Cookies and trackers
PROMETEO uses essential technical cookies to function. Everything else — today only Google Analytics 4, loaded through Google Tag Manager — is enabled solely after your explicit consent. Until you choose, your browser contacts no third-party server at all: the scripts are absent from the page, not merely “switched off”.
Manage your preferences
You can change your mind at any time, in the same number of clicks it took to accept: from here, from the Preferenze cookie link at the foot of every public page, or — if you have an account — from Impostazioni → Privacy e cookie.
Categories
1. Essential (always on)
Required for authentication, autosave of the questionnaire, abuse prevention (rate limiting) and basic application functionality. The Platform cannot deliver the service without them, so under the ePrivacy Directive they need no consent. They are never shared with third parties and never profile.
| Name | Type | Purpose | Duration |
|---|---|---|---|
msal.* | Local/session storage — first party | Microsoft Entra session tokens: keeps you signed in. | Until sign-out or token expiry |
prometeo.consent.v2 | Local storage — first party | Stores this very choice, so we need not ask again on every page. | 6 months |
2. Analytics (opt-in, off by default)
Google Analytics 4, loaded through Google Tag Manager, with IP anonymisation, Google Signals disabled and no joining with advertising data. It measures in aggregate which pages and features are used, so we can see where the Platform is unclear. Legal basis: your consent (art. 6.1.a GDPR).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Ireland Ltd. | Pseudonymous identifier distinguishing one browser from another. | 2 years |
_ga_<ID> | Google Ireland Ltd. | Keeps session state for the measured GA4 property. | 2 years |
Google Tag Manager writes no cookies of its own: it is the container that loads GA4 once consent is given. Google retains the collected data for 14 months, the shortest period the platform offers.
3. Marketing (opt-in, currently inactive)
Advertising and remarketing tags. None is installed in this version: the category stays in the banner so that, if and when such tags are introduced, consent is already collected granularly and separately from analytics. While the category is empty, enabling it loads nothing.
How the prior blocking works
On page load a single snippet of our own code runs and declares to Google — through Consent Mode v2 — that every storage category is denied. The Google Tag Manager container is inserted into the page only if and when you grant analytics consent. If you refuse, or simply ignore the banner, no request ever reaches Google.
If you withdraw a consent you had given, the Platform both updates the signal sent to Google and deletes the _ga cookies already present in your browser.
Transfers outside the European Union
The controller for Google Analytics in the European Economic Area is Google Ireland Ltd. Data may be transferred to Google LLC in the United States on the basis of the European Commission's Standard Contractual Clauses and Google LLC's certification under the EU–US Data Privacy Framework. This transfer happens only if you consented to the Analytics category.
Google Search Console
We use Google Search Console to monitor how the site appears in search results. It works on data Google already holds about its own search pages: it installs no cookie and no script on this site and therefore needs no consent. Domain ownership is verified through a DNS record or a static meta tag, neither of which tracks anything.
Consent lifetime and record
Your choice applies to the browser you made it in and stays valid for six months, after which the banner returns. A copy of the record — a random consent identifier, the categories accepted, the date, how the choice was made, the user agent and a salted hash of the IP address — is sent to our servers: art. 7.1 GDPR requires us to be able to demonstrate that consent was given. The record is kept for 24 months and then deleted. It contains neither your name nor your email address, unless you changed your preferences while signed in — in which case it also carries your account identifier.
For a copy of the record concerning you, open the cookie preferences: the consent reference to quote is shown there. Write to info@clusterenergiabasilicata.it.
Contact
Cluster Energia Basilicata ETS — Italian tax code 96090160769, Via di Giura snc, 85100 Potenza (PZ), c/o Confindustria Basilicata — Centro Direzionale. For any request related to this policy: info@clusterenergiabasilicata.it. See also the Privacy policy.