Cookie Policy
Last updated: 29 July 2026
This Cookie Policy explains which cookies and similar storage technologies BENTIL S.R.L. (registered office: Int. Alba, Nr. 1, Ap. 1, Odorheiu Secuiesc, Harghita County, Romania; VAT no. RO50879861; hereinafter "BENTIL", "we") uses on the website bentil.ro, for what purposes, and how you can control them.
1. What are cookies and similar technologies?
A cookie is a small text file that a website places in your browser, allowing the site to recognise your browser and remember certain settings. A related technology is the browser's local storage (localStorage), where data is kept exclusively on your device and is not automatically transmitted to the server.
2. Important notice up front
Without your consent, bentil.ro sets only technically necessary cookies. Analytics and advertising cookies — Google Analytics 4 and Google Ads conversion measurement — are set only after your explicit consent in the cookie banner. Until you consent, no Google tag is loaded and no data is transmitted to Google. You can withdraw your consent at any time via the cookie settings.
3. Cookies and storage items we use
| Name | Purpose | Type | Storage period |
|---|---|---|---|
| bentil_session | Session identification: maintaining session state and your selected language. Session data is stored in a server-side database. | Strictly necessary (first-party cookie) | 120 minutes |
| XSRF-TOKEN | Security: protection against cross-site request forgery (CSRF). | Strictly necessary (first-party cookie) | Session (120 minutes) |
| darkMode | Remembering your chosen light/dark display mode. This value never leaves your browser. | Functional (localStorage) | Until deleted |
| Cookie-consent state | Recording your cookie choice; to be able to demonstrate consent, your decision is also logged server-side together with the consent version. | Strictly necessary | For as long as your choice is retained, and thereafter as required for legal accountability |
| _ga | Google Analytics 4: distinguishes returning visitors (audience measurement). | Analytics (first-party cookie) — only with consent | 2 years |
| _ga_<ID> | Google Analytics 4: session state for audience measurement. | Analytics (first-party cookie) — only with consent | 2 years |
| _gcl_au / _gcl_aw | Google Ads: links an enquiry to the ad you arrived from (conversion measurement). | Advertising — only with consent | 90 days |
| bentil_attr (localStorage) | Stores the ad identifiers (gclid, wbraid, gbraid), the utm parameters, the time and the landing URL from the ad link, so that a later enquiry can be attributed to the ad that triggered it. | Advertising (localStorage, first-party) — only with consent | 90 days |
4. Legal basis
Technically necessary cookies: our legitimate interest in operating the website (Art. 6(1)(f) GDPR) and the exemption for strictly necessary storage (§ 25(2) TDDDG); no consent is required. Analytics and advertising cookies, and the access to your device required for them: your consent alone (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You may withdraw that consent at any time with effect for the future via the cookie settings; the lawfulness of processing carried out until then is unaffected. The functional storage item (darkMode) is set solely by your explicit setting action and transmits no data to us.
5. Third-party services that do not use cookies
For the sake of transparency, we also inform you about external connections that are not cookies but may involve data transfers:
- Fonts: All fonts are served locally from our own server (self-hosting); no connections to Google servers are made.
- Cloudflare Turnstile: spam protection for the contact form (Cloudflare, Inc., USA) — processes technical connection data, sets no advertising cookies. Details in the privacy policy.
- WhatsApp: the WhatsApp links on the website (wa.me, Meta) are plain hyperlinks; we use no embeds, and data is transferred only if you click the link.
- AI chat: when you use the AI-powered chat feature, your messages are transmitted to Anthropic PBC (USA). For details, see our Privacy Policy.
6. Audience and conversion measurement
Independently of your consent, we measure visits with a self-developed, cookieless solution in which the IP address is irreversibly hashed using SHA-256 and no external provider is involved. In addition, and only with your consent, we use Google Analytics 4 and Google Ads conversion measurement (Google Ireland Limited, Ireland). Details — including the transfer to the USA and the processing of a hashed e-mail value when you contact us via an ad — are set out in our privacy policy.
7. Managing and deleting cookies
You can delete cookies or block their placement at any time in your browser settings. Please note that blocking strictly necessary cookies may impair certain website functions (e.g. language selection, secure form submission). The darkMode value in localStorage can be removed by clearing the site data in your browser.
8. Contact and changes
We may update this policy from time to time; the current version is always available on this page. If you have any questions, please contact us at office@bentil.ro or by phone at +40 743 676 713.
Other legal documents
GDPR Data Request
Request access, deletion, or rectification of your personal data.