Cookies and external services
Updated: 9 September 2026.
Aqua Maritime d.o.o. is the controller for this shop. For privacy questions and exercising your rights, contact aquamaritime@aquamaritime.hr. Full privacy policy.
Necessary cookies provide requested shop functions and respect your choices. You can reject optional analytics, advertising and maps without losing access to browsing or shopping. Scrolling, closing the notice and continued use are not consent.
Open cookie settings — the same link is available next to the copyright on every page. Reject and accept are available in the first layer. In Settings you can save individual purposes or withdraw all optional consent. Withdrawal stops future loading of these services and deletes accessible first-party marketing cookies; it does not affect the lawfulness of earlier processing and is not a deletion request for data already delivered to a provider.
Purposes and recipients
- Google Ads — remarketing and associating visits to the Aqua Maritime shop with advertising. The advertising tag loads only after separate Google Ads consent. Technical data, browser identifiers and visit information are then processed. Form contents are not forwarded through this integration, and automatic enhanced conversions are disabled.
- Meta Pixel — visits and existing selected marketing events measured for advertising. Automatic advanced matching is disabled in this integration.
- Google Maps / Snazzy Maps — shop locations, markers and the filterable shop map. Providers receive network and technical data, including the IP address, and may record map use. They load only with separate Maps permission. Contacts and the location list remain available without an external map.
Google services for EEA users are provided by Google Ireland Limited together with related Google entities; Meta services involve Meta Platforms Ireland Limited and related entities. Snazzy Maps is an additional provider of embedded styled maps. These services may involve processing outside the EEA, including in the United States. Contact us using the details above for information on specific recipients, transfer safeguards and a copy of applicable safeguards. An absence of cookies does not mean an absence of processing.
Google — privacy · Meta — privacy · Snazzy Maps — provider information
Cookie inventory
The table describes this shop’s configuration and cookies. Presence and duration may depend on choices, interactions and browser limits. Browser expiry is not the retention period in an analytics or advertising service.
| Name | Provider / domain | Purpose / basis | Duration | Activation |
|---|---|---|---|---|
| frontend, frontend_cid | This shop (Magento) | Session, cart and session protection; necessary for the requested service. | 1 h | When opening the shop; expiry may be renewed during the session. |
| external_no_cache | This shop (Magento) / .aquamaritime.hr | Technical control of external caching for correct shop display; not an analytics or advertising cookie. | 1 hour from being set; reloading a product renews expiry. | When opening a product page, independently of optional-service choices. |
| store | This shop | Remembering the selected language/store; a user-requested function. | 365 days | When selecting a language/store. |
| ujc_consent | This shop | Signed confirmation of your choices; necessary to respect them. | 31 days from saving | When accepting, rejecting, saving or withdrawing. |
| ujc_consent_block | This shop | Safety block for optional services while a choice is being saved or if saving fails. | Deleted after successful saving; otherwise at most 31 days. | When changing choices. |
| _gcl_au | Google / aquamaritime.hr | Google Ads: advertising and conversion measurement; only with Google Ads consent. | 90 days; the provider may renew expiry. | Only after Google Ads permission. |
| test_cookie | Google / .doubleclick.net | Checking cookie support as part of Google advertising; optional Google Ads purpose, with consent. Not necessary for shop operation. | 15 minutes; Google may delete it earlier after the check. | Only after Google Ads permission, when the advertising tag loads. |
| IDE | Google / .doubleclick.net | Google advertising and ad personalisation according to applicable settings; Google Ads consent. | Observed: 390 days (approximately 13 months). Google states 13 months for the EEA, Switzerland and UK, and 24 months elsewhere; browsers may limit expiry. | Only after Google Ads permission; may be set on reload or a later visit with saved permission. |
| _fbp | Meta / aquamaritime.hr | Meta Pixel: associating visits and selected marketing events with advertising; consent. | 90 days; the provider may renew expiry. | Only after Meta permission. |
| ARRAffinity, ARRAffinitySameSite | snazzymaps.com | Routing the external map connection to its server. Part of the optional map service. | Session | When a Snazzy Maps map loads after permission. |
Ad-click cookies (for example _gcl_aw, _gcl_dc, _fbc) depend on the presence of relevant ad-click data and consent. Click identifiers are forwarded only to the corresponding provider after its separate permission. Old Universal Analytics (_gid, _gat and earlier UA records) and ow_cookie_notice are no longer used for consent or measurement; accessible old records are removed when the page opens.
Other storage and form protection
_gcl_ls (Google Ads), lastExternalReferrer, lastExternalReferrerTime (Meta) — localStorage may retain information used by these tags after the corresponding consent. localStorage does not have a general automatic Expires attribute like a cookie; accessible records are removed on withdrawal of the relevant purpose. ujc_consent_signal is used only for a transient cross-tab notification if the browser does not support BroadcastChannel; it is deleted immediately.
Google reCAPTCHA v2 — protection of contact and other marked forms against automated abuse. Google code loads only on a submission attempt, not on field focus or typing. Loading code, showing a security challenge and Google risk assessment are different actions. Google then receives network and technical data and may use security storage including rc::a and related rc::* entries, and the conditional _GRECAPTCHA cookie (duration depends on activation and the Google response). This is not marketing consent. If you do not wish to use the form, you can contact us by email. Google terms.
Choices and consent evidence
The browser choice lasts 31 days from saving and is not extended by ordinary browsing. A notice-version change or invalid record requires a new choice; optional services remain off until then. Server evidence of acceptance, rejection, changes and withdrawal is retained for up to 365 days. It includes a random pseudonymous choice identifier, time, purposes and their status, action, language and notice version, and a link to the preceding event where a valid earlier record exists. It excludes names, email addresses, full IP addresses and form contents. Historical public texts and configurations are archived separately to reconstruct the notice.
The identifier links browser choices but does not establish the identity of a person. After browser records are deleted, earlier history may no longer be linkable to a new choice. The 31- and 365-day periods are operational periods of this implementation, not universal statutory periods. Evidence is maintained for accountability and demonstrating consent under GDPR Article 7(1). Server security logs and business records are separate processing activities covered by the privacy policy.
For access, rectification, erasure, restriction, portability or objection, where applicable, use the contact above. You can withdraw consent in Settings without providing your identity. You have the right to complain to the Croatian Personal Data Protection Agency (AZOP).
