Cookie & Tracking Policy
This notice explains how P&P Consultancy uses cookies and similar technologies on the P&P Talent site. We keep essential security/session, locale, and social OAuth state cookies on by default. Performance and marketing cookies only load after you provide explicit consent.
1) Controller and scope
P&P Consultancy is the controller for cookies on the P&P Talent website. This policy applies to visitors, candidates, and logged-in users interacting with our public pages and onboarding flows.
Contact: [email protected]. You can also reach the Belgian Data Protection Authority (GBA/APD) if you believe your rights are infringed.
2) What we set and why
| Name | Purpose | Category | Retention |
|---|---|---|---|
| cookieConsent (cookie + local storage) | Stores your cookie preferences (essential, performance, marketing) and consent timestamp. | Essential / preference | 12 months |
| talent_session | Keeps you signed in securely and binds your server-side session. | Essential / security | Up to configured session max age (default 30 days) or sooner on logout/revocation. |
| pnp_lang, NEXT_LOCALE, pnp_tz | Remember your selected language and timezone preferences. | Essential / preference | Up to 12 months, or until replaced/cleared. |
| talent_social_oauth | Protects social OAuth sign-in/sign-up flow against CSRF and callback tampering. | Essential / security | Up to 10 minutes. |
We also use local storage for preferences such as theme and language, and we synchronize cookie consent in local storage for UX consistency.
3) Legal basis
- Essential cookies: legitimate interest to provide a secure, reliable service (GDPR Art. 6(1)(f)).
- Performance cookies: only after your consent (GDPR Art. 6(1)(a); ePrivacy rules).
- Marketing cookies: only after your consent (GDPR Art. 6(1)(a)).
4) Performance and marketing tools
We do not load analytics or marketing pixels until you opt in. When enabled, these are limited to:
- Performance: privacy-friendly analytics to understand feature usage and reliability.
- Marketing: optional remarketing or conversion tags for P&P campaigns.
Any third-party provider we use is subject to a Data Processing Agreement and, where needed, EU Standard Contractual Clauses for international transfers.
Portfolio views: When you visit a public portfolio page, we only track portfolio and project views if you have accepted performance cookies. If you decline or have not yet made a choice, no view tracking occurs. This respects your privacy choices under GDPR and ePrivacy rules.
5) How to change or withdraw consent
- Use the cookie banner: click "Manage preferences" to adjust performance/marketing at any time.
- Browser controls: you can clear cookies or block third-party cookies via your browser settings.
- Do Not Track: we honor DNT as a signal to keep only essential cookies active.
6) Retention
- Consent records are kept for up to 12 months to demonstrate compliance.
- Authentication/session cookies expire at configured max age (default 30 days) or sooner when revoked/logged out.
- Local storage preferences stay in your browser until you clear them.
7) Your rights
You have the right to withdraw consent at any time, and to request access, correction, or deletion of personal data linked to cookie identifiers. Contact us to exercise these rights or to request a record of your consent.
8) Contact and complaints
For cookie questions, reach [email protected]. You can lodge a complaint with the Belgian Data Protection Authority (GBA/APD).
Last updated: 2026-03-31