Introduction
This document combines the Privacy Policy and the Cookie Policy for the website cofestival.si.
We are committed to protecting your privacy and process personal data only to the extent necessary for the functioning of the website,
in accordance with EU law (GDPR) and Slovenian legislation.
Data Collected
We do not allow user registration, login, or comments.
We do not collect personal data directly from users, except for technical information automatically processed through cookies.
This means we only process data necessary for the operation of the website, basic visitor statistics, and protection against misuse.
Types of Cookies
– Necessary: required for the basic operation of the website (language, settings, WordPress operation).
– Functional and security: enable login, protect the website, and ensure basic functionalities (Wordfence, Roundcube, embedded players).
– Analytical: collect statistical data (Google Analytics) and are used only with your consent.
List of Cookies
| Name | Provider | Purpose | Time to expiry | Type |
|---|---|---|---|---|
| APISID | youtube.com | YouTube service cookie | ≈ 9m 29d 15h | Functional (third-party) |
| HSID | youtube.com | Security for Google/YouTube services | ≈ 9m 29d 15h | Security (third-party) |
| LOGIN_INFO | youtube.com | YouTube preferences / authentication | ≈ 26d 12h | Functional (third-party) |
| PREF | youtube.com | YouTube preferences (e.g., language/timezone) | ≈ 10m 2d 18h | Functional (third-party) |
| SAPISID | youtube.com | YouTube service cookie | ≈ 9m 29d 15h | Functional (third-party) |
| SID | youtube.com | Account/session security | ≈ 9m 29d 15h | Security (third-party) |
| SIDCC | youtube.com | Account/session security | ≈ 8m 28d 18h | Security (third-party) |
| SSID | youtube.com | Security for Google/YouTube services | ≈ 9m 29d 15h | Security (third-party) |
| VISITOR_INFO1_LIVE | youtube.com | Service status & preferences for YouTube embeds | ≈ 5m 29d 17h | Functional (third-party) |
| VISITOR_PRIVACY_METADATA | youtube.com | Privacy state for YouTube embeds | ≈ 5m 29d 17h | Functional (third-party) |
| YSC | youtube.com | Session ID for YouTube embeds | Session | Functional (third-party) |
| __Secure-1PAPISID | youtube.com | Secure YouTube/Google preferences | ≈ 9m 29d 15h | Security (third-party) |
| __Secure-1PSID | youtube.com | Secure session / preferences | ≈ 9m 29d 15h | Security (third-party) |
| __Secure-1PSIDCC | youtube.com | Secure session protection | ≈ 8m 28d 18h | Security (third-party) |
| __Secure-1PSIDTS | youtube.com | Secure session timestamp | ≈ 8m 28d 18h | Security (third-party) |
| __Secure-3PAPISID | youtube.com | Secure cross-site cookie for Google services | ≈ 9m 29d 15h | Security (third-party) |
| __Secure-3PSID | youtube.com | Secure cross-site session | ≈ 9m 29d 15h | Security (third-party) |
| __Secure-3PSIDCC | youtube.com | Secure cross-site session protection | ≈ 1y 17h | Security (third-party) |
| __Secure-3PSIDTS | youtube.com | Secure cross-site session timestamp | ≈ 8m 28d 18h | Security (third-party) |
| __Secure-ROLLOUT_TOKEN | youtube.com | Feature rollout state | ≈ 5m 28d 19h | Functional (third-party) |
| __Secure-YEC | youtube.com | YouTube experience cookie | ≈ 9m 24d 15h | Functional (third-party) |
| _ga | .cofestival.si | Measure site usage statistics | ≈ 1y 1m 3d 21h | Analytical |
| _gid | .cofestival.si | Record page views | ≈ 21h | Analytical |
| cmplz_banner-status | cofestival.si | Stores Complianz banner decision | ≈ 12d 18h | Necessary |
| cookie-notice-accepted | cofestival.si | Stores cookie notice decision | ≈ 1y 1m 3d 19h | Necessary |
| moove_gdpr_popup | cofestival.si | Stores GDPR preferences (Moove) | ≈ 1y 17h | Necessary |
| qtrans_admin_language | cofestival.si | Language selection (qTranslate) | ≈ 1y 17h | Necessary |
| qtrans_front_language | cofestival.si | Language selection (qTranslate) | ≈ 1y 17h | Necessary |
| roundcube_cookies | cofestival.si | Enables Roundcube webmail | ≈ 24d 15h | Functional |
| ucp_tabs | cofestival.si | User interface settings | ≈ 11m 28d 20h | Necessary |
| wfwaf-authcookie-[hash] | cofestival.si | Security cookie (Wordfence) | ≈ 1d 5h | Security |
| wordpress_logged_in_[hash] | cofestival.si | Keeps user logged in | Session | Functional |
| wordpress_sec_[hash] | cofestival.si | Login security | Session | Security |
| wordpress_test_cookie | cofestival.si | Checks cookie support in browser | Session | Necessary |
| wp-settings-1 | cofestival.si | Stores WordPress user settings | ≈ 1y 17h | Necessary |
| wp-settings-time-1 | cofestival.si | Stores WordPress user settings timestamp | ≈ 1y 17h | Necessary |
| wp_lang | cofestival.si | Stores language preference | Session | Necessary |
Purpose of Processing
We process data to: ensure proper website operation, improve user experience (language, settings),
gather basic visitor statistics (if consent is given), and protect against abuse or attacks.
Legal Basis
– necessary, functional, and security cookies: legitimate interest (Article 6(1)(f) GDPR),
– analytical cookies (_ga, _gid): consent (Article 6(1)(a) GDPR).
Third Parties
We use Google Analytics (Google LLC) for statistical purposes and YouTube embeds may set third-party cookies. Data may be transferred to the United States.
Standard Contractual Clauses of the EU are applied. More:
Google Privacy Policy.
Data Retention
Cookies are stored only for the period specified in the table above (time to expiry), or until you withdraw your consent for analytical cookies.
We do not collect or store any other personal data.
Your Rights
You have the right to access, rectify, erase or restrict the processing of your data,
to withdraw consent (for analytical cookies), and to lodge a complaint with the Slovenian Information Commissioner.
Contact
The controller of this website is Cofestival. For questions regarding data processing,
contact us at info@cofestival.si.