Cookie Policy
Last updated: September 17, 2026
Platform: „to you." · Operator: S.C. RODALEX C.S. S.R.L. · Version 1.0
Chapter I — General provisions
Article 1 — Purpose of the Cookie Policy
1.1. This Cookie Policy establishes the manner in which S.C. RODALEX C.S. S.R.L., in its capacity as operator of the „to you." platform, uses cookies and similar technologies on the toyou.ro website.
1.2. The purpose of this Policy is to inform Users of the types of cookies used, the purposes of the processing, the storage period and their rights concerning the management of cookie preferences.
1.3. This Policy supplements the Privacy Policy and the Terms and Conditions of the „to you." platform.
Article 2 — The Operator
2.1. The operator of the website and of the „to you." platform is:
- S.C. RODALEX C.S. S.R.L.
- Registered office: Iași, str. Teascului nr. 77, Iași county
- Unique registration code (CUI): 52501616
- Trade Register registration no.: J2025069464002
- Contact email: [email protected]
2.2. The Operator has not appointed a data protection officer (DPO). Requests concerning personal data are handled by the administrator of the company, at the email address indicated in paragraph 2.1.
2.3. Further information on the processing of personal data is available in the Privacy Policy.
Article 3 — Scope of application
3.1. This Policy applies to all Users who access the toyou.ro website, on all of its pages.
3.2. The Policy concerns exclusively the use of cookies and similar technologies on the toyou.ro website. It does not apply to:
- the app.toyou.ro web application, which operates on a distinct domain and with its own mechanisms; the processing carried out through it is described in the Privacy Policy;
- the „to you." mobile application (iOS and Android), the processing of which is likewise described in the Privacy Policy.
3.3. Where certain functionalities of the website are provided by third parties, the use of their cookies may be subject to the policies of those providers.
3.4. The choice expressed on the toyou.ro website is stored locally, in the User's browser, and is linked to this domain; it is not transmitted to the app.toyou.ro web application, nor the other way round.
Article 4 — Acceptance of the Cookie Policy
4.1. Upon first accessing the website, the User is informed of the use of cookies by means of a consent banner.
4.2. The User may accept or refuse the use of cookies which require consent. At present, the only optional category is the analytics category, managed through the „Accept" and „Refuz" (decline) buttons in the banner. Where additional categories are introduced (for example marketing), those categories will be capable of being managed individually.
4.3. Storage strictly necessary for the provision of the service expressly requested by the User does not require consent, under the exception provided for in Article 4²(2) of Law no. 506/2004. On the toyou.ro website, this category comprises a single local storage entry, by which the User's own choice concerning cookies is recorded (Article 11).
Article 5 — Updating the Policy
5.1. The Operator reserves the right to amend this Cookie Policy whenever necessary, as a result of legislative or technical changes or of changes concerning the operation of the website.
5.2. The updated version is published on the toyou.ro website and takes effect from the date of publication, unless otherwise provided.
Chapter II — What cookies and similar technologies are
Article 6 — Definition of cookies
6.1. Cookies are small files, made up of letters and digits, which are stored on the User's device (computer, mobile telephone, tablet or other equipment) when the User accesses the toyou.ro website.
6.2. Cookies make it possible to recognise the User's device and contribute to the efficient operation of the website, to the improvement of the browsing experience and, as the case may be, to the provision of additional functionalities.
Article 7 — Similar technologies
7.1. In addition to cookies, a website may also use other similar technologies, such as:
- local storage;
- session storage;
- tracking pixels;
- web beacons;
- web SDKs or other equivalent technologies.
7.2. These technologies may be used for the operation of the website, performance measurement, usage analysis and other purposes described in this Policy.
7.3. At present, the toyou.ro website uses exclusively local storage (for recording the User's option concerning cookies). The other technologies listed above (session storage, pixels, web beacons, SDKs) are not used at present; they may be implemented in the future, in which case this Policy and the list of cookies will be updated and, where necessary, the User's consent will be obtained.
7.4. Unlike a cookie, a local storage entry is not transmitted automatically to the server with every request, but remains in the User's browser.
Article 8 — Types of cookies according to duration
8.1. Session cookies. These cookies are stored temporarily and are deleted automatically when the browser is closed.
8.2. Persistent cookies. These cookies remain stored on the device for the period established or until they are deleted by the User.
8.3. On the toyou.ro website there are no session cookies. The only cookies which may be installed are the analytics cookies, which are persistent and are installed only after consent has been obtained (Article 12).
Article 9 — Types of cookies according to origin
9.1. First-party cookies. These are the cookies written on the domain of the website visited. The code of the toyou.ro website writes no cookie of its own; the analytics cookies _ga and _ga_VB32QH0X6F are written directly on the toyou.ro domain by the script provided by Google and are therefore, from a technical point of view, first-party cookies, even though the provider of the service is Google and the information collected reaches Google.
9.2. Third-party cookies. These are installed by third-party providers whose services are integrated into the website and are written on the provider's domain. At present, no third-party cookies are installed on the toyou.ro website; the only third-party service used is Google Analytics, and the cookies which it writes are those described in paragraph 9.1.
Article 10 — The role of cookies
10.1. On the toyou.ro website, cookies and similar technologies are used exclusively for:
- the correct operation of the website;
- the analysis of the manner in which the website is used;
- the improvement of the performance of the website.
10.2. Cookies are not used for maintaining an authentication session, for recording the User's preferences, for fraud prevention or for profiling for advertising purposes.
Chapter III — The types of cookies used
Article 11 — Strictly necessary cookies
11.1. The toyou.ro website installs no cookie of its own. The strictly necessary category comprises a single local storage entry, named toyou-cookie-consent, by which the User's choice concerning cookies is recorded.
11.2. The following fall within this category:
- recording the choice expressed in the cookie banner, so that the User is not asked again on every page and on every visit — achieved by means of the entry described in paragraph 11.1;
- the delivery of the pages of the website through the distribution network of the hosting provider, which as at the date of this Policy does not entail the installation of any cookie (Article 17).
11.3. The toyou-cookie-consent entry cannot be disabled through the preferences banner, since it is in that entry that the User's own answer is recorded. It does not require consent, under the exception provided for in Article 4²(2) of Law no. 506/2004.
11.4. Item stored in this category:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| toyou-cookie-consent | Local storage entry (not a cookie) | Records the User's choice concerning cookies (accepted / refused). | Persistent, until the choice is changed or until the browser data is deleted |
Article 12 — Analytics and performance cookies
12.1. These cookies are used in order to understand the manner in which Users interact with the toyou.ro website. At present, Google Analytics 4 (identifier G-VB32QH0X6F), provided by Google, is used for this purpose.
12.2. The information collected may be used for:
- analysing website traffic;
- identifying technical errors;
- measuring page performance;
- improving functionalities and the User experience.
12.3. These cookies are NOT strictly necessary and are activated exclusively after the explicit consent of the User has been obtained (opt-in), in accordance with Article 4² of Law no. 506/2004 and with Regulation (EU) 2016/679 (GDPR). In the absence of consent, these cookies are not installed.
12.4. The legal basis for the processing of personal data resulting from these cookies is the consent of the User, Article 6(1)(a) of Regulation (EU) 2016/679. The Operator does not rely on legitimate interest for the storage of information in the User's terminal equipment or for access to such information.
12.5. Until consent is given, the analytics script provided by Google is not included in the page: it is not loaded and subsequently disabled, but is not requested by the browser at all. Where consent is refused, Google Analytics is not loaded.
12.6. The information collected through Google Analytics 4 is associated with a random identifier assigned to the browser and is therefore pseudonymised, not anonymous. The Operator does not request and does not associate with such information the name or other identification data of the User.
12.7. Cookies installed in this category:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Distinguishes Users by means of a random identifier. | Approximately 2 years | |
| _ga_VB32QH0X6F | Maintains the analytics session state for the Operator's GA4 property. | Approximately 2 years |
Article 13 — Marketing and advertising cookies
13.1. At present, the „to you." platform DOES NOT use marketing or advertising cookies. Where such solutions are implemented in the future (for example Google Ads, Meta Pixel, conversion pixels or other advertising technologies), they will be activated exclusively after the explicit consent of the User has been obtained, through a dedicated category in the cookie banner, and will be added to the list of cookies.
Article 14 — Third-party cookies
14.1. The toyou.ro website may integrate services provided by third parties, which may use their own cookies or similar technologies.
14.2. To the extent that such services are used, Users are informed of the identity of the providers and of the purposes of the processing, in accordance with the applicable legislation.
14.3. The Operator recommends consulting the privacy and cookie policies of third-party providers for further information on the manner in which they process data. Google's privacy policy is available at policies.google.com/privacy.
14.4. At present, the only third-party provider whose cookies may be installed (only after consent) is Google, through the Google Analytics service; those cookies are written on the toyou.ro domain, in accordance with paragraph 9.1.
14.5. The use of Google Analytics may involve the transfer of certain data to Google LLC (United States of America). According to the statements of the provider, those transfers are carried out on the basis of the safeguards provided for in Chapter V of Regulation (EU) 2016/679, namely the EU–U.S. Data Privacy Framework — in respect of which the European Commission adopted an adequacy decision in July 2023, pursuant to Article 45 of the Regulation — and/or the standard contractual clauses approved by the European Commission, pursuant to Article 46 of the Regulation. A transfer outside the European Union entails that the authorities of the State of destination may have access to the data under the conditions of their own legislation. A User who does not wish this transfer to take place may refuse the analytics cookies, without the operation of the website being affected. Further details are available in the Privacy Policy.
14.6. Independently of the banner on the website, Google makes available a browser add-on which disables Google Analytics on all websites: tools.google.com/dlpage/gaoptout.
14.7. The toyou.ro website is hosted on Cloudflare infrastructure, which delivers the pages and processes, as part of that delivery, the technical connection data, including the IP address. As at the date of this Policy, the hosting provider installs no cookie on the toyou.ro website. The provider automatically inserts a script which conceals the email addresses displayed in the pages from harvesting robots; that script runs in the browser and does not store information on the User's equipment.
14.8. The fonts used on the website are hosted by the Operator and are not retrieved from an external provider, so that the User's browser does not transmit data to another server before consent is given.
Chapter IV — The purpose of using cookies
Article 15 — Operation of the website
15.1. The strictly necessary storage described in Article 11 is used for ensuring the correct operation of the toyou.ro website.
15.2. The operation of the website entails, in this respect:
- displaying the cookie banner only once and observing the choice expressed on subsequent visits;
- the delivery of the pages of the website through the network of the hosting provider, which as at the date of this Policy does not entail the installation of any cookie.
15.3. The toyou.ro website has no user accounts, does not manage authentication sessions and contains no forms. Consequently, no cookies are used for authenticating Users, for maintaining a session, for protecting accounts or for managing requests submitted through the website.
Article 16 — Analysis and development of the website
16.1. The Operator uses analytics cookies — at present Google Analytics 4 (identifier G-VB32QH0X6F) — exclusively after the explicit consent of the User has been obtained (opt-in), in order to analyse the manner in which the website is used.
16.2. The information collected may contribute to:
- improving the performance of the website;
- identifying and remedying technical errors;
- developing new functionalities;
- optimising the User experience.
16.3. The data used for analytics purposes is processed in accordance with the Privacy Policy and with the applicable legislation.
16.4. Processing for analytics purposes is carried out only on the basis of the User's consent, through Google Analytics 4.
Article 17 — Security of the website
17.1. As at the date of this Policy, no security cookies are installed on the toyou.ro website. Where the hosting provider activates mechanisms of protection against automated traffic, those mechanisms may entail strictly necessary security cookies (for example __cf_bm), installed on the basis provided for in Article 4²(2) of Law no. 506/2004; in that case, the list of cookies in the Annex will be updated.
17.2. Such measures contribute to maintaining an adequate level of security for Users and for the „to you." platform.
Chapter V — Management of cookie preferences
Article 18 — Giving consent
18.1. Upon first accessing the toyou.ro website, a banner concerning the use of cookies is displayed to the User.
18.2. By means of the banner, the User may:
- accept all cookies;
- refuse the cookies which require consent.
18.3. The cookies which require consent are activated only after the User's agreement has been expressed, in accordance with the applicable legislation.
18.4. At present, the banner offers the options „Accept" and „Refuz" (decline), since the only optional category is the analytics category. Category-level personalisation will be available where several optional categories exist (for example marketing). The two options are available at the same level, each by means of a single action.
18.5. Access to the content of the website is not conditional upon the expression of an option. For as long as the User has not chosen, nothing is stored on the User's equipment and Google Analytics is not loaded.
Article 19 — Changing preferences
19.1. The User may change or withdraw consent concerning cookies at any time, by means of the dedicated option available on the website (the „Cookie settings" section in the footer of the website). The same option is also available here: .
19.2. The withdrawal of consent takes effect for the future and does not affect the lawfulness of the processing carried out before the withdrawal.
19.3. Upon refusal or withdrawal of consent, the Operator activates the official opt-out indicator made available by Google (ga-disable-G-VB32QH0X6F), which stops any further collection, and deletes the _ga cookies remaining from a previous visit, both on the toyou.ro domain and on its subdomains. Where the analytics script was already loaded in the page then open, it remains in the page until the next reload, without transmitting data any further.
19.4. The choice expressed does not expire automatically: it remains valid until it is changed by the User or until the browser data is deleted. Being stored locally, the choice is linked to the browser and to the device on which it was expressed; in another browser, on another device or in a private browsing window, the banner is displayed again.
Article 20 — Browser settings
20.1. The User may also control the use of cookies through the settings of the browser used.
20.2. The browser may allow, as the case may be:
- the blocking of certain cookies;
- the deletion of existing cookies;
- the notification of the User before a cookie is stored.
20.3. The official instructions of the principal browsers are available at:
20.4. Blocking local storage in the browser or deleting the browser data when the browser is closed makes it impossible to record the choice concerning cookies: nothing is stored, Google Analytics is not loaded, and the banner is displayed again on every visit. The other functionalities of the website are not affected.
Article 21 — Retention period of cookies
21.1. Cookies are retained for the period necessary for the fulfilment of the purpose for which they were installed.
21.2. The lifetime differs according to the category of the cookie and to its provider.
21.3. The information concerning the duration of each item stored is set out in the Annex to this Policy.
21.4. By way of guidance: the Google Analytics cookies (_ga and _ga_VB32QH0X6F) have a duration of approximately 2 years, and the consent option stored locally (toyou-cookie-consent) is retained until it is deleted by the User.
Article 22 — Updating the list of cookies
22.1. The Operator may update the list of cookies used on the website whenever technologies or services entailing their use are introduced, modified or removed.
22.2. The updated version of the list is available on the website and reflects the technical configuration existing at the time of publication.
Chapter VI — Users' rights
Article 23 — The right to be informed
23.1. Users have the right to receive clear, complete and easily understandable information concerning the use of cookies and similar technologies on the toyou.ro website.
23.2. That information is available through this Cookie Policy, through the consent banner and, as the case may be, through the Privacy Policy.
Article 24 — The right to choose
24.1. Users have the right to accept or to refuse the use of cookies which require consent, under the conditions provided for by the applicable legislation.
24.2. Refusal of the optional cookies does not prevent access to the content and to the functionalities of the toyou.ro website; no functionality of the website depends on cookies.
Article 25 — The right to withdraw consent
25.1. The User may withdraw consent concerning the use of cookies at any time, by changing the preferences in the dedicated section of the website, as easily as that consent was given.
25.2. The withdrawal of consent takes effect only for the future and does not affect the lawfulness of the use of cookies before the withdrawal.
Article 26 — Rights concerning personal data
26.1. To the extent that the use of cookies involves the processing of personal data, Users enjoy the rights provided for by Regulation (EU) 2016/679 (GDPR).
26.2. Those rights include, as the case may be:
- the right of access;
- the right to rectification;
- the right to erasure of the data;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to withdraw consent at any time;
- the right to lodge a complaint with the competent data protection authority.
26.3. The rights are exercised by means of a request submitted to [email protected]. The Operator responds within the time limits provided for by the Regulation, at no cost to the User. The detailed conditions of exercise are described in the Privacy Policy.
26.4. The information collected through Google Analytics is associated with a random identifier, and the Operator does not hold the means to link it to an identified person. In such a situation, the exercise of rights entails the provision of additional information enabling identification, pursuant to Article 11 of Regulation (EU) 2016/679. Collection is stopped by withdrawing consent, in accordance with Article 19.
26.5. A User who considers that the processing of that User's data infringes the applicable legislation may lodge a complaint with the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal — ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, email [email protected], website www.dataprotection.ro. The User may also apply to the competent courts.
Article 27 — Contact details
27.1. For questions or requests concerning the use of cookies or the exercise of the rights provided for by this Policy, Users may contact the Operator at the email address [email protected].
27.2. The Operator examines the requests received and responds within the time limits provided for by the applicable legislation.
Chapter VII — Amendment of the Cookie Policy and final provisions
Article 28 — Amendment of the Cookie Policy
28.1. S.C. RODALEX C.S. S.R.L. reserves the right to amend this Cookie Policy whenever necessary, in order to reflect legislative, technical or organisational changes concerning the operation of the toyou.ro website.
28.2. Any updated version is published on the website and takes effect from the date of publication, unless another term is provided for.
28.3. In the event of significant changes concerning the use of cookies, the Operator may inform Users by means of the cookie banner or by other appropriate means.
Article 29 — Relationship with the other documents
29.1. This Cookie Policy is supplemented by:
- the Terms and Conditions;
- the Privacy Policy;
- any other policies published by the Operator and applicable to the use of the website.
29.2. In the event of inconsistencies between the documents, they are interpreted in accordance with the applicable legislation and with the purpose of each document.
Article 30 — Applicable law
30.1. This Cookie Policy is governed by the legislation of Romania and by the applicable European rules concerning data protection and the use of cookies.
30.2. Any dispute concerning the interpretation or the application of this Policy is settled with priority amicably and, in the absence of a solution, by the competent courts of Romania.
Article 31 — Entry into force
31.1. This Cookie Policy enters into force on the date of its publication on the toyou.ro website.
31.2. The version published on the website constitutes the official version applicable at the time of the use of the website.
Final provisions
The purpose of this Cookie Policy is to ensure transparency concerning the use of cookies and similar technologies on the toyou.ro website.
S.C. RODALEX C.S. S.R.L. seeks to provide Users with clear information on the manner in which these technologies are used and to enable them to manage their preferences in accordance with the applicable legislation.
By using the website and expressing their options concerning cookies, Users confirm that they have been informed of this Policy and of the possibility of managing their preferences at any time.
Annex — List of cookies used
| Name | Type | Provider | Purpose | Duration | Category | Consent |
|---|---|---|---|---|---|---|
| toyou-cookie-consent | Local storage (not a cookie) | „to you." (S.C. RODALEX C.S. S.R.L.) | Records the User's option concerning cookies | Persistent, until deleted | Strictly necessary | No |
| _ga | First-party cookie, written on the toyou.ro domain | Google (Google Analytics) | Distinguishes Users | Approximately 2 years | Analytics | Yes (opt-in) |
| _ga_VB32QH0X6F | First-party cookie, written on the toyou.ro domain | Google (Google Analytics) | Maintains the GA4 session state | Approximately 2 years | Analytics | Yes (opt-in) |
At present, no preference or marketing cookies are used. Upon their introduction, the table will be updated accordingly.