Cookie Policy

Cookie policy

Last updated: 22 August 2026.

This Cookie Notice explains how the DPO Portal uses cookies and similar technologies. It sits under the General Privacy Notice. Cookie rules come from the ePrivacy Directive (EU) and PECR (UK). Where a cookie processes personal data, GDPR and UK GDPR also apply.

We do not treat continued browsing as consent. You choose in the cookie banner.

How to accept, reject, or change your choice

The Privacy Manager banner appears until you save a choice. It offers:

  • Accept all — necessary cookies plus any optional category that is switched on
  • Reject non-essential — necessary cookies only
  • Manage preferences — then Necessary (always on) and Preferences
  • Save preferences — stores the mix you ticked

Analytics and Marketing categories exist in the banner software but are switched off on this site. We do not set Google Analytics or advertising cookies.

Changing your mind is as easy as giving consent: open the banner again (or clear the consent cookie) and save a new choice. Withdrawal does not make earlier strictly necessary processing unlawful.

Strictly necessary cookies

These run the session, keep the site secure, and remember your cookie choice. They do not need consent under ePrivacy / PECR.

Preference cookies

Optional. Used only after you consent. They can remember UI choices. None are set until you opt in. If you reject non-essential cookies, this category stays off.

Analytics and marketing

Not used. No analytics or marketing cookies are installed. Optional categories stay off until consented, and those two categories are not enabled by the administrator.

Cookies we actually use

NamePartyDurationPurposeType
32-character hex session cookie (Joomla session; the name is a site-specific hash) First party (this site) Session (HttpOnly) Keeps your visit and, if you sign in, your login Necessary
joomla_privacymanager_consent First party (this site) 180 days Stores your cookie-banner choice and policy version so we do not re-ask every page Necessary (consent record)

Optional preference cookies are not listed because none are issued until you consent, and none are configured as named third-party cookies today.

The page template may load the Inter font from Google Fonts (United States). That is a third-party network request, not a first-party cookie we set. See international transfers in the General Privacy Notice.

Personal data

The session cookie and the consent cookie can be personal data when they identify your browser. Legal basis for necessary cookies is legitimate interests (running a secure portal) and, for the consent cookie, recording your PECR / ePrivacy choice. Optional cookies, if you enable Preferences, rely on consent.

If a cookie processes personal data, you can complain to your EU supervisory authority via the EDPB members list, or to the ICO if UK GDPR applies. The full rights list is in the General Privacy Notice.

View privacy notice

Data Protection Officer Portal

This Data Protection Officer Portal comprises several components designed to assist data protection officers perform their duties and engage with data subjects.