Privacy Statement, GDPR FAQs & Cookies - JCC Payment Systems Ltd

Privacy Statement

This Privacy Statement aims to give you information on how JCC Payments Systems Ltd collects, uses, discloses and processes your personal data through your use of the JCC Payment Systems Ltd Website (www.jcc.com.cy) and the means by which this is done. The Privacy Statement is a means of notifying the website visitors of their rights in accordance with local law and the EU General Data Protection Regulation (EU) 2016/679.

JCC Payment Systems Ltd is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience.

This Privacy Statement applies to the JCC Payment Systems Ltd Website (www.jcc.com.cy) and governs data collection and usage. By accessing, browsing and/or using this Website, you consent to the data practices described in this Privacy Statement and acknowledge that you have read, understood, and agree, to be bound by the terms conditions, and notices contained herein and to comply with all applicable laws and regulations.

For the purposes of this Privacy Statement “Personal Data” refers to all data which relates to a living individual who can be identified from such data such as for instance, name, address and/or identification number. It does not include data where the identity has been removed (anonymous data).

About JCC Payment Systems Ltd

JCC Payment Systems Limited is a limited liability company organised and existing under the laws of Cyprus with registration number HE29914 having its registered office address at 1 Stadiou Street, 2571 Industrial Area Nisou, 1500 Nicosia which is primarily engaged in the business of card-processing and acquiring.

JCC Payment Systems Ltd (referred to as ‘we’, ‘us’, ‘our’, ‘JCC Payment Systems’ or the ‘JCC’) is committed to protecting your privacy and handling your data in an open and transparent manner. The personal data that we collect and process depends on the service requested and must be agreed in each case.

This Privacy Statement:

Provides an overview of how JCC collects and processes your personal data and informs you of your rights under local data protection law and the EU General Data Protection Regulation (‘GDPR’);
Is directed to natural persons who are either current or potential customers of JCC, or are authorised representatives/agents or beneficial owners of legal entities or of natural persons which/who are current or potential customers of JCC;
Is directed to natural persons who had such a business relationship with JCC in the past,
Contains information about when we share your personal data with other third parties (for example, our service providers or suppliers).

In this privacy statement, your data is sometimes called “personal data” or “personal information”. We may also sometimes collectively refer to handling, collecting, protecting, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing or destructing your personal data or any such action as “processing” such personal data.

For the purposes of this statement, personal data shall mean any information relating to you which identifies or may identify you and which includes, for example, your name, address, identification number.

1. Who we are

JCC Payment Systems Ltd is a licensed payment institution registered in Cyprus under registration number HE29914 as a private limited liability company having its registered office and head offices at 1 Stadiou Street, 2571 Industrial Area Nisou, P.O. Box 21043, 1500 Nicosia, Cyprus.

If you have any questions, or want more details about how we use your personal information, you can contact our Data Protection Officer at 1 Stadiou Street, 2571 Industrial Area Nisou, P.O.Box 21043, 1500 Nicosia, Cyprus, email: dpo@jcc.com.cy.

2. How we collect and process personal data

We collect and process different types of personal data which we receive from our customers (potential and current) in person or via their representative or via our alternative channels of communication such as JCCsmart or the JCC Website, in the context of our business relationship.

We may also collect and process personal data which we lawfully obtain not only from you but from other entities, or other third parties e.g. credit reference agencies, public authorities and companies that introduce you to us.

We may also collect and process personal data from publicly available sources (e.g. the Department of Registrar of Companies and Official Receiver, the Bankruptcy Archive, commercial registers, the press, media and the Internet) which we lawfully obtain and we are permitted to process.

If you are a prospective customer, or an authorised representative/agent or beneficial owner of a legal entity or of a natural person which/who is a prospective customer, the relevant personal data which we collect may include:

Name, address, contact details (telephone, email), identification data, EU basic payment account identification, birth date, place of birth (city and country), if you hold/held a prominent public function (for PEPs), FATCA, authentication data [g. signature], nationality, business and/or home address, etc.

When we agree to provide services to you or the legal entity you represent, or beneficially own, then additional personal data will be collected and processed which may include, in the context of providing card acquiring and other services:

Current income and expenses, employment history, other banking relationship details, tax ID, credit reference agency data [e.g. , Lexis Nexis], residence or work permit in case of non-EU nationals, individual and/or third party security [e.g. a bank guarantee], employment position [e.g. as per corporate certificates of directors/shareholders], cash flows and balance sheets and business management information.

3. Children’s data

We understand the importance of protecting children’s privacy. We do not collect the personal data of children if we have not first obtained their parents’ or legal guardians’ consent or unless otherwise permitted under law. We do not provide any services to children. For the purposes of this privacy statement, “children” are individuals who are under the age of eighteen (18).

4. Whether you have an obligation to provide us with your personal data

In order that we may be in a position to proceed with a business relationship with you, you must provide the personal data necessary for the required commencement and execution of a business relationship and the performance of our contractual obligations. We are furthermore obligated to collect such personal data given the provisions of the money laundering law which require that we verify your identity before we enter into a contract or a business relationship with you or the legal entity for which you are the authorised representative / agent or beneficial owner. You must, therefore, provide us at least with your identity card/passport, your full name, place of birth (city and country), and your residential address so that we may comply with our statutory obligation as mentioned above.

Kindly note that if you do not provide us with the required data, then we will not be allowed to commence or continue our business relationship with you either as an individual or as the authorised representative/agent or beneficial owner of a legal entity.

5. Why we process your personal data and on what legal basis

As mentioned earlier we are committed to protecting your privacy and handling your data in an open and transparent manner and as such we process your personal data in accordance with the GDPR and the local data protection law for one or more of the following reasons:

A. For the performance of a contract

We process personal data in order to perform card payment transactions and offer payment services based on contracts with our customers but also to be able to complete our acceptance procedure so as to enter into a contract with prospective customers.

The purpose of processing personal data depends on the requirements for each product or service and the contract terms and conditions provide more details of the relevant purposes.

B. For compliance with a legal obligation

There are a number of legal obligations emanating from the relevant laws to which we are subject as well as statutory requirements, e.g. Cyprus law, the Money Laundering Law, Resolution of Credit and Other Institutions Scheme, Payments Law. There are also various supervisory authorities whose laws and regulations we are subject to e.g. the European Central Bank, the European Banking Supervisory Authority, the Cyprus Central Bank and the International Card Scheme rules and regulations. Such obligations and requirements impose on us necessary personal data processing activities for credit checks, identity verification, compliance with court orders, tax law or other reporting obligations and anti-money laundering controls.

C. For the purposes of safeguarding legitimate interests

We process personal data so as to safeguard the legitimate interests pursued by us or by a third party. A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. Examples of such processing activities include:

Initiating legal claims and preparing our defence in litigation procedures;
Means and processes we undertake to provide for JCC’s IT and system security to prevent potential crime, such as asset security, admittance controls and anti-trespassing measures;
Setting up CCTV systems, g. at JCC ATMs, for the prevention of crime or fraud;
Measures to manage business and for further developing products and services;
Sharing your personal data with third parties for the purpose of updating/verifying your personal data in accordance with the relevant anti-money laundering compliance framework.

D.You have provided your consent

Provided that you have given us your specific consent for processing (other than for the reasons set out hereinabove) then the lawfulness of such processing is based on that consent. You have the right to revoke consent at any time. However, any processing of personal data prior to the receipt of your revocation will not be affected.

6. Who receives your personal data

In the course of the performance of our contractual and statutory obligations your personal data may be provided to various departments within JCC. Various service providers and suppliers (sub-processors) may also receive your personal data so that we may perform our obligations. Such service providers and suppliers enter into contractual agreements with JCC by which they observe confidentiality and data protection according to the data protection law and GDPR. The list of these sub-processors can be found on our website at www.jcc.com.cy.

It must be noted that we may disclose data about you for any of the reasons set out hereinabove, or if we are legally required to do so, or if we are authorised under our contractual and statutory obligations or if you have given your consent. All data processors appointed by us to process personal data on our behalf are bound by contract to comply with the GDPR provisions.

Under the circumstances referred to above, recipients of personal data may be:

Supervisory and other regulatory and public authorities, in as much as a statutory obligation exists. Some examples are the Central Bank of Cyprus, the European Central Bank, the VAT and the income tax authorities, criminal prosecution authorities;
Credit and financial institutions such as the merchant’s bank;
For our anti-money laundering process, such as credit reference agencies;
External legal consultants;
Financial and business advisors;
Auditors and accountants;
Marketing operations;
International Card Schemes such Visa, Mastercard, Diners, etc.;
Fraud prevention agencies;
File storage companies, archiving and/or records management companies, cloud storage companies;
Companies who assist us with the effective provision of our services to you by offering technological expertise, solutions and support and facilitating payments;
Purchasing and procurement and website and advertising agencies.

7. Transfer of your personal data to a third country or to an international organisation

Your personal data may be transferred to third countries (i.e. countries outside of the European Economic Area) in order to execute your payment or if such a data transfer is required by law or you have given us your consent to do so. Processors in third countries are obligated to comply with the European data protection standards and to provide appropriate safeguards in relation to the transfer of your data in accordance with GDPR.

8. To what extent there is automated decision-making and whether profiling takes place

In establishing and carrying out a business relationship, we generally do not use any automated decision-making. We may process some of your data automatically, with the goal of assessing certain personal aspects (profiling), in order to enter into or perform a contract with you, in the following cases:

Data assessments (including on payment transactions) are carried out in the context of combating money laundering and fraud. It may be detected that an account is being used in a way that is unusual for you or your business. These measures may also serve to protect you.
Credit scoring is used as part of the assessment of your creditworthiness. This calculates whether you or your business will be able to meet any future payment obligations pursuant to a contract. This helps us make responsible financial security decisions that are fair and informed.

9. How we treat your personal data for marketing activities and whether profiling is used for such activities

We may process your personal data to tell you about products, services and offers that may be of interest to you or your business. Your consent is required in such cases.

The personal data that we process for this purpose consists of information you provide to us and data we collect and/or infer when you use our services, such as information on your transactions. We study all such information to form a view on what we think you may need or what may interest you. In some cases, profiling is used, i.e. we process your data automatically with the aim of evaluating certain personal preferences in order to provide you with targeted marketing information on products.

We can only use your personal data to promote our products and services to you if we have your explicit consent to do so or, in certain cases, if we consider that it is in our legitimate interest to do so.

You have the right to object at any time to the processing of your personal data for marketing purposes, which includes profiling, by contacting at any time JCC in person or in writing.

10. How long we keep your personal information for

We will keep your personal data for as long as we have a business relationship with you (as an individual or in respect of our dealings with a legal entity you are authorised to represent or of which you are the beneficial owner).

Once our business relationship with you has ended, we may keep your data for up to ten (10) years in accordance with the directive of the Data Protection Commissioner (http://www.dataprotection.gov.cy).

We may keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons.

For prospective customer personal data (or authorised representatives/agents or beneficial owners of a legal entity), we shall keep your personal data maximum for 3 years from the date of notification of the rejection of your application for card acquiring services and/or facilities or from the date of withdrawal of such application, as per Data Protection Commissioner directive (http://www.dataprotection.gov.cy).

11. Your data protection rights

You have the following rights in terms of your personal data we hold about you:

Access to your personal data. This enables you to e.g. receive a copy of the personal data we hold about you and to check that we are lawfully processing it. In order to receive such a copy, you can contact us at the email: dpo@jcc.com.cy.
Request correction [rectification] of the personal data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to erase your personal data [known as the ‘right to be forgotten’] where there is no good reason for us continuing to process it.
Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
You also have the right to object to where we are processing your personal data for direct marketing purposes. This also includes profiling inasmuch as it is related to direct marketing. Please note that we will do so only if you have provided your consent. If you object to us processing your data for direct marketing purposes, then we shall stop the processing of your personal data for such purposes.
Request the restriction of processing of your personal data. This enables you to ask us to restrict the processing of your personal data, i.e. use it only for certain things, if:
- It is not accurate;
- It has been used unlawfully but you do not wish for us to delete it;
- It is not relevant any more, but you want us to keep it for use in possible legal claims;
- You have already asked us to stop using your personal data but you are waiting us to confirm if we have legitimate grounds to use your data.
Request to receive a copy of the personal data concerning you in a format that is structured and commonly used and transmit such data to other organisations. You also have the right to have your personal data transmitted directly by us to other organisations you will name [known as the right to data portability].
Withdraw the consent that you gave us with regard to the processing of your personal data at any time. Note that any withdrawal of consent shall not affect the lawfulness of processing based on consent before it was withdrawn or revoked by you.

To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact our Data Protection Officer at the email: dpo@jcc.com.cy. We endeavour to address all of your requests promptly.

Right to lodge a complaint

If you have exercised any or all of your data protection rights and still feel that your concerns about how we use your personal data have not been adequately addressed by us, you have the right to complain by sending an email to our Data Protection Officer at email: dpo@jcc.com.cy. You also have the right to complain to the Office of the Commissioner for Personal Data Protection. Find out on their website how to submit a complaint (http://www.dataprotection.gov.cy).

12. Changes to this privacy statement

We may modify or amend this privacy statement from time to time.

We will notify you appropriately when we make changes to this privacy statement and we will amend the revision date at the top of this page. We do however encourage you to review this statement periodically so as to be always informed about how we are processing and protecting your personal information.

13. Frequently asked questions

To help you understand the basic principles of data privacy law and address some of the common questions that arise with regard to the protection of your personal data, please refer to the Frequently Asked Questions (FAQs) here.

What is the GDPR?

GDPR stands for the General Data Protection Regulation (Regulation (EU) 2016/679). The new European Union Regulation is set to replace the current Data Protection Directive (95/46/EC) as well as the Cyprus Data Protection Law of 2001, and amendments of 2003. The aim of the GDPR is to ease and safeguard the flow of personal data across the 28 EU Member States. Being an EU Regulation, it is directly applicable to each Member State’s national law.

When did the GDPR go into effect?

The GDPR was approved by the EU Parliament on April 14th 2016 and went into effect on May 25th 2018.

Who does the GDPR affect?

The new legal framework mainly affects businesses offering goods or services or monitoring EU-based individuals, whether they are customers, potential clients, contractors or employees. It also affects any businesses located outside the EU that holds or processes the personal data of individuals residing within the EU.

What do we mean by personal data and special categories of personal data?

Personal data is any information relating to an individual, whether it relates to their private, professional or public life. It can be a name, an address, a telephone number, an email address, bank details, an IP address, or a combination of them.
Special categories of personal data, also known as sensitive personal data, which uniquely identify a person, are classified in the GDPR as sensitive data, like genetic and biometric information. Sensitive data is strictly regulated and needs explicit consent to collect.

What does processing mean?

Processing means anything that is done to, or with, personal data (including collecting, storing or deleting that data). This definition is significant because it clarifies that the EU data protection law is likely to apply wherever an organisation does anything that involves or affects personal data.

What are the key principles that each business should follow when processing personal data?

Personal data should be processed lawfully, fairly and in a transparent way, and should only be collected and used for specific purposes.
Personal data should be accurate and updated at regular intervals.
Personal data should not be kept for longer than necessary, and should be processed in a manner that safeguards its security.

What is the difference between a data processor and a data controller?

A controller is the entity that determines the purposes, conditions and means of the processing of personal data. The controller is the one who collects the data from the data subject. The processor is an entity which processes personal data on behalf or upon the request of the controller. However, if you are a controller, the GDPR places further obligations on you to ensure your contracts with processors comply with the GDPR. For example, JCC is a controller, while JCC’s external vendors (e.g. POS vendor companies) are processors.

What rights will individuals have under GDPR??

One of the key ways the GDPR affects all organisations is the new extended set of rights granted to individuals, as outlined below:

Right to be informed: Organisations need to be clear and transparent about how they use personal data. These stances are typically addressed by an organisation’s privacy statement.
Right of access: Individuals are entitled to know what information is held about them and how it’s processed. They should have unlimited access to this information.
Right of rectification: Individuals are entitled to have their personal data corrected in case any of it is inaccurate or incomplete.
Right to erasure (also known as the right to be forgotten): Individuals have the right to request the removal of personal data where there is no compelling reason for it to be available.
Right to restrict processing: Individuals have the right to request to block or suppress processing of their personal data. However, this may be declined by the organisation on a number of grounds.
Right to data portability: The right to data portability allows individuals to receive a copy of their personal data and transfer them from one IT environment to another safely and securely.
Right to object: Individuals have the right to object to the use of their personal information in certain circumstances.
Right to not be subject to automated decision making: In specific circumstances, individuals have the right not to be the subject of a decision which has a legal bearing on them or is based on automated processing. However, this may be declined by JCC on a number of grounds.
Right to lodge a complaint: If individuals have exercised any or all of their data protection rights and still feel that their concerns about how the organisation uses their personal data have not been adequately addressed by the organisation, they have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection at http://www.dataprotection.gov.cy. Users can also address their data protection concerns through JCC by submitting a complaint to this email address: dpo@jcc.com.cy

What are the penalties in case of non- compliance?

For infringements of information and communication transparency or data processing, organisations could be fined up to €10 million or 2% of their global turnover, whichever is higher. For infringements of data processing, consent, data subject rights and actual data breaches, organisations could be fined up to €20 million or 4% of their global turnover, whichever is higher.

What is a Privacy statement?

If an organisation holds information on individuals, they must provide a detailed explanation about what information they hold, how their data is processed and where it is kept. This can be done through a privacy statement, which should be made publicly available. The GDPR further states that this statement should be clear, easy to access and free of charge.

If you have any questions, or want more details about how we use your personal information, you can contact our Data Protection Officer at 1 Stadiou Street, 2571 Industrial Area Nisou, P.O.Box 21043, 1500 Nicosia, Cyprus, email: dpo@jcc.com.cy.

What are the lawful bases of processing and when is consent required?

Any processing of personal data must be lawful, fair and transparent to data subjects, while any information and communication regarding personal data should be easily accessible and easy to understand. An organisation can lawfully process personal data only when:

They have obtained direct consent from the individual or the data subject to process their personal data.
Processing personal data is necessary to enter into a contract or is a matter of life and death
Processing personal data by public authorities and organisations is in the scope of public duties and interest
An organisation is legally obliged to process personal data [ e.g. for compliance with anti-money laundering regulations] or has a compelling justification for processing and using personal data. When there is a compelling justification, data must be used in a reasonable way and organisations must prepare and file a legitimate interests assessment.

When can personal data be transferred outside of the EU?

There are specific restrictions on the transfer of personal data outside the EU, or to other countries or international organisations. These are imposed for the protection of individuals and their personal data as laid out by the GDPR. All such transfers require the approval of the Commissioner for Personal Data Protection. The transfer of personal data outside the EU is only allowed if the following conditions are met:

The European Commission has verified that a third country or an international organisation can provide an adequate level of personal data protection.
There are model contracts in place based on agreements on transfers made between organisations within a group. These are called standard data protection clauses or binding corporate rules.
An approved certification mechanism applies, e.g. EU-US Privacy Shield.

In addition, a transfer may be made where the individual has provided specific consent, it is necessary for the performance of a contract between the individual and the organisation if:

It is necessary because it is in the public’s interest.
It is necessary for the establishment, exercise or defence of legal claims.
It is necessary to protect the vital interests of the data subject or other persons.

Does my company need to appoint a Data Protection Officer (DPO)?

Organisations are required to appoint a Data Protection Officer (DPO) if its main activities involve the processing of personal data on a large scale and/or involve continuous monitoring of personal data. The DPO can be an employee of the organization only if his duties do not conflict with his role as a DPO. Otherwise, the DPO must be outsourced.

What are the DPO’s responsibilities under GDPR?

The responsibilities of the DPO, as defined by Article 39, are as follows:

Το inform and advise the organisation and staff about their obligations under the GDPR
Το monitor the controller or processor’s compliance with the GDPR
Το advise on data protection impact assessments and monitor their performance and to cooperate and liaise with the supervisory authority on data processing-related issues.

What are the security rule under the GDPR?

The GDPR safeguards personal data by ensuring it is processed in a manner that ensures its security, including protection against unauthorised or unlawful processing, as well as against accidental loss, destruction or damage. Organisations should have appropriate technical or organisational measures in place to prevent personal data leaks or unlawful processing.

Useful links:
For further reference regarding GDPR legislation, please refer to the General Data Protection Regulation.

Cookies Policy

This Cookie Policy provides you with clear and comprehensive information about the cookies we use and the purposes of using them.

What are cookies?

Cookies are small text files which are commonly downloaded to your computer or handheld device, whenever you visit a website. Cookies enable the websites using such tools, to recognize a user’s device and ‘remember’ the user’s actions and preferences over time.

Cookies are used to provide visitors access to various functions. The information in the cookie can be used to track your internet usage. Under the Electronic Communications Act, all visitors to a website with cookies must have access to information stating that the website contains cookies and the purpose for which cookies are used.

What cookies do we use?

Our website, use cookies to distinguish you from other users of our internet services. This helps us to provide you with a good experience when you browse our website and also allows us to improve our services. By continuing to browse our website you are agreeing to our use of cookies.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Cookie Name	Description
JSESSIONID	This is a generic cookie used to manage your website session and navigation steps.
PHPSESSID	To identify your unique session on the website
__atuvc	This cookie is set by AddThis social sharing widget. It stores an updated page share count. How to opt out (https://www.addthis.com/privacy/opt-out/)
__atuvs	This cookie is set by AddThis social and is commonly embedded in websites to enable visitors to share content with a range of networking and sharing platforms. How to opt out (https://www.addthis.com/privacy/opt-out/)
__utma	This cookie is set by Google Analytics.This cookie keeps track of the number of times a visitor has been to the site pertaining to the cookie, when their first visit was, and when their last visit occurred. Google Analytics uses the information from this cookie to calculate things like Days and Visits to purchase.
__utmb	This cookie is set by Google Analytics.__utmb is a Google Analytics cookie. It takes a timestamp of the exact moment in time when a visitor enters a site.
__utmc	This cookie is set by Google Analytics.__utmc takes a timestamp of the exact moment in time when a visitor leaves a site.
__utmt	This cookie is set by Google Analytics. It is used to throttle the request rate for the service – limiting the collection of data on high traffic sites.
__utmz	This cookie is set by Google Analytics.Keeps track of where the visitor came from, what search engine you used, what link you clicked on, what keyword you used, and where they were in the world when you accessed a website. This cookie is how Google Analytics knows to whom and to what source / medium / keyword to assign the credit for a Goal Conversion or an Ecommerce Transaction.
acceptCookies	This cookie sets your acceptance of cookies to true or false.
bcookie	Used by the social networking service, LinkedIn, for tracking the use of embedded services.
bscookie	Used by the social networking service, LinkedIn, for tracking the use of embedded services.
lang	Used by the social networking service, LinkedIn, for tracking the use of embedded services.
lidc	Used by the social networking service, LinkedIn, for tracking the use of embedded services.
loc	This cookie is set by AddThis social sharing widget to detect visitor location when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)
mus	This cookie is set by AddThis social sharing widget to store profile status when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)
na_id	This cookie is set by AddThis social sharing widget to count unique visitors when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)
ouid	This cookie is set by AddThis social sharing widget to count unique visitors when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)
uid	This cookie is set by AddThis social sharing widget to count unique visitors when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)
uvc	This cookie is set by AddThis social sharing widget to count unique visitors when providing sharing buttons on the website. How to opt out (https://www.addthis.com/privacy/opt-out/)

How to Avoid Cookies

If you would prefer to reject cookies, change the settings in your web browser so that you either automatically refuse the downloading of cookies or are prompted each time a website requests to save a cookie. Cookies that have been previously downloaded can also be deleted through your web browser. For more information about rejecting cookies, read your web browser’s documentation.

Cookie	Duration	Description
cookielawinfo-checbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
LB_Cookie	End of session	Security cookie Cookie used for server high availability. This cookie is deleted when the user closes the browser.
PHPSESSID	End of session	To identify your unique session on the website.
TSxxxxxxxx_xx	End of session	Security cookie Performs domain cookie validation, detects session expiration, and validates integrity of cookies. This cookie is deleted when the user closes the browser.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Cookie	Duration	Description
__utmb	30 min	Google analytics Used to determine new sessions/visits. This cookie is deleted 30 minutes after the initial visit to the website.
__utmc	End of session	Google analytics Used to determine new sessions/visits. This cookie is deleted when the user closes the browser.
__utmt	End of session
__utmz	6 months	Google analytics Stores the traffic source or campaign that explains how the user reached your site. This cookie is deleted 6 months after the initial visit to the website.
_utma	2 years	Google analytics Used to distinguish users and sessions. This cookie is deleted 2 years after the initial visit to the website.