Cookie Policy
Effective date: 2026-04-20
Last updated: 2026-04-20
Version: 3.0
Carsu B.V. ("Carsu", "we", "our") uses cookies and similar technologies — web storage and tracking pixels — on www.carsu.com. This policy covers the public website; cookies inside the authenticated app are described in our Privacy Policy §10.
1. What we use and why
1.1 Strictly necessary (no consent required)
| Provider | Purpose | Duration |
|---|---|---|
| Cloudflare | Bot mitigation and DDoS protection | Up to 1 year |
| Carsu | Consent banner trigger and consent record | 1 day – 12 months |
Legal basis: Art. 5(3) ePrivacy Directive (strictly necessary) and Art. 6(1)(f) GDPR (legitimate interest in site security and consent record-keeping).
1.2 Analytics (consent required)
| Provider | Purpose | Duration |
|---|---|---|
| Google Analytics 4 | Website analytics | Up to 13 months |
| Microsoft Clarity | UX analytics, heatmaps, session replay | Up to 1 year |
1.3 Marketing (consent required)
| Provider | Purpose | Duration |
|---|---|---|
| Meta Pixel | Advertising measurement on Facebook and Instagram | Up to 3 months |
| LinkedIn Insight Tag | Advertising measurement on LinkedIn | Up to 1 year |
Analytics and marketing cookies are set only with your consent (Art. 6(1)(a) GDPR; Art. 5(3) ePrivacy Directive). A named inventory of all cookies is available on request at [email protected].
2. Your consent
On your first visit we show a banner with Accept all, Reject all, and Customise options of equivalent prominence. Before you interact with it, Google Tag Manager runs in Consent Mode v2 default-deny — no analytics or marketing cookies are set. We do not rely on implied consent or continued browsing. We respect the Global Privacy Control (GPC) signal as a withdrawal of consent.
We re-prompt on material updates to this policy and at least every 12 months.
3. Change or withdraw consent
- Reopen the banner from the Cookie preferences link in the footer.
- Clear your browser storage for www.carsu.com.
- Email [email protected].
Withdrawing consent does not affect the lawfulness of prior processing.
4. Browser controls
All modern browsers let you review, block, or delete cookies. Blocking all cookies will prevent the site from functioning correctly. You can also opt out of third-party advertising cookies via youronlinechoices.eu.
5. International transfers
Some providers above (Google, Meta, LinkedIn, Microsoft, Cloudflare) process data outside the EEA. Transfers are protected by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. See our Privacy Policy §9 for sub-processor details and our Schrems II reasoning.
6. Changes
We update this policy when we add, remove, or materially change the cookies we use, and at least annually. Material changes trigger a consent re-prompt.
7. Contact and complaints
Controller: Carsu B.V., Harderwijkerweg 145, 3852 AB Ermelo, The Netherlands (KvK 92122167).
Privacy contact: [email protected]
You can complain to the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or to the data protection authority in your EU country of residence.
Cookie Settings
Click the button to change your saved cookie preferences.