Cookies

A cookie is a small text file that a website saves on your computer or mobile device when you visit the site.

• First party cookies are cookies set by the website you’re visiting. Only that website can read them. In addition, a website might potentially use external services, which also set their own cookies, known as third-party cookies.
• Persistent cookies are cookies saved on your computer and that are not deleted automatically when you quit your browser, unlike a session cookie, which is deleted when you quit your browser.

Cookies can be used for various purposes, such as for “remembering” user preferences or to generate statistics. Some types of cookies are technically necessary for the functioning of the service (essential cookies).

How do we use cookies?

At ENISA we mostly use first party cookies, which comprise of two categories:

• Essential cookies, which are necessary for the technical functioning of the website. These cookies are always placed when you visit the ENISA’s website. Aside from the first party cookies, users may find cookies from the europa.eu domain, placed when:
  • filling out forms containing CAPTCHA to determine whether the user is human
  • logging in the website
• Analytics cookies, which support ENISA in generating anonymous website statistics. This is performed with the use of Matomo (https://matomo.org), an open source web analytics service. Matomo uses cookies to help analyse the use of ENISA’s website and to compile reports about website activity. This information is not passed onto third parties.
  Please note that the analytics cookies are not automatically stored in your computer when you visit our website and will only be placed if you provide your consent.

Every time you visit ENISA’s website, you will be prompted (via a banner) to accept all or accept only essential cookies.

If you accept all cookies, it is considered that you provide your consent for analytics cookies.

If you accept only essential cookies, a cookie will still be placed to prohibit any tracking for analytics purposes on our side.

Some pages contain videos embedded from Youtube. Before playing this content, users must either provide their explicit consent to Youtube's terms and conditions or decide not to open the video.

What cookies do we use specifically?

The following cookies are used in the ENISA’s website:

Essential cookies:

• accept_cookies (duration: 1 year) - set by the ENISA website to hide the cookie notice pop-up
• CAPTCHAID (duration: session) - set by the webtools.ec.europa.eu website for the CAPTCHA anti-spam mechanism
• cookiesession1 (duration: session) - set by ENISA WEB Application Firewall for security verification
• statusmessages - set by the ENISA website for displaying various messages
• __ac and sso (duration: session) - set by the ENISA website for user authentication, only used for logged in users

Temporary login to ENISA tools (duration: session):

• cyberhead.user_id and cyberhead.token - set by the ENISA Cyberhead tool to authenticate tool-specific users
• toolauth.session - set by various ENISA tools to authenticate tool-specific users

Analytics cookies:

• mtm_consent_removed (duration: forever) - set by Matomo analytics when opting-out from being tracked (choosing the "Accept only essential cookies" option) or wishes to remove his/her consent (opt-out)
• _pk_* (duration: variable) - various Matomo analytics cookies set for users that allowed tracking; the full list of such cookies can be consulted on the Matomo website
• MATOMO_SESSID (duration: session) - set by the ENISA website when using the opt-out form
• accept_analytics (duration: 1 year) - set by the ENISA website to prevent the Matomo analytics from setting non-essential cookies

Youtube

• Only when accepting the message placed over videos embedded from Youtube - "This content is hosted by a third party. By showing the external content you accept the terms and conditions of youtube.com." - cookies for the domain "youtube-nocookie.com" will be added to the browser.

What type of information do we collect via the ENISA’s analytics cookies?

Cookies from Matomo enable ENISA to track the following information about visitors. We use this information to prepare aggregated, anonymous statistics reports of visitor activity:

• IP address (masked)
• Location: country, region, city, approximate latitude and longitude (Geolocation)
• Date and time of the request (visit to the site)
• Title of the page being viewed (Page Title)
• URL of the page being viewed (Page URL)
• URL of the page that was viewed prior to the current page (Referrer URL)
• Screen resolution of user's device
• Time in local visitor's time-zone
• Files that were clicked and downloaded (Download)
• Links to an outside domain that were clicked (Outlink)
• Pages generation time (the time it takes for webpages to be generated by the webserver and then downloaded by the visitor: Page speed)
• Main language of the browser being used (Accept-Language header)
• Browser version, browser plugins (PDF, Flash, Java, …) operating system version, device identifier (User-Agent header)
• Language of the visited page
• Campaigns
• Site Search
• Events

Note: Institution, city and country origin are determined from the full IP, then stored and aggregated before a mask is applied. Matomo uses an IP de-identification mechanism that automatically masks a portion of each visitor's IP, effectively making it impossible to identify a particular  visitor via the sole IP address.

ENISA retains full control of the data collected through first-party cookies by storing the data in servers controlled by the Agency. Anonymised and aggregated data are stored for an indefinite period by ENISA for analysis purposes.

How can I opt out from the analytics cookies?

If you have initially consented to analytics cookies and now wish to withdraw your consent (opt-out), please untick the relevant box below. You can (re)activate the analytics cookies by ticking the box at any time.

Social media cookies

ENISA is active on several social media platforms. Our presence in the Twitter, YouTube, LinkedIn, and Facebook communities strengthens our online presence and visibility.

• The ENISA website does not set cookies with the display of links to our social media channels when you are browsing our website;
• You can watch ENISA's videos, which we upload to the website  or to our YouTube page. You can also follow links from our website to Twitter, Facebook and LinkedIn;
• By clicking on the social media buttons on our website, you will be re-directed to the relevant sites, which have their own cookie and privacy policies over which we have no control;
• The display of our Twitter feed on this website uses a cookie-free component provided to us by the European Commission. Clicking on the Twitter icon on this website will re-direct you to the Twitter site, which has its own cookie and privacy policies over which we have no control.