Cookies and optional Google Analytics

Google Analytics is disabled in this version. We do not load its tag or send requests to Google, even with a saved choice, until the privacy and measurement-settings review is complete.

• Purpose and choice: understand use of public pages, based on your consent. Earlier permission for first-party metrics does not authorise Google. Declining does not restrict the service. Withdraw through Change privacy choice in the footer.
• When enabled and accepted, Google receives the IP address needed for the connection, technical browser/device data and cookie identifiers, plus a normalised public path and a fixed title. This is not anonymous measurement. We do not send full URLs, queries, fragments, referring pages, free text, forms, financial values or account, property or report identifiers.
• Authenticated, private, analysis and report areas are excluded. Internal operational events are not connected to Google. Advertising, Google signals, personalisation, user-provided data collection and enhanced measurement are not enabled.
• The measurement-choice cookie lasts up to 180 days. A local reminder of the choice remains until browser storage is cleared. The _ga and _ga_* cookies have a configured 90-day lifetime without automatic renewal. Withdrawal stops the measurement context and deletes these cookies on this domain. Do Not Track and Global Privacy Control prevent loading.
• Google receives measurement data when measurement is enabled and accepted; processing outside the European Economic Area may occur. The contractual provider identity, processing locations, transfer safeguards and Google-property retention must be confirmed and published before activation. This change does not attest that review or replace the contacts and rights described in this policy.

Data controller

CondOnline is the data controller for the personal data used to run the platform.

Data we process

• Account: email address, name and authentication identifiers.
• Operations: condominium data entered by authorised users.
• Security: technical logs, access audit records and critical events.

Purposes and legal basis

• Performance of the contract: access, operation and support.
• Legitimate interest: security, abuse prevention and service improvement.
• Legal obligation: meeting accounting and regulatory requirements.

Retention

• Account data: for as long as the account is active.
• Operational records: for as long as they are needed for the service or by law.
• Technical logs: kept for a limited period for security and audit purposes.

Data sharing

• We do not sell personal data.
• We use operational infrastructure, email and payment providers; optional Google measurement is described separately.
• All processors are bound by contractual confidentiality obligations.

Your GDPR rights

• Access, rectification, erasure and restriction of processing.
• Data portability where applicable.
• Objection to processing in the cases provided for by law.