Cookie Policy
IZI Energy d.o.o. | Version 1.0 | Effective from 22 September 2026.
This Cookie Policy explains what cookies are, which cookies and similar technologies we use on our website, why we use them, how long they last and how you can change your choice at any time. It forms an integral part of the IZI Energy d.o.o. Privacy Policy.
This is a translation provided for convenience. In case of any discrepancy, the Croatian version prevails.
1. What cookies are
A cookie is a small text file that a website stores on your device when you visit it. On your next visit the site can read that cookie and, for example, remember your settings or recognise that you have been here before.
Alongside cookies, similar technologies are covered by the same rules in this Policy:
- browser local and session storage, where data is stored in a similar way to cookies
- pixels and web beacons, tiny invisible images loaded from a third-party server that report that a page was opened
- tracking tags, such as Google Tag Manager, Meta Pixel and the LinkedIn Insight Tag
- First-party cookies are set by our own domain and controlled by us.
- Third-party cookies are set by another domain, such as doubleclick.net, facebook.com or linkedin.com, when their content or code loads on our site. They are controlled by that third party under its own rules.
- Session cookies are deleted when you close your browser; persistent cookies remain until the expiry stated below or until you delete them.
2. Legal framework
The use of cookies is governed by Regulation (EU) 2016/679 (GDPR), the Croatian Act implementing the GDPR (NN 42/18), the Electronic Communications Act (NN 76/22, 14/24, 45/26) — whose Article 43(4) provides that storing information on your terminal equipment and accessing information already stored there is permitted only with your prior consent and after clear and complete information — and the guidance of the Croatian Personal Data Protection Agency (AZOP) and the European Data Protection Board (EDPB).
Consent is not required only for cookies used solely to transmit a communication or strictly necessary to provide a service you have explicitly requested. All other cookies, including analytics cookies, require consent obtained before the cookie is set. Legitimate interest is not a valid basis for non-essential cookies.
3. How you manage your choice
On your first visit a cookie notice appears with equally prominent options:
- "Accept all" — you consent to every cookie category.
- "Reject all" — only strictly necessary cookies are set. This button is as visible and as easy to use as the accept button.
- "Settings" — you choose which categories to allow. Every category other than strictly necessary is switched off by default.
Until you decide, no cookies are set other than strictly necessary ones, and closing the notice without choosing does not count as consent.
You can change or withdraw your choice at any time, as easily as you gave it, through the "Cookie settings" link in the footer of every page. Withdrawal does not affect the lawfulness of processing carried out before it.
We ask for consent again after 12 months at the latest, and sooner if we introduce a new tool or change the purpose of processing.
Access to our content is not conditional on accepting cookies. If you reject everything but the strictly necessary cookies, the site still works in full.
4. Cookie categories
| Category | Consent required | What happens if you switch it off |
|---|---|---|
| Strictly necessary | No | Cannot be switched off. The site cannot work correctly without them |
| Functional | Yes | The site works, but does not remember your settings and does not show embedded content such as maps or videos |
| Analytics | Yes | We lose visit statistics and find it harder to improve the site. Nothing changes for you |
| Marketing | Yes | Ads you see elsewhere online will be less relevant. The number of ads stays the same |
5. Cookie list
The list below reflects the position on the date of publication. The exact, always current list, including cookies a tool sets only in certain situations, is generated by our consent management platform and is available in the "Cookie settings" window. Durations are stated by the providers and may change without prior notice from us.
5.1. Strictly necessary
These cookies are needed for the site to function, for security and to remember your cookie choice. They are set without consent, under Article 43(4) of the Electronic Communications Act. The exact name depends on the consent platform and the hosting infrastructure.
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| Consent cookie | Consent management platform, first party | First party | 12 months | Stores which cookie categories you accepted or rejected and evidences consent |
| Session cookie | Our website | First party | Session | Maintains your session as you browse |
| Form protection cookie | Our website | First party | Session | Protects the contact form against cross-site request forgery |
| Bot-protection cookie | Site infrastructure provider | Third party | 30 minutes | Distinguishes humans from automated traffic and protects the site from abuse |
5.2. Functional
These cookies enable extra features and remember settings. They are set only with your consent.
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| Language preference | Our website | First party | 12 months | Remembers the selected site language |
| VISITOR_INFO1_LIVE | YouTube (Google) | Third party | 6 months | Remembers playback preferences for embedded videos |
| YSC | YouTube (Google) | Third party | Session | Counts views of embedded videos |
| VISITOR_PRIVACY_METADATA | YouTube (Google) | Third party | 6 months | Stores privacy preferences for embedded videos |
| NID, SOCS, CONSENT | Google (google.com and local variants) | Third party | NID 6 months, SOCS and CONSENT up to 13 months | Display and operation of the embedded Google map and storage of Google preferences |
Embedded content note: videos and maps load only after your consent. Until then a neutral placeholder with a notice and a load button is shown. For YouTube we use the reduced-tracking mode (youtube-nocookie.com).
5.3. Analytics
These cookies measure traffic and how the site is used. We look at the data in aggregate. They are set only with your consent.
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| _ga | Google Analytics 4, set on our domain | First party | 2 years | Distinguishes individual users and their visits |
| _ga_<measurement ID> | Google Analytics 4, set on our domain | First party | 2 years | Persists session state and whether the visit is new or returning |
| _gid | Google Analytics, set on our domain | First party | 24 hours | Distinguishes users within a single day (only if active) |
| _gat_gtag_<ID> | Google Analytics, set on our domain | First party | 1 minute | Throttles the request rate to Google Analytics |
What we do with Google Analytics 4 data:
- IP addresses are not stored in Google Analytics 4 and are truncated before processing
- user and event data retention is set to a maximum of 14 months
- we look at aggregate metrics: visits, traffic sources, pages viewed, time on site and basic interactions
- we do not link analytics data to your name, e-mail address or transactions at the energy service station
5.4. Marketing and advertising
These cookies measure campaign performance and show more relevant ads on other sites and social networks. They are set only with your consent.
Google Ads and Google Marketing Platform
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| _gcl_au | Google, set on our domain | First party | 90 days | Links an ad click to an action on the site for conversion measurement |
| _gcl_aw, _gcl_dc | Google, set on our domain | First party | 90 days | Records arrival from a Google Ads or Display campaign |
| _gac_gb_<ID> | Google, set on our domain | First party | 90 days | Links Google Ads campaigns with Google Analytics data |
| IDE | doubleclick.net | Third party | 13 months in the EEA | Recognises the browser for ad measurement and delivery |
| test_cookie | doubleclick.net | Third party | 15 minutes | Checks whether the browser supports cookies |
| DSID | doubleclick.net | Third party | 2 weeks | Links activity to a signed-in Google account for ad personalisation |
| RUL | doubleclick.net | Third party | 12 months | Measures the performance of displayed ads |
| NID | google.com and local variants | Third party | 6 months | Stores preferences and assists ad personalisation |
| receive-cookie-deprecation | doubleclick.net | Third party | 6 months | Participation in third-party cookie deprecation testing |
Meta (Facebook and Instagram)
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| _fbp | Meta, set on our domain | First party | 90 days | Recognises the browser for conversion measurement and ad delivery |
| _fbc | Meta, set on our domain | First party | 90 days | Records the Meta ad click that brought you to the site |
| fr | facebook.com | Third party | 90 days | Ad delivery, measurement and frequency capping |
| datr, sb | facebook.com | Third party | up to 400 days | Security, detection of suspicious activity and automated traffic |
For the Meta Pixel, we and Meta Platforms Ireland Limited act as joint controllers under Article 26 GDPR in respect of the collection and transmission of data, in line with the Meta Controller Addendum. For Meta's further processing of that data for its own purposes, Meta is an independent controller.
| Name | Provider / domain | Type | Duration | Purpose |
|---|---|---|---|---|
| li_gc | linkedin.com | Third party | up to 2 years | Stores consent status for non-essential cookies |
| li_sugr | linkedin.com | Third party | 90 days | Probabilistic device matching for cross-device measurement |
| UserMatchHistory | linkedin.com | Third party | 30 days | Advertising identifier synchronisation |
| AnalyticsSyncHistory | linkedin.com | Third party | 30 days | Analytics data synchronisation |
| bcookie, bscookie | linkedin.com | Third party | up to 2 years | Browser identifier for features and advertising |
| lidc | linkedin.com | Third party | 24 hours | Routing traffic to LinkedIn servers |
6. Google Consent Mode v2
We use Google Consent Mode v2. Google tools load in a mode that respects your choice: before you consent, all signals are set to "denied" and no analytics or advertising cookies are set.
| Signal | Relates to | Default before consent |
|---|---|---|
| analytics_storage | Analytics storage (Google Analytics 4) | denied |
| ad_storage | Advertising storage | denied |
| ad_user_data | Sending user data to Google for advertising purposes | denied |
| ad_personalization | Personalised advertising and remarketing | denied |
| functionality_storage | Storage enabling additional site functionality | denied |
| personalization_storage | Storage of personalisation preferences | denied |
| security_storage | Security and fraud prevention storage | granted |
Once you consent, the relevant signals change to "granted" and only then are the corresponding cookies set. If you do not consent, Google may receive limited aggregate, non-identifying signals without cookies, used solely to model aggregate statistics and not to identify you.
7. Transfers outside the EEA
The analytics and marketing tools listed here are provided by companies established in the European Union (Google Ireland Limited, Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company), but data may also be transferred to their parent companies in the United States, on the basis of the European Commission Standard Contractual Clauses and the recipients' EU-US Data Privacy Framework certification. See section 6 of the Privacy Policy for details and our risk assessment.
If you do not want such transfers to occur, do not consent to analytics and marketing cookies.
8. Managing cookies in your browser
Independently of the settings on our site, you can block or delete cookies in your browser. The controls are usually under "Privacy and security":
- Google Chrome: Settings, Privacy and security, Cookies and other site data
- Mozilla Firefox: Settings, Privacy and security, Cookies and site data
- Safari: Settings, Privacy, Manage Website Data
- Microsoft Edge: Settings, Cookies and site permissions
Deleting cookies also deletes the cookie storing your choice, so we will ask again on your next visit. Blocking all cookies, including strictly necessary ones, may stop parts of the site from working.
8.1. Opting out directly with providers
- Google Analytics browser opt-out add-on: tools.google.com/dlpage/gaoptout
- Google ad settings: myadcenter.google.com
- Meta ad preferences: facebook.com/adpreferences
- LinkedIn ad settings: linkedin.com/psettings/advertising
- European advertising opt-out portal: youronlinechoices.com
8.2. Browser signals
Our site honours the Global Privacy Control (GPC) signal where your browser sends it, and in that case sets no non-essential cookies until you give explicit consent. The "Do Not Track" signal is not standardised and is interpreted differently across browsers, so we do not rely on it as a sole basis.
9. Changes to this Policy
We update this Policy when we add, replace or remove a tool, when a provider changes a cookie's duration or purpose, or when the law changes. The current version is always published on our website with its version number and effective date.
10. Contact
For questions about cookies, contact support@izi.energy or write to IZI Energy d.o.o., Radnička cesta 80, 10000 Zagreb. Full information on the processing of personal data, your rights and complaints to the Croatian Personal Data Protection Agency is set out in the Privacy Policy.
Version 1.0 | Effective from 22 September 2026.