Cookie and Similar Technologies Policy

Cookie and Similar Technologies Policy

Publication date: 2 August 2026.

This Policy applies to the IQH Technology / IQ Home Website operated by SensNet Kft. It covers cookies, local storage, pixels, SDKs and comparable storage/access technologies (“cookies”).

1. Controller and choices

Controller: SensNet Kft., 1139 Budapest, Tahi utca 30, 2nd floor, door 4, Hungary; info@sensnet.tech; +36 1 988 9039 (English-language customer service).

The consent banner provides equally prominent:

  • Accept all;
  • Reject non-essential; and
  • Customise.

Rejecting optional cookies must not prevent browsing, product review, cart, checkout, support or withdrawal. Optional controls are off by default. No consent is inferred from browsing, scrolling or closing the banner.

The footer contains a persistent Cookie settings link. Withdrawal is as easy as giving consent and takes effect for future processing immediately, without affecting processing already lawful.

Strictly necessary

These provide a service expressly requested by the user or are necessary for security, session/cart, checkout, consent preference or payment-fraud prevention. They are not used for unrelated analytics/advertising. The GDPR basis is contract/pre-contract steps or SensNet's documented legitimate interest; storage/access is limited to the exception for strictly necessary technology under Hungarian electronic-communications law.

Preferences

These remember non-essential display or convenience settings. They operate only after consent unless genuinely necessary for a function expressly requested at that moment.

Analytics

These measure audiences and interaction. They operate only after analytics consent. IP truncation or pseudonymisation does not remove the consent requirement for optional storage/access.

Advertising and social media

These measure campaigns, build profiles, retarget, or load social widgets. They operate only after advertising/social consent. Refusing them has no effect on purchasing.

3. First-party inventory

The Website uses the following first-party technologies:

Name/storage Provider Category Purpose Duration
OCSESSID SensNet/OpenCart Strictly necessary Session, cart, login and checkout continuity Session or configured security timeout
language SensNet/OpenCart Strictly necessary/preference Requested storefront language Up to 30 days
currency SensNet/OpenCart Strictly necessary/preference Requested display/order currency Up to 30 days
display in local storage SensNet Preferences Remembers grid/list catalogue display Until the user deletes it; only after preference consent unless treated as an expressly requested setting
Consent record Consent platform Strictly necessary Stores categories, wording/version and choice time Five years for compliance evidence, then deletion/anonymisation

4. Third-party technologies

Barion

Barion Payment Zrt. provides payment and fraud prevention. SensNet uses the Base Barion Pixel only with a valid merchant Pixel ID and only for the fraud-prevention functions documented by Barion. SensNet and Barion rely on documented legitimate interests for this narrowly limited processing; Base Pixel remains active irrespective of marketing preference only after the necessity/balancing assessment and transparency are complete.

Any Full Barion Pixel marketing function is disabled until the user gives advertising consent, and SensNet forwards the choice to Barion as required. Provider: Barion Payment Zrt., 1117 Budapest, Irinyi József utca 4-20, 2nd floor; privacy notice: https://www.barion.com/en/privacy-notice/.

The cookie settings interface identifies the Barion cookie/storage names and lifetimes used for the current merchant configuration.

Google

Google Ads identifier AW-971439037 operates only after the appropriate consent. Universal Analytics is not used. For every enabled Google service, the cookie settings identify its cookies, retention, recipient and purpose; the Privacy Notice describes applicable transfer safeguards.

If fonts are fetched from Google rather than served locally, the related request and processing are disclosed and occur only on the applicable legal basis and consent setting.

Hotjar

If Hotjar site ID 2254955 is enabled, it remains blocked until analytics consent. The cookie settings identify its exact cookies and configured durations.

Twitter/X and other embeds

Social widgets and remote media can disclose IP/device/request information and set cookies. They load only after social/advertising consent. Services not used by the Website are not listed as active providers.

Mailchimp

Newsletter subscription is user-initiated and is governed by the Privacy Notice. Marketing measurement cookies/pixels in embedded forms or campaigns require the relevant consent. The form must not silently load unrelated tracking before consent.

5. Banner behaviour

Before a choice:

  • load only necessary store/security/consent technology and the Base Barion Pixel used for payment-fraud prevention;
  • do not request Google Analytics/Ads, Hotjar, Twitter/X, marketing pixels or optional embeds;
  • do not darken/block access in a way that coerces acceptance; and
  • make category explanations available without first accepting.

After Reject non-essential, optional tags stay blocked. After category consent, load only that category. A later withdrawal stops further optional requests and deletes first-party optional cookies where technically possible; third-party deletion instructions are shown where needed.

Consent records include only a pseudonymous choice identifier, categories, text/version and timestamp. They are not reused for advertising.

6. Browser controls

Browser settings can delete/block cookies, but blocking essential storage may prevent cart/login/checkout. Browser controls do not replace the Website's consent choices.

7. International transfers and rights

Some optional providers can process data outside the EEA. They are enabled only when the transfer basis and safeguards described in the Privacy Notice apply. Privacy rights and NAIH complaint details appear in the Privacy Notice.

8. Change control

SensNet scans the production site after every tag/theme/payment change and at least quarterly. A new optional tag remains disabled until classified, documented and linked to a consent category. The Policy and consent wording are versioned together.