Effective from: September 2026
This Cookie Policy sets forth the principles and practices governing the use of cookies and analogous tracking technologies by Cardway Technologies OÜ (“Cardway Tech”, “we”, “our”, or “us”) in connection with your interaction with the website https://carteza.com (the “Site”). This Policy is intended to provide all visitors and users (“you”, “your”, or “User”) with clear and transparent information regarding the nature, purpose, and management of cookies and similar technologies deployed through our Site, in full compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Directive 2002/58/EC (“ePrivacy Directive”), and all applicable data protection laws.
We may periodically update this policy. Changes take effect upon publication of the new version on our website. We recommend reviewing this section regularly.
Non-essential cookies are only activated after you have given explicit consent via our cookie banner. You can manage or withdraw your consent at any time through the Cookie Settings link at the bottom of each page.
Cookies are small text files that are placed on your device—such as a computer, smartphone, or tablet—when you access our Site. Their primary function is to enable the Site to recognize your device and to store information relating to your preferences or previous interactions. Cookies may be classified as either “session cookies,” which are temporary and expire once you close your browser, or “persistent cookies,” which remain on your device for a defined period or until deleted.
In addition to cookies, Cardway Tech may utilize related technologies such as pixel tags, web beacons, and local storage objects. These technologies serve comparable purposes, including the facilitation of certain Site features, enhancement of user experience, and collection of analytical data.
Cardway Tech employs a range of cookies and tracking technologies, each serving a specific and legitimate function:
Strictly necessary cookies are deployed without consent on the basis of the exemption provided under Article 5(3) of Directive 2002/58/EC (ePrivacy Directive): such cookies are strictly necessary in order to provide the information society service explicitly requested by the user. No consent is required for this category; however, users are informed of their use in this Policy
For all other categories of cookies—including functional, performance, and targeting cookies—Cardway Tech seeks your explicit and informed consent, as required by Article 6(1)(a) of the GDPR. In Estonia, these requirements are enforced in line with the practice of the Estonian Data Protection Inspectorate. Consent is collected through a clear and accessible cookie banner or pop-up upon your first visit to the Site.
Rejecting non-essential cookies does not affect your ability to access the core features of the Site.
Cardway Tech is committed to empowering you with meaningful control over your cookie preferences. Upon your initial visit, you will be presented with options to accept all cookies, customize preferences by category, or reject non-essential cookies. You may revisit and modify your choices at any time via the Site’s cookie management tool or through your browser settings
Most web browsers allow blocking or deleting cookies, either universally or on a per-site basis. Note that restricting strictly necessary cookies may affect functionality or experience on the Site.
Cardway Tech's cookie consent banner is designed in accordance with the following principles, consistent with EDPB Cookie Banner Task Force requirements:
(a) The "Accept All" and "Reject All" options are presented with equal visual prominence — identical size, colour weight, and click distance — on the first layer of the banner.
(b) No checkbox for any non-essential cookie category is pre-ticked.
(c) Users can reject all non-essential cookies with a single click, without navigating to additional screens.
(d) No manipulative design patterns (dark patterns), countdown timers, or misleading wording are used.
(e) Cookie preferences are stored for a minimum of six (6) months or until the user modifies them, whichever is earlier. Cardway Tech will not re-prompt users who have rejected non-essential cookies for at least six months, unless material changes are made to the cookie inventory or processing purposes.
You may withdraw your consent at any time via the “Cookie Settings” link or browser settings. Upon withdrawal, all relevant cookies will be immediately deactivated. Access to essential website features will not be restricted if you decline non-essential cookies.
In certain circumstances, Cardway Tech may permit trusted third-party service providers to set cookies on our Site. These providers may include web analytics services (e.g., Google Analytics), marketing automation platforms, or social media networks. Use of third-party cookies is governed by the respective privacy and cookie policies of those providers. Where third-party cookies involve the transfer of personal data outside the European Economic Area (e.g. to the United States), such transfers are made subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted pursuant to GDPR Art. 46(2)(c). Details of applicable transfer mechanisms are set out in Cardway Tech's Privacy Policy.
Cookies and similar technologies may collect technical and usage data including: browser type and version, device type, operating system, IP address (pseudonymized), referring/exit URLs, date/time of visit, and user behavior. This is generally processed in an anonymized or aggregated form unless law requires otherwise.
Unless otherwise stated, all data collected via cookies is pseudonymized and not linked to personally identifiable information.
Retention periods vary: session cookies are deleted when the browser closes; persistent cookies remain for a defined period or until deleted. All data collected via cookies is transmitted and stored securely, using encryption and access controls to prevent unauthorized access or disclosure.
Cardway Tech reserves the right to amend or update this Cookie Policy at any time, in response to legal, regulatory, or technical changes. Material updates will be published on the Site with a new effective date. Where material updates affect the categories of cookies deployed or the purposes of processing, Cardway Tech will re-present the cookie consent banner to users, giving them the opportunity to review and confirm or withdraw their consent. Where material updates affect the categories of cookies deployed or the purposes of processing, Cardway Tech will re-present the cookie consent banner to users, giving them the opportunity to review and confirm or withdraw their consent. Continued use of the Site does not constitute acceptance of revised cookie consent terms.
In accordance with the accountability obligation under GDPR Article 5(2) and the requirement to demonstrate consent under Article 7(1), Cardway Tech maintains records of cookie consent events. For each consent interaction, the following data is logged:
Consent records are retained for the duration of the active consent period plus three (3) years, in line with the applicable statutory limitation period under Estonian law. These records are available to the Estonian Data Protection Inspectorate (AKI) upon request.
Should you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies and tracking technologies, please contact our Legal & Compliance Department:
Cardway Technologies OÜ
Registry Code: 17593866
Registered Address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152 , Estonia
Email: [email protected]
Website: https://carteza.com
If you believe your cookie-related data has been mishandled, you may contact the Estonian Data Protection Inspectorate at [email protected] or visit https://www.aki.ee
This Cookie Policy is issued in English. In the event of any inconsistency between language versions, the English text shall prevail.