Cookie policy
Which cookies this site writes, what they are for and how long they last. There are ten: six technical ones, always on, two for statistics and two for marketing, which start only if you accept them.
Last updated: 6 October 2026
This is a courtesy translation. The Italian version is the authoritative text: in case of any discrepancy, the Italian wording prevails.
Statistics and ads, only with consent
Besides the technical cookies, the site uses a single third-party tool, Google Analytics 4 by Google Ireland Limited, and only if the user accepts it in the banner. With consent to statistics it is used to count visits and understand which pages are useful. With consent to marketing it is also used to measure whether one of our ads on Google led to a purchase, and it allows Google to show personalised ads: the details are in the section “Ads (marketing)”. Until acceptance no data is sent to Google, and those who refuse browse and buy exactly like everyone else.
The legal basis, for those who wish to check it: art. 122 of D.Lgs. 196/2003 exempts from consent the storing of information on the user's terminal where it is strictly necessary to provide the service explicitly requested, and the Guidelines of the Italian Data Protection Authority of 10 June 2021 on the use of cookies and other tracking tools confirm that for technical cookies neither a banner nor prior consent is required. For the four statistics and marketing cookies, which are not technical, consent is instead requested in advance through the banner and can be refused or withdrawn at any time. For each cookie we state, as those Guidelines require, the purpose and the retention period.
The full list
| Name | What it is for | Duration |
|---|---|---|
| tema | Stores the user's preference for the site's light or dark mode and applies it before the page loads, avoiding the background flashing. It contains no personal data and does not allow the user to be identified. | 6 months |
| veicolo | Stores the vehicle selected by the user, avoiding the need to repeat the choice when returning to the home page. It also makes it possible to show in the catalogue only the parts compatible with the selected vehicle. | 30 days |
| cliente_session | Tells the pages of the site that the user has signed in, avoiding the site being shown temporarily as if to a signed-out user. It contains no personal data. | Until the session is closed |
| admin_session | Performs the same function as cliente_session for users who sign in to the administration panel. It is not used for customers. | Until the session is closed |
| calosgroup-session | Manages the user's session and maintains the connection with the server. It contains a random session identifier and no personal data of the user. | 2 hours of inactivity |
| XSRF-TOKEN | Protects the site's forms from unauthorised requests originating from other pages open in the browser while the authenticated user is browsing. | Until the session is closed |
| _ga | Google Analytics 4 cookie. Tells one visitor from another in order to count visits. Written only if the user accepts statistics cookies in the banner. | 2 years |
| _ga_CWFFH69CEX | Google Analytics 4 cookie. Holds the state of the individual visit session. Written only if the user accepts statistics cookies in the banner. | 2 years |
| _gcl_au | Google cookie, written through Google Analytics 4. Links a visit to the Google ads that preceded it, to measure the purchases that result from them. It is written only if the user accepts marketing cookies in the banner. | 90 days |
| _gcl_aw | Google cookie, written through Google Analytics 4 when someone arrives by clicking an ad. Stores the identifier of that click. It is written only if the user accepts marketing cookies in the banner. | 90 days |
| consenso_cookie | Stores the choice made in the banner about statistics and marketing cookies, so that it does not have to be asked again at every visit. | 6 months |
The six technical cookies listed are first-party cookies, written by this site's domain, and no third party has access to the information they contain. The four statistics and marketing cookies are also written by this site's domain, but the information collected is transmitted to Google Ireland Limited. The duration of the “tema” cookie has been set at 6 months, a measure we consider proportionate to the purpose of not having the preference reset at every visit, in line with the proportionality criterion set out in the Guidelines of the Italian Data Protection Authority of 10 June 2021.
Visit statistics
The internal visit count does not use cookies and does not make it possible to recognise the user. In addition, only for those who accept it, there is Google Analytics 4: it measures the pages viewed and purchase actions in aggregate form, the IP address is not stored, and for statistics Google acts as data processor. Consent can be refused or withdrawn at any time without any consequence for the use of the site.
Ads (marketing)
When someone arrives on the site by clicking one of our ads on Google, the page address contains an identifier of the click. If the user accepts marketing cookies, this identifier is stored in the _gcl_au and _gcl_aw cookies of our domain, and Google Analytics 4 reports to Google Ads the purchases that result from it: this tells us which ads work and which do not.
Personalised ads. With the same consent Google may use the information about the visit to show the user personalised ads, also on other sites and services, according to its own rules: how Google uses information from sites that use its services. Ad preferences can also be managed from one's Google account, in My Ad Center.
Enhanced conversions. With marketing consent, at the moment of a purchase the order email address is sent to Google in encrypted form (SHA-256 hash function: Google does not receive the address in clear), to link the purchase to the ad even when the cookie is not available. Without that consent the address is not sent in any form.
Who processes the data. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For ad measurement and personalised ads Google acts as an independent controller, under its own terms. Data may be transferred to the United States to Google LLC, which participates in the EU-U.S. Data Privacy Framework.
Legal basis. The user's consent (art. 6(1)(a) of Regulation (EU) 2016/679 and art. 122 of D.Lgs. 196/2003). It can be refused or withdrawn at any time, without any consequence for the use of the site or for purchases.
The banner and how to change your mind
The banner offers three equally prominent choices: “Only the necessary ones”, “Customise”, with one box for statistics and one for marketing, both unticked, and “Accept all”. Nothing starts until a choice is made. The choice lasts six months and can be changed at any time from the “Cookie preferences” link at the bottom of every page: when a consent is withdrawn, the related tools are no longer activated from the next page load, and cookies already written can be deleted as described below.
How to delete them
- All browsers allow the cookies of an individual site to be deleted from the privacy settings.
- By deleting this site's cookies the user will be signed out and the site will go back to using the system's default light or dark mode.
No other data will be lost, since the cookies used contain no personal information or data not already available to the site.
You can also set your browser to block cookies in general: in that case some functions of the site, staying signed in, keeping the selected vehicle, submitting forms will stop working, and that is not a malfunction but the technical consequence of the block.
For customer account data, the privacy notice on the processing of personal data applies instead.
Changes to this policy
If we change this policy we update the date at the top of the page. When we introduce a new purpose, as happened with marketing on 6 October 2026, the banner is shown to everyone again: consent given earlier does not cover a purpose that did not exist at the time.