analysis
• Data collected: pseudonymous user ID, pages visited, events, IP (truncated as declared by the Data Controller)
• Duration: 2 years
• IP anonymised: declared Yes
• Privacy: https://policies.google.com/privacy
Technical configuration
As Google Analytics is configured with:
• IP anonymisation
• data sharing disabled
• no advertising features
Google Analytics is configured with IP address anonymisation, data sharing with Google disabled and no advertising or profiling features activated. In this configuration, the cookies are assimilated to technical cookies pursuant to the Guidelines of the Italian Data Protection Authority.
5. Cookies for Embedded Content (YouTube)
• VISITOR_INFO1_LIVE (6 months)
• YSC (session)
• CONSENT (2 years)
Party: Third party
Provider: Google LLC
Purpose: video player management, security and preferences
Privacy: https://policies.google.com/privacy
These cookies are installed only with the user’s prior consent via the banner.
6. Marketing and Profiling Cookies (subject to consent)
Meta Platforms Ireland Ltd.
• _fbp (3 months)
• fr (3 months)
Purpose: personalised advertising, remarketing, conversion tracking
Data collected: browser ID, IP, interactions
Privacy: https://www.facebook.com/privacy/policy/
LinkedIn Ireland Unlimited Company
• li_fat_id (2 years)
• li_gc (2 years)
• bcookie (2 years)
Purpose: advertising targeting and campaign monitoring
Data collected: device ID, IP, behaviour
Privacy: https://www.linkedin.com/legal/privacy-policy
7. Legal Basis
Technical and security cookies: performance of the requested service.
Analytics cookies, where configured with IP address anonymisation and without data sharing with the provider, are assimilated to technical cookies and do not require consent. Where such settings are not active, they shall be installed only with the user’s prior consent.
Marketing, profiling and external content cookies: user consent.
8. Consent Acquisition and Management
Upon the user’s first visit to the website, a banner is displayed containing a brief notice and options to accept all cookies, reject non-essential cookies and manage preferences in a granular manner.
Closing the banner by means of the dedicated command (X) results in the maintenance of the default settings and, consequently, in the installation only of technical cookies and of those assimilated to them.
Preferences may be changed or withdrawn at any time via the “Review your cookie choices” link in the website footer.
9. Re-presentation of the Banner
The banner is not re-presented on each visit, but is re-presented when at least 6 months have elapsed since its previous presentation, when the conditions of processing change significantly, or when it is not technically possible to verify the choice previously expressed.
10. Transfer of Data to Non-EU Countries
Some third-party providers used by the website may transfer personal data outside the European Economic Area. For further information on the transfers carried out by individual providers, please refer to their respective privacy policies.
It should be noted, however, that any such transfer shall take place to countries deemed adequate by the European Commission, or by adopting appropriate measures to protect your personal data, in compliance with the statutory guarantees, in accordance with applicable law and, in particular, Articles 44, 45 and 46 of the GDPR. For further details, you may write to the Data Controller at the e-mail address indicated above.
11. Data Subject Rights
Finally, you are hereby informed that you may exercise at any time the rights recognised to data subjects by law, as set out below:
the right to access the personal data provided;
the right to obtain the rectification of such data, their erasure, transformation into anonymous form, their blocking where processed in breach of the law, or the restriction of processing;
the right to object to processing;
the right to withdraw consent;
the right to data portability;
the right to obtain confirmation as to whether or not such data exist, to know their content and origin, to verify their accuracy or request their integration or updating, to know the purposes and methods of processing, the logic applied where processing is carried out with the aid of electronic tools, the identification details of the Data Controller and of the Data Protection Officer, where appointed, in addition to the information already set out in this Policy;
the right to lodge a complaint with the competent supervisory authority, the so-called “Garante Privacy”;
the right to object to an automated decision-making process concerning the data subject, including profiling, where such a process has been established; and
the right to receive, without undue delay, communication of a personal data breach concerning their personal data.
Requests must always be addressed to the Data Controller by e-mail, at the address indicated above.
12. Processing Methods
Processing is carried out by means of automated tools suitable to ensure, in relation to the purposes for which data were collected, their security, as well as to prevent unauthorised access by third parties and, in any case, in compliance with applicable national and European legislation. Processing is carried out by the Data Controller, by the Data Processors and by the processing personnel duly delegated for that purpose. No dissemination is carried out.
13. Consent Storage
Cookie preferences expressed by the user are stored by means of a dedicated technical cookie for a maximum period of 6 months, unless withdrawn earlier.
14. Updates
This Cookie Policy was updated on 5 March 2026.
See also our Privacy Policy.