1. Data controller
Bertalan Gábor EV. | 2045 Törökbálint, Hársfa utca 28., Hungary | info@proaudioline.hu — customer service by email only.
2. What is a cookie?
A cookie is a small text file that the website places on your browser or device (computer, tablet, smartphone) when you visit our site. Cookies allow the site to remember your settings, cart contents and other data to improve your experience.
Legal framework: Act C of 2003 on Electronic Communications, the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and Regulation (EU) 2016/679 (GDPR). For cookies requiring consent, the legal basis is voluntary informed consent under GDPR Art. 6(1)(a).
3. Cookie consent
On first visit, a cookie banner appears where you can choose which categories to allow. Necessary (technical) cookies are active by default — without them, the site would not function properly. All other categories require explicit consent.
You can revoke consent at any time by scrolling to the bottom of the site and clicking "Cookie settings". Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
Proof of consent: under GDPR Art. 7(1), the controller must be able to demonstrate when and to what you consented. We therefore also record every consent decision (accept, decline, change, withdrawal) server-side, independently of the cookie_consent_custom cookie/localStorage: the timestamp, the categories chosen, and the requesting IP address and browser identifier (user-agent). This log preserves proof of your decision even if you later clear your cookies. Retention: up to 3 years, after which it is deleted automatically.
4. Cookies used by this site
4.1. Necessary (technical) cookies
Legal basis: these do not require consent under the ePrivacy Directive and GDPR Art. 6(1)(f) (legitimate interest), as they are essential for the site to function.
| Cookie name | Purpose | Duration | Type |
|---|---|---|---|
| proaudioline_session | Session management, cart, login, security tokens | Session (deleted when browser closes) | Session cookie |
| cookie_consent_custom | Stores your consent preferences (analytics, marketing) | 365 days | Persistent cookie |
| hq_2fa_trust | Two-factor authentication (2FA): remembers an already verified device so that you do not have to enter a code at every sign-in. It is only created if you have enabled 2FA and expressly chose the "trusted device" option when signing in. The cookie stores a random token that contains no personal data in itself. | 30 days (up to 90 days depending on your account setting); can be invalidated immediately by signing out or by revoking devices in your account | Persistent cookie |
| __cf_bm, cf_clearance (and further cf-prefixed cookies) | Cloudflare Turnstile bot filtering and Cloudflare's security services: filtering out automated abuse (spam, credential stuffing, mass form submission). Provider: Cloudflare, Inc. This is not visitor analytics and not marketing tracking. | As configured by Cloudflare, typically 30 minutes – 1 year | Session / persistent cookie |
Note: Cart contents, currency and language settings are stored as part of the session, not in separate cookies. CSRF protection is implemented via a meta tag, not a cookie.
How we store your choice: alongside cookie_consent_custom, we mirror your analytics/marketing preference in the browser localStorage so measurement scripts load consistently with your decision. The cookie is also readable server-side; both stores together serve as the primary record of your preference.
4.2. Barion Pixel – Fraud-prevention cookie (legitimate interest)
Legal basis: GDPR Art. 6(1)(f) – legitimate interest. The Barion Base Pixel is used exclusively for payment fraud prevention and risk management by Barion Payment Zrt. Because this is not marketing or analytics tracking, it loads without requiring cookie consent and cannot be disabled via cookie settings.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _bp | Barion Payment Zrt. | Fraud prevention and risk scoring for payment transactions within the Barion system | Session / 1 year |
4.3. Analytics cookies (consent required)
These cookies help us understand how visitors use the site. Google Analytics 4 uses pseudonymous, identifier-based measurement; reports are aggregated, but this is not equivalent to strictly anonymous statistics. See Google's own privacy notice for details.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google LLC | Distinguishes unique visitors (Google Analytics 4) | 2 years |
| _ga_XXXXXX | Google LLC | Stores session state (GA4) | 2 years |
| _gid | Google LLC | Distinguishes visits within a 24-hour period | 24 hours |
IP anonymisation is enabled; data is processed by Google under a Data Processing Agreement (DPA). Google Privacy Policy: policies.google.com/privacy
4.4. Marketing cookies (consent required)
These cookies are used to show targeted advertisements and measure advertising campaigns. The Meta (Facebook) Pixel and Google Ads JavaScript trackers load only if you accept marketing cookies. If JavaScript is disabled in your browser, the Meta Pixel noscript image is included only if our server can confirm marketing consent — without marketing consent, no such request is made.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook) | Facebook ad tracking and remarketing | 90 days |
| _fbc | Meta (Facebook) | Click identifier for Facebook ads | 90 days |
| AW-XXXXXX | Google LLC | Google Ads conversion tracking | 90 days |
| hq_ad_attribution | ProAudioLine (own / first-party cookie) | Remembers the advertising click identifier (gclid) and campaign data (UTM parameters) so that an order placed later — not in the same session — can still be attributed to the correct advertisement. Used solely for internal statistical purposes; never shared with third parties. Details: Privacy Notice, Section 2.4. | 90 days |
4.5. Google Customer Reviews and Seller Ratings widget (consent required)
The Google Customer Reviews opt-in shown on the order confirmation page, and the script that loads the Google Seller Ratings badge shown at the bottom of every page, are both served from Google's servers. Neither loads without "Marketing cookies" consent:
- Customer Reviews (order confirmation page): only loads with marketing consent; when it does, your order number, email address, delivery country and estimated delivery date are sent to Google solely to display the survey opt-in prompt. Details: Privacy Notice, Section 2.2.
- Seller Ratings badge (every page): only loads with marketing consent; when it does, only the merchant ID and region are sent — no individual customer data.
4.6. Local storage (localStorage) — not a cookie, but a similar-purpose store
The browser's localStorage may also hold the following items, which are not cookies but are listed here for completeness:
| Key name | Purpose | Category |
|---|---|---|
| cookie_consent | Mirrors the cookie_consent_custom cookie so measurement scripts load consistently with your consent | Necessary |
| hq_search_history | Remembers your recent search terms on the search page (up to 8 entries) so you can quickly find them again. Stored only on your device, never sent to our server, never shared with other visitors. | Functional / necessary — does not require consent, can be cleared any time via your browser's site data settings |
| calc_gdpr_accepted | The loudspeaker-design calculator's own, standalone notice-acceptance flag, independent of the main cookie system; it only remembers that you have seen the calculator's own privacy notice. | Functional / necessary — does not require consent |
| purchase_fired_<order number> (sessionStorage) | Prevents the purchase measurement event from being sent twice if the order confirmation page is reloaded. The actual event (GA4 "purchase") only reaches Google with analytics consent; this key only guards against duplication. | Functional / necessary — does not require consent |
5. Third-party cookies
We currently do not embed YouTube players in the shop. If embedded media or third-party sharing widgets are added in future, those providers' own cookie and data processing rules may apply. You can also restrict these in your browser.
6. Managing and deleting cookies
6.1. Cookie settings on our website
You can change your consent preferences at any time via the cookie banner or the "Cookie settings" menu at the bottom of the page. Necessary cookies cannot be switched off.
6.2. Browser settings
Most browsers allow you to manage, restrict or delete cookies:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Microsoft Edge: Settings → Cookies and site permissions
- Apple Safari: Preferences → Privacy → Manage Website Data
Note: disabling necessary cookies may break certain site features (e.g. cart, login).
6.3. Google Analytics opt-out
You can opt out of Google Analytics tracking via: tools.google.com/dlpage/gaoptout
6.4. Facebook ad opt-out
To manage Facebook-targeted advertising: facebook.com/settings?tab=ads
7. Your rights regarding cookies
You may withdraw your consent to analytics and marketing cookies at any time via the "Cookie settings" menu on the website or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal (GDPR Art. 7). For your other data protection rights, see our Privacy Policy.
Privacy PolicyEffective: 19 August 2026 | Bertalan Gábor EV.