Cookie PolicySüti Tájékoztató

Cookies are small text files or similar identifiers stored on a browser or device when a website or application is used. Depoflow may also use technologies with similar functionality, including local storage, session storage, authentication mechanisms, SDKs, pixels, or other technical identifiers, depending on the actual implementation.

Depoflow may use cookies and similar technologies to maintain secure sessions, authenticate users, protect the Platform, remember necessary settings, support requested functionality, facilitate integrations, and understand technical performance where applicable. The actual technologies used depend on the production implementation.

When a Customer connects Google Calendar, temporary technical state values or similar mechanisms may be used during the authorization process to associate requests with the correct session and help prevent request forgery. These mechanisms serve the requested integration and are not intended to function as advertising trackers.

Depoflow does not currently intend to rely on optional analytics cookies unless they are specifically deployed and disclosed. Before production launch, the actual website and application should be audited for analytics scripts, SDKs, cookies, local-storage entries, and similar technologies, and this policy should be updated accordingly.

Depoflow does not currently intend to use advertising, retargeting, or marketing pixels unless they are specifically introduced. If such technologies are deployed, the applicable cookie disclosures and consent mechanisms should be updated before activation where required by law.

Where applicable law requires consent for a particular cookie or similar technology, Depoflow will seek the required consent before activating that technology. Technologies that are strictly necessary for a service explicitly requested by the user may be used where permitted by applicable law without optional-cookie consent.

Where consent is required, users should be provided with an appropriate mechanism to withdraw or modify their preferences. Users may also delete stored cookies through their browser, although deleting cookies does not necessarily constitute a complete withdrawal mechanism for every consent framework or processing activity.

Modern browsers generally allow users to block, delete, or restrict cookies and similar storage technologies. Restricting strictly necessary authentication or session technologies may prevent users from signing in or using parts of the Depoflow Platform.

Depoflow may integrate third-party services for functions such as authentication, payment processing, calendar synchronization, hosting, communications, security, or monitoring. The presence of a third-party service does not necessarily mean that the provider places a cookie on the user's device. The final cookie inventory should identify the actual technologies loaded in each relevant environment.

Browser local storage, session storage, and similar mechanisms may be used where necessary to maintain application state, support requested functionality, or improve technical operation. Their exact use, contents, and retention should be verified against the production application before this policy is finalized.

Technical identifiers and short-lived state values may be used to maintain authentication sessions, protect OAuth interactions, prevent request forgery, detect suspicious activity, and support other security functions. Security-related technologies should be limited to what is reasonably necessary for the applicable purpose.

Cookies and similar technologies may be either session-based or persistent. Their lifetime depends on the specific technology and purpose. The final production cookie inventory should identify, for each technology where applicable, its provider, purpose, type, duration, and whether it is first-party or third-party.

Information obtained through cookies or similar technologies may constitute personal data under the GDPR depending on the information involved and whether an individual can be identified or singled out. Where such processing involves personal data, it is also governed by the Depoflow Privacy Policy and applicable data-protection requirements.

The applicable legal basis depends on the specific technology and purpose. Strictly necessary technologies may be used where permitted because they are necessary to provide a service explicitly requested by the user or to operate and secure the Platform. Optional tracking technologies may require consent under applicable law. Where personal data is processed, the relevant GDPR legal basis must also be identified.

Depoflow may provide booking or payment-related widgets that Merchants embed into their own websites. The widget may use technical cookies or similar technologies required for its operation. The actual behavior should be disclosed according to the production widget implementation. Merchants remain responsible for the privacy and cookie requirements applicable to their own websites and customer relationships.

Merchants using Depoflow on their own websites remain responsible for providing appropriate privacy and cookie information to their End Clients and for obtaining any consent required by applicable law. Merchants should not assume that Depoflow's own cookie policy automatically satisfies the legal requirements applicable to their independent website, business, or customer relationships.

Depoflow may update this Cookie Policy when its technologies, integrations, processing activities, or legal requirements change. Material changes to the cookie or tracking architecture should be reflected in the applicable disclosures and, where required, consent mechanisms before the relevant technology is activated.

Questions concerning Depoflow's use of cookies or similar technologies can be directed to support@depoflow.hu.

This Cookie Policy should be read together with the Depoflow Privacy Policy, GDPR Framework, Terms of Service, and Payment Processing Disclosure, as applicable.