Cookie Policy
COSMA Tanzania Limited Cookie Policy (www.cosma.co.tz)
This Cookie Policy provides detailed information regarding the use of cookies and similar tracking technologies on the website www.cosma.co.tz, operated by Cosma Tanzania Limited ("Cosma," "we," "us," or "our").
This policy is designed to comply with the European Union’s General Data Protection Regulation (GDPR), the ePrivacy Directive (requiring consent for non-essential cookies), and the principles of transparency and fairness established by the Personal Data Protection Act (PDPA) of Tanzania 2022.
1. What are Cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. They are used to allow the website to remember your actions and preferences (such as login details, language, font size, and other display preferences) over a period of time, so you don't have to keep re-entering them whenever you come back to the site or browse from one page to another.
Cookies may be "session" cookies (which are deleted when you close your browser) or "persistent" cookies (which remain on your device for a set period or until you delete them).
2. Legal Basis for Using Cookies
In line with international data protection standards, we categorize the cookies we use and rely on different legal bases for their deployment:
- Strictly Necessary Cookies: The processing of data via cookies that are strictly necessary for the technical functionality and security of the website is based on our Legitimate Interest (GDPR Art. 6(1)(f)) in operating a secure and accessible online presence.2 These cookies are exempt from the requirement for explicit consent under the ePrivacy Directive.
- Non-Essential Cookies (Analytics, Marketing, Performance): For all other types of cookies—including those used for statistical analysis, marketing, or tracking your behavior—we require your Explicit Consent (GDPR Art. 6(1)(a)) before placing them on your device.1 You can provide or withdraw this consent at any time via our Cookie Consent Management Platform (CMP).
3. Cookies Used on Cosma.co.tz
Below is a detailed list of the categories of cookies and similar technologies we use:
A. Strictly Necessary and Functional Cookies
These cookies are essential for you to browse the website and use its features, such as accessing secure areas, session management, or maintaining language preferences. Without these, the website cannot function properly.
Cookie Name | Provider | Purpose | Type/Duration | Data Processed |
session_id | Odoo (Cosma) | Maintains your browsing session and login status. | Session | Session details, authenticated status. |
frontend_lang | Odoo (Cosma) | Stores your preferred website language. | Persistent (short-term) | Language code. |
im_livechat_previous_operator | Odoo (Cosma) | Used to route you back to the same live chat operator if you continue a chat session. | Session | Chat session ID. |
Technical Log Files | Cosma (Internal) | Ensures website security, network integrity, and optimizes technical delivery. | Persistent (7 days) | IP address, browser type, operating system. |
B. Analytics and Performance Cookies (Consent Required)
These cookies help us understand how visitors interact with the website, providing information about the areas visited, the time spent on the website, and any issues encountered, such as error messages.
Cookie Name | Provider | Purpose | Type/Duration | Data Processed |
_ga | Google Analytics (GA4) | Used to distinguish unique users. | Persistent (2 years) | Unique User ID (pseudonymized). |
_gid | Google Analytics (GA4) | Used to identify the user session. | Persistent (24 hours) | Session ID (pseudonymized). |
_ga_<container-id> | Google Analytics (GA4) | Used to persist session state across visits. | Persistent (2 years) | Session state data. |
Yandex Cookies | Yandex Metrics | Collects aggregated statistics and visitor behavior data for optimization. | Varies | Pseudonymized visitor data. |
Note on Plausible.io: We use Plausible.io for website statistics. Plausible is an independent, privacy-focused tool that does not use cookies and does not track any personal data or unique identifiers. This processing is entirely anonymous and relies on our Legitimate Interest, meaning no user consent is required for Plausible.
C. Marketing and Targeting Cookies (Consent Required)
These cookies are used to track visitor activity across websites to display personalized and relevant advertisements. They may be set by us or by third-party advertising partners.
Cookie Name | Provider | Purpose | Type/Duration | Data Processed |
utm_campaign | Odoo/HubSpot | Records the marketing campaign that led you to our website. | Persistent (short-term) | Campaign Source/Medium. |
utm_source | Odoo/HubSpot | Records the source (e.g., Google, Newsletter) that directed traffic. | Persistent (short-term) | Source identifier. |
utm_medium | Odoo/HubSpot | Records the marketing channel used (e.g., CPC, email). | Persistent (short-term) | Medium identifier. |
__gads | Used by Google to enable advertisements on websites. | Varies | Interaction data, advertising preferences. |
4. International Data Transfers
Please note that data collected through cookies, particularly via Google Analytics and Yandex Metrics, involves transferring your data outside of Tanzania and the European Economic Area (EEA), specifically to the United States and the Russian Federation.1
- USA Transfers (Google): Transfers to certified US companies rely on the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs).
- Russian Federation Transfers (Yandex): The Russian Federation is not considered an adequate jurisdiction by the EU. Transfers are only made upon your Explicit Consent and are secured by Standard Contractual Clauses (SCCs), in compliance with GDPR and Section 32 of the Tanzanian PDPA regarding transfers to non-adequate jurisdictions.
5. Managing and Withdrawing Your Consent
You have the right to withdraw your cookie consent at any time.
- Using the Consent Management Platform (CMP): The easiest way to manage your preferences is by clicking on the "Manage Cookies" link provided in the website footer or on the cookie banner. This allows you to accept or reject cookies by category (except for Strictly Necessary ones).
- Browser Settings: You can also manage cookie settings directly in your web browser. Most browsers allow you to:
- See what cookies you have and delete them individually.
- Block third-party cookies.
- Block cookies from particular sites.
- Block all cookies.
- Clear all cookies when you close your browser.
Please be aware that disabling essential cookies may impact the functionality and performance of the Cosma website.