Cookie Policy

1. What are cookies?

Cookies are small text files that a website stores in your browser when you visit it. They allow the site to "remember" certain information about your visit (for example, that you are logged in) so you do not have to sign in again on every page.

Cookies are regulated in Romania by Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as subsequently amended, and by the General Data Protection Regulation (GDPR, EU Regulation 2016/679).

2. What cookies do we use?

The Linia Directă platform uses three cookie categories:

a) Strictly necessary cookies

These operate without consent, as they are indispensable for authentication and platform operation. Technical details in section 3.

b) Analytics cookies

We use Google Analytics 4 for usage statistics: pages visited, traffic sources, and key product actions (demo, account creation, activation, payment), with no personal data. It is enabled only with your consent: until then, no connection to Google takes place. For EU users, data is collected on EU servers and the IP address is dropped before logging (Google Ads Data Processing Terms). Retained for 14 months.

c) Marketing cookies

We currently set no marketing cookiesand use no third-party pixels. The "Marketing" toggle covers potential future campaigns: if we enable such tools, we will update this policy first.

We do not use profiling cookies, dynamic remarketing, or cross-site tracking.

How you express your choice

On your first visit, the cookie banner offers three options:

• Accept all: activates both optional categories (analytics + marketing)
• Reject all: only strictly necessary cookies remain active
• Customize: independently toggle each optional category (analytics and marketing, separately)

You can change your choice at any time via the "Cookie preferences" link in the site footer.

3. Session cookies: technical details

Our authentication service places session cookies in your browser that are necessary to maintain the authentication state. These cookies:

• Are strictly necessary: without them, you cannot log in or access the dashboard or platform features
• Do not contain sensitive personal data: they store an encrypted session token, not the password or other personal data
• Are limited to our domain: the cookies are set on liniadirecta.ro and cannot be read by other sites
• Expire automatically: when closing the browser (session cookies) or when logging out
• Are protected: transmitted exclusively over HTTPS, with the Secure and HttpOnly attributes enabled (they cannot be accessed via JavaScript)

4. Legal basis

Strictly necessary cookies (authentication, consent preferences) are used under Art. 6(1)(b) GDPR: contract performance. Per Art. 5(3) of the ePrivacy Directive (implemented through Law 506/2004), strictly necessary cookies do not require the user's prior consent.

Analytics and marketing cookies are used under Art. 6(1)(a) GDPR: the user's explicit consent. These are activated only after you turn on the corresponding toggles in the cookie banner. You may withdraw consent at any time via the "Cookie preferences" link in the footer (or by deleting the cookies from your browser).

5. How can you control cookies?

Although session cookies are necessary for the platform to function, you always have the right to manage them through your browser settings:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy and security → Cookies and site data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
• Safari: Preferences → Privacy → Manage website data

Note: Blocking or deleting session cookies will prevent authentication on the platform. You will need to sign in again on every visit.

You can also delete all current-session cookies through the Sign out function in the platform dashboard.

6. Your rights under GDPR

Regarding data processed through cookies, you have the following rights:

• Right of access: to request information about the data processed
• Right to erasure: to request deletion of session-associated data (equivalent to logout + cookie deletion from the browser)
• Right to object: to object to processing; in the case of strictly necessary cookies, objection is equivalent to discontinuing service usage

To exercise your rights, contact us at dpo@liniadirecta.ro.

7. Policy changes

We reserve the right to update this cookie policy. Any change will be communicated through the platform and/or by email, at least 15 days before it takes effect.

8. Contact

• Email: dpo@liniadirecta.ro
• Operator: Digital Leadership SRL, Tax ID 38585123, J2017006715126