Cookies - KUMA - Manufacturer of washbasins, kitchen countertops, bathroom furniture

Cookie Policy

Art. 5(3) ePrivacy Directive 2002/58/EC — S.C. KUMA ROMANIA S.R.L.

Applicable Legal Framework

This website fully complies with European and national legislation regarding the protection of personal data and the use of cookies:

ePrivacy Directive 2002/58/EC, Art. 5(3) — prohibits storing information on the user's device without prior explicit consent
Regulation (EU) 2016/679 (GDPR), Art. 7 — imposes strict conditions for obtaining and demonstrating consent
Law no. 506/2004 — national transposition of the ePrivacy Directive, with subsequent amendments

🔒

Blocked by Default

All cookies and tracking scripts are automatically blocked from the moment you access the website. No monitoring script is executed without your explicit consent.

✅

Enabled Only with Explicit Consent

Scripts are activated only after you explicitly choose to accept them in the cookie banner. Each category (analytics, marketing, functional) is activated individually.

How It Works Technically

Below is the complete technical flow: from the initial visit (everything blocked) to granting consent (selective activation).

Step 1

Initial Visit

All tracking scripts are blocked. Zero cookies installed.

→

Step 2

Consent Banner

The user chooses: Accept All / Reject All / Granular Settings.

→

Step 3

Selective Activation

Only the accepted categories are activated. The rest remain permanently blocked.

Blocked Scripts and Cookies

Complete list of tracking scripts that we automatically block until your explicit consent is obtained. Each script is intercepted and neutralized by 4 independent protection layers.

#	Script / Pattern	Category	Type	Status
1	googletagmanager.com	Google	Analytics	Blocked
2	google-analytics.com	Google	Analytics	Blocked
3	gtag/js	Google	Analytics	Blocked
4	gtag	Google	Analytics	Blocked
5	google-tag-manager	Google	Analytics	Blocked
6	googlesitekit	Google	Analytics	Blocked
7	google-site-kit	Google	Analytics	Blocked
8	accounts.google.com/gsi	Google	Social	Blocked
9	connect.facebook.net	Facebook	Social	Blocked
10	fbevents.js	Facebook	Marketing	Blocked
11	facebook	Facebook	Social	Blocked
12	fb-pixel	Facebook	Marketing	Blocked
13	doubleclick.net	Google	Ads	Blocked
14	adsbygoogle	Google	Ads	Blocked
15	googlesyndication	Google	Ads	Blocked
16	hotjar.com	Hotjar	Analytics	Blocked
17	hotjar	Hotjar	Analytics	Blocked
18	mixpanel	Mixpanel	Analytics	Blocked
19	segment.com	Segment	Analytics	Blocked
20	clarity.ms	Microsoft	Analytics	Blocked
21	sourcebuster	WooCommerce	Analytics	Blocked

The 4 Technical Protection Layers

We use a defense-in-depth system with 4 completely independent mechanisms. If one layer fails, the next one takes over. Result: zero tracking scripts executed without consent.

Layer 1 — Server

PHP script_loader_tag Filtering

Intercepts all scripts registered through WordPress and changes their type from text/javascript to text/plain, preventing the browser from executing them.

Layer 2 — Server

wp_dequeue_script Removal

Completely removes tracking scripts from the WordPress queue. Targets WooCommerce Sourcebuster, Google Site Kit, and other plugins that register tracking scripts.

Layer 3 — Server

Output Buffer Interception

Scans the entire generated HTML before sending it to the browser. All tracking script tags (including inline) are converted to text/plain.

Layer 4 — Client

MutationObserver Monitoring

A JavaScript observer monitors the DOM in real time. Any script dynamically injected by other libraries after page load is instantly blocked.

Automatically Deleted Tracking Cookies

When consent is rejected or withdrawn, the following tracking cookies are immediately and automatically deleted from your device:

Cookie	Owner	Purpose	Original Retention
_ga	Google Analytics	Unique visitor identification — generates a unique ID per browser	2 years
_gid	Google Analytics	Session visitor identification — distinguishes users	24 hours
_gat	Google Analytics	Request rate limiting to Google Analytics servers	1 minute
_gcl_au	Google Ads	Stores conversion information from Google Ads	90 days
_fbp	Facebook Pixel	Browser identification for Facebook advertising targeting	90 days
_fbc	Facebook Pixel	Stores Facebook click ID — attributes visits from ads	90 days
g_state	Google	Google Sign-In / One Tap authentication state	Session
sbjs_*	WooCommerce	Traffic source tracking — referrer, UTM, acquisition channel	6 months

Legal Basis

“Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive 95/46/EC, inter alia, about the purposes of the processing.”

Directive 2002/58/EC of the European Parliament and of the Council — Art. 5(3) — amended by Directive 2009/136/EC

Transposed into national legislation through Law no. 506/2004 on the processing of personal data and protection of privacy in the electronic communications sector.