Cookie Policy

In short

We use no advertising cookies and no social media tracking of any kind. We do measure how the site is used, with Google Analytics — but only for visitors who agree to it, and it is off until you say otherwise. Videos are loaded from YouTube on the same terms. The web font is served from this site rather than from Google.

What a cookie is here

A cookie is a small file a website asks your browser to keep. This page uses "cookie" for anything stored on or read from your device, including similar techniques such as local storage — the law treats them the same way.

Strictly necessary

These are set because the site cannot be delivered without them. They carry no consent question, and switching them off is not possible while you are using the site.

Name	Purpose	Kept for
edso_cop_session	Keeps your session — the sign-in for member federations, and messages shown after a form is sent.	120 minutes
XSRF-TOKEN	Protects forms against being submitted from another site on your behalf.	120 minutes
edso_consent	Remembers the choice you made about cookies, so you are not asked again on every page.	6 months
remember_web_*	Only in the member federation portal, and only if you asked to stay signed in.	Until you sign out
sidebar_state, appearance	Only in the member federation portal: whether the menu is open and which colour scheme you chose.	1 year

External media — off until you allow it

Some pages show videos published on EDSO's YouTube channel. Until you allow it, no part of the video is requested: not the player, and not the still image either, because that image is also served by Google. You see a placeholder instead, and pressing play asks you first.

Once allowed, the player is loaded from youtube-nocookie.com, Google's reduced-tracking address. Playing a video still lets YouTube store data on your device and sends your IP address to Google Ireland Ltd. and Google LLC. What they do with it is governed by Google's privacy policy.

The legal basis is your consent — GDPR art. 6(1)(a), and for the storage itself art. 5(3) of the ePrivacy Directive, which in Germany is s.25 TDDDG. You can withdraw it at any moment, and withdrawing takes effect on the next page you load.

Analytics — off until you allow it

With your permission we use Google Analytics 4 to count visits and see which pages are read. It tells us that a page was opened, roughly from where, and what was opened next; it does not tell us who you are, and we do not use it for advertising. Google's advertising features (Google Signals and ad personalisation) are switched off in our configuration, and the property is G-LXPSWTDY6D.

Nothing is loaded before you agree. If you reject, or simply never answer, the Google Analytics script is not requested at all.

Name	Purpose	Kept for
_ga	Tells one browser apart from another, so a returning visit is not counted as a new one.	2 years
_ga_*	Holds the state of the current visit for this property.	2 years

Set by Google Ireland Ltd. The data is processed on our instructions under Google's data processing terms; where it reaches the United States, the transfer rests on the EU-US Data Privacy Framework. If you withdraw your permission, these cookies are deleted straight away and the script is not loaded again. You can also use Google's own browser opt-out add-on.

What we do not do

No measurement at all for visitors who do not agree to it.
No advertising or remarketing tags — no Meta Pixel, no Google Ads.
No Facebook, X, Instagram or LinkedIn plugins. The icons in the footer are ordinary links; nothing is loaded from those companies until you click one and leave.
No web font loaded from Google. Inter is served from this site.
We do not sell or share what we hold with anyone for their own purposes.

Changing your mind

Your choice can be changed or withdrawn whenever you like — it is as easy to say no afterwards as it was to say yes.

You can also delete cookies in your browser, or block them altogether. If you delete the edso_consent cookie, this site forgets your choice and asks again — which also means nothing external is loaded until you answer.

How we handle personal data more generally — including the server logs every website keeps — is set out in our Privacy Policy.

Last updated 20 August 2026.