Introduction
Last updated: 1 November 2026
This cookie policy ("Cookie Policy") explains what information Datajoy stores on, or reads from, your device when you use the pages listed in section 2, why we do so and how you can control it. It supplements our Privacy Policy, which describes how we process personal data, in particular in its section 18 "Cookies and similar technologies".
1. Who we are
Datajoy SRL, a private limited company under Belgian law, enterprise number 1022.271.122, 7 Sainte Gertrude Street, 1040 Etterbeek (Brussels), Belgium ("Datajoy", "we"). Datajoy is the controller for the processing described in this Cookie Policy.
2. Pages covered
This Cookie Policy covers:
- the online mandate page (datajoy.eu/mandate/…), including its Mandate Grantor, Data Holder and Data Recipient views;
- the Mandate Grantor sign-in and dashboard (datajoy.eu/my-data);
- the Data Holder dashboard, opened through a time-limited access link (datajoy.eu/holder).
Other Datajoy pages are described in section 18 of our Privacy Policy.
3. What cookies and similar technologies are
A cookie is a small text file that a website stores in your browser. A website can also store information in the browser's own storage: "local storage", kept until you clear it, and "session storage", deleted when you close the tab. The rules on cookies, in Article 5(3) of the ePrivacy Directive (2002/58/EC) as transposed into Belgian law, apply to all these technologies alike. In this Cookie Policy, "cookies" means all of them.
4. What we use and why
The pages covered use only cookies that are strictly necessary to provide the service you ask for: to keep you signed in to your mandate, to protect your changes against forgery by another website, and to remember choices you make on the page, such as its language. They are set by Datajoy itself (first-party cookies), are never shared with third parties and are not used to recognise you on other websites. Each of them is listed in the table below.
What these pages store on your device
| Name | Type | Purpose | Kept for |
|---|---|---|---|
datajoy-session |
Cookie | Keeps you signed in while you read or change your mandate, and remembers your cookie choice for this visit. | 2 hours |
XSRF-TOKEN |
Cookie | Proves a change was sent from this page, not by another site. | 2 hours |
dj-mandate-lang |
Local storage | Remembers the language you chose on the mandate page, so it opens in that language on your next visit. | Until you clear it |
dj.session |
Session storage | Links the Datajoy form open in this tab to your answers, without a cookie. | Until you close the tab |
dj-om-redo:<mandate> |
Session storage | Remembers that you tried to change your mandate before signing in, so the page can ask you again once you are signed in. | Until you close the tab |
dj-om-role:<mandate> |
Session storage | Remembers which view of the mandate (Mandate Grantor, Data holder or Data recipient) to open after you sign out of another one. | Until you close the tab |
The session cookie contains only a random identifier. The information it refers to, for example that you are signed in and that you have seen the cookie notice, is kept on our servers in the European Union and deleted when the session expires, after the period shown in the table counted from your last activity.
5. Why we do not ask for your consent
Consent is not required for cookies that are strictly necessary to provide a service you have explicitly requested (Article 5(3) of the ePrivacy Directive, as interpreted by the European Data Protection Board and the Belgian Data Protection Authority). This is why the cookie notice on these pages only informs you and offers no "Accept" or "Reject" buttons: offering to refuse cookies that cannot be refused would be misleading.
Where these cookies involve personal data, the legal basis for the processing is the performance of the contract with you, the mandate (Article 6(1)(b) GDPR), and our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR).
6. What we do not use
On these pages we use no audience measurement, advertising, profiling, social media or cross-site tracking cookies, and we load no third-party scripts that would set them. Each visit to a mandate page is nevertheless recorded in that mandate's access log, as part of its audit trail (see our Privacy Policy); this does not rely on any cookie.
If we ever wish to use a cookie that is not strictly necessary, we will first ask for your consent, offering "Reject all" and "Accept all" with equal prominence, and we will update this Cookie Policy.
7. How to manage cookies
- "Cookie settings", at the bottom of every page covered, shows the cookies in use at any time.
- You can delete or block cookies and site data in your browser settings. If you block the strictly necessary cookies, some functions will not work, such as signing in or changing your mandate.
- Clearing your browser's site data for datajoy.eu also deletes the local storage and session storage listed above.
8. Your rights
Where cookies involve personal data, you have the rights described in our Privacy Policy: the right of access, rectification, erasure, restriction of processing, data portability and the right to object. You can contact us at privacy@datajoy.eu. You also have the right to lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).
9. Changes to this Cookie Policy
We update this Cookie Policy whenever the cookies we use change. The date at the top shows the current version. If a change requires your consent, the cookie notice will ask for it before any new cookie is used.
10. Language
This Cookie Policy is available in English, French, Dutch and Italian. The translations are made from the English version, which prevails in the event of any discrepancy.
