Organic Response

Cookie Policy

Contact and description of cookies

Organic Response AB

privacy@organicresponse.co

Australia Office: Level 1, 70 Trenerry Crescent, Abbotsford VIC 3067

Sweden Office: Drottninggatan 23, S-58225 Linköping

Cookies are files with a small amount of data that are commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. You may change or withdraw your consent to non-essential cookies at any time by using our cookie banner or adjusting your browser settings.

Our website uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service. Some cookies are associated with your account and personal information to remember that you are logged in and which workspaces you are logged into. Some cookies are strictly necessary to keep our services secure and to make sure actions taken in the portal genuinely come from you. These cookies are not used to collect personal data, do not track you, and do not store any information you enter.

Legal Basis

Legal Basis for Processing & Consent Under GDPR Article 6(1)(a) and the ePrivacy Directive, the legal basis for processing non-essential cookies (such as analytics, performance, and marketing cookies) is your explicit consent. Strictly necessary cookies (such as login session and security verification cookies) do not require consent and are processed under our legitimate interest to provide a secure and functional service (GDPR Article 6(1)(f)).

Cookie Banner Design & Operation

When you first visit our website, a cookie banner is displayed. The banner operates as follows:

  • Granular Controls: Visitors can accept all cookies, decline non-essential cookies, or customize preferences by cookie category (e.g., Analytics vs. Necessary).
  • Prior Consent Enforcement: Non-essential cookies (including Google Analytics) are blocked by default and will not load until you explicitly click “Accept” or enable them in your preferences.
  • Managing and Withdrawing Consent: You can change or withdraw your consent at any time by clicking the “Cookie Settings” link located in our website footer or by adjusting your web browser settings.

Data Subjects’ GDPR Rights & How to Exercise Them

Data Subject Rights Under the GDPR If you are in the European Economic Area (EEA) or UK, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): You have the right to request that we correct inaccurate or incomplete personal data.
  • Right to Erasure / “Right to be Forgotten” (Art. 17): You have the right to request the deletion of your personal data where there is no legal requirement or compelling legitimate reason for us to retain it.
  • Right to Restriction of Processing (Art. 18): You have the right to request that we temporarily or permanently restrict the processing of your personal data under certain conditions.
  • Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.
  • Right to Object (Art. 21): You have the right to object to our processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent (such as for non-essential cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
  • Right to Lodge a Complaint: You have the right to submit a complaint to a supervisory authority (such as the Swedish Authority for Privacy Protection / IMY or your local Data Protection Authority).

How to Exercise Your Rights

To exercise any of these rights, please contact our Privacy Team at the email address below.
We will verify your request and respond without undue delay, and at least within 30 days of receipt.

  • Organic Response AB
  • privacy@organicresponse.com
  • Australia Office: Level 1, 70 Trenerry Crescent, Abbotsford VIC 3067
  • Sweden Office: Drottninggatan 23, S-58225 Linköping

What cookies do we use?

1. Login session cookie
These cookies allow our systems to recognise you as you move from page to page within the portal after you have logged in. They ensure that your authenticated session remains active, so you do not have to re-enter your credentials for every request. These cookies are typically deleted when you close your browser or log out.

2. Request verification cookie
This cookie is a security measure that helps prevent unauthorised or malicious actions. It ensures that any action which changes data (such as saving, updating, or deleting information) is a legitimate request made by you. If this security check fails or the cookie has expired, the system will block the action and ask you to log in again. This behaviour is intentional and designed to protect your account. Because these cookies are necessary for the security and basic functionality of the OR portal, they cannot be disabled through our cookie preference center. However, you can set your browser to block these cookies, but please note that doing so will prevent the portal from functioning correctly and you will not be able to log in.

3. Third-partycookies
We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”), to understand how visitors engage with our marketing website. Google Analytics uses “cookies”, small text files placed on your computer—to collect standard internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the website (including your IP address) is transmitted to Google. This information is then used to evaluate visitors’ use of the website and to compile statistical reports on website activity for Organic Response.

We use these insights to improve our website content, user experience, and marketing effectiveness.

Google may also transfer this information to third parties where needed to do so by law, or where such third parties process the information on Google’s behalf. We will not (and will not allow any third party to) use the statistical analytics tool to track or to collect any Personally Identifiable Information (PII) of visitors to our site.

You can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You can also manage your cookie preferences through our website’s cookie banner or your browser settings.

International Data Transfers (US Transfers)

Some of our third-party service providers (such as Google Analytics) are located outside the European Economic Area (EEA), including in the United States.

When personal data or online identifiers (such as IP addresses or cookie IDs) are transferred to the United States, we rely on appropriate safeguards in accordance with GDPR Article 46.

Specifically:

  • EU-U.S. Data Privacy Framework (DPF) / Standard Contractual Clauses (SCCs): Transfers to Google are governed by the EU-U.S. Data Privacy Framework adequacy decision or Google’s Data Processing Terms, which incorporate the European Commission’s Standard Contractual Clauses (SCCs).
  • Supplementary Measures: We configure Google Analytics to use technical measures such as IP anonymization/truncation to minimize the risks associated with third-country data processing.

Cookie List

Cookie Name Provider Purpose Lawful basis Category Expiration
JSESSIONID Organic Response Used to maintain an anonymous user session by the server. It is essential for the website to function. Article 6(1)(f), legitimate interests. Strictly Necessary Session
XSRF-TOKEN Organic Response A security cookie used to prevent Cross-Site Request Forgery (CSRF) attacks. Article 6(1)(f), legitimate interests. Strictly Necessary 1 day
_ga Google Analytics Used to distinguish unique users by assigning a randomly generated number as a client identifier. Article 6(1)(a), consent. Analytics 1 Year
_ga_03E4NQ8JCT Google Analytics Used to maintain session state and track site usage for the specific Google Analytics property. Article 6(1)(a), consent. Analytics 1 Year
_ga_FVGWTN67L6 Google Analytics Used to maintain session state and track site usage for the specific Google Analytics property. Article 6(1)(a), consent. Analytics 1 Year