Concordia catering

Cookie Policy

Effective date: 12 October 2026

1. Introduction and scope

This Cookie Policy explains how Concordia Catering (“Concordia”, “we”, “us” or “our”) uses cookies, pixels, local storage, session storage, scripts, tags and comparable technologies on https://concordiacatering.nl and on the Home Chef webshop integrated into that website.

This Policy is intended to be read together with our Privacy Policy and, where relevant, our General Terms & Conditions. It applies to visitors, customers, prospective customers and other users of the website, including users who browse the website without placing an order.

The term “cookies” is used broadly in this Policy and may include technologies that store information on a device or access information already stored on a device, even where the technology is not technically a browser cookie.

2. Who is responsible

The website is operated by Concordia Catering, Saturnusstraat 95, 2516 AG Den Haag, The Netherlands, KVK 87729628. Questions about cookies or privacy may be sent to bonjour@concordiacatering.nl.

Depending on the technology involved, Concordia may act as controller of personal data and certain service providers may act as processors, independent controllers or joint participants in the technical processing chain. Their own privacy and cookie notices may also apply.

3. Legal framework

Our use of cookies and similar technologies is governed principally by applicable Dutch rules on storing information on, or accessing information from, a user’s terminal equipment and, where personal data are processed, by the General Data Protection Regulation (GDPR/AVG).

Strictly necessary technologies may be used without consent where the applicable legal exception is met. Technologies used for advertising, behavioural tracking or other non-essential tracking are used only on a valid legal basis and, where required, only after consent.

Where we rely on consent, consent must be freely given, specific, informed and unambiguous. Refusing non-essential cookies must not prevent ordinary use of the website.

4. Consent management

Concordia currently uses the Cookiez consent-management platform. The banner is configured as an opt-in banner and is displayed worldwide. The current consent-expiration setting is 180 days.

Visitors can accept all optional categories, refuse optional categories, or customise their preferences. Necessary cookies remain active where they are technically required or legally exempt from consent.

Google Consent Mode is enabled. For visitors in the EEA, including the Netherlands, the website currently sends a default denied state for analytics_storage, ad_storage, ad_user_data, ad_personalization, functionality_storage, security_storage and personalization_storage until the consent state is updated.

A consent record or preference cookie may be stored so that the website can remember the visitor’s choice. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

5. Categories of cookies and similar technologies

Necessary cookies. These are required for security, session management, consent management, shopping-cart and checkout operation, customer authentication, fraud/bot protection and other core website functions.

Functional and preference technologies. These remember choices such as language, selected store state, previously entered checkout details or navigation state.

Analytics and performance technologies. These help us understand how the website and webshop are used, measure performance, identify technical issues and measure aggregated or pseudonymous usage patterns.

Marketing and attribution technologies. These may measure advertising performance, attribute visits or orders to campaigns, store campaign identifiers and support advertising optimisation or remarketing.

Unclassified technologies. If a newly detected technology has not yet been classified, we will investigate and classify it. Non-essential unclassified technologies should not be intentionally activated before the required consent has been obtained.

6. Google Analytics 4 and Google Consent Mode

The website currently contains a Google tag deployed through Site Kit by Google. The active Google tag is GT-MJPX7G7R and the confirmed Google Analytics 4 Measurement ID is G-ZSFZ1FG0ZJ.

Google Analytics 4 may process information such as page and screen views, browser/device information, approximate location derived from network information, referrer/UTM campaign information, ecommerce events and pseudonymous identifiers. The exact set of fields depends on Google’s configuration and the events generated by the website and Ecwid.

The standard GA4 first-party cookies relevant to the current installation are _ga and _ga_ZSFZ1FG0ZJ. Google states that _ga distinguishes users and _ga_<container-id> maintains session state. The default expiry is up to two years, although browsers may impose shorter limits.

For EEA visitors, our current Consent Mode implementation defaults analytics and advertising storage to denied until the relevant consent state is updated. Consent Mode may still send cookieless or limited signals to Google depending on Google’s product design and configuration; these signals remain subject to applicable privacy requirements.

7. Meta Pixel and Conversions API

The website currently contains Meta Pixel ID 2180985699385841 through the official Meta/Facebook WordPress integration. The integration also includes server-side Conversions API functionality.

Meta technologies can be used to measure visits, page views, product views, cart activity, checkout activity and purchases; to attribute conversions to advertising; to build or optimise advertising audiences; and to improve advertising measurement.

The principal browser identifiers relevant to the current integration are _fbp and, where a visitor arrives through a Facebook/Instagram click containing fbclid, _fbc. The current plugin code uses a maximum age of approximately 90 days for these identifiers.

The site also uses wc_facebook_signals_state to record whether the Meta signals integration is in a held or active state. The current plugin code sets this cookie for approximately one year. Session storage may also contain fbpix_seen_event_ids to reduce duplicate event processing during a browser session.

Meta may receive event information through the browser and/or server-side Conversions API. Depending on event configuration, data may include page/event information, transaction values, product identifiers, URL/referrer information, browser identifiers and other matching information permitted by the integration and the user’s consent state.

8. Ecwid Home Chef webshop

The Home Chef webshop is powered by Ecwid. The current store identifier embedded in the website is 142626763. Ecwid uses cookies and browser storage for the cart, checkout, customer account, tax calculations, order results, referrer/UTM attribution, store analytics and related ecommerce functionality.

Some Ecwid technologies are created only after a visitor performs a relevant action, such as adding an item to the cart, entering an email address, logging in, proceeding to checkout, placing an order or arriving with campaign parameters. Therefore not every cookie in the Ecwid register will necessarily be present on every device or every visit.

Ecwid states that its own cookies are not shared with third parties, while certain optional third-party integrations used through or alongside Ecwid may involve separate providers. The detailed Ecwid register appears in Annex B below.

9. Language preference and PHP session cookies

The Polylang integration uses pll_language to remember the selected language. Our Cookiez scan detected this cookie on concordiacatering.nl with an effective lifetime of approximately one year.

The scan also detected PHPSESSID, a general PHP session identifier. It is a session cookie and may be used by server-side components to maintain temporary session state.

10. Cloudflare bot-management cookie

The Cookiez full-site scan detected __cf_bm on Ecwid and Elementor domains. This is a Cloudflare bot-management cookie used to distinguish legitimate traffic from automated or malicious traffic. The observed lifetime was approximately 30 minutes.

Security and bot-management technologies are generally used to protect the availability and integrity of services. Whether a particular Cloudflare cookie is created can depend on which external resource is requested and on Cloudflare’s current configuration.

11. Google Maps and embedded third-party content

The website currently embeds Google Maps content. Loading embedded third-party content may cause the visitor’s browser to connect directly to the third-party provider and may allow that provider to receive technical information such as IP address, device/browser information and the requested page.

Google Maps may use its own cookies or comparable storage depending on the visitor’s browser, Google account state, location, consent state and Google’s current implementation. Because third-party cookie behaviour can change and may be browser-dependent, such provider-side technologies are governed by the provider’s current notices in addition to this Policy.

12. Forms and website interactions

The website uses form plugins and custom forms for enquiries and certain waitlist or contact functions. Submitting a form may transmit the information entered by the visitor to Concordia and to the technical service providers required to deliver the form.

A form submission is not itself a cookie. Where a form provider uses security or session technologies, those technologies are classified according to their actual function and consent requirements.

13. Local storage, session storage and comparable technologies

Some website and webshop functions use browser localStorage or sessionStorage rather than conventional cookies. These technologies can store or retrieve information from the visitor’s device and therefore may fall within the same legal rules that apply to cookies.

Examples currently relevant to this website include Ecwid checkout state and A/B-test state in localStorage and Meta duplicate-event state in sessionStorage. See Annex C.

14. Data processed through cookies

Depending on the technology and the visitor’s choices, data may include cookie identifiers; consent choices; IP address and derived network/location information; device, operating-system and browser characteristics; language; page URL and referrer; date and time; interactions with pages or products; cart and checkout state; transaction/order event data; campaign and UTM parameters; Facebook click identifiers; and technical security information.

We do not intentionally use cookies to collect special-category personal data. Visitors should not enter sensitive information into free-text fields unless it is necessary for the requested service.

15. Purposes of processing

We use cookies and related technologies for purposes that may include: operating and securing the website; remembering cookie choices and language; maintaining cart and checkout state; processing customer account sessions; providing requested webshop functionality; measuring website and ecommerce performance; understanding traffic sources; diagnosing technical issues; preventing abuse; measuring advertising effectiveness; attributing conversions; and, where consent permits, supporting advertising optimisation and remarketing.

16. Third parties and recipients

Depending on the visitor’s choices and the page used, data may be processed by or disclosed to service providers including Google (analytics, tag infrastructure and Maps), Meta Platforms (Pixel, advertising measurement and Conversions API), Ecwid (ecommerce platform) and infrastructure/security providers used by those services, including Cloudflare where applicable.

A provider may process data as our processor, as an independent controller, or under another role determined by the provider’s service terms and applicable law. We do not control a provider’s independent processing outside our website.

For analytics and advertising tracking on the current site, the principal third-party platforms are Google and Meta. Ecwid separately provides the ecommerce platform and related technical storage.

17. International data transfers

Some providers may process data outside the Netherlands or European Economic Area. Where GDPR rules on international transfers apply, transfers must rely on an appropriate transfer mechanism, such as an adequacy decision, approved safeguards, standard contractual clauses or another lawful mechanism, together with supplementary measures where required.

Information about a provider’s transfer arrangements is available in that provider’s privacy documentation and contractual terms.

18. Retention

Cookie lifetimes are listed in the annexes where known. A stated maximum lifetime does not mean that data will always remain on a device for that entire period: users can delete browser storage, browsers can impose shorter limits, providers can change settings, and some identifiers may be refreshed on later visits.

Server-side retention of analytics, advertising or ecommerce records is separate from the lifetime of a browser cookie. Those periods are governed by our Privacy Policy, account configuration and the relevant provider’s settings and legal obligations.

19. How to refuse or withdraw consent

Visitors may refuse non-essential cookies through the cookie banner and may change or withdraw their preferences later through the Cookie Settings / Cookie Preferences mechanism made available on the website.

Withdrawing consent must be as easy as giving consent. Where a preference mechanism is temporarily unavailable, visitors may also delete cookies through browser settings, but browser deletion is not intended to replace the website’s own withdrawal mechanism.

Withdrawal applies prospectively. Some technologies already stored on a device may need to be removed or expire; where technically supported, we will update consent signals to relevant providers.

20. Browser controls and device settings

Most browsers allow users to view, block or delete cookies and site data. Blocking strictly necessary storage may prevent cart, checkout, language, security or account functions from working correctly.

Browser “do not track” or global privacy signals may not be interpreted identically by all providers. Concordia will follow mandatory legal requirements applicable to supported signals.

21. Children

The website and Home Chef store are not directed at children for the purpose of behavioural advertising. We do not intentionally seek consent from children for marketing cookies. If we become aware that non-essential tracking has been associated with a child in circumstances where valid consent was not available, we will take reasonable steps to address the issue.

22. Security

We take reasonable technical and organisational measures appropriate to the nature of the website and the data processed. No internet transmission or browser-storage mechanism can be guaranteed to be completely secure. Security cookies and bot-management tools may be used where necessary to protect the website, the webshop and users.

23. Changes to this Cookie Policy and register

Website technology changes frequently. Providers may introduce, rename or retire cookies, alter storage durations or switch between cookies and local storage. We may update this Policy and its annexes to reflect material changes to the site, providers, consent configuration or law.

The cookie register is intended to reflect the technologies identified by our site scan and the technologies documented for integrations that are actually active on the website. A cookie listed as conditional may only appear after a particular user action or consent choice.

24. Your privacy rights

Where cookie-related information constitutes personal data, users may have rights under the GDPR, including rights of access, rectification, erasure, restriction, objection and data portability where applicable, as well as the right to withdraw consent.

Requests may be sent to bonjour@concordiacatering.nl. We may need to verify identity before acting on a request. Users also have the right to lodge a complaint with the competent supervisory authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) where applicable.

25. Contact

Concordia Catering
Saturnusstraat 95, 2516 AG Den Haag, The Netherlands
KVK: 87729628
Email: bonjour@concordiacatering.nl
Phone: +31 6 26767142
Website: https://concordiacatering.nl

Annex A — Current cookie register

NameDomain/providerCategoryPurposeLifetimeBasis
cookiez-user-consentconcordiacatering.nlNecessaryStores the visitor’s cookie-consent choices used by Cookiez.180 daysCookiez configuration / consent mechanism
PHPSESSIDconcordiacatering.nlFunctionalGeneral PHP session identifier used to maintain session state where required by site functionality.SessionObserved by Cookiez scan
pll_languageconcordiacatering.nlFunctionalRemembers the visitor’s selected website language.Approx. 365 daysObserved by Cookiez scan
wc_facebook_signals_stateconcordiacatering.nlNecessary / consent stateStores whether the Meta/Facebook signals integration is held or active.365 daysCurrent official Meta Pixel plugin code
_fbpconcordiacatering.nlMarketingMeta Pixel browser identifier used for advertising measurement, attribution and delivery/optimisation of advertising.90 daysObserved by Cookiez scan; Meta integration
_fbcconcordiacatering.nlMarketingStores Facebook click identifier when a visitor arrives through a URL containing fbclid; used for attribution.90 daysConditional; current Meta plugin code
_gaconcordiacatering.nlAnalyticsGoogle Analytics 4 first-party identifier used to distinguish users.Up to 2 years by default, subject to browser limitsCurrent GA4 integration
_ga_ZSFZ1FG0ZJconcordiacatering.nlAnalyticsGoogle Analytics 4 cookie used to maintain session state for Measurement ID G-ZSFZ1FG0ZJ.Up to 2 years by default, subject to browser limitsCurrent GA4 integration
__cf_bmecwid.com / .ecwid.comFunctional / securityCloudflare bot-management cookie used by Ecwid infrastructure to distinguish legitimate traffic from automated traffic.Approx. 30 minutesObserved by Cookiez scan
__cf_bmelementor.com / .elementor.comFunctional / securityCloudflare bot-management cookie encountered in connection with Elementor infrastructure.Approx. 30 minutesObserved by Cookiez scan

Annex B — Ecwid storefront cookie register

NameProvider/contextCategoryPurposeLifetime
PSecwid__142626763__emailPSemailEcwid storefrontPersonalisationStores an email address entered on the cart page.180 days
PSecwid__142626763__emailPSemail_expireEcwid storefrontPersonalisationStores expiry information for the cart email value.180 days
PSecwid__document__referrerPSreferrerEcwid storefrontPersonalisation / attributionStores the HTTP referrer used by the storefront.90 days
PSecwid__document__referrerPSreferrer_expireEcwid storefrontPersonalisation / attributionStores expiry information for the referrer value.90 days
PSecwid__142626763PScartEcwid storefrontNecessaryStores representation of shopping-cart contents.365 days
PSecwid__142626763PScart_expireEcwid storefrontNecessaryStores expiry information for shopping-cart contents.365 days
PSecwid__142626763PScustomeridEcwid storefrontNecessaryStores the internal identifier of a logged-in customer.365 days
PSecwid__142626763PScustomerid_expireEcwid storefrontNecessaryStores expiry information for the customer identifier.365 days
PSecwid__142626763PStokenEcwid storefrontNecessaryStores customer ID/authentication token for customer account functionality.365 days
PSecwid__142626763PStoken_expireEcwid storefrontNecessaryStores expiry information for the customer authentication token.365 days
PSecwid__142626763PSfavorites_expireEcwid storefrontNecessaryStores expiry information for the favourites list where that feature is used.365 days
PSecwid__142626763PStaxSettingsEcwid storefrontNecessaryStores the store tax-settings representation used by checkout.365 days
PSecwid__142626763PStaxSettings_expireEcwid storefrontNecessaryStores expiry information for tax settings.365 days
PSorder__result__142626763PSorderResultEcwid storefrontNecessaryStores information about the last placed order needed for post-checkout functionality.12 hours
PSecwid__shopping__cart__controller__storagePSlastPlaceEcwid storefrontPersonalisationStores the last visited category/location used for “continue shopping”.180 days
PSecwid__shopping__cart__controller__storagePSlastPlace_expireEcwid storefrontPersonalisationStores expiry information for the last shopping location.180 days
PSecwid__142626763__taxIdPStaxIdEcwid storefrontPersonalisationStores a tax/VAT ID entered during checkout when applicable.180 days
PSecwid__142626763__taxIdPStaxId_expireEcwid storefrontPersonalisationStores expiry information for the tax/VAT ID.180 days
ec-142626763-sessionEcwid storefrontNecessaryStores an internal user/session identifier for active cart and checkout.90 days
ec-142626763-checkoutEcwid storefront / localStorageNecessaryStores current checkout identifier and number of items in the cart.Persistent; no fixed limit stated by Ecwid
PSecwid__utm__storagePSutm__dataEcwid storefrontMarketing / attributionStores UTM attribution information used for merchant analytics.90 days
PSecwid__utm__storagePSutm__data_expireEcwid storefrontMarketing / attributionStores expiry information for UTM attribution data.90 days
__eca_s_id_Ecwid storefrontMarketing / analyticsEcwid analytics session identifier.30 minutes
__eca_v_id_Ecwid storefrontMarketing / analyticsEcwid analytics visitor identifier.365 days
PSdispatcher__content__idsPS{product_id}Ecwid storefrontNecessaryState used for merchant custom tracking code for product/content events.12 hours
PSdispatcher__content__idsPS{product_id}_expireEcwid storefrontNecessaryExpiry state for the product/content dispatcher value.12 hours
PSdispatcher__placed__ordersPS{order_id}Ecwid storefrontNecessaryState used for merchant custom tracking code for order events.12 hours
PSdispatcher__placed__ordersPS{order_id}_expireEcwid storefrontNecessaryExpiry state for the order dispatcher value.12 hours
PSecwid__142626763__tax__informationPStax__informationEcwid storefrontPersonalisationStores customer tax information where relevant to checkout.365 days
PSecwid__142626763__tax__informationPStax__information_expireEcwid storefrontPersonalisationStores expiry information for customer tax information.365 days
ec_storefront_ab_testEcwid storefront / localStorageNecessary / service optimisationStores Ecwid storefront A/B-test assignment where used.Persistent; no fixed limit stated by Ecwid
_dd_sEcwid / DatadogAnalytics / performanceGroups events generated during a user session for performance monitoring.Extended by activity, up to 4 hours

Annex C — Non-cookie browser storage

NameStorageProviderPurposeLifetime
fbpix_seen_event_idssessionStorageMeta Pixel integrationStores event IDs already processed in the current browser session to reduce duplicate event processing.Browser session
ec-142626763-checkoutlocalStorageEcwidCurrent checkout identifier and item count.Persistent
ec_storefront_ab_testlocalStorageEcwidStorefront A/B-test allocation, where used.Persistent

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy Cookie Policy