Cookie Policy
Last updated: August 2026. This policy explains what cookies are, which we use and how you manage your consent. Read it together with the Privacy Policy.
1. Who we are
AAFIT is operated by AWA FLOT S.R.L., registered office at Bd. Pipera nr. 1/VII, Etaj 6, Camera 4, Voluntari, Ilfov, 077190. Cookie processing complies with Romanian Law 506/2004, the GDPR and the ePrivacy Directive 2002/58/EC.
2. What cookies are
Cookies are small files stored in your browser or device when you visit a site. They let the site "remember" actions and preferences (cart, language, login). They are passive — no viruses, no access to your device's files. We also use similar technologies (pixels, local storage), treated the same way. By origin, cookies can be first-party (set by AAFIT) or third-party (Google, Meta, TikTok); by duration, session or persistent.
3. Types of cookies we use
- Strictly necessary (always on): essential for the Site to work — cart, login, session security (CSRF token), remembering your cookie preferences. No consent required (Art. 4^1 of Law 506/2004).
- Statistics / analytics: help us understand, in aggregate, how the Site is used, to improve it. Activated only with your consent.
- Marketing: used to show you relevant ads on other platforms (Facebook, Instagram, TikTok) and to measure campaigns. Activated only with your consent.
4. Cookie list
Strictly necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| aafit_session | AAFIT | Maintains the session and navigation state | Session |
| XSRF-TOKEN | AAFIT | Protection against CSRF attacks | Session |
| cart | AAFIT | Remembers items added to the cart | up to 30 days |
| aafit_consent_v2 | AAFIT | Stores your cookie preferences (categories, version, date) | 6 months |
Statistics (Google Analytics 4)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Distinguishes unique users | 2 years | |
| _ga_<ID> | Maintains GA4 session state | 2 years |
Marketing (Meta Pixel & TikTok Pixel)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta | Identifies the browser for advertising and conversions | ~3 months |
| _ttp | TikTok | Targeting and conversion measurement | ~13 months |
If you sign in with Google Login, Google sets its own cookies needed for authentication when you request that service. See Google's Privacy Policy. The list may vary slightly with partner configuration; you can see the active categories anytime in the "Cookie settings" panel.
5. Legal basis
For strictly necessary cookies, the basis is the necessity of providing the requested service (Art. 4^1 of Law 506/2004), without consent. For statistics and marketing cookies, the basis is your consent (Art. 6(1)(a) GDPR + Law 506/2004), granular per category, withdrawable anytime.
6. Managing your cookies
On your first visit we show a banner with "Accept all", "Reject all" and "Customize". We never make access conditional on accepting cookies. You can change your choice anytime via the "Cookie settings" button (icon in the page corner); changes take effect immediately. You can also block or delete cookies in your browser settings (Chrome, Firefox, Safari, Edge); disabling strictly necessary cookies may affect the Site.
7. Consent and withdrawal
Non-essential cookies are set only after your consent. Consent is granular, freely given and withdrawable at any time, as easily as it was given. Withdrawal does not affect prior lawful processing. We will re-request your preferences periodically (at most every 6 months) and whenever purposes or partners change significantly.
8. International transfers
Some partners (Google, Meta, TikTok) may process data outside the EEA, with GDPR safeguards (Standard Contractual Clauses or adequacy decisions). See the Privacy Policy.
9. Updates and contact
We may update this policy; the version in force is the one published here. Questions: AWA FLOT S.R.L., comenzi@aafit.ro. You may also contact ANSPDCP – www.dataprotection.ro.
