COOKIE NOTICE
v1. • 19 August 2026
1. Identity of the Data Controller and scope of this Notice
| Data | Details |
|---|---|
| Data Controller | Régió Terv Kft. |
| Registered office | 4032 Debrecen, Böszörményi út 161. |
| Telephone | +36 20 519 9580 |
| regioterv@regioterv.hu | |
| Website concerned | https://pandaplay.hu/ and its subpages, including the online store |
This Notice describes which cookies and similar technologies Régió Terv Kft. (hereinafter: the “Data Controller”) uses in operating the website, the purposes for which they are used, their duration and legal basis, and how visitors can manage their consent.
2. What is a cookie?
A cookie is a small data file that the website places on or reads from the visitor’s device through the visitor’s browser. Cookies may, among other things, maintain a session, support secure operation, remember visitor preferences, produce usage statistics and – where consent has been given – measure marketing activity.
Session cookies are generally deleted when the browser is closed. Persistent cookies may remain on the device until the stated expiry date, until deleted by the visitor, or until consent is withdrawn. A first-party cookie is placed on the Panda Play domain. This is separate from the question of whether data associated with the cookie are transmitted by the Data Controller to an external service, such as Google Ads or Meta. A third-party cookie is placed directly on the device from a domain other than Panda Play.
3. Cookie categories and legal basis
3.1. Strictly necessary cookies
Without these cookies, the website, the online store, security functions or the preservation of the visitor’s cookie choices cannot be ensured. We do not request consent for these cookies. Where their operation involves the processing of personal data, the legal basis is the Data Controller’s legitimate interest in the secure and proper operation of the website [Article 6(1)(f) GDPR].
| Cookie name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| .AspNetCore.Session | Régió Terv Kft. | Management of the user session and ensuring the operation of the online store. | Session | HTTP |
| .PandaPlay.UserAuth | Régió Terv Kft. | Authentication of the logged-in user and maintenance of the session associated with the user account. | Until the end of the session | HTTP |
| .PandaPlay.AdminAuth | Régió Terv Kft. | Maintaining secure login to and the session of the administration interface. | Until the end of the session | HTTP |
| .AspNetCore.Antiforgery.* | Régió Terv Kft. | Antiforgery/CSRF protection: helps prevent unauthorised requests from being initiated on behalf of the visitor. The * denotes a technical identifier. | Until the end of the session | HTTP |
| .AspNetCore.Mvc.CookieTempDataProvider | Régió Terv Kft. | Transfer of temporary data and one-time system messages between consecutive requests. | Until the end of the session | HTTP |
3.2. Statistical and analytics cookies
It is important for us to understand what happens on our website and with our services and how users use them. For this reason, we use statistical and analytics cookies to understand how visitors use the website, which pages are popular, where errors occur and how the operation of the website can be improved. These cookies may operate only on the basis of the visitor’s prior, freely given consent [Article 6(1)(a) GDPR].
| Cookie name | Service | Purpose | Expiry | Type |
|---|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishing visitors and producing website usage statistics. | 2 years | HTTP |
| _ga_* | Google Analytics 4 | Maintaining session state; the * denotes the measurement identifier. | 2 years | HTTP |
| _gid | Google Analytics | Distinguishing visitors and short-term traffic statistics. | 24 hours | HTTP |
| _hjSessionUser_* | Hotjar | Pseudonymous identification of the visitor across multiple sessions. | 365 days | HTTP |
| _hjSession_* | Hotjar | Maintaining data for the current Hotjar session. | 30 minutes | HTTP |
| _hjIncludedInPageviewSample | Hotjar | Recording whether the visitor was included in the page-view sample. | 30 minutes | HTTP |
3.3. Marketing and advertising cookies
These cookies are used exclusively to measure the effectiveness of advertisements and conversions following advertising clicks. The Data Controller does not use them for remarketing, building advertising audiences or displaying personalised advertisements. They may operate only on the basis of the visitor’s prior, freely given consent [Article 6(1)(a) GDPR].
| Cookie name | Related service | Purpose | Expiry | Type |
|---|---|---|---|---|
| _fbp | Meta Pixel | Measuring the effectiveness of Meta advertisements and conversions. | 90 days | HTTP |
| _fbc | Meta Pixel | Conversion measurement connected to advertising clicks arriving from Facebook. | 90 days | HTTP |
| _gcl_au | Google Ads | Measuring the effectiveness of Google advertisements and conversions. | 90 days | HTTP |
| _gcl_aw | Google Ads | Linking an advertising click to a subsequent conversion. | 90 days | HTTP |
| _gcl_dc | Google Ads | Conversion measurement related to Google Ads campaigns. | 90 days | HTTP |
4. Third-party cookies
Certain functions of the website are connected to content and services provided by third parties. These providers may use their own cookies or similar technologies. Non-essential technologies may operate only after the visitor has given prior consent.
The Data Controller does not determine the third parties’ own cookie practices. The current terms can be accessed by clicking the name of the relevant provider.
The following third-party services may be connected to the website:
5. Web beacons, pixels and tracking tags
5.1. Meta Pixel
The website uses the Meta Pixel. The tracking code sends Meta information about page views, advertising clicks and conversions. In connection with the service, the _fbp cookie and – where the visitor arrives from a Meta advertisement – the _fbc cookie may be placed. The Data Controller uses the Meta Pixel exclusively for conversion measurement; it does not use remarketing, audience building or personalised advertising. The Meta Pixel is activated only after the visitor has given prior consent.
5.2. Google Ads conversion tags
The website uses Google Ads conversion tags. These allow the Data Controller to measure whether a purchase, request for quotation or another defined conversion occurs after advertisements displayed within Google’s systems. In connection with the service, _gcl_au, _gcl_aw and _gcl_dc cookies may be placed. The Data Controller does not use Google Ads remarketing, advertising audience building or personalised advertising. The tags and related cookies are activated only after the visitor has given prior consent.
5.3. Google Tag Manager
Google Tag Manager is a tag-management tool. It does not necessarily create cookies itself, but analytics, user-experience or marketing tags loaded through it may place cookies or transmit data. Non-essential tags may be loaded only after the relevant consent has been given.
6. Giving and withdrawing consent and cookie settings
On the cookie management interface displayed on the visitor’s first visit to the website, the visitor may:
- accept all non-essential cookies;
- reject non-essential cookies;
- set consent by category.
Consent may be withdrawn or changed at any time, as easily as it was given, using the “Cookie settings” link in the website footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Necessary cookies cannot be disabled in the cookie management interface, but they may be deleted or blocked in the browser; doing so may cause certain website functions to operate incorrectly.
7. Browser settings
Cookies may also be deleted or disabled in the browser settings. The exact menu items vary depending on the browser and version. Further guidance:
- Google Chrome – manage cookies
- Mozilla Firefox – manage cookies
- Microsoft Edge – manage cookies
- Apple Safari – manage cookies
8. External service providers and data transfers
Certain pages of the website provide content or services originating from third-party service providers, for example YouTube or Facebook. Access to such content or services (for example, sharing an article on Facebook) may require you to accept the relevant third party’s terms of use. By accepting the third party’s terms of use, you also accept its policies relating to cookie use.
Our company has no influence over which cookies third parties process in connection with individual content or services. Third parties may decide at any time to change their terms of use or the circumstances and purposes of their cookie processing.
The following third-party content and services appear on the website. By clicking the name of the relevant third party, you can access information about that provider’s cookie practices:
9. Profiling and automated decision-making
In connection with the website and the cookies listed in this Notice, the Data Controller does not carry out profiling. Visitors are not assigned to interest, behavioural or advertising categories, no remarketing audiences are created, and no personalised advertisements are displayed on the basis of data collected on the website. The Data Controller also does not make decisions based solely on automated processing that produce legal effects concerning the visitor or similarly significantly affect the visitor.
10. Data subject rights and remedies
Where the use of cookies involves the processing of personal data, the data subject has, subject to the conditions of the GDPR, in particular the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent. Requests may be submitted using the contact details provided in Section 1.
A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; telephone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; website: https://www.naih.hu/.
11. Amendments to this Notice
The Data Controller may amend this Notice, in particular if the technical operation of the website, the service providers used, the range of cookies or the applicable legislation changes. The current version is available on the website. If the Data Controller intends in the future to introduce remarketing, advertising audience building, personalised advertising or another profiling-related function, it will amend this Notice and the cookie management interface before activating such a function and will request new, prior consent from the affected visitors.