Cookies and analogous storage
Cookies, local storage and similar technologies can remember information in or about a browser. The exact technology, provider, purpose and duration must be recorded in a final inventory based on the production configuration.
Necessary storage
Strictly necessary storage may support security, core website operation, form continuity and the visitor’s consent choice. It is not used to make optional analytics a condition of accessing the public website.
Current optional analytics
Google Tag Manager and Microsoft Clarity are environment-controlled integrations and are designed to load only after affirmative analytics consent. Google Analytics 4 may be introduced later through Google Tag Manager, but is not claimed as an active standalone integration here.
Consent choices
Accept and Reject must be offered with the same level of visibility, with granular configuration where required. Withdrawing consent must be as easy as giving it. The future Consent Management Platform will own these controls, consent records and Google Consent Mode behavior.
Duration and renewal
No cookie duration is invented in this draft. The final inventory must use actual configured lifetimes. AEPD guidance that consent should be refreshed within a maximum of 24 months is treated as consent-renewal guidance, not as a universal cookie-retention period.
Third parties and transfers
Optional providers may receive technical or usage data only when their tools are configured and the required consent is active. Any international-transfer statement and safeguard must be confirmed against the selected provider, contract and processing location.
Status and changes
A Consent Management Platform, granular preference center and verified production inventory are not implemented yet. This page remains a noindex draft and will be updated and professionally reviewed before those tools are enabled for production visitors.