How and Why We Use Cookies
This page explains the cookies and similar technologies on recyclingcentreireland.org/, why we use each category, and the controls available to you under the GDPR, the Irish Data Protection Act 2018, and the ePrivacy Regulations (S.I. No. 336/2011) โ including the Global Privacy Control (GPC) signal.
What’s on this page
1. What Cookies Are
Cookies are small text files that a website places on your device when you visit. They store information that helps the page work โ keeping you logged in, remembering your preferences, recognising you when you return โ and can also be used for analytics and advertising. “Similar technologies” includes pixels, tags, local storage, and SDK identifiers; we treat them all the same way under this policy.
2. The Legal Framework
In Ireland, cookies are governed by two layers of law that operate together:
- The ePrivacy Regulations โ S.I. No. 336/2011, the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011. Regulation 5 requires consent for storage of any non-strictly-necessary information on your device.
- The GDPR and Data Protection Act 2018 โ where cookies process personal data, the GDPR’s lawful-basis and rights framework also applies. Where consent is the basis under Regulation 5, that consent must meet the GDPR Article 4(11) standard: freely given, specific, informed, and unambiguous, by a clear affirmative action.
The Data Protection Commission (DPC) enforces both frameworks in Ireland and has published binding guidance on cookies and similar tracking technologies.
3. The Four Cookie Categories
Strictly necessary
Always onRequired for the site to load and function โ load balancing, security, your cookie consent choice itself. Exempt from consent under Regulation 5(5) of the ePrivacy Regulations because they are strictly necessary for the service you have requested.
Functional
OptionalRemember preferences such as language and accessibility settings. Used only to improve your experience, not for tracking across sites. Loaded only after affirmative consent.
Analytics
Optional ยท consent requiredAggregated measurement of which pages are useful, how readers move through the site, where to focus editorial improvements. Loaded only after affirmative consent under Regulation 5 and GDPR Article 6(1)(a).
Advertising
Optional ยท consent requiredDisplay advertising โ frequency capping, ad selection, performance measurement. Loaded only after affirmative consent. GPC signal honoured automatically.
4. First-Party Cookies (Set by recyclingcentreireland.org/)
| Cookie | Purpose | Lifetime |
|---|---|---|
| rci_consent | Stores your cookie-banner choice | 12 months |
| rci_session | Maintains a browsing session | Session (deleted on close) |
| rci_csrf | Cross-site request forgery protection on forms | Session |
| rci_pref | Stores accessibility / display preferences (language, region) | 12 months |
| rci_gpc | Records that a Global Privacy Control signal was received | 12 months |
5. Third-Party Cookies (Set by Other Services)
| Service | Purpose | Loaded |
|---|---|---|
| Google Analytics 4 | Aggregated usage measurement | Only after analytics consent |
| Google AdSense | Display advertising and frequency capping | Only after advertising consent |
| Cloudflare | Security, bot mitigation, CDN performance | Strictly necessary โ always on |
| Embedded video / map providers (where used) | Embedded media playback or map display | Only after functional consent (where applicable) |
6. Analytics โ Google Analytics 4
We use Google Analytics 4 (GA4) to understand which content is most useful, how readers move through the site, and where editorial improvements are needed. GA4 is loaded only after you consent. Configuration includes:
- IP-anonymisation is on by default in GA4
- Identifiable analytics data is retained no longer than 14 months
- “Google signals” advertising features are off
- Data-deletion requests are honoured under GDPR Articles 17 and 21
- EUโUS Data Privacy Framework โ Google LLC self-certifies under the framework
To opt out at the Google level, install the official Google Analytics Opt-Out Browser Add-On.
7. Advertising โ Google AdSense
Display advertising on the site is served through Google AdSense, which uses cookies and identifiers to limit how often you see the same ad and to measure ad performance. Advertising cookies are loaded only after you consent.
If you opt out โ through the cookie banner, the GPC signal, or by emailing us โ we will stop loading advertising cookies for your session and signal “do not share” to advertising networks where supported. Withdrawal of consent is as easy as giving consent under Article 7(3) GDPR.
Google’s ad-personalization controls: adssettings.google.com.
8. Security and CDN โ Cloudflare
Cloudflare provides DDoS protection, bot mitigation, and content-delivery acceleration. Cloudflare cookies (such as cf_clearance) are strictly necessary for the site to function safely under Regulation 5(5) of the ePrivacy Regulations and are not used for analytics or advertising. They cannot be turned off without making the site less secure or unavailable.
9. How We Ask for Consent
On your first visit, the cookie banner gives you three buttons: Accept all, Reject non-essential, and Customize. Strictly-necessary cookies are loaded immediately under the ePrivacy Regulations exemption. Analytics, functional, and advertising cookies are loaded only after you make an affirmative choice โ meeting the GDPR Article 4(11) standard for valid consent. The “Cookie settings” link in the footer reopens the banner so you can change your choice at any time, satisfying GDPR Article 7(3) on withdrawal of consent being as easy as giving it.
10. Global Privacy Control (GPC)
If your browser sends the Global Privacy Control header, we treat it as a valid signal of objection to advertising-cookie processing. Advertising cookies are not loaded for sessions where GPC is detected, and your existing analytics or advertising consent is treated as withdrawn.
To enable GPC, use a browser or extension that supports it โ Firefox (built-in), Brave (built-in), DuckDuckGo browser (built-in), or extensions like Privacy Badger, OptMeowt, or DuckDuckGo Privacy Essentials. More information at globalprivacycontrol.org.
11. Browser Controls
Every modern browser lets you view, manage, block, and delete cookies in its settings. The exact path differs by browser:
- Google Chrome: Settings โ Privacy and security โ Cookies and other site data
- Microsoft Edge: Settings โ Cookies and site permissions โ Manage and delete cookies and site data
- Mozilla Firefox: Settings โ Privacy & Security โ Cookies and Site Data
- Apple Safari (macOS): Safari โ Settings โ Privacy
- Brave: Settings โ Shields โ Cookies
- Opera: Settings โ Privacy & security โ Cookies and other site data
Blocking strictly-necessary cookies will break parts of the site. Blocking analytics and advertising cookies will not.
12. Mobile Controls
- iOS: Settings โ Privacy & Security โ Tracking โ toggle off “Allow Apps to Request to Track” (App Tracking Transparency); Settings โ Apple Advertising โ Personalised Ads
- Android: Settings โ Google โ Ads โ “Delete advertising ID” or “Opt out of Ads Personalization”
13. Industry Opt-Outs
| Programme | What it does | Where |
|---|---|---|
| Your Online Choices (EU) | European interest-based advertising opt-out | youronlinechoices.com |
| Network Advertising Initiative (NAI) | Opt out of interest-based advertising from participating ad networks | optout.networkadvertising.org |
| Digital Advertising Alliance โ WebChoices | US/Global opt-out of interest-based advertising | optout.aboutads.info |
| DAA AppChoices | Mobile-app interest-based advertising opt-out | youradchoices.com/appchoices |
14. Data Protection Commission (DPC) Oversight
The DPC supervises both the GDPR and the ePrivacy Regulations in Ireland and has published binding guidance on cookies and similar tracking technologies. The DPC’s guidance requires:
- No non-essential cookies set before consent
- Pre-ticked boxes are not valid consent
- Cookie walls (forced consent for access) are not valid consent
- Withdrawal must be as easy as consent
- Lifetimes must be reasonable and proportionate
If you believe we have breached cookie or ePrivacy rules, you have the right under Article 77 GDPR to lodge a complaint with the DPC at dataprotection.ie.
15. Changes to This Policy
We update this policy when our cookie use changes โ for example, if we add or remove a third-party service. The “Last reviewed” date at the top reflects the current version. Significant changes will be flagged on the homepage banner for at least 30 days.
Manage Your Cookie Preferences
The “Cookie settings” link at the bottom of every page reopens the consent banner. You can change your choice at any time, or send a Global Privacy Control signal from your browser.
๐ง Cookie questions