01

Cookie policy

This policy precisely describes the cookies and local-storage mechanisms used by ibcsc.be, their purpose and duration, and the choices available.

Last updated · 24 September 2026

01

Controller and scope

The website operator and controller is the Institut Belge de Cybersécurité Citoyenne ASBL, Rue André Lafaille 6, box 012, 6031 Monceau-sur-Sambre, enterprise number 1039.889.191, info@ibcsc.be. This policy applies to ibcsc.be and its forms, accounts and publishing services.

  • Provider: ibcsc.be
  • Duration: browser session
  • Type: strictly necessary
  • No JavaScript access (HttpOnly)
02

Definitions

A cookie is a small file or identifier stored by the browser and returned to the website on later requests. The consent manager stores the ibcsc_consent preference cookie so that the same choice applies on ibcsc.be and jobs.ibcsc.be.

  • Preference duration: 180 days
  • Category: necessary
  • The choice can be changed at any time through the Privacy button
03

ibcsc_session cookie

The ibcsc_session cookie is created when a user requests a service requiring a secure session: opening a protected form, creating or using an account, signing in, publishing, applying or accessing the back office. It links requests to a session, protects CSRF tokens and helps prevent fraudulent submissions.

  • Provider and domain: ibcsc.be, first-party cookie
  • Duration: browser session; removed on sign-out where applicable
  • Category: strictly necessary functional and security cookie
  • Attributes: Secure, HttpOnly and SameSite=Lax
  • Content: random session identifier; no plain-text password
04

Legal basis and consent

The session and preference cookies are strictly necessary to provide security, a requested service and evidence of the current choice. Optional audience measurement and advertising remain denied until prior, freely given, specific, informed and withdrawable consent is recorded.

05

Optional categories

Audience measurement may process visited pages, campaign parameters, browser and device signals and short-lived visitor identifiers to understand use and detect technical problems. Advertising may allow Google advertising services to display and measure ads and, only when authorised, personalise them.

  • Audience measurement: optional
  • Advertising and personalisation: optional
  • Google Consent Mode v2 receives denied signals by default
06

Management and deletion

Use the Privacy button displayed on the site to accept, refuse or change each optional category. Withdrawal updates the consent signals, removes first-party optional identifiers known to the site and reloads the page when necessary. Browser settings can also delete cookies.

07

Technical data distinct from cookies

Independently of cookies, the server may process the IP address, date, time, requested page, server response and some browser information. These logs support security, availability, diagnostics and abuse prevention. Their processing is explained in the Privacy policy.

08

Third-party services

A third-party tag must be placed behind the corresponding consent category before it is enabled. A self-operated consent interface and Google Consent Mode do not by themselves make IBCSC a Google-certified CMP under the IAB Transparency and Consent Framework.

09

Your rights and contact

Where a cookie or technical log involves personal data, the rights in the Privacy policy apply. Questions may be sent to info@ibcsc.be. A complaint may be lodged with the Belgian Data Protection Authority.