Cookie Policy

Controller
Reqruitz Oy, Business ID 3399383-8
Registered address
Kivikartiontie 7 A 27, 20720 Turku, Finland
Privacy contact
Kasper Kullberg, Kasper.Kullberg@reqruitz.com
Document version
1.0
Last reviewed
16 July 2026
Effective date
16 July 2026
Rekisterinpitäjä
Reqruitz Oy, Y-tunnus 3399383-8
Rekisteröity osoite
Kivikartiontie 7 A 27, 20720 Turku, Finland
Tietosuoja-asioiden yhteyshenkilö
Kasper Kullberg, Kasper.Kullberg@reqruitz.com
Asiakirjaversio
1.0
Tarkistettu viimeksi
16.7.2026
Voimaantulopäivä
16.7.2026
Personuppgiftsansvarig
Reqruitz Oy, FO-nummer 3399383-8
Registrerad adress
Kivikartiontie 7 A 27, 20720 Turku, Finland
Kontaktperson för dataskydd
Kasper Kullberg, Kasper.Kullberg@reqruitz.com
Dokumentversion
1.0
Senast granskad
16 juli 2026
Ikraftträdandedatum
16 juli 2026

1. What cookies are

Cookies and similar browser technologies store or read small pieces of information on a device. Some are strictly necessary to deliver a requested service. Optional analytics technologies require a valid prior choice. This policy applies to reqruitz.com and its FI, EN and SV pages.

2. How choices work

reQruitz uses a self-hosted tarteaucitron consent interface. Necessary technology operates without an optional choice. Google Analytics 4 is blocked in Basic Consent Mode until you accept analytics. Declining optional cookies is as easy as accepting them. You can reopen Cookie settings from the persistent website control, change your choice and withdraw consent at any time. Withdrawal does not affect earlier processing, and the consent runtime removes or overwrites its analytics choice and analytics cookies where technically supported.

3. Verified reqruitz.com technologies

rqz_consent_1_0_0_rc_1

Category: Necessary
Provider: Reqruitz Oy, self-hosted tarteaucitron
First/third party: First party
Purpose: Stores the consent version, language, timestamp and category choice so the site remembers and can demonstrate the browser's selection
Duration: 180 days
Basis: Strictly necessary terminal storage; GDPR Article 6(1)(f) for consent administration and accountability

Webflow delivery and form technology

Category: Necessary
Provider: Webflow and its authorised delivery providers
First/third party: Service infrastructure
Purpose: Delivers pages, protects requests and, when a form is submitted, stores the submission. No additional named Webflow cookie was verified in the production inventory
Duration: Request/session as technically necessary; form data follows the Privacy Notice
Basis: Strictly necessary service delivery; Article 6(1)(f), or Article 6(1)(b) for a requested individual service

_cfuvid, if served by the Webflow/Cloudflare delivery layer

Category: Necessary
Provider: Cloudflare within the delivery chain
First/third party: First-party context, external infrastructure
Purpose: Helps distinguish users behind a shared IP address for rate limiting and security. Cloudflare states that its service cookies are strictly necessary
Duration: Runtime-controlled session/security duration. The exact Expires/Max-Age served on reqruitz.com must be confirmed in Preview and production before publication
Basis: Strictly necessary service security; Article 6(1)(f)

_ga

Category: Analytics
Provider: Google Analytics 4
First/third party: First party set for Google
Purpose: Distinguishes browser instances for aggregated audience and usage measurement
Duration: Google's default is 2 years, subject to browser limits and early deletion on withdrawal
Basis: Consent, Article 6(1)(a), and Finnish cookie consent

_ga_G94VK2JSM2

Category: Analytics
Provider: Google Analytics 4
First/third party: First party set for Google
Purpose: Maintains session and property state for the reQruitz GA4 property
Duration: Google's default is 2 years, subject to browser limits and early deletion on withdrawal
Basis: Consent, Article 6(1)(a), and Finnish cookie consent

GA4 receives consent-gated technical events and configured PII-free measurement. The verified generate_lead event contains only fixed measurement parameters and must not contain a name, email address, phone number, message or form-field value. GA4 user and event retention should be configured to 14 months. Google's standard aggregated reports can be retained differently by the service.

4. Technologies not active in this inventory

No Google Ads, Meta, LinkedIn advertising or other advertising tracker is active in the verified reqruitz.com consent configuration. An inactive provider is not listed as an active cookie. Any new optional service requires inventory verification, consent configuration, policy update and approval before activation.

5. Teamtailor boundary

The Teamtailor career site is a separate technical service and has its own consent interface and Cookie Policy. Its _tt_ cookies do not belong in this reqruitz.com table. Moving between reqruitz.com and Teamtailor may therefore present separate settings and policies.

6. Your controls and rights

Use Cookie settings on reqruitz.com to accept, reject or change analytics. You can also delete cookies through your browser, but browser deletion alone may cause the site to ask again. For access, objection, deletion or other personal-data questions, see the Privacy Notice or contact Kasper.Kullberg@reqruitz.com. You may complain to Finland's Office of the Data Protection Ombudsman.

7. Changes

The inventory must be re-scanned in Preview and again after publication. Material changes to provider, purpose, category or duration require the runtime and policy to be updated together. The unresolved Cloudflare duration is a publication blocker until the actual served attribute is recorded.

Primary sources

Accessed 16 July 2026: Traficom cookie guidance, Google Analytics cookie usage, Google Consent Mode, Google Analytics data retention, Cloudflare cookie documentation, Webflow form submissions, tarteaucitron documentation and the locally verified reQruitz consent-kit configuration.