Terms of service

These terms govern the use of the Cookie Smart service (the "Service"), provided by PC Web Agency, with registered office at Via Carlo Treves, 24 - 88046 Lamezia Terme (Cz) Italy, VAT no. 02787830799 (the "Provider"), to the customer who registers (the "Customer"). By registering, the Customer accepts them.

Last updated: 8 October 2026

1. The Service

Cookie Smart is a platform for managing cookie consent on the Customer's websites. It includes:

• the cookie banner;
• prior blocking of scripts;
• integration with Google Consent Mode v2;
• the consent log;
• the cookie scan;
• the WordPress plugin.

In the preferences window the banner shows the line "Consent managed with Cookie Smart", with a link to the Provider's website. In the plans that include it (white label) the Customer can remove it from the website settings.

The Service is intended for businesses and professionals, who use it for the websites of their own business or of their clients.

2. Customer responsibilities

Cookie Smart provides the technical tools to collect and document consent, but the website's compliance with the law remains the responsibility of the Customer, who is the data controller. In particular, the Customer:

• correctly installs the script or the plugin on every page of the website;
• checks that the configured categories and services match those actually present on the website;
• writes and publishes their own privacy notice and cookie policy. The Service does not generate these texts;
• checks the results of the cookie scan. The scan detects what happens while visiting the pages and may not detect cookies set only after user actions, such as logging in to a private area or making a purchase.

3. Account

The Customer provides truthful data and keeps their credentials safe. They may invite other users to their account, within the limits of the plan, and are responsible for their actions.

4. Free trial

Every new account has a free trial of 14 days, without a payment card. The trial can be used only once per email address and per domain: a new account created with an email or for a website that has already used it, or by someone who already owns another account, starts without a trial. The Provider sends an email 3 days and 1 day before the end of the trial.

If the Customer has not subscribed to a plan by the end date:

• the banner stops working on their websites;
• the account is deleted as set out in section 9.

5. Plans, prices and payment

Subscriptions are annual and paid in advance, at the prices shown on the Pricing page, excluding VAT. Payment is made through PayPal. The invoice is issued on the basis of the billing details entered in the dashboard.

The subscription renews automatically every year. The Provider sends an email 30, 7 and 1 day before the renewal. The Customer can switch to a higher plan from the dashboard: the new amount applies from the next renewal. Switching to a lower plan is requested from support (info@cookiesmart.it) and applies from the next renewal, provided that the account's websites and users are within the limits of the new plan.

Price changes do not apply to ongoing subscriptions and are communicated before the renewal.

6. Cancellation

The Customer can cancel at any time from the dashboard: there will be no further charges and the Service stays active until the end of the period already paid. The period already paid is not refunded.

Before the end of the period the Provider sends two notices, 7 days and 1 day before, with the link to download the consent log. On the end date:

• the banner stops working;
• the account is deleted as set out in section 9.

Alternatively, the Customer can close the account from the dashboard, on the "Account and billing" page: any subscription is cancelled, the banner stops working immediately and the account is deleted immediately, as set out in section 9, without refund of the period already paid.

7. Non-payment

If a renewal charge fails:

• the Provider notifies the Customer by email and PayPal retries the charge, while the Service stays active;
• if the attempts fail, the subscription is suspended and the banner stops working;
• the account is deleted 30 days after the suspension, with notices 7 days and 1 day before, as set out in section 9.

Until the deletion, the Customer can reactivate the Service by subscribing again.

8. Availability and liability

The Provider undertakes to keep the Service active and secure with professional diligence, but does not guarantee uninterrupted or error-free operation. Scheduled interruptions are announced in advance whenever possible.

Except in cases of wilful misconduct or gross negligence, the Provider's liability is limited to the amount paid by the Customer in the last 12 months. The Provider is not liable for indirect damages, nor for penalties resulting from an incorrect configuration of the Service or from the content of the Customer's website.

9. Processing of data on behalf of the Customer (Art. 28 GDPR)

For the data of the visitors to the Customer's websites, the Customer is the data controller and appoints the Provider as data processor, under the following conditions.

• Subject matter and purpose: recording and documenting the visitors' cookie choices, so that the Customer can demonstrate consent (Art. 7(1) GDPR), and analysing the cookies present on the website.
• Data processed: random consent identifier, accepted or rejected categories, date and time, truncated IP address (the last bytes are removed before storage), browser type, language, page address and version of the banner shown. No special categories of data are processed.
• Data subjects: visitors to the Customer's websites.
• Duration: each choice is kept for 12 months and then deleted automatically. The log can be viewed and exported from the dashboard.
• Instructions: the Provider processes the data only to provide the Service and in accordance with the Customer's documented instructions, which consist of these terms and the dashboard settings.
• Confidentiality and security: the Provider adopts appropriate technical and organisational measures (Art. 32 GDPR), including encryption of communications, role-based access to the dashboard, logging of exports and IP anonymisation. Authorised persons are bound to confidentiality.
• Sub-processors: the Customer authorises the use of Contabo GmbH., AG Munich for hosting, of Aruba S.p.A., Italia for sending emails@if ($cdn) and of BunnyWay d.o.o. (bunny.net, Slovenia, EU) for delivering the banner script through a CDN, with servers only in the European Union@endif, bound by the same obligations. The Provider gives advance notice of any new sub-processors and the Customer can object by terminating the contract.
• Assistance: the Provider assists the Customer in responding to data subjects' requests, forwarding without delay those it receives directly, and informs the Customer without undue delay, and in any case within 48 hours of discovery, of any personal data breach.
• End of the service: upon termination, due to the expiry of the trial or of a cancelled or non-renewed subscription, or due to non-payment, the Provider deletes the data processed on behalf of the Customer together with the entire account. Before the deletion it sends the Customer by email the link to download the consent log, which constitutes the return of the data (Art. 28(3)(g) GDPR).
• Audits: the Provider makes available to the Customer the information necessary to demonstrate compliance with these obligations.

The data of the Customer and of their users are processed by the Provider as controller, as described in the privacy policy.

Account deletion

When the Service ends without renewal (expiry of the trial, end of the paid period after a cancellation, 30 days after the suspension for non-payment), the Provider permanently deletes the Customer's account, with:

• websites and settings;
• consent log, cookie list, scans and banner copies;
• the account's users who are not members of other accounts.

Only payment and billing data are kept, for the 10 years required by tax obligations. The deletion is irreversible: to use the Service again, a new registration is required.

10. Proper use

The Customer does not use the Service for unlawful purposes or to scan websites they are not entitled to, and does not attempt to circumvent its technical or plan limitations. In case of breach, the Provider may suspend the account after notice, except in urgent cases.

11. Intellectual property

The Service, the software and the trademarks remain the property of the Provider. The WordPress plugin is distributed under the GPL v2 or later licence. The cookie catalogue also uses the Open Cookie Database, under the Apache 2.0 licence.

12. Changes to the terms

The Provider may update these terms by giving at least 30 days' notice by email. If the Customer does not accept the changes, they can cancel before they take effect.

13. Governing law and jurisdiction

These terms are governed by Italian law. The Court of Lamezia Terme has exclusive jurisdiction over any dispute.

14. Contact

info@cookiesmart.it — PEC info@pec.pcwebagency.it.