Legal
Cookie Policy
Information about storage technologies and external services used on this website.
Last updated: 7 October 2026
This Cookie Policy explains which cookies and similar technologies are used on pekauto.com, why they are used, who provides them, how long they last and how you can manage your consent.
In addition to traditional cookies, we use other storage technologies such as localStorage. We apply the same consent principles to comparable tracking technologies where they access information on your device or store information on it.
1. Your choice and legal basis
We use strictly necessary technologies without consent only where they are required for website operation, security or to remember your privacy choice. Google Analytics and other non-essential analytics technologies may only be activated after your prior consent. The legal basis for personal-data processing related to Google Analytics is your consent under Article 6(1)(a) GDPR together with the applicable electronic-communications and cookie rules.
On your first visit you can choose “Accept all”, “Reject all” or “Settings”. Analytics and marketing options are not pre-selected. You can change your choice at any time through the “Cookie settings” link in the Website footer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
2. Strictly necessary technologies
| Name / technology | Provider | Purpose | Duration |
|---|---|---|---|
pekConsentV3 (localStorage) | PeK Automotive d.o.o. / pekauto.com | Stores your choices regarding necessary, analytics and marketing technologies, the consent-mechanism version and the time of the latest update. | Up to 180 days or until you delete website data in your browser. |
| Cloudflare Turnstile – security token | Cloudflare, Inc. | Protects the contact form against automated abuse, spam and other security risks. Turnstile processes only information needed for the security check, such as IP address, browser and device characteristics and security signals. | The token is short-lived and intended for an individual verification. |
cf_clearance (only where Cloudflare pre-clearance or another Cloudflare Challenge is enabled) | Cloudflare, Inc. | Records that a security challenge was successfully completed and helps avoid repeated challenges. | Depends on the Cloudflare Challenge Passage setting; the default for such challenges is commonly around 30 minutes. |
Cloudflare Turnstile is loaded on the contact page only after you begin using the form. These technologies are used for website security and abuse prevention, not for advertising profiling.
3. Google Analytics 4
We use Google Analytics 4 (GA4) to measure website traffic and understand how the Website is used. In our implementation, Google Analytics belongs to the Analytics category and must not be activated until you have consented to analytics technologies.
Google Analytics may help us understand which pages are visited, how visitors arrive at the Website, which functions they use, the approximate duration and flow of a session and technical characteristics of the browser and device. Pseudonymous user and session identifiers, referring page, language, approximate geographic region and events relating to Website use may also be processed. Google states that Google Analytics 4 does not log or store IP addresses in its Analytics systems.
Consent to the Analytics category does not by itself constitute consent to personalised advertising. Advertising, remarketing, Google Ads, Google Signals or other marketing functions must, where used, be linked to the separate Marketing category and must not be activated solely on the basis of analytics consent.
Google Analytics 4 cookies
| Name | Provider | Purpose | Default duration |
|---|---|---|---|
_ga | Google Analytics / Google | Used to distinguish users using a pseudonymous identifier. | 2 years |
_ga_<container-id> | Google Analytics / Google | Used to persist session state for Google Analytics 4. | 2 years |
The actual lifetime may be shorter because of browser restrictions, deletion by the user or provider changes. If our Google Analytics configuration changes so that additional cookies are used, we will update this list accordingly.
Provider, retention and international transfers
For users in the European Economic Area, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC and other Google group subprocessors may also participate in providing the service, so information may be processed or transferred outside the European Economic Area, including to the United States.
Google states that Google LLC is certified under the EU–U.S. Data Privacy Framework. Where required, Google also relies on other appropriate transfer mechanisms such as Standard Contractual Clauses. Further information is available in Google's Privacy Policy and its data-transfer framework information.
Google Analytics provides controls for the retention of user-level and event-level data. For standard GA4 properties, Google provides 2-month or 14-month retention options for user-level data; standard aggregated reports may remain available for longer. Actual retention depends on the Google Analytics property settings and applicable legal obligations. Cookie lifetimes are shown in the table above.
4. Marketing and advertising
The Marketing category is separate from analytics. No active Google Ads, Meta Pixel or comparable marketing tracker was found in the reviewed Website package. If such technologies are used, they must be technically blocked before marketing consent is obtained and this Cookie Policy must be updated to identify the relevant providers, purposes, cookies and lifetimes.
5. Functional technologies and external resources
We currently do not use a separate functional cookie to remember language selection; switching between Slovenian and English is performed through a link to the relevant page. Web fonts are hosted locally, so displaying the Website font does not require a connection to Google Fonts.
Links to Facebook, LinkedIn, YouTube and other external websites are standard links. The external provider may begin processing your information when you open its website or service, unless a specific page expressly identifies a different embedded service.
6. How to manage or withdraw consent
You can reopen your choices at any time through the “Cookie settings” link in the Website footer. If you withdraw analytics consent, further loading of analytics technologies is prevented and the Website attempts to delete common first-party Google Analytics cookies that can be removed from our domain. Data lawfully transmitted before consent was withdrawn remains subject to the provider's retention rules and our Google Analytics settings.
You can also delete cookies and website data directly through your browser settings. The process differs by browser:
- Google Chrome
- Mozilla Firefox
- Microsoft Edge
- Safari
- Opera
If you delete local storage or cookies, change device or use private browsing, the Website may ask you to make your choice again.
7. Changes and contact
We will update this document when the technologies, providers, purposes or legal requirements change. The date of the latest update is shown at the top of this page.
The controller is PeK Automotive d.o.o., Obrtniška ulica 17, 1370 Logatec, Slovenia. For questions about cookies, Google Analytics or privacy, contact us at legal@pekauto.com.