Cookie Policy
Effective Date: June 10, 2026
1. Introduction
1.1 Frederic Fernandez & Associates AG ("FF&A", "we", "us", "our") uses cookies and similar tracking technologies on the ZBG Sprint platform and website at zbgsprint.fredericfernandezassociates.com (the "Platform"). This Cookie Policy explains what cookies are, which cookies we use, why we use them, and how you can manage your preferences.
1.2 This Cookie Policy should be read alongside our Privacy Policy and Terms and Conditions, both available on the Platform. For information about how we process personal data more generally, including your rights as a data subject, please refer to the Privacy Policy.
1.3 We process personal data collected through cookies in accordance with:
a) the Swiss Federal Act on Data Protection (nFADP), in force from 1 September 2023;
b) the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), where applicable to users located in the European Economic Area; and
c) the UK GDPR and the Data Protection Act 2018, where applicable to users located in the United Kingdom.
1.4 The data controller responsible for cookies placed on the Platform is:
Frederic Fernandez & Associates AG
22 Grubenstrasse, 6315 Oberageri, Switzerland
Email: zbg@fredericfernandezandassociates.com
1.5 We reserve the right to update this Cookie Policy at any time in accordance with clause 8. The current version is always available on the Platform, with the effective date indicated above.
2. What Are Cookies
2.1 Cookies are small text files placed on your device, computer, smartphone, or tablet, when you visit a website or platform. They allow the platform to recognise your device and remember certain information about your previous interactions.
2.2 In addition to cookies, we and our third-party service providers may use similar tracking technologies, including pixel tags (small transparent image files that track whether a page has been viewed), web beacons (used to monitor user behaviour and the effectiveness of marketing communications), and local storage objects (files stored directly in your browser that function similarly to cookies). All such technologies are collectively referred to in this Policy as "cookies."
2.3 Cookies can be classified by origin and duration:
2.3.1 By origin: first-party cookies are set directly by FF&A via the Platform; third-party cookies are set by third-party providers whose services are integrated into the Platform (such as Google Analytics, Hotjar, and LinkedIn), and those providers may use the data collected for their own purposes in accordance with their privacy policies.
2.3.2 By duration: session cookies are temporary and deleted when you close your browser; persistent cookies remain on your device for a defined period (set out in the tables in clause 4) or until you delete them manually.
2.4 Not all cookies require your consent. Strictly necessary cookies, those technically essential to operate the Platform, may be placed without consent. All other cookies require your prior, freely given, specific, and informed consent as described in clause 5.
2.5 Cookies do not typically contain information that directly identifies you. However, when combined with other information held by FF&A or our third-party providers, cookie data may constitute personal data and is treated accordingly under applicable data protection law.
3. How We Use Cookies
3.1 We use cookies on the Platform for the following purposes:
3.2 Platform functionality. Strictly necessary cookies ensure the Platform operates correctly and provide you with access to the services you have requested, including login authentication, session management, and course access. These are placed without consent.
3.3 Analytics. We use analytics cookies to collect information about how users interact with the Platform, pages visited, time on site, and features used, to improve Platform performance and user experience. Placed only with consent.
3.4 Behavioural analytics. We use Hotjar to record session replays, generate heatmaps, and analyse navigation patterns. This helps us identify areas of the Platform that may benefit from improvement. Placed only with consent.
3.5 Marketing and retargeting. We use the LinkedIn Insight Tag to measure the effectiveness of our LinkedIn advertising campaigns and to enable retargeting of users who have previously visited the Platform. Placed only with consent.
3.6 Infrastructure and security. Cloudflare cookies are used for content delivery, DDoS protection, and platform security. These are strictly necessary and placed without consent.
3.7 Consent management. Framer places a cookie to record and store your cookie preferences, ensuring your consent choices are respected across sessions. Strictly necessary for the operation of the consent mechanism; placed without separate consent.
3.8 We do not use cookies for automated decision-making or profiling that produces legal or similarly significant effects, for building advertising profiles for sale to third parties, or for tracking users across third-party websites for purposes unrelated to our own marketing activities.
4. Categories of Cookies We Use
4.1 The cookies used on the Platform are set out below, organised by category. Cookie names for Buildable/GoHighLevel are based on standard platform defaults and should be verified against the live Platform implementation prior to publication using a cookie scanning tool.
4.2 Category 1 — Strictly Necessary Cookies
These cookies are essential for the Platform to function. They are placed without consent as they are technically required to provide the service. They do not collect personal data for marketing or analytics purposes.
Duration
Session cookie
Buildable / GoHighLevel
Maintains login session and authenticates access to course content
Session
Until browser closed
Authentication token
Buildable / GoHighLevel
Stores authentication status to prevent repeated login prompts
Persistent
30 days
CSRF token
Buildable / GoHighLevel
Protects against cross-site request forgery attacks
Session
Until browser closed
__cf_bm
Cloudflare
Bot management and security — distinguishes human users from automated traffic
Persistent
30 minutes
cf_clearance
Cloudflare
Records successful completion of a Cloudflare security challenge
Persistent
1 year
Consent preference cookie
Framer
Stores cookie consent preferences to ensure they are respected across sessions
Persistent
1 year
4.3 Category 2 — Analytics Cookies
These cookies collect information about how users interact with the Platform and are used solely to improve Platform performance and user experience. They do not directly identify individual users. Placed only with consent.
Cookie Name
Provider
Purpose
Type
Duration
_ga
Google Analytics
Distinguishes unique users by assigning a randomly generated client identifier
Persistent
2 years
_ga_<container-id>
Google Analytics
Stores authentication status to prevent repeated login prompts
Persistent
30 days
_gid
Google Analytics
Distinguishes users — stores and updates a unique value for each page visited
Persistent
24 hours
_gat
Google Analytics
Throttles request rate to Google Analytics servers
Persistent
1 minute
hjSessionUser_<site_id>
Hotjar
Ensures data from subsequent visits is attributed to the same user ID
Persistent
1 year
hjSession_<site_id>
Hotjar
Holds current session data and attributes requests to the same session
Persistent
30 minutes
_hjFirstSeen
Hotjar
Identifies whether the current visit is the user's first session on the Platform
Session
Until browser closed
_hjAbsoluteSessionInProgress
Hotjar
Detects the first pageview session of a user
Persistent
30 minutes
hjIncludedInSessionSample_<site_id>
Hotjar
Determines whether the user is included in the data sampling defined by the daily session limit
Persistent
2 minutes
4.4 Category 3 — Marketing and Advertising Cookies
These cookies are used to measure the effectiveness of our LinkedIn advertising campaigns and to enable retargeting of users on the LinkedIn platform. Placed only with consent.
Cookie Name
Provider
Purpose
Type
Duration
li_fat_id
Member indirect identifier for conversion tracking, retargeting, and analytics
Persistent
30 days
bcookie
Browser identifier cookie used for LinkedIn advertising features
Persistent
1 year
lidc
Facilitates data centre selection for LinkedIn services
Persistent
24 hours
UserMatchHistory
LinkedIn Insight Tag — used for retargeting and to sync member ID for ad targeting
Persistent
30 days
AnalyticsSyncHistory
Stores the time of the last sync with the lms_analytics cookie
Persistent
30 days
li_sugr
Used to make a probabilistic match of a user's identity outside the LinkedIn platform
Persistent
30 minutes
4.5 We commit to maintaining these tables as accurate and up to date. Where new cookies are introduced or existing cookies are materially changed, this Policy will be updated in accordance with clause 8.
5. Third-Party Cookie Providers
5.1 Certain third-party providers whose technologies are integrated into the Platform may place cookies on your device. Each provider acts as an independent data controller in respect of data collected through their own cookies and processes such data in accordance with their own privacy policies. FF&A is not responsible for the data practices of third-party providers.
5.2 Google Analytics — Google Ireland Limited / Google LLC
Google Analytics uses cookies to collect anonymised and aggregated data about how users interact with the Platform. IP addresses are anonymised before storage. Data may be transferred to the US under Standard Contractual Clauses and Google's participation in the EU-US Data Privacy Framework. Users may opt out using the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout. Privacy policy: policies.google.com/privacy.
5.3 Hotjar — Hotjar Ltd (Malta)
Hotjar uses cookies and session recording technologies to collect behavioural data including mouse movements, clicks, scroll depth, and navigation patterns. Session recordings are anonymised where technically possible. Hotjar processes data within the EEA. Users may opt out at any time at: optout.hotjar.com. Privacy policy: hotjar.com/legal/privacy-policy.
5.4 LinkedIn — LinkedIn Ireland Unlimited Company
The LinkedIn Insight Tag may collect data including IP address, device and browser characteristics, page URL, and referrer URL, as well as LinkedIn member data where you are logged in to LinkedIn at the time of visiting the Platform. Transfers to LinkedIn Corporation in the US are protected by Standard Contractual Clauses and the EU-US Data Privacy Framework. Users may opt out by adjusting LinkedIn account settings under "Data privacy preferences" at linkedin.com/psettings/guest-controls. Privacy policy: linkedin.com/legal/privacy-policy.
5.5 Cloudflare, Inc. (USA)
Cloudflare sets strictly necessary cookies in connection with its content delivery, DDoS protection, and security services. All web traffic routes through Cloudflare. Transfers to the US are protected by Standard Contractual Clauses and the EU-US Data Privacy Framework. Privacy policy: cloudflare.com/privacypolicy.
5.6 Framer B.V. (Netherlands)
Framer sets cookies in connection with website hosting and the operation of the cookie consent banner. Framer is EEA-based; no cross-border transfer. Privacy policy: framer.com/privacy.
6. Cookie Consent
6.1 On your first visit to the Platform, you will be presented with a cookie consent banner. This banner allows you to:
accept all cookies (including analytics, behavioural analytics, and advertising cookies);
configure your preferences to accept or decline specific categories of non-essential cookies; or
accept strictly necessary cookies only.
6.2 Strictly necessary cookies will be placed regardless of your consent choices, as they are technically essential to the operation of the Platform.
6.3 Your consent choices will be stored in a consent preference cookie (placed by Framer) for a period of 12 months. After this period, or if you clear your browser cookies, the consent banner will be presented again on your next visit.
6.4 You may withdraw or update your consent at any time by accessing the cookie settings panel on the Platform. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
6.5 Where you withdraw consent to a category of non-essential cookies, those cookies will be deactivated and will not be placed on subsequent visits until fresh consent is given.
7. Managing Your Cookie Preferences
7.1 In addition to the Platform's consent mechanism, you may manage cookies through your browser settings. Most browsers allow you to refuse, accept, or delete cookies. Browser-level settings apply across all websites you visit using that browser.
7.2 Please note that blocking strictly necessary cookies at the browser level may prevent you from logging in to the Platform, maintaining an authenticated session, or accessing course content. Deleting cookies after consenting via the Platform banner will result in the consent preference cookie also being deleted; the banner will be displayed again on your next visit.
7.3 Browser-level cookie management:
Google Chrome: support.google.com/chrome/answer/95647
Mozilla Firefox: support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Apple Safari (desktop): support.apple.com/en-gb/guide/safari/sfri11471/mac
Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge
Opera: help.opera.com/en/latest/web-preferences/#cookies
7.4 Third-party opt-out tools:
Google Analytics: tools.google.com/dlpage/gaoptout (opt-out browser add-on)
Hotjar: optout.hotjar.com
LinkedIn Insight Tag: linkedin.com/psettings/guest-controls/retargeting-opt-out
7.5 Some browsers offer a "Do Not Track" (DNT) feature. There is currently no universally accepted standard for responding to DNT signals; the Platform does not alter its data collection practices in response to DNT signals. Users wishing to limit tracking should use the cookie consent mechanism described in clause 6 or the opt-out tools above.
8. Updates to This Cookie Policy
8.1 We reserve the right to update this Cookie Policy at any time to reflect changes in applicable law, regulatory guidance, the introduction or removal of cookies or tracking technologies, or changes in third-party provider practices.
8.2 Where a change is material — meaning it significantly affects the categories of cookies used, the purposes for which cookies are placed, or your rights in respect of cookies — we will notify affected users by email to their registered address and display a prominent notice on the Platform. Where new categories of non-essential cookies are introduced, existing consent records will be reset and fresh consent will be sought via the consent banner before any new cookies are placed.
8.3 Non-material changes (such as minor clarifications, corrections, or updated opt-out links) may be made without prior individual notification, provided the updated Policy is published on the Platform with a revised effective date.
8.4 Each version of this Policy carries an effective date at the top of the document. The version in force at the time of processing applies to the relevant cookie activity.
8.5 Where this Cookie Policy is updated, we will review and, where necessary, update the Privacy Policy to ensure consistency between the two documents.
9. Contact
9.1 For questions, requests, or concerns about this Cookie Policy or our use of cookies, please contact:
Frederic Fernandez & Associates AG
22 Grubenstrasse, 6315 Oberageri, Switzerland
Email: zbg@fredericfernandezandassociates.com
Website: zbgsprint.fredericfernandezassociates.com
9.2 We will acknowledge receipt of all cookie-related enquiries within five (5) working days and provide a substantive response within thirty (30) days.
9.3 Without prejudice to your right to contact us directly, you retain the right to lodge a complaint with the relevant supervisory authority: in Switzerland the FDPIC (edoeb.admin.ch); in the EEA your national data protection authority; in the UK the Information Commissioner's Office (ico.org.uk).
