CAGS Cookie Policy
Effective Date: 24 June 2026 | Last Updated: 24 June 2026 | Next Review: June 2027
1. Introduction & Scope
This Cookie Policy explains how CAGS TOBACCO AND TOBACCO PRODUCTS INDUSTRY AND TRADE JOINT STOCK COMPANY ('CAGS', 'we', 'us', or 'our') uses cookies and similar tracking technologies on our website www.cagsgrp.com, and the choices available to you.
We use cookies in accordance with the EU ePrivacy Directive (2002/58/EC), the General Data Protection Regulation (GDPR), the Turkish Law on the Protection of Personal Data (KVKK), and Google's EU User Consent Policy. Non-essential cookies are set only after you have given clear, informed, affirmative consent through our Cookie Consent Banner. This policy should be read together with our Privacy Policy.
2. What Are Cookies & Similar Technologies?
Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They help websites function efficiently, improve the user experience, and provide site owners with information about how their site is used.
Cookies and similar technologies can be classified as follows:
- First-party cookies: Set directly by CAGS via www.cagsgrp.com.
- Third-party cookies: Set by external services embedded on our site (e.g., Google, LinkedIn, YouTube), governed by their own privacy policies.
- Session cookies: Temporary cookies deleted when you close your browser.
- Persistent cookies: Remain on your device for a set period or until you delete them.
- Similar technologies: Pixels/web beacons, software development kits (SDKs), and local/HTML5 storage, which we treat the same way as cookies for consent purposes.
3. Types of Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for our website to function and cannot be disabled. They do not require your consent and enable core functionality such as:
- Session management and user authentication
- Security tokens and fraud prevention
- Load balancing across our servers
- Remembering items in contact/enquiry forms within a session
- Storing your cookie consent preferences
Legal basis: ePrivacy Directive Art. 5(3) exemption; GDPR Art. 6(1)(f) — legitimate interests (essential website operation).
3.2 Analytics & Performance Cookies
These cookies tell us how visitors use our website — which pages are visited, how long visitors stay, and where they came from — so we can improve our site. They are set only with your consent.
- Tool used: Google Analytics 4 (GA4), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
- Data collected: Anonymised IP address, pages visited, session duration, device type, browser, operating system, geographic region, and traffic source.
- Data retention: Up to 14 months (configurable in GA4 settings).
- Consent: Google Consent Mode v2 ensures GA4 does not activate before consent is obtained (see Section 5).
Legal basis: Consent — ePrivacy Directive Art. 5(3) and GDPR Art. 6(1)(a).
- Google Analytics Opt-out: tools.google.com/dlpage/gaoptout
- Google Privacy Policy: policies.google.com/privacy
3.3 Marketing & Preference Cookies
Where used, these cookies deliver relevant content and, where applicable, measure and personalise advertising to business audiences, including tracking interactions across third-party platforms. They are set only with your explicit consent.
- They may collect: browsing behaviour, interests, device identifiers, and ad interaction data.
- Live list: Any third-party marketing tools in use are listed in the live Cookie Declaration on our website.
Legal basis: Consent — ePrivacy Directive Art. 5(3) and GDPR Art. 6(1)(a).
3.4 Third-Party Cookies
Our website may include embedded content or functionality from third-party services (e.g., LinkedIn company page widget, YouTube product videos, social sharing buttons). These third parties may set their own cookies subject to their own privacy policies. CAGS has no control over these cookies.
- LinkedIn: linkedin.com/legal/privacy-policy
- YouTube / Google: policies.google.com/privacy
Legal basis: Consent (where non-essential) — ePrivacy Directive Art. 5(3) and GDPR Art. 6(1)(a).
4. Cookie Declaration
The cookies below are typical of those used on www.cagsgrp.com. The authoritative, always-current list is generated by our Consent Management Platform's cookie scanner and shown in the Cookie Declaration / Cookie Settings on our website. Non-essential cookies are set only after consent.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| cags_consent | CAGS / CMP | Stores cookie consent choices by category | First-party | 6–12 months |
| PHPSESSID | CAGS / GA4 / CMP | Maintains session during your browsing session | First-party | Session |
| Security token | CAGS / security provider | Fraud prevention and bot mitigation | First-party | Session – 1 year |
| _ga | Distinguishes unique visitors (GA4) | First-party | 2 years (default) | |
| _ga_[ID] | GA4 session state | First-party | 2 years (default) | |
| _gcl_au | Conversion linker / ad attribution (if Ads used) | First-party | 90 days | |
| Third-party ad / social | Google / LinkedIn | Remarketing and ad measurement (with consent) | Third-party | Up to 2 years |
5. Google Consent Mode v2 & Consent Management
Because we use Google services (such as Google Analytics 4 and, where applicable, Google Ads), we apply Google Consent Mode v2, which has been mandatory since 6 March 2024 for websites serving users in the European Economic Area (EEA) and the United Kingdom. Consent Mode v2 communicates your choices to Google through four consent signals:
- analytics_storage: whether analytics cookies/storage may be used.
- ad_storage: whether advertising cookies/storage may be used.
- ad_user_data: whether your data may be sent to Google for advertising purposes.
- ad_personalization: whether your data may be used for personalised advertising and remarketing.
How we apply it:
- For EEA and UK visitors, all four signals default to 'denied' until you provide consent. Tags update to 'granted' only when you actively accept the relevant category.
- We obtain and transmit your choices using a Google-certified Consent Management Platform (CMP) integrated with the Google consent API.
- We honour granular consent — for example, you may accept analytics while refusing advertising personalisation.
- From 15 June 2026, for linked Google Analytics and Google Ads accounts, the ad_storage signal is the sole control governing advertising data; Google Signals no longer acts as a fallback.
- Your consent choice is recorded with a timestamp and the version of this policy in effect, and is re-requested after 12 months or upon any material change to this policy.
6. Managing & Withdrawing Your Consent
You can control your cookie preferences at any time. Withdrawing consent is as easy as giving it.
6.1 Cookie Preference Centre
Click the 'Cookie Settings' link in the footer of any page on www.cagsgrp.com to review or change your preferences by category at any time.
6.2 Browser Settings
Most browsers let you block, delete, or restrict cookies. Blocking strictly necessary cookies may affect website functionality.
- Google Chrome: Settings > Privacy & Security > Cookies
- Mozilla Firefox: Settings > Privacy & Security > Cookies
- Safari: Settings > Privacy > Cookies
- Microsoft Edge: Settings > Cookies & Site Permissions
- Opera: Settings > Privacy & Security > Cookies
6.3 Third-Party Opt-Out Tools
- Google Analytics Opt-out Add-on: tools.google.com/dlpage/gaoptout
- Google Ad Settings: adssettings.google.com
- Network Advertising Initiative: optout.networkadvertising.org
- Your Online Choices (EU): www.youronlinechoices.eu
6.4 Do Not Track & Global Privacy Control
Our Cookie Consent Banner is the primary way to manage consent. Where technically supported, we also aim to recognise browser-based signals such as Global Privacy Control (GPC). Because there is no common industry standard for 'Do Not Track' (DNT) browser signals, our website does not respond to DNT headers; please use the controls above instead.
7. What Happens If You Do Not Consent
If you reject non-essential cookies, our website will still work — strictly necessary cookies remain active so you can browse and submit enquiries. Analytics and marketing cookies will not be set, some embedded third-party content may not load, and any advertising measurement will rely only on privacy-preserving, aggregated modelling rather than your individual data.
8. Cookie Retention Periods
- Strictly Necessary cookies: Session duration (deleted when the browser closes), or up to 1 year where required for security.
- Analytics cookies (GA4): Cookie lifetime up to 2 years; associated analytics data retained up to 14 months.
- Marketing / Preference cookies: As specified by the relevant third-party provider, typically 30 days to 2 years.
- Consent record: Your consent choice is stored for up to 12 months, after which consent is re-requested.
We conduct a cookie audit at least annually and update this policy accordingly.
9. International Data Transfers
Some cookie providers, including Google, may process data on servers located outside Turkey and the EEA, such as in the United States. Where this occurs, transfers are protected by appropriate safeguards — primarily Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent measures recognised by the KVKK Board. Further detail is set out in our Privacy Policy.
10. Children's Privacy
Our website is a business-to-business resource and is not directed at individuals under 18. We do not knowingly use cookies to collect data from, or to target advertising to, anyone under the age of 18.
11. Your Data Rights
Where cookies collect personal data, you have rights under the GDPR, KVKK, and other applicable laws — including the rights of access, rectification, erasure, restriction, objection, and to withdraw consent. To exercise these rights, or to raise a concern, see our Privacy Policy or contact us using the details below. You may also lodge a complaint with your data protection supervisory authority.
KVKK Authority: www.kvkk.gov.tr
12. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in the cookies we use, applicable law, supervisory authority guidance, or the requirements of providers such as Google. Material changes will be notified through a prominent notice on our website and, where appropriate, by re-requesting your consent. The 'Last Updated' date at the top of this policy shows when it was last revised.
Related Policies
- Privacy Policy: www.cagsgrp.com/privacypolicy
- Terms & Conditions: www.cagsgrp.com/terms-and-conditions
- CAGS Contact: www.cagsgrp.com/contact
- KVKK Authority: www.kvkk.gov.tr
Contact Us
For any questions about cookies or this policy:
CAGS TOBACCO AND TOBACCO PRODUCTS INDUSTRY AND TRADE JOINT STOCK COMPANY
Fulya Mahallesi, Buyukdere Caddesi, Torun Center A Blok No: 74A, Ic Kapi No: 19, Sisli / Istanbul, Turkey
Email: info@cagstobacco.com
Telephone: +90 212 916 27 27
Website: www.cagsgrp.com