Legal review status: This text was updated on 12 August 2026 using the verified staging configuration and technical inventory. Owner/legal re-review is required before publication.
1. Data controller and scope
This Cookie Policy explains the cookies and similar technologies used on the Limaxcar-branded https://limaxcar.com website operated by LİMA DIŞ TİCARET VE TEKNOLOJİ ANONİM ŞİRKETİ (“LİMA”, “we”).
- Data Controller: LİMA DIŞ TİCARET VE TEKNOLOJİ ANONİM ŞİRKETİ
- Registered/Head Office: Mecidiyeköy Yolu Avenue, Karsuyu Street No: 2, Trump Towers, Tower 1, Floor 4, Apartment 401, Şişli, Istanbul, Türkiye
- Factory: Atatürk District, Adnan Menderes Avenue No: 15, 34522 Esenyurt, Istanbul, Türkiye
- Website: https://www.limagroup.com.tr
- Email: info@limagroup.com.tr
- Telephone/Fax: +90 212 706 05 62
- Tax Office: Kağıthane Tax Office
- Tax Identification Number: 6080976473
This text provides information about cookies and similar tracking technologies. Processing that is separate from cookie use, such as processing personal data that you enter into a contact form, is subject to the relevant transparency obligations. Reading or viewing this policy does not constitute consent.
2. Categories and activation conditions
- Necessary: Required for the website and its security/session functions; these cannot be disabled.
- Functional: Supports language, cookie choices, the form interface and core functions requested by the user. It does not include non-essential tracking.
- Statistics: Intended to measure website use and may be enabled only when this category is permitted.
- Marketing: Covers advertising measurement, personalisation, social media and marketing services and is enabled only by an affirmative choice.
Staging verification confirmed that non-essential scripts and external network requests are blocked before consent. For Google Consent Mode v2, analytics_storage, ad_storage, ad_user_data and ad_personalization default to denied.
3. Verified cookie inventory
| Name | Provider | Purpose | Category | Retention | Condition |
|---|---|---|---|---|---|
PHPSESSID | Limaxcar / website server | Technically maintains the server session | Necessary | Browser session | On a page request |
cmplz_functional | Complianz / Limaxcar | Stores the necessary and functional choice state | Functional | 365 days | When a choice is saved |
cmplz_preferences | Complianz / Limaxcar | Stores the preferences-category choice | Functional | 365 days | When a choice is saved |
cmplz_statistics | Complianz / Limaxcar | Stores the Statistics permission state | Functional preference record | 365 days | When a choice is saved |
cmplz_marketing | Complianz / Limaxcar | Stores the Marketing permission state | Functional preference record | 365 days | When a choice is saved |
Verification boundary: The outbound-isolated staging test did not observe Google, Meta or JivoChat vendor delivery or the cookie names/retention periods that those providers may create after consent. These fields have not been guessed and remain subject to owner/legal review and controlled vendor-delivery verification before publication.
4. Verified service inventory
| Service | Purpose and processing | Category / activation condition | Third party and transfer status |
|---|---|---|---|
| Google Tag Manager (GTM-WP22Q6SQ) | The container manages GA4 and Google Ads tags. It carries statistics and advertising tags together. | Marketing. The mixed container is loaded only after Marketing permission. | Google. The precise contracting entity, recipient country/region and actual transfer mechanism were not proven by staging; legal review is required. |
| Google Analytics 4 (GA4) | Tags intended to measure page and interaction statistics were proven inside GTM. | It has a statistics purpose, but the current mixed GTM runtime loads only after Marketing permission. A Statistics-only choice does not load GTM. | Google. Vendor cookie names/retention and the actual transfer mechanism were not verified in isolated staging; legal review is required. |
| Google Ads and Consent Mode v2 | Conversion Linker and Google Ads conversion tags were proven inside GTM. Consent Mode communicates permission signals to Google tags. | Marketing; advertising/analytics signals default to denied. Advertising signals may become granted only with Marketing permission. | Google. This staging task did not trigger a conversion. The precise recipient, region and transfer mechanism require legal review. |
| Meta Pixel (Pixel ID 1865065937683549) | Page-view and marketing measurement code. | Marketing; blocked before consent, after rejection and after withdrawal. | Meta. The precise contracting entity, recipient region and transfer mechanism were not proven by staging; legal review is required. |
| JivoChat (widget i8yczv43Sh) | Live-support/chat interface and related communications. | Marketing; the widget code loads only after Marketing permission. No chat was started during this test. | JivoChat/JivoSite. The precise provider entity, region and transfer mechanism require legal review. |
| WhatsApp link | Starts communication through WhatsApp following an explicit user action. GTM/GA/Meta event hooks exist for click analytics. | The core link is Functional; click-tracking hooks may operate only when Marketing is permitted. | WhatsApp/Meta, only if the user activates the link. The precise recipient and transfer mechanism require legal review. |
| WPForms | Displays the contact form, validates fields and, if the user submits it, sends the request to a first-party endpoint. | Necessary/Functional. The form interface is not conditional on Marketing consent and remains usable before consent. | The form itself operates on the website. Processing submitted form data is a separate transparency matter, not cookie consent; no form was submitted in this test. |
| Polylang | Maintains the TR/EN content relationship and routes policy/banner links in the correct language. | Functional. | No separate Polylang cookie was observed during the staging test. |
| Google Fonts | Website typography. | Functional; fonts are configured to be served locally. | No Google Fonts external request occurs in the verified pre-consent flow. |
| DMCA badge helper | Remote helper script for the DMCA badge in the footer. | Marketing; the remote helper is available only after Marketing permission. The badge image is local. | DMCA.com. Vendor delivery and transfer details were not verified in isolated staging. |
Contact Form 7 and GTranslate do not appear in the active-plugin list for this snapshot and have therefore not been added to the active service inventory by assumption.
5. Managing your choices
Using the banner or the later “Manage cookie preferences” control, you can:
- Use Reject all to reject all non-essential categories.
- Continue with Necessary/Functional technologies only.
- Open View preferences to choose Statistics and Marketing separately.
- Use Accept all to permit the optional categories.
- Reopen the preferences panel to change your decision or withdraw consent previously given.
Withdrawal does not retrospectively affect the lawfulness of processing based on consent before its withdrawal. Rejection and withdrawal prevent subsequent loading of non-essential scripts; you may also need to use your browser settings for vendor data that was created before withdrawal.
6. Third parties and international-transfer review
Google, Meta, JivoChat, WhatsApp and DMCA services are associated with foreign provider groups. However, staging evidence does not prove the precise contracting entity, processing country/region or applicable legal transfer mechanism. This policy therefore does not assume, for example, that all data is transferred to the United States. Before publication, owner/legal review must complete the actual account contracts, processor/subprocessor lists, destination regions and valid transfer mechanism on a service-by-service basis.
7. Contact and updates
For questions about this policy or your cookie choices, contact info@limagroup.com.tr. The policy and preference mechanism should be reassessed when the inventory or technologies change.
