Cookie Policy

Version: 1.0
Publication date: 29.07.2026
Effective date: 29.07.2026

Chapter 1. Introduction

1.1. Purpose of the Policy

This Cookie Policy explains how the online shop www.pilotshop.ro uses cookies and other similar technologies to ensure the operation of the website, improve the user experience, analyse the use of the services and, where applicable, provide additional functionality.www.pilotshop.ro

This Policy supplements:

• the Privacy Policy;
• the Terms and Conditions;
• the preferences expressed by the user through the consent management platform (cookie banner).

1.2. Legal framework

The use of cookies is governed mainly by:

• Regulation (EU) 2016/679 (GDPR);
• Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as subsequently amended;
• the other applicable legislation concerning electronic communications and data protection.

The storage of information or the obtaining of access to information stored in the user’s terminal equipment is permitted only after valid consent has been given on the basis of clear, complete, easily accessible information expressed in plain and intelligible language.

Consent is not required for technical operations whose sole purpose is to carry out the transmission of a communication over an electronic communications network, or which are strictly necessary to provide an information society service expressly requested by the user.

These rules apply regardless of whether or not the information stored or accessed constitutes personal data.

PilotShop uses cookies in compliance with these provisions and with the principles of transparency, proportionality and data minimisation.

1.3. Scope

This Policy applies to all visitors and users of www.pilotshop.ro, whether or not they create a customer account or place orders.www.pilotshop.ro

1.4. Relationship with other documents

The information concerning the processing of personal data through cookies is supplemented by the Privacy Policy.
In the event of any difference in interpretation, the provisions concerning personal data protection and the applicable legislation shall prevail.

1.5. Controller and contact details

The operator of the Website and the entity determining the purposes for which cookies and similar technologies are used is:
REGIONAL AIR SUPORT S.R.L.

• registered office: No. 14-22 Bucuresti-Ploiesti Road, Building XIII/2, Ground Floor, Apartment ROOM 1, Bucharest, District 1, Romania;
• business premises/showroom: No. 24–28 București–Ploiești Road, District 1, postal code 013694, Bucharest, Romania;
• unique registration code: RO12020346;
• Trade Register registration number: J1999006863409;
• email: [email protected];
• telephone: +40 770 951 700.

For questions concerning cookies, similar technologies or consent preferences, users may use the contact details above.

Chapter 2. What cookies and similar technologies are

2.1. Definition of cookies

Cookies are small files or similar pieces of information stored on the user’s terminal equipment (computer, mobile phone, tablet or other device) when the user visits a website.

Cookies enable the device to be recognised and contribute to the proper operation of the website, the storage of certain preferences and the provision of functionality requested by the user.

2.2. Information cookies may contain

Depending on their purpose, cookies may store information such as:

• a unique identifier;
• the user’s preferences;
• the selected language;
• the contents of the shopping basket;
•  authentication status;
•  cookie consent preferences;
• other information necessary for the operation of the requested services.

Cookie identifiers, session identifiers, IP addresses and other online identifiers may constitute personal data where they enable the identification or singling out of a user or device, or the association of activity with a particular user or device, even if they do not directly contain the person’s name or email address.

Cookies are not used to execute computer programs and cannot transmit viruses or other malicious applications to the user’s device

2.3. Other similar technologies

In addition to cookies, PilotShop may use technologies with similar functionality, such as:

• local storage;
• session storage;
•  measurement pixels;
•  web beacons;
•  technical identifiers;
•    other mechanisms that allow information to be stored on or accessed from the user’s equipment.

For the purposes of this Policy, references to cookies also include these technologies where their nature and operation make the same rules applicable.

Strictly necessary technologies may be used without consent only within the limits of the statutory exemption. Technologies used for analytics, advertising, personalisation or other optional functions are activated only after consent has been given for the relevant category.

2.4. Session cookies and persistent cookies

Depending on their lifespan, cookies may be:
Session cookies, which are deleted automatically when the browser is closed.

Persistent cookies, which remain stored on the device for the specified period or until deleted by the user or the browser.
The lifespan of each cookie depends on the purpose for which it is used and is shown in the cookie inventory, where applicable.

2.5. First-party and third-party cookies

Cookies and similar technologies may be:

• first-party, where they are stored or accessed in the context of the pilotshop.ro domain, including where they are created through a third-party service integrated into the Website;
• third-party, where they are stored or accessed from the domain of an external provider, such as Google or another provider integrated into the Website.

Classifying a technology as first-party does not necessarily mean that it is managed exclusively by PilotShop. For example, certain Google services may set first-party identifiers on the Website’s domain.

Cookies and technologies provided by external suppliers are also subject to the terms and policies of those suppliers.

2.6. Principle of use

PilotShop uses cookies and similar technologies:

• without consent, only where they are strictly necessary for the transmission of a communication or for providing functionality expressly requested by the user;
• on the basis of prior consent, for analytics, measurement, optional functionality, advertising and personalisation.

Optional cookies are disabled by default and are activated only for the categories expressly accepted by the user.

Continuing to browse, scrolling the page, closing the banner, inactivity or general use of the Website does not constitute consent.

Chapter 3. Categories of cookies used

PilotShop uses cookies and similar technologies only to the extent necessary for the operation of the online shop or for other purposes permitted by applicable law.

Depending on their role, cookies may be divided into the following categories.

3.1. Strictly necessary cookies

These cookies and technologies are essential for the operation of the Website or for providing functionality expressly requested by the user.

They may be used, where applicable, for:

• session management;
• account authentication;
• retaining products in the shopping basket;
• the ordering process;
• Website and form security;
• preventing automated or fraudulent access;
• remembering cookie choices;
• server load balancing.

These technologies are not used for analytics, advertising or the creation of marketing profiles.

Consent is not requested for their storage or access where the conditions of the exemption for strictly necessary technologies are met. Any subsequent processing of personal data is based, as applicable, on the performance of the contract, compliance with a legal obligation or the legitimate interest in the security and operation of the service

3.2. Analytics cookies — analytics_storage

These cookies are used to measure traffic and understand how users interact with the Website.

They may enable the collection of information such as:

• pages accessed;
• the duration and sequence of visits;
• traffic source;
• device and browser type;
• searches performed;
• product views;
• products added to the shopping basket;
• the start of the checkout process;
• completed purchases.

PilotShop uses Google Analytics 4 for these purposes. Analytics cookies are activated only after consent has been given for the “Analytics” category.

Google Tag Manager is used to manage technical tags and does not, in itself, constitute a separate processing purpose.

3.3. Functional cookies — functionality_storage

These cookies allow optional functionality to be provided and preferences that are not strictly necessary for the basic operation of the shop to be stored.

They may be used, where applicable, for:

• remembering additional display preferences;
• loading video content;
• integrating external services;
• interactive functions;
• other optional services requested by the user.

Optional functional cookies are activated only after consent has been given for this category.

Cookies used solely to remember a choice expressly requested by the user, such as the selected language or currency, may be classified as strictly necessary if they are indispensable for providing the requested functionality and are listed as such in the updated inventory.

As at the date of the most recent technical review, PilotShop had not identified any separate technology active exclusively in the functionality_storage category. The category is retained in the consent mechanism to allow the management of possible future optional functionality. No such technology will be activated before the inventory has been updated and, where required, the user’s consent has been obtained.

3.4. Advertising and conversion measurement — ad_storage

PilotShop uses Google technologies to measure advertising campaign performance and associate certain actions performed on the Website with previous interactions with advertisements.

These technologies may include:

• the first-party cookie _gcl_au;
• the local storage item _gcl_ls;
• other Google technologies in the _gcl_* family, if they become applicable to the Website’s configuration.
  The technologies are used, where applicable, for:
• identifying an interaction with an advertisement;
• attributing a purchase or another action to a campaign;
• measuring campaign performance;
• preventing repeated or incorrect attribution.

Cookies and technologies in this category are blocked by default and are activated only after the corresponding consent has been given.

If the category is rejected, PilotShop does not allow advertising cookies to be written or read through the Google tags controlled by the consent mechanism.

Google documents that _gcl_* technologies are used for conversion measurement and that cookies in this family generally have a lifespan of 90 days. Google Conversion Linker may also store information in localStorage under the key _gcl_ls.

3.5. The ad_user_data consent parameter

ad_user_data is a technical consent state used by Google Consent Mode to control whether user-related data may be transmitted to Google for advertising purposes.

Merely storing this state in the consent mechanism does not mean that PilotShop automatically transmits the following to Google:

• the person’s name;
• email address;
• telephone number;
• postal address;
• other directly identifiable data.

Such data may be transmitted only if PilotShop enables a corresponding feature, such as enhanced conversions, provided that the feature is described in the applicable documents and the user has given the required consent.

As at the date of the most recent review, the technical inventory confirms the use of conversion measurement technologies, but does not, in itself, demonstrate that enhanced conversions are enabled or that the Customer’s contact details are transmitted to Google.

3.6. The ad_personalization consent parameter

ad_personalization is a technical consent state through which the use of data for personalised advertising may be controlled.

The mere presence of this parameter in the consent mechanism does not demonstrate that PilotShop actually uses:

• remarketing lists;
• custom audiences;
• advertising personalisation;
• the combination of the user’s activity with data from other services.

Personalised advertising features are used only if they are actually configured, described in the updated inventory and activated after the corresponding consent has been obtained.

Google confirms that ad_user_data and ad_personalization are separate Consent Mode v2 parameters that control the behaviour of Google tags and services.

3.7. Integrated external services

Certain Website functions are provided through external services, such as:

• Google Analytics;
• Google Ads and Google Conversion Linker;
• Google reCAPTCHA;
• YouTube;
• Cloudflare;
• other third-party components identified in the updated inventory.

Google Analytics, Google Ads and Google Conversion Linker are controlled through the consent management mechanism and are activated only after consent has been given for the corresponding category.

Google reCAPTCHA is used on certain forms to protect the Website against spam, abuse and automated access. Technologies that are strictly necessary for this purpose may be used without consent for optional cookies, within the limits permitted by law.
Embedded YouTube content

PilotShop embeds YouTube videos on certain product pages.

Under the current technical configuration, the YouTube player may be loaded when the page containing the video is accessed, including where the user has rejected optional cookies.

Loading the player may result in connections being made to Google/YouTube infrastructure and in technical information being transmitted, such as the IP address, browser and device information, the page accessed and the time of the request.

Depending on the browser and its privacy settings, third-party cookie storage may be blocked. The blocking of cookies by the browser does not necessarily mean that Google/YouTube infrastructure has not been contacted.

PilotShop recommends using the cookie management settings and browser options to control third-party content and storage.

The YouTube cookies and technologies observed in the Website’s configuration are listed in the inventory in Chapter 5.

External providers may process data in accordance with their own policies and according to the legal role applicable to each service.

Chapter 4. Consent management

4.1. Giving consent

When the Website is first accessed, the user is shown a clear and visible interface for managing cookies.

At the first level, the interface allows the user to:

• accept all optional categories;
• reject all optional categories;
• open the detailed settings.

Optional categories are disabled by default and are not pre-selected.

Consent is given only through a clear affirmative action. Continuing to browse, scrolling, inactivity or closing the banner does not constitute consent.

The accept and reject buttons are presented clearly and accessibly, without design elements that improperly steer the user towards acceptance.

4.2. Freedom of choice

Giving consent is voluntary.

Rejecting optional cookies does not prevent the use of the essential functions of the online shop, although certain additional

services or features may become unavailable or operate in a limited manner.

Access to the essential functions of the shop is not conditional upon accepting optional cookies. PilotShop does not use a “cookie wall” that prevents use of the shop solely because the user has rejected analytics, personalisation or advertising.

4.3. Changing preferences

The user may change cookie preferences at any time.Preferences may be reviewed using the “Cookie settings” function available on the Website.

Withdrawal of consent takes effect for the future and does not affect the lawfulness of processing carried out before consent was withdrawn.

4.4. Record and duration of preferences

Under the current configuration, preferences are saved locally in the user’s browser through localStorage, under the technical key consent_preferences.

The stored value contains the status of the applicable consent categories, including, where relevant:

• strictly necessary cookies;
• analytics;
• advertising;
• functionality;
• advertising personalisation;
• the transmission of data for advertising.

The record is used to apply the user’s choices on the relevant browser and device.

localStorage does not natively set an automatic expiry date. Under the current configuration, preferences remain stored until:

•  the user deletes the Website’s data;
•  the browser removes the data;
• the value is replaced or deleted by the consent module;
• PilotShop implements an automatic consent expiry and renewal period.

PilotShop does not currently maintain a centralised, individual record of the choices made through this mechanism.

Deleting the Website’s data removes the preferences and causes the consent interface to reappear.

In private browsing windows, preferences may be deleted automatically when the private session is closed, depending on the browser’s operation.

If the “Reject” option is selected, the mechanism records the retention of strictly necessary technologies and the rejection of optional categories. Technical tests confirmed that, after rejection, Google Analytics and Google Ads cookies are not installed on the homepage.

Withdrawal of consent does not automatically delete all optional cookies installed previously if the module does not implement a technical deletion function. The user may also remove data already stored through the browser settings.

4.5. Google Consent Mode

PilotShop uses Google Consent Mode v2 in Basic configuration.

Under this configuration:

• Google Analytics, Google Ads and Conversion Linker tags are blocked before the user interacts with the banner;
• before consent is given, no data is transmitted to Google through the blocked tags;
• if the user rejects the optional categories, the relevant Google tags are not loaded and do not transmit the consent state either;
• if the user gives consent, only the tags corresponding to the accepted categories are loaded;
• the preferences are used during subsequent visits on the same browser and device.
  Google describes the Basic configuration as completely blocking tags until consent is given and as not transmitting data to Google where the user does not consent.
  Tests carried out on the Website confirmed that:
• before consent is given, only necessary technologies are present;
• after the “Reject” option is selected, Google Analytics and Google Ads cookies do not appear;
• after the “Accept all” option is selected, the _ga, _ga_G99K20NGQGG and _gcl_au cookies, together with the _gcl_ls local storage item, are activated.

Google Consent Mode is used to control Google Analytics, Google Ads and Conversion Linker tags. It does not automatically block external content loaded through an iframe, such as the YouTube player. The loading of YouTube content is controlled separately through the external content and consent management mechanism.

Chapter 5. Inventory of cookies and similar technologies

The table below sets out the cookies and similar technologies currently used on the Website.

For each technology, the following information is provided:

• name;
• provider;
• storage type;
• category;
• purpose;
• duration;
• whether a third party has access;
• whether consent is required.

PilotShop reviews and updates the inventory before activating a new service, provider or purpose. If the change requires new consent, the service will not be activated before that consent has been obtained.

Date of most recent technical review: 28 July 2026

The inventory was reviewed using browser developer tools in a private browsing session, before a choice was expressed, after optional technologies had been rejected and after all categories had been accepted.

The review included the homepage, the account creation page and the pages on which Google reCAPTCHA is integrated.

The durations shown represent the configured duration or the maximum duration declared by the provider. The actual duration may be shortened by the browser, manual deletion, private browsing or a change in the technical configuration.

Note concerning YouTube content: The YouTube player may be loaded when the user accesses a page containing the video.

The availability and actual storage of YouTube cookies may vary depending on the browser, browsing mode, tracking-protection settings and the user’s interaction with the player. The absence of cookies from the browser does not exclude the establishment of technical connections to Google/YouTube infrastructure.

Chapter 6. Managing cookies in the browser

6.1. Cookie controls

In addition to the options made available through the consent management platform, users may also control cookies through the settings of the browser they use.

Most browsers allow users, among other things, to:

• view stored cookies;
• delete existing cookies;
• block all cookies;
• block third-party cookies;
• configure exceptions for particular websites;
• delete cookies automatically when the browser is closed.

6.2. Effects of disabling cookies

Disabling strictly necessary cookies may affect the operation of the online shop and may make certain functions unavailable, including:

• authentication in the customer account;
• retaining products in the shopping basket;
• completing orders;
• remembering user preferences;
• the operation of certain security components.

Disabling optional cookies does not, in principle, affect the use of the essential Website functions, but may reduce the level of personalisation or the availability of additional services.

6.3. Browser information

The method of managing cookies differs depending on the browser used.

Users may consult the official documentation for their browser for information concerning:

• configuring cookies;
• deleting them;
• blocking certain cookie categories;
• managing exceptions.

PilotShop does not control the operation of browsers and cannot guarantee the permanent availability of the options offered by them.

6.4. Deleting locally stored data

Deleting cookies, localStorage data or all data associated with the Website may result in:

• being signed out of the account;
• the shopping basket being emptied or certain preferences being lost;
• the removal of consent choices;
• the cookie banner reappearing.

Preferences are associated with the browser and device used. A choice made on one device or in one browser is not automatically transferred to other devices or browsers.

Browser settings do not replace the consent withdrawal function offered on the Website, but may be used additionally to delete information already stored.

Chapter 7. Changes to the Cookie Policy

7.1. Updating the document

PilotShop may amend this Cookie Policy whenever necessary, including as a result of:

• changes to the applicable legislation;
• the implementation of new Website functions;
• changes to the technologies used;
• changes of service providers;
• updates to the e-commerce platform;
• the implementation of new services or modules.

7.2. Publication of changes

The updated version is published on the Website and identified by a version number and an effective date.

If a change:

• introduces a new purpose;
• adds a new provider;
• significantly changes the way in which data is used;
• changes the structure of the categories;
• affects the validity of previous consent,

the user will be informed before the new technology is activated and will be asked to give new consent where required.

New cookies or services requiring consent will not be activated before the information has been updated and the user’s choice has been obtained.

7.3. Periodic review

PilotShop recommends that users review this Cookie Policy periodically to remain informed of any changes concerning the use of cookies and similar technologies.

PilotShop may retain previous versions of the Policy and relevant technical records to the extent necessary to demonstrate the configuration and information applicable at a particular time.

Chapter 8. Contact

For questions concerning cookies, similar technologies or the exercise of rights relating to data processed through them, users may contact:

REGIONAL AIR SUPORT S.R.L.

• registered office: No. 14-22 Bucuresti-Ploiesti Road, Building XIII/2, Ground Floor, Apartment ROOM 1, Bucharest, District 1, Romania;
• business premises/showroom: No. 24–28 București–Ploiești Road, District 1, postal code 013694, Bucharest, Romania;
• email: [email protected];
• telephone: +40 770 951 700.

Further information concerning data categories, recipients, international transfers, retention periods and data subject rights is available in the Privacy Policy.

Chapter 9. Final provisions

This Cookie Policy supplements the Privacy Policy, the Terms and Conditions and the other information and contractual documents published on the Website.

If any provision is declared void, unlawful or unenforceable, the remaining provisions shall remain valid.

This Policy is governed by Romanian law and by the applicable provisions of European Union law concerning electronic communications and data protection.

The Romanian-language version is the reference version. PilotShop takes reasonable steps to maintain consistency between translations. In the event of any discrepancy, the Romanian-language version shall prevail to the extent permitted by law, without prejudice to information actually provided to the user in another language.