Cookie Policy

Last Updated: October 28, 2025

1. What Are Cookies?

Cookies are small text files stored on your device by a website. Similar technologies (e.g., local storage, session storage, and pixels) are used for comparable purposes. In this policy, “cookies” includes these technologies.

2. Data Controller

The Data Controller is Sotschi, operated by Lorik Thaqi (P.IVA 03280090212). Contact: contact@sotschiofficial.com.

3. Types of Cookies We Use

  • Strictly Necessary — Required for the site to work (e.g., security, load balancing, basic preferences). Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
  • Functionality — Improve your experience (e.g., remembering choices). Legal basis: Consent (Art. 6(1)(a) GDPR), when not strictly necessary.
  • Performance/Analytics — Understand usage to improve the site. Not loaded without your consent. Legal basis: Consent (Art. 6(1)(a)).
  • Security/Anti-Spam — Protect forms with Google reCAPTCHA v3. May set cookies or read device signals to detect abuse. Legal basis: Legitimate interest (Art. 6(1)(f)).
  • Third-Party Asset Delivery (CDNs) — Serve static files (e.g., Font Awesome via cdnjs). The provider may process your IP/user-agent to deliver files and secure the service. Legal basis: Legitimate interest (Art. 6(1)(f)).

We do not use advertising cookies.

4. Cookies & Similar Technologies Used

Below is a non-exhaustive list of technologies currently used. We update this section when we add or remove tools.

Name / Key Provider Purpose Type Duration Category Legal Basis
cookieConsent Sotschi (first-party) Stores whether you accepted or rejected non-essential cookies. Cookie Up to 6 months Strictly necessary Legal obligation / Legitimate interest
cookieCategories Sotschi (first-party) Saves granular choices (e.g., analytics=true/false). Cookie / localStorage Up to 6 months Strictly necessary Legal obligation / Legitimate interest
grecaptcha*, device signals Google reCAPTCHA v3 Protects contact forms against bots/abuse by evaluating interactions. Cookie / storage / device signals Per provider policy Security / Necessary Legitimate interest
cdn-assets (requests) cdnjs (Font Awesome) Delivers static files (icons/scripts) reliably and securely. HTTP request (no site cookie) Per request Strictly necessary Legitimate interest
session / csrf / rate-limit (if present) Sotschi (first-party) Keeps the site secure and stable (e.g., session integrity, form security). Cookie / header / token Session or up to 30 days Strictly necessary Legitimate interest

5. Third-Party Services

  • Google reCAPTCHA v3 (security on contact forms in /sotschi_design/ and /sotschi_music/). Use is subject to Google’s Privacy Policy and Terms.
  • CDNs (e.g., cdnjs for Font Awesome) deliver static assets; they receive your IP/user-agent to serve files and protect their network.
  • Social links are simple outbound links (Instagram, Threads, Facebook). We do not embed social tracking widgets.

8. Browser Controls

Most browsers let you block or delete cookies. Instructions: Settings → Privacy & Security → Cookies. If you block essential cookies, parts of the site may not work.

9. Retention

  • Session cookies: deleted when you close the browser.
  • Persistent cookies: remain until their set expiry or until you delete them.
  • Third-party tools (e.g., reCAPTCHA, CDNs): per the provider’s policies.

10. International Transfers

If third-party providers are outside the EEA (e.g., Google, some CDN endpoints), transfers rely on appropriate safeguards (e.g., EU-U.S. Data Privacy Framework where applicable and/or SCCs with supplementary measures).

11. Changes to This Policy

We may update this Cookie Policy due to legal, technical, or business changes. The latest version is always available on this page.

12. Contact

Questions about cookies? Contact the Controller at contact@sotschiofficial.com.