Legal
Cookie Policy
Last updated: July 2026
1. Introduction
This Cookie Policy explains how corporate.school (“we”, “us”, “our”) uses cookies and similar tracking technologies when you visit our website. This policy should be read alongside our Terms of Use & Privacy Policy.
We comply with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), Directive 2002/58/EC (ePrivacy Directive), and applicable national implementations across the European Economic Area (EEA).
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function correctly, operate more efficiently, and provide reporting information to the site owners.
Cookies set by the website operator are called “first-party cookies”. Cookies set by parties other than the website operator are called “third-party cookies”. Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g. analytics, interactive content, and advertising).
3. Legal Basis for Using Cookies
Under the ePrivacy Directive (as transposed into national law) and the GDPR, we rely on the following legal bases:
- Strictly necessary cookies - These do not require consent as they are essential for the website to function. Legal basis: Article 6(1)(f) GDPR (legitimate interests) and the exemption under Article 5(3) of the ePrivacy Directive.
- Non-essential cookies - These require your prior informed consent before being placed on your device. Legal basis: Article 6(1)(a) GDPR (consent) and Article 5(3) of the ePrivacy Directive.
4. Categories of Cookies We Use
4.1 Strictly Necessary Cookies
These cookies are essential for the website to function and cannot be switched off. They are usually set in response to actions you take, such as logging in, filling in forms, or setting your privacy preferences.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token | Maintains your authenticated session | Session / 30 days | First-party |
| next-auth.csrf-token | Prevents cross-site request forgery attacks | Session | First-party |
| next-auth.callback-url | Stores the redirect URL after authentication | Session | First-party |
| cs-cookie-consent | Records your cookie consent preference | 365 days | First-party |
4.2 Functional Cookies
These cookies enable enhanced functionality and personalisation, such as remembering your preferences. If you do not allow these cookies, some or all of these services may not function properly.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| localStorage items | Stores UI preferences (e.g. assessment progress, form drafts) | Persistent | First-party |
4.3 Analytics Cookies
We do not currently use any third-party analytics or tracking cookies. If we introduce analytics cookies in the future, this policy will be updated and your consent will be sought before any such cookies are placed.
4.4 Advertising / Marketing Cookies
We do not use advertising or marketing cookies. corporate.school does not serve advertisements or track users for advertising purposes.
5. How to Manage Cookies
You have the right to decide whether to accept or reject cookies. You can exercise your cookie preferences through our cookie consent banner displayed when you first visit the website.
You can also set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website, though your access to some functionality and areas of our website may be restricted. The means for refusing cookies through your web browser controls vary from browser to browser; please visit your browser’s help menu for more information.
Browser-specific guides:
- • Chrome: Settings → Privacy and security → Cookies
- • Firefox: Settings → Privacy & Security → Cookies
- • Safari: Preferences → Privacy → Cookies
- • Edge: Settings → Cookies and site permissions
6. Data Transfers
Cookies we use are processed on servers within the European Economic Area. Where any cookie data is transferred outside the EEA, appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Retention Periods
Session cookies are deleted when you close your browser. Persistent cookies remain on your device for the period specified in the cookie table above, or until you manually delete them. Your cookie consent preference is stored for 12 months, after which you will be asked to confirm your preferences again.
8. Your Rights Under GDPR
In relation to cookie data that constitutes personal data, you have the following rights under the GDPR:
- Right to withdraw consent (Art. 7(3)): You may withdraw your consent to non-essential cookies at any time by clearing your browser cookies or using the cookie settings described in Section 5.
- Right of access (Art. 15): You may request information about the cookie data we process.
- Right to erasure (Art. 17): You may request deletion of your cookie data by clearing your browser cookies.
- Right to lodge a complaint (Art. 77): You have the right to lodge a complaint with your local data protection supervisory authority.
9. Children’s Privacy
corporate.school is intended for professional users aged 18 and above. We do not knowingly collect cookie data from children under the age of 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such data promptly.
10. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by displaying a prominent notice on our website and updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, you may contact our Data Protection Officer:
12. Supervisory Authority
If you are not satisfied with our response regarding cookies, you have the right to lodge a complaint with the relevant data protection supervisory authority in your EU/EEA member state of residence, place of work, or place of the alleged infringement, in accordance with Article 77 of the GDPR.