Cookie Statement
Last updated: 07-June-2022
1. Introduction
When you visit www.bitvavo.com, use any related website or use the Bitvavo app, Bitvavo might use cookies and similar technologies to collect information about your general usage of our website/app. Since Bitvavo respects your privacy and makes it a high priority to handle your (personal) data with care, this “Cookie Statement” explains what these technologies are and why we use them, as well as your rights to control our use of them.
This Cookie Statement is part of, and utilizes certain terms that are defined in the User Agreement.
2. What are cookies?
Cookies are small text files that websites place on your device as you are browsing. They are processed and stored by your web browser. In and of themselves, cookies are harmless and are widely used for the proper functioning of the website, to make the website more efficiently, as well as to provide information to website owners. Cookies can also generally be easily viewed and deleted.
2.1 Duration
The length of time a cookie will stay on your browsing device depends on whether it is a persistent or session cookie as both explained below:
- Session cookies: These cookies are temporary and expire once you close your browser (or once your session ends).
- Persistent cookies: This category encompasses all cookies that remain on your hard drive until you erase them or your browser does, depending on the cookie’s specific retention period (mentioned under section 3).
2.2 Source of the cookies
Cookies could be placed by several parties as explained below:
- First-party cookies: Are put on your device directly by the website you are visiting.
- Third-party cookies: Are the cookies that are placed on your device, not by the website you are visiting, but by a third party like an advertiser or an analytic system.
Please note that, although we use (some of) the information collected by third-part cookies, we do not control the types of information collected and stored by third-party cookies themselves. If you want more information on this, please check the third-party's website for more information on how they use cookies.
3. What types of cookies do we currently use and why?
Set out below is a list of the cookies we currently use per category, the provider of these cookies, the purposes for which we use them, the lifespan of each cookie and the legal ground for the processing of personal data via these cookies.
3.1 Strictly Necessary Cookies (Essential Cookies)
These cookies are essential because they enable you to move around and use certain features on our Website. For example, strictly necessary cookies allow you to access secure areas. Without these cookies, some Services cannot be provided. Because these cookies are strictly necessary to deliver you our Service, these cookies do not require your prior consent.
We process the following strictly necessary cookies:
| Name | Source | Purpose | Expiration | Legal ground |
|---|---|---|---|---|
| __secure-device | Bitvavo | To increase the security of a Website or Service that has been explicitly requested by you. | 1 year | Legitimate interest |
| __secure-csrf | Bitvavo | To increase the security of a Website or Service that has been explicitly requested by you. | 60 minutes | Legitimate interest |
| __secure-jwt | Bitvavo | To increase the security of a Website or Service that has been explicitly requested by you. | 60 minutes | Legitimate interest |
| __secure-expires | Bitvavo | To increase the security of a Website or Service that has been explicitly requested by you. | 60 minutes | Legitimate interest |
| __cfruid | Zendesk/Cloudfare | Identify trusted web traffic. | A session | Legitimate interest |
| AWSALBCORS | Amazon Web Services | Efficiently distributing incoming network traffic across a group of backend servers. | 7 days | Legitimate interest |
| _GRECAPTCHA | Google recaptcha service | Identify bots to protect the website against malicious spam attacks. | 5 months | Legitimate interest |
| __zlcstore | Bitvavo | Enable the chat-box function on the website. | Persistent | Legitimate interest |
| rc::a / rc::b / rc::c | Distinguish between humans and bots. | Session | Legitimate interest | |
| ZD-suid | Bitvavo | Unique ID to identify the user’s session. | Persistent | Legitimate interest |
| __cf_bm | Cloudfare | Support Cloudfare Bot Management. | 1 year | Legitimate interest |
3.2 Functional Cookies
These cookies allow us to remember the choices you make to tailor our Services to those. For example, a functionality cookie can remember your preferences such as your language preferences. Because these cookies are strictly necessary to deliver you our Service, these cookies do not require your prior consent.
We process the following functional cookies:
| Name | Source | Purpose | Expiration | Legal ground |
|---|---|---|---|---|
| a | Bitvavo | The referral code of the referrer which referred a user to Bitvavo. | 30 days | Legitimate interest |
| locale | Bitvavo | To remember your language preferences. | 1 year | Legitimate interest |
| @scroll# | Bitvavo | Track the user’s scroll level to know which part of the page a user is viewing. | Session | Legitimate interest |
| Theme | Bitvavo | Used to remember which variant of the website was selected/decided (light theme/dark theme). | Persistent | Legitimate interest |
| ZD-settings | Zendesk | Arbitrary settings for the user's preferences when browsing a Zendesk knowledge base. | Persistent | Legitimate interest |
| ZD-store | Zendesk | Register whether the self-service-assistant Zendesk Answer Bot has been displayed to the website user. | Persistent | Legitimate interest |
| ZD-buid | Zendesk | Unique ID that identifies the user on recurring visits. | Persistent | Legitimate interest |
| Zte# | Zendesk | Saves a Zopim Live Chat ID that recognises a device between visits during a chat session. | Session | Legitimate interest |
| __zlcmid | Zopim | Help identify a user’s chat session between page loads. | 1 year | Legitimate interest |
| Bitvavo-consent-settings | Bitvavo | Remember the consent settings saved by a user when interacting with the cookie consent bar. | Session | Legitimate interest |
3.3 Analytics/Statistics Cookies
These cookies collect information about how you use a website. For example, a performance/analytics cookie will collect information about which pages you go to most often, how much time you spend on that page, or if you get error messages from certain pages. These cookies do not gather information that directly identifies you. The information these cookies collect is only used to obtain information about the quality or effectiveness of our Website or Service and have no or minor consequences for your private life. As such, these cookies do not require your prior consent.
We process the following analytics/statistics cookies:
| Name | Source | Purpose | Expiration | Legal ground |
|---|---|---|---|---|
| _ga 1P_JAR APISID HSID SAPISID SID SSID | Google Analytics | This cookie is associated with Google Universal Analytics which is a significant update to Google’s more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. | 2 years | Legitimate interest |
| SIDCC | Google Analytics | Same as above. | 1 year | Legitimate interest |
| NID | Google Analytics | Same as above. | 6 months | Legitimate interest |
| _gid | Bitvavo | This cookie is associated with Google Universal Analytics. It stores and updates a unique value for each page visited to understand your user journey. | 2 years | Legitimate interest |
| _gat | Google Analytics | Restrain the request rate and thus limit the collection of data on high traffic sites. | 1 minute | Legitimate interest |
Google Analytics
Google AnalyticsGoogle Analytics is used by Bitvavo for analytical purposes, for which normally your prior consent may be required. However, as Google Analytics is used by Bitvavo in a privacy-friendly way - as recommended by the Dutch Data Protection Authority – no prior consent is required. Bitvavo took the following measures:- Bitvavo has entered into a data processing agreement with Google for this purpose.
- Bitvavo does not show the last 8 digits of your IP-address to protect your privacy.
- Bitvavo disabled the ‘data sharing’ option with Google.
- Bitvavo does not use other Google services in combination with Google Analytics cookies.
If you would like to stop the collection and storage of data by Google Analytics, please follow the steps as described on the following page.
4. Change your cookie settings
You can accept or decline cookies via our cookie banner, or (automatically) accept or delete them through your browser settings. You can exercise your preferences in relation to cookies by taking the steps as described in the links as outlined below.
5. Updating the Cookie Policy
If Bitvavo changes the cookies used on the website, Bitvavo will amend this Cookie Statement accordingly. Any update of the Cookie Statement will apply after announcing the update on the website or any other official communication channel.
6. Contact and questions about this Cookie Policy?
If you want to know more about Bitvavo’s Cookie Policy or have any questions or recommendations, please send an email to privacy@bitvavo.com or contact Bitvavo’s Data Protection Officer directly at dpo@bitvavo.com. Bitvavo will respond to your request as quickly as possible.
Contact details
Bitvavo B.V.
Herengracht 450
1017CA Amsterdam
The Netherlands
E:privacy@bitvavo.com
W:bitvavo.com
Chamber of Commerce number: 68743424