Cookie Policy
Last Updated:
Legal information
In compliance with applicable data protection and electronic communications legislation, including Regulation (EU) 2016/679 (GDPR) and the ePrivacy Directive (2002/58/EC) as transposed in Estonia and other relevant jurisdictions, the following information is provided regarding the website www.ovyonlabs.com.
Website | www.ovyonlabs.com |
Controller | Ovyon OÜ |
Registered address | Tornimäe tn 5, 10145 Tallinn, Estonia |
Company registration | EE102873944 |
Hello@ovyonlabs.com | |
Supervisory authority | Andmekaitse Inspektsioon (Estonia) |
Introduction
This Cookie Policy explains how Ovyon OÜ ("Ovyon", "we", "us", "our") uses cookies and similar tracking technologies when you visit www.ovyonlabs.com (the "Site"). It explains what these technologies are, why we use them, which third parties may access data through them, and the choices available to you.
This policy should be read together with our [Privacy Policy], which describes how we process personal data more broadly.
What are cookies, scripts, and pixels?
Cookies
Cookies are small text files placed on your device (computer, tablet, or phone) when you visit a website. They allow the website to recognise your device, remember preferences, analyse usage, and deliver functional or marketing features.
Cookies are classified in three ways:
By origin: First-party cookies are set by Ovyon directly. Third-party cookies are set by external services embedded on the Site (such as analytics or advertising providers).
By duration: Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them.
By purpose: Necessary, Preferences, Analytics, or Marketing (see Section 5).
Scripts
A script is a piece of program code that runs on our server or on your device to make the Site work correctly and interactively. Some scripts are essential to the Site's operation; others (such as analytics scripts) require your consent before loading.
Pixels (web beacons)
Pixels are small, often invisible, image files embedded in webpages or emails. They allow a third party to detect that a page has loaded or an email has been opened, and to associate that activity with a user identifier. Although technically distinct from cookies, pixels perform a comparable tracking function and are treated under the same legal framework. We use the Meta Pixel on this Site (see Section 5.4).
For the purposes of this policy, the term "cookies" covers cookies, scripts, pixels, local storage, and similar tracking technologies, except where a specific technology is referred to by name.
Legal basis for using cookies
We rely on two legal frameworks:
Strictly Necessary cookies are deployed under our legitimate interest in providing a functional, secure website (GDPR Article 6(1)(f)) and fall within the exemption set out in Article 5(3) of the ePrivacy Directive. No consent is required.
All other cookies (Preferences, Analytics, Marketing) are deployed only with your prior, explicit, informed, and freely given consent (GDPR Article 6(1)(a) and ePrivacy Directive Article 5(3)). You can withdraw your consent at any time.
Continued browsing of the Site does not constitute consent. Consent is only given through an affirmative action in our cookie banner.
How we collect consent
When you first visit the Site, our cookie banner is displayed before any non-essential cookies are loaded. You may:
Accept all non-essential cookies,
Reject all non-essential cookies, or
Customise your preferences by category.
Your consent is stored for a maximum of 6 months. After this period, the banner is displayed again. You can change your choices at any time via the "Cookie Settings" link in the footer of any page.
Cookies used on this Site
The tables below list the cookies, scripts, and pixels currently deployed on the Site, grouped by category. Cookie names, durations, and domains are based on the published documentation of each provider as of the policy date and are verified against the Site's tag configuration. Some values may change when providers update their products; we update this policy accordingly.
Strictly Necessary
These cookies are required for the Site to function and cannot be switched off. They are set in response to actions you take (such as setting privacy preferences or submitting forms).
Name | Provider | Purpose | Duration | Domain |
|---|---|---|---|---|
| Ovyon (first-party) | Stores your cookie consent preferences | 6 months |
|
| Ovyon (first-party) | Maintains session state and basic site functionality | Session |
|
Legal basis: Legitimate interest / ePrivacy exemption. Consent required: No.
Note for review: actual first-party cookie names must be confirmed against the Site's current implementation. Placeholders shown above.
Preferences
These cookies allow the Site to remember choices you make (such as language or region) to provide a more personalised experience.
Name | Provider | Purpose | Duration | Domain |
|---|---|---|---|---|
| Ovyon (first-party) | Stores language and region preference | 12 months |
|
Legal basis: Consent. Consent required: Yes.
Note for review: confirm whether the Site actually sets preference cookies. If language switching is not implemented, this section can be removed.
Analytics
These cookies help us understand how visitors interact with the Site so we can improve performance and content.
Provider: Google Ireland Limited (Google Analytics 4) Privacy policy: https://policies.google.com/privacy Data processing terms: https://business.safety.google/adsprocessorterms/
Name | Purpose | Duration | Domain |
|---|---|---|---|
| Distinguishes unique users by assigning a randomly generated client ID | 2 years |
|
| Persists session state for Google Analytics 4 | 2 years |
|
| Distinguishes users for 24 hours (used in certain GA configurations) | 24 hours |
|
| Throttles request rate to Google Analytics | 1 minute |
|
Data shared with Google: Pseudonymous client identifier, IP address (anonymised where IP anonymisation is enabled), device and browser information, pages visited, session duration, referring source.
Legal basis: Consent. Consent required: Yes.
Marketing
These cookies are used to measure the performance of our advertising, build audiences for retargeting, and deliver more relevant ads on Meta platforms (Facebook, Instagram) and LinkedIn.
Meta Pixel
Provider: Meta Platforms Ireland Limited Privacy policy: https://www.facebook.com/privacy/policy/ Cookies policy: https://www.facebook.com/policies/cookies/
Name | Purpose | Duration | Domain |
|---|---|---|---|
| Identifies browsers for advertising and analytics purposes | 90 days |
|
| Delivers, measures, and improves the relevance of ads on Meta platforms | 90 days |
|
Pixel: The Meta Pixel itself is a script that loads from connect.facebook.net and sends event data (page views, conversions) to Meta. It does not store data on your device but transmits browser, device, and behavioural information to Meta.
Data shared with Meta: Pseudonymous identifiers, IP address, browser and device information, pages visited, actions taken on the Site (such as form submissions or content engagement).
LinkedIn Insight Tag
Provider: LinkedIn Ireland Unlimited Company Privacy policy: https://www.linkedin.com/legal/privacy-policy Cookies policy: https://www.linkedin.com/legal/cookie-policy
Name | Purpose | Duration | Domain |
|---|---|---|---|
| Stores a browser identifier used for analytics and ad targeting | 90 days |
|
| Browser identifier cookie used to uniquely identify devices accessing LinkedIn | 1 year |
|
| Used for routing and load balancing on LinkedIn services | 24 hours |
|
| Used for LinkedIn Ads ID syncing | 30 days |
|
| Stores information about the time a sync with the | 30 days |
|
| Stores consent of guests regarding the use of cookies for non-essential purposes | 6 months |
|
Insight Tag: The LinkedIn Insight Tag is a JavaScript script that loads from snap.licdn.com and sends event data to LinkedIn. It enables conversion tracking from LinkedIn Ads, website retargeting, and aggregate demographic insights about Site visitors.
Data shared with LinkedIn: Pseudonymous identifiers, IP address, browser and device information, pages visited, referring URL, and (where the visitor is a logged-in LinkedIn member) association with their LinkedIn member ID for conversion measurement and audience matching.
Legal basis: Consent. Consent required: Yes.
International data transfers
Google and Meta are operated by entities that may transfer your data outside the European Economic Area, including to the United States. The legislative framework in the United States does not currently offer a level of data protection equivalent to that of the EU.
These transfers are governed by:
The EU–U.S. Data Privacy Framework (where the recipient is certified), or
Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional safeguards where required.
By giving consent to Analytics or Marketing cookies, you also consent to the associated international transfer of your data. Further details on each provider's transfer mechanism are available in the privacy policies linked in Sections 5.3 and 5.4.
How to manage cookies
On this Site
Use the "Cookie Settings" link in the footer of any page to review or change your preferences at any time.
In your browser
Most browsers allow you to view, block, or delete cookies via their settings:
Most browsers also offer a private or incognito browsing mode that deletes cookies automatically at the end of a session.
Blocking strictly necessary cookies may prevent parts of the Site from functioning correctly.
Third-party opt-out tools
Google Analytics: Google Analytics Opt-out Browser Add-on
Meta: Adjust your ad preferences on Facebook and Instagram
Consent withdrawal
You can withdraw your consent at any time by clicking "Cookie Settings" in the footer. Withdrawing consent is as easy as giving it, and does not affect the lawfulness of any processing carried out before withdrawal.
Your rights under data protection law
Where cookies process your personal data (including pseudonymous online identifiers, which the EDPB has confirmed qualify as personal data under the GDPR), you have the following rights:
Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority
To exercise these rights, contact us at Hello@ovyonlabs.com.
The primary supervisory authority for Ovyon OÜ is:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate) Tatari 39, 10134 Tallinn, Estonia www.aki.ee
If you are located in another EU country, you may also lodge a complaint with your local supervisory authority. Spanish residents may contact the Agencia Española de Protección de Datos (www.aepd.es).
Visitors from California (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
The right to know what personal information we collect, use, and share.
The right to delete personal information we hold about you.
The right to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising.
The right to non-discrimination for exercising your rights.
To exercise the opt-out right, click "Do Not Sell or Share My Personal Information" in the footer, or contact us at Hello@ovyonlabs.com.
Note for review: this section assumes the "Do Not Sell or Share" footer link will be implemented. If not, this section should be removed or replaced with a statement clarifying that no sale or sharing occurs.
Visitors from the United Kingdom
UK visitors are protected under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). The rights and obligations described in this policy apply in substantially the same form. The UK supervisory authority is the Information Commissioner's Office (ICO).
Visitors from Brazil and Mexico
Visitors located in Brazil are protected under the Lei Geral de Proteção de Dados (LGPD). Visitors located in Mexico are protected under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. The rights described in Section 9 apply in substantially the same form under each framework.
Children
The Site is not directed at children under 16. We do not knowingly collect personal data from children through cookies. If you believe a child has provided us with personal information, please contact us at Hello@ovyonlabs.com and we will take appropriate steps to delete it.
Changes to this policy
We may update this Cookie Policy to reflect changes in technology, regulation, or our practices. The "Last updated" date at the top of this policy indicates when it was most recently revised. Material changes will be notified via the Site banner.
Contact
For questions about this Cookie Policy or our use of cookies:
Ovyon OÜ Tornimäe tn 5, 10145 Tallinn, Estonia Hello@ovyonlabs.com www.ovyonlabs.com
This is a draft document. It must be reviewed by qualified legal counsel before publication. Ovyon's AI assistant is not a lawyer and this document is not legal advice.