Cookie Policy

Nederlands - Français - English

Alphabet Belgium Long Term Rental NV, as Data Controller, (hereinafter referred to as “Alphabet” or “we”) has chosen to use the eSignatures Solution and eSignatures Platform (collectively the “eSignatures Service”) provided by Connective NV, acting as a processor.

The purpose of this Cookie Policy is to tell you which cookies are used when you use the eSignature Service.

WHAT IS A COOKIE?

Cookies are small text files that can be stored on your computer or mobile devices when you visit a website.

Information is stored in a text file, such as your language preference for a website. When you visit the website again later, this cookie is sent again to the website. In this way, the website recognizes your browser and, for example, your language preference can be remembered.

Below is a list of the categories of cookies and their purposes:

These cookies enable users to navigate through the website and use the essential functions of the website. These cookies also ensure that a service or functionality explicitly requested by the user can be provided. These cookies can be placed without your permission. We also recommend that you do not disable these cookies as this may cause you to lose basic functionalities of the website or access to certain parts of the website.

These cookies ensure that the website functions properly and guarantee a faster and more efficient use. These cookies can be placed without your permission.

These cookies collect data about the use of the website such as the number of visitors, the time visitors spend on a web page and error messages, provide us with information about user traffic on our website, e.g. how users arrive at the website and if there are any navigation problems. We ask for your permission before placing these cookies.

First-party Advertising cookies placed on the website ensure that the website can send personalized advertising messages. We ask for your permission before placing these cookies.

Be aware that 3rd party advertisers and tech giants (such as Google, Amazon, Adobe) ask for your consent via their own privacy policy for transfers of your personal data outside the EU.

Social media follows the surfing behavior of users across different sites with 'tracking cookies'. Social media places a cookie while you visit site A and can read the cookie again when you visit site B. This allows Social media to profile you in a targeted manner and to send you advertising.

Please note that most social media providers are US-based companies, which request your consent via their own privacy policy for transfers of your personal data outside the EU.

It is important to distinguish between first-party and third-party cookies, to know if cookie information is disclosed to third parties:

Direct or first-party cookies are placed and managed by the website owner and are specific to the visited or used website.

Indirect cookies or third-party cookies are cookies that are managed and placed by a 3rd party.

Third-party cookies therefore ensure that certain data is sent to third parties when you visit a website. These can be, for example, cookies from social media or advertisers. These third parties may have access to specific cookie information (such as your userID, surname, first name, email address, pages visited, banners clicked, etc.), e.g. in order to provide you with personalized advertisements or to collect your feedback.

Consult the overview 'OVERVIEW OF COOKIES USED' for specific cookies when you use the e-Signature services.

WHAT COOKIE INFORMATION is obtained by using the e-Signature services?

The eSignature services collect the following information using only essential and functional cookies in order to establish a valid e-signature:

  • Given Name, Family Name, Email for identification and authentication purposes
  • Encrypted token containing authentication and user info retrieved from Authentication Service (ID Token, Access Token, UserInfo)

HOW LONG IS COOKIE INFORMATION RETAINED?

Cookies may remain on your computer or mobile device for different periods of time. Depending on the type of cookie, they (and the information they collect) are automatically deleted when you close your browser (these are the so-called "session cookies"). Cookies that remain on the website are called "persistent cookies".

Consult the retention periods in the 'OVERVIEW OF COOKIES USED'.

OVERVIEW OF COOKIES USED

Cookies that do not require your consent:

AspNet.ApplicationCookie

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: O Signed and encrypted claims-based identity, used for the user authentication, collecting Given Name, Family Name, Email
  • Retention period: Until log-out or timeout after 1 hour  
  • Data sent to Amsterdam or Dublin

     

osm.sid

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: The session identifier: random string, no personal information
  • Retention period: Session         
  • Data sent to Amsterdam or Dublin

     

Session

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description:

    Encrypted access token sets by Kong, can be split into session, session_2, … session_x.

    Contains authentication info (ID Token, Access Token, UserInfo) and user info (Given Name, Family Name, Unique ID, email) retrieved from Authentication Service

  • Retention period: Until log-out or timeout after 30 minutes       
  • Data sent to Amsterdam or Dublin

 

waf_user

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description:

    Last userid used by the client. Used for troubleshooting. Can be the user’s IP Address.

    Value to uniquely identity the user’s “user-agent”/browser.

    “userid” in the scope of the WAF is an ID to identify the same browser

  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

waf_cn

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description:

    Last “common name” used by the client when using TLS mutual auth. Used for troubleshooting.

    Common Name of the last used mTLS user cert

    “userid” in the scope of the WAF is an ID to identify the same browser

  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

AUTH_SESSIE_ID

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: No personal data, used to track login session
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

AUTH_SESSIE_ID_LEGACY

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: Backwards compatible version of the AUTH_SESSION_ID cookie
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

KC_RESTART

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: No personal data, used to restart an AUTH_SESSION once it expires.
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

KEYCLOAK_IDENTITY

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: Contains JWT with the currently logged in user’s ID using Unique User ID
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

KEYCLOAK_IDENTITY_LEGACY

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: Backward compatible version of the KEYCLOAK_IDENTITY cookie using Unique User ID
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

KEYCLOAK_SESSIE

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: Contains the “logged in” session ID (this is different from AUTH_SESSION_ID!) which relates back to the user’s realm, using Unique Login Session ID
  • Retention period: Until log-out or timeout after 30 minutes       
  • Data sent to Amsterdam of Dublin

KEYCLOAK_LOCALE

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: Stores selected GUI language
  • Retention period: Session Cookie (removed on tab close)          
  • Data sent to Amsterdam of Dublin

     

KEYCLOAK_REMEMBER_ME

  • Provider: Microsoft Azure
  • 1st party cookies          
  • Description: No personal data. Flag to remember the “remember me” selection on the auth screen.
  • Retention period: Session Cookie (removed on tab close)
  • Data sent to Amsterdam of Dublin

Cookies that require your consent is:

The eSignature services do not use cookies that require your consent.

 

HOW CAN YOU MANAGE YOUR COOKIE PREFERENCES?

You can also refuse or accept certain cookies via your web browser. The way in which you can do this differs from browser to browser: most browsers automatically accept cookies, but you can set your browser to warn you before a cookie is placed or to refuse cookies. More information about how to set up your browser can be found via the 'Help' button on your browser or via the following links:

Are you using a different browser? Check whether the procedure for your browser is included on http://www.allaboutcookies.org/manage-cookies. This website exists in English only. If you use different devices to use the eSignature services, please ensure that your cookie preference is set on the browser of each device.

We recommend that you do not disable the essential and functional cookies as this may cause you to lose basic functionalities of the website or access certain parts of the website.

IN CASE OF QUESTIONS OR COMPLAINTS

If you have any questions or complaints about the way in which we process your personal data, you can always contact us at the following email address: contact.privacy@alphabet.be Please find additional information in the Privacy Policy