COOKIE POLICY
This Cookie Policy (“Policy”) governs the terms, conditions, and manner in which personal data are processed through automated means and digital tracking technologies used within the NYX platform (hereinafter referred to as the “Platform”).
This Policy forms an integral part of the Privacy Policy and shall be interpreted in conjunction therewith, as well as with the General Terms and Conditions for the use of the Platform. The purpose of this document is to ensure transparency, clarity, and lawfulness of the Controller’s cookie practices in accordance with applicable legislation, including Regulation (EU) 2016/679 (“GDPR”).
For the purposes of this Policy, “cookies” shall be understood to include both traditional cookies used in a web environment and similar technologies for storing and accessing information on the User’s terminal device, including but not limited to local storage, SDK modules, device identifiers, advertising identifiers, and other analogous technologies used in mobile applications.
1. PERSONAL DATA
Personal data collected through the use of cookies are processed solely to facilitate the use of the services. The data are encrypted in a manner that excludes access by unauthorized persons. Cookies do not require identifying information to be used and, as a general rule, do not allow direct identification of the User; however, in certain cases they may constitute personal data within the meaning of Regulation (EU) 2016/679 (“GDPR”) where they enable the direct or indirect identification of a natural person.
Processing of data through cookies and similar technologies is carried out on the legal basis set out in Article 6(1) of Regulation (EU) 2016/679. For strictly necessary cookies and similar technologies, processing is carried out where it is necessary for the provision of a service requested by the User, on the basis of Article 6(1)(b) GDPR. Where necessary for technical security, stability, and fraud prevention, processing is based on the legitimate interests of the Controller under Article 6(1)(f) GDPR. For functional, analytical, and advertising cookies, processing is carried out on the basis of the User’s explicit consent under Article 6(1)(a) GDPR.
2. WHAT ARE COOKIES?
Cookies are small text files that the Platform’s web server sends to the User’s browser and which are subsequently stored on the User’s device—computer, tablet, or mobile phone. They enable the system to recognize a specific browser upon subsequent visits, thereby facilitating the identification of the User or the device used. Information collected through cookies may be used both during the first and subsequent visits to the website and serves various purposes, including statistical analysis, traffic measurement, content effectiveness evaluation, delivery of personalized offers and advertising messages, as well as storing user-defined settings and preferences.
Cookies perform a range of practical functions that contribute to the proper operation and optimization of the Platform. They ensure fast and efficient navigation between pages, improve the overall user experience by adapting content to individual needs and interests, enhance the relevance of displayed advertisements, and facilitate integration with social networks and external platforms. In addition, certain cookies are essential for the security and stability of the website, assisting in the detection and prevention of potential technical issues or misuse.
When using the NYX application, some of the above functions are implemented not through traditional cookies but through embedded software components (SDKs) and device identifiers, which perform analogous functions and are treated as cookies for the purposes of this Policy.
3. TYPES OF COOKIES USED ON THE PLATFORM:
3.1. Depending on necessity for Platform functionality:
Necessary cookies – These cookies ensure the basic operation of the Platform. They enable navigation between pages, use of core functionalities (e.g., account authentication, session maintenance, access settings storage, protection against unauthorized access, and stable server connectivity). Therefore, their use does not require User consent. They are essential for proper functioning and do not store personal data that could identify the User beyond the current session.
Functional cookies – These enable additional services and personalized settings, such as automatic form filling, language preference storage, selected region retention, or display of maps and multimedia content. They allow the Platform to remember previous User actions and provide a more personalized experience. If disabled, some functions may be limited or not function properly.
Performance cookies – These are most often provided by third parties assisting in analysis and optimization of the Platform. They collect information about visited pages, frequency of use, time spent on the site, and error messages received. Data are processed in aggregated and/or pseudonymized form where technically possible and are not used by the Controller to directly identify a User. Their purpose is to improve website performance and user experience.
Advertising and social cookies – These cookies and similar technologies (such as web beacons, pixels, and tags) are used to display advertisements tailored to User interests, limit ad frequency, and measure advertising effectiveness. They also enable social media integration. They are usually placed by advertising partners with the Controller’s consent, and the information collected may be used by them for their own purposes.
3.2. Depending on storage duration:
Session cookies – These are temporary and are deleted automatically when the browser is closed.
Persistent cookies – These remain on the User’s device for a predefined period or until manually deleted, and are used to store long-term preferences.
3.3. Depending on origin:
First-party cookies – Set directly by the Platform for analytics, optimization, and functionality purposes.
Third-party cookies – Set by external service providers (e.g., Google and other advertising/analytics platforms) and may be used for profiling, advertising, and service improvement under their own privacy policies.
4. COOKIES USED ON THE PLATFORM
The Platform uses different categories of cookies and similar technologies. Only necessary cookies are mandatory and cannot be disabled. All other categories (functional, analytical, and advertising) are used only with prior User consent.
The User may choose which categories to enable via the consent management mechanism. Refusal of certain categories does not affect access to core Platform functionalities.
Cookies are not strictly necessary for accessing the Platform; however, enabling them improves user experience and allows personalization.
The User may restrict, block, or delete cookies at any time via browser settings. This may result in limited functionality or impaired performance of certain services.
Information collected via cookies is stored only for as long as necessary to achieve the purposes for which it was collected. In general, data are stored until the end of the session. Upon logout, necessary, functional, and session cookies are deleted unless otherwise expressly provided.
In the case of third-party cookies, data may be processed under the respective third parties’ privacy policies, over which the Controller has no control. Each such third party acts as an independent controller.
Where Google Analytics is used, the User may also use Google’s opt-out tools where applicable.
In case of data transfers to third countries, including the United States, the Controller ensures appropriate safeguards under Chapter V of Regulation (EU) 2016/679, including Standard Contractual Clauses or other applicable mechanisms.
The Controller is not responsible for limitations or malfunctions resulting from User restrictions on cookies. The User is solely responsible for browser settings and reviewing third-party privacy policies.
Detailed information regarding specific cookies is available via the consent management tool or upon request.
5. HOW TO CONTROL COOKIES?
On first visit, the User is informed about cookies via a consent banner. By clicking “Accept all” or selecting preferences, the User provides consent.
Consent is given through an affirmative action; inactivity or closing the banner does not constitute valid consent.
Cookies may be managed at any time via browser settings or the Platform’s consent manager.
Additional information is available at: www.aboutcookies.org, www.whatarecookies.com or www.cookiechoices.org.
Browser-specific instructions:
- for Chrome press here
- for Firefox press here
- for Safari press here
- for Explorer press here
- for Opera press here
Users may delete or block cookies at any time; however, this may affect functionality.
Third-party cookie settings may also be managed via: http://www.youronlinechoices.com/bg/
6. DELETING COOKIES
Browsers allow cookies by default, but settings may be changed to block, delete, or restrict them.
Detailed instructions are available in browser settings and help pages.
Restricting or deleting cookies may negatively affect Platform functionality and may render certain services unavailable.
7. SECURITY AND CONFIDENTIALITY
Cookies and similar technologies do not constitute viruses and do not damage the User’s device. However, improper configuration, outdated software, or unauthorized access may expose data to misuse.
The Controller applies appropriate technical and organizational measures.
Cookie-related data are not used to identify Users unless required for security, fraud prevention, legal compliance, or protection of rights.
Cookies are used solely for the purposes described in this Policy
8. SAFE AND RESPONSIBLE BROWSING ADVICE
Users should configure browser cookie settings appropriately.
If using a personal device, longer storage periods may be acceptable; shared devices should be configured to delete browsing data after each session.
Browsers should be kept updated to mitigate security risks.
Complete blocking of cookies may limit functionality; a balanced configuration is recommended.
9. CHANGES TO THE POLICY
The Controller reserves the right to amend this Policy in case of changes in technology, Platform functionality, legislation, or data processing practices.
The updated version shall be published on the Platform and shall apply from the date of publication unless otherwise stated.
