Cookie Policy
What cookies are
A cookie is a small text file that a website asks your browser to store on your device when you visit it. Cookies allow the website to remember information about your visit, such as your language preference or your cookie choices, and may contain a unique identifier that lets the website recognise your browser on a later visit. In this policy, "cookies" also covers similar technologies such as pixels, tags and local storage.
- First-party cookies are set by the website you are visiting (productlifegroup.com).
- Third-party cookies are set by a domain other than the one you are visiting, for example by a provider whose content or service is embedded on our pages.
- Session cookies are deleted when you close your browser.
- Persistent cookies remain on your device until their expiry date or until you delete them.
Legal Basis
Strictly necessary cookies are placed without your consent, as permitted by Article 5(3) of Directive 2002/58/EC (as implemented in Article 82 of the French Data Protection Act), because they are essential to provide the service you request. Any related processing of personal data is based on our legitimate interest in operating a secure and functional website (Article 6(1)(f) GDPR).
All other cookies (performance and targeting cookies) are placed only after you have given your consent through our cookie banner. The related processing is based on your consent (Article 6(1)(a) GDPR). If you refuse or ignore the banner, these cookies are not placed.
You may withdraw your consent at any time (see section 5). Withdrawal does not affect the lawfulness of processing carried out before it.
Categories & Purposes
Strictly necessary cookies are essential for the website to work and for security. They store your cookie choices, maintain access to password-protected pages and protect the site against malicious bot traffic. They cannot be switched off in our cookie settings. You can block them in your browser, but some parts of the site may then not work.
Performance cookies (consent required) help us measure visits, traffic sources and how visitors navigate the site, so that we can improve it. We use Google Analytics and Hotjar for this purpose. These tools assign a pseudonymous identifier to your browser and may record how you interact with our pages (for example clicks, scrolling and page visits). We use the results in aggregated form and do not use them to identify you. [VERIFY: whether Hotjar session recordings and heatmaps are enabled, and whether Google Analytics IP masking/data minimisation settings are configured.]
Targeting cookies (consent required) are used for marketing and advertising:
- Account Engagement (formerly Pardot, Salesforce) tracks the pages you visit on our website. If you submit a form on our site (for example a contact or download request), your browsing activity may be linked to the information you provide, so that we can tailor our communications to your interests. This constitutes profiling for marketing purposes.
- YouTube (Google) videos embedded on our pages may set cookies that Google uses, together with data from other Google services, to show you personalised advertising. [VERIFY: use of privacy-enhanced mode (youtube-nocookie.com) and blocking of embeds before consent.]
- Google Ads / DoubleClick cookies help us measure and deliver advertising. [VERIFY: which Google advertising features are active on the site.]
The profiling described above does not produce legal or similarly significant effects for you.
Managing and withdrawing consent
When you first visit our website, a banner lets you accept all cookies, reject all non-essential cookies, or choose by category. Rejecting is as easy as accepting.
You can change your choices or withdraw your consent at any time by clicking "Cookie Settings" at the bottom of any page of our website. We will ask for your choices again after [6] months, or earlier if the cookies we use change significantly.
You can also block or delete cookies through your browser settings. Note that this does not replace the cookie settings above, and blocking all cookies may prevent some features of the site from working. Information on managing cookies is available from your browser's help pages.
Third parties, recipients and international transfers
The providers below receive data through cookies on our website. Some act as our processors; others (notably Google for YouTube and advertising) may also process data for their own purposes as independent controllers.
| Provider | Service | Category | Transfer outside the EEA | Safeguard | Provider's privacy policy |
|---|---|---|---|---|---|
| OneTrust LLC | Cookie consent management | Strictly necessary | USA | EU-US Data Privacy Framework / SCCs | OneTrust privacy notice |
| Cloudflare, Inc. | Security / bot management | Strictly necessary | USA | EU-US Data Privacy Framework / SCCs | Cloudflare privacy policy |
| Google Ireland Ltd / Google LLC | Google Analytics | Performance | USA | EU-US Data Privacy Framework / SCCs | Google privacy policy |
| Hotjar Ltd | Behaviour analytics | Performance | Limited – data is hosted in the EU (Ireland); some sub-processors may be in the USA | SCCs / EU-US Data Privacy Framework (for sub-processors) | Hotjar privacy policy |
| Salesforce, Inc. | Account Engagement (Pardot) | Targeting | USA | EU-US Data Privacy Framework / BCRs / SCCs | Salesforce privacy statement |
| Google Ireland Ltd / Google LLC | YouTube, Google Ads / DoubleClick | Targeting | USA | EU-US Data Privacy Framework / SCCs | Google privacy policy |
Data collected through cookies may also be accessed by authorised PLG staff and by our website hosting and maintenance providers, bound by confidentiality and data processing agreements.
Retention
Each cookie's lifespan is shown in the tables in section 9. We limit cookies that require consent to a maximum of 13 months, and your cookie choices are stored for [6] months. Data collected through these cookies is kept in the providers' tools for no longer than [14] months, after which it is deleted or anonymised. Session cookies are deleted when you close your browser.
Your rights
Under the GDPR you have the right to access your personal data, have it rectified or erased, restrict its processing, receive it in a portable format and object to its processing, including at any time to processing for direct marketing and related profiling. Where processing is based on consent, you may withdraw it at any time.
To exercise your rights, contact our Data Protection Officer at.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you live or work, or where the alleged infringement occurred. For PLG, the lead authority is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr. In Italy, you can contact the Garante per la protezione dei dati personali, www.garanteprivacy.it.
Cookie list
Strictly necessary cookies
| Cookie | Domain | Type | Lifespan | Provider | Purpose |
|---|---|---|---|---|---|
| OptanonConsent | plglifesciences.com | First party | 6 months | OneTrust | Stores your consent choices for each cookie category, so that cookies you have not accepted are not set. |
| OptanonAlertBoxClosed | plglifesciences.com | First party | 6 months | OneTrust | Records that you have seen and closed the cookie banner, so it is not shown again. |
| __cf_bm | cookiepro.com | Third party | 30 minutes | Cloudflare | Distinguishes human visitors from bots to protect the site against malicious traffic. |
| __cf_bm | plglifesciences.com | First party | 30 minutes | Cloudflare (via HubSpot) | Distinguishes human visitors from bots to protect the site against malicious traffic. |
| Password-protected page cookie (name is unique to each protected page) | plglifesciences.com | First party | Up to 14 days | HubSpot | Keeps you logged in to a password-protected page, so you do not need to re-enter the password on future visits from the same browser. |
Performance cookies (consent required)
| Cookie | Domain | Type | Lifespan | Provider | Purpose |
|---|---|---|---|---|---|
| _ga | plglifesciences.com | First party | 13 months | Google Analytics | Distinguishes unique visitors by assigning a randomly generated client identifier. |
| _ga_6FVTKPR8C5 | plglifesciences.com | First party | 13 months | Google Analytics | Stores and counts page views and session state for Google Analytics 4. |
| _hjSessionUser_5231994 | plglifesciences.com | First party | 365 days | Hotjar | Stores a Hotjar user ID unique to this site, so that later visits are attributed to the same user ID. |
| _hjSession_5231994 | plglifesciences.com | First party | 30 minutes | Hotjar | Holds current session data, so that requests in the same session are attributed to the same Hotjar session. |
| _hjTLDTest | plglifesciences.com | First party | Session | Hotjar | Determines the most generic cookie path to use; removed after the check. |
| _hjCookieTest | script.hotjar.com | Third party | Session | Hotjar | Checks whether the browser accepts cookies. |
Targeting cookies (consent required)
| Cookie | Domain | Type | Lifespan | Provider | Purpose |
|---|---|---|---|---|---|
| visitor_id1088042 | plglifesciences.com, marketing.plglifesciences.com | First party | 13 months | Salesforce Account Engagement (Pardot) | Unique visitor identifier used to track your visits and, if you submit a form, link them to your prospect record. |
| visitor_id1088042-hash | plglifesciences.com, marketing.plglifesciences.com | First party | 13 months | Salesforce Account Engagement (Pardot) | Security hash associated with the visitor identifier. |
| visitor_id773093, visitor_id773093-hash | pardot.com | Third party | 13 months | Salesforce Account Engagement (Pardot) | Visitor identifier and hash used for tracking. |
| pardot | pi.pardot.com, marketing.plglifesciences.com | Third / first party | Session | Salesforce Account Engagement (Pardot) | Identifies an active session on the marketing platform. |
| VISITOR_INFO1_LIVE | youtube.com | Third party | 180 days | Google (YouTube) | Unique identifier used to track viewing of embedded videos and estimate bandwidth. |
| __Secure-YNID, __Secure-ROLLOUT_TOKEN, VISITOR_PRIVACY_METADATA | youtube.com | Third party | 180 days | Google (YouTube) | Store user identifiers, settings and consent state for embedded videos. |
| YSC | youtube.com | Third party | Session | Google (YouTube) | Tracks views of embedded videos within a session. |
| CONSENT | youtube.com | Third party | Up to 2 years | Google (YouTube) | Stores Google's own consent state. |
| __Secure-YEC, TESTCOOKIESENABLED | youtube.com | Third party | Short-lived | Google (YouTube) | Technical checks for embedded video playback. |
| test_cookie | doubleclick.net | Third party | 15 minutes | Google (Ads / DoubleClick) | Checks whether the browser accepts cookies, as a precondition for advertising cookies. |
The lifespans of third-party cookies are set by their providers and may change; see each provider's policy in section 6.
Changes to this policy
We may update this Cookie Policy when the cookies we use or the applicable rules change. The date of the latest update is shown at the top of this page. Where changes require your consent, we will ask for it again through the cookie banner.