Cookie Policy

1. Introduction

This Cookie Policy explains how Vergabo ("Vergabo", "we", "us", or "our"), operated by Ecom Systems GmbH, uses cookies and similar technologies when you visit our website or use our business-to-business (B2B) procurement platform.

Cookies and similar technologies help us provide a secure, reliable, and user-friendly experience. They enable essential platform functionality such as user authentication, session management, language preferences, security protections, and other features necessary for the operation of Vergabo.

This Cookie Policy explains:

• what cookies and similar technologies are;
• why we use them;
• the types of cookies we use;
• how third-party services may use cookies;
• how long cookies are retained;
• how you can manage your cookie preferences; and
• where you can obtain additional information.

This Cookie Policy applies to:

• the Vergabo website;
• all publicly accessible pages;
• authenticated areas of the platform;
• buyer and supplier workspaces;
• mobile and desktop web browsers accessing the platform.

This Cookie Policy should be read together with our Privacy Policy, which explains how we process personal data collected through cookies and other technologies.

Where required by applicable law, Vergabo requests your consent before storing or accessing information on your device using non-essential cookies or similar technologies.

2. What Are Cookies?

Cookies are small text files that are stored on your computer, smartphone, tablet, or other device when you visit a website.

Cookies allow websites to recognize your browser, remember information about your visit, and provide functionality that improves usability, security, and performance.

Cookies do not normally contain information that directly identifies an individual. However, information associated with cookies may become personal data where it can reasonably be linked to an identifiable person.

In addition to traditional browser cookies, Vergabo may use similar technologies that provide comparable functionality, including:

• browser local storage (Local Storage);
• browser session storage (Session Storage);
• secure authentication tokens;
• security-related browser storage;
• other technologies necessary for maintaining authenticated sessions and secure platform operation.

Depending on their purpose, cookies may remain on your device only while your browser session is active ("session cookies") or for a defined period after your visit ("persistent cookies").

Cookies may also be classified according to who places them:

First-party cookies

These are cookies placed directly by Vergabo and used to provide and secure our services.

Third-party cookies

These are cookies placed by trusted third-party service providers that support specific platform functionality. Third-party cookies are used only where necessary to provide requested services or where permitted under applicable law.

Not every visitor will receive every cookie described in this Policy. The cookies used depend on the pages you visit, whether you sign in to the platform, your browser settings, your cookie preferences, and the services you choose to use.

3. Why We Use Cookies

Vergabo uses cookies and similar technologies only where they serve legitimate operational, security, or user-experience purposes.

Our primary objective is to provide a secure and reliable procurement platform rather than to track users for advertising purposes.

Depending on how you use the platform, cookies may be used for the following purposes.

3.1 Authentication

Cookies help verify your identity after signing in and allow you to remain securely authenticated while using Vergabo.

Without these technologies, many authenticated platform features would not function correctly.

3.2 Security

We use cookies and related technologies to help:

• protect user accounts;
• detect suspicious activity;
• prevent unauthorized access;
• protect against certain security threats;
• maintain the integrity of authenticated sessions;
• support fraud prevention and abuse detection.

Security-related cookies are considered essential for operating the platform.

3.3 Platform Functionality

Cookies enable important platform functionality, including:

• maintaining active user sessions;
• remembering language preferences;
• remembering regional settings;
• storing cookie consent preferences;
• supporting secure navigation between pages;
• maintaining user experience during authenticated sessions.

These technologies help ensure that the platform operates consistently across different pages and browser sessions.

3.4 User Preferences

Where appropriate, Vergabo may use cookies or similar technologies to remember user-selected preferences, such as:

• preferred language;
• localization settings;
• interface preferences;
• other settings that improve the user experience.

These preferences reduce the need for users to repeatedly configure the platform during future visits.

3.5 Performance and Service Reliability

We may use technical cookies or similar technologies to maintain the reliability, availability, and performance of the platform.

These technologies may help us:

• identify technical issues;
• maintain platform stability;
• improve service reliability;
• diagnose operational problems;
• support system maintenance.

Where such technologies are not strictly necessary under applicable law, they will be used only with the appropriate user consent.

3.6 Analytics and Future Services

Vergabo may introduce optional analytics or similar services in the future to better understand how the platform is used and to improve user experience.

Where required by applicable law, any analytics, performance measurement, or similar technologies that are not strictly necessary will be activated only after obtaining the user's consent.

The introduction of additional optional cookies or similar technologies may result in updates to this Cookie Policy.

3.7 No Advertising Cookies by Default

Vergabo is a business-to-business procurement platform and does not use advertising or behavioral tracking cookies by default.

If advertising, marketing, or similar optional technologies are introduced in the future, they will be implemented only in accordance with applicable legal requirements and, where required, only after obtaining the user's consent.

4. Essential Cookies

Essential cookies and similar technologies are necessary for the operation of the Vergabo platform and enable core functionality that users expect when accessing our services.

These cookies cannot be disabled through the platform because, without them, certain features of Vergabo would not function properly or securely.

Essential cookies may be used for purposes including:

• authenticating users after sign-in;
• maintaining secure user sessions;
• protecting authenticated sessions from unauthorized access;
• supporting security mechanisms designed to prevent fraud and abuse;
• remembering language and localization preferences necessary for delivering the requested content;
• storing cookie consent choices;
• maintaining platform integrity during navigation between pages;
• supporting secure communication between your browser and the platform;
• ensuring the availability and reliability of core platform functionality.

Examples of essential technologies used by Vergabo may include:

• authentication session cookies;
• secure session identifiers;
• CSRF protection mechanisms where applicable;
• language preference cookies;
• cookie consent preferences;
• security-related browser storage used to maintain authenticated sessions.

These technologies are used solely for providing the requested service and maintaining the security and operation of the platform.

The legal basis for the use of essential cookies is generally the performance of a contract, our legitimate interests in providing a secure and reliable service, and, where applicable, compliance with legal obligations.

Because these technologies are strictly necessary for the operation of Vergabo, they do not require consent where permitted under applicable law.

5. Functional Cookies

Functional cookies and similar technologies enhance the usability of Vergabo by remembering user preferences and providing a more personalized experience.

Unlike essential cookies, functional cookies are not strictly required for the basic operation of the platform. However, they improve convenience and reduce the need for users to repeatedly configure the platform during future visits.

Functional cookies may be used to remember information such as:

• preferred language;
• regional or localization preferences;
• user interface preferences;
• display settings;
• previously selected platform options;
• other non-essential preferences chosen by the user.

These cookies help provide a more consistent experience across browser sessions while avoiding unnecessary repeated configuration.

Where functional cookies are not strictly necessary under applicable law, they are used only after obtaining the user's consent through the Vergabo cookie preferences.

If functional cookies are disabled, the platform will remain operational, but certain convenience features and personalized settings may not be available or may need to be configured again during future visits.

Vergabo does not use functional cookies to create advertising profiles, track users across unrelated websites, or perform behavioral advertising. Their sole purpose is to improve the usability and consistency of the services requested by the user.

6. Optional Cookies and Consent

Vergabo respects users' privacy and applies a privacy-by-default approach to optional cookies and similar technologies.

At the time of this Policy, Vergabo does not use advertising cookies or behavioral tracking technologies by default. Where optional technologies are introduced in the future, they will be implemented only in accordance with applicable law and, where required, only after obtaining the user's consent.

Optional cookies may include technologies supporting:

• website analytics;
• platform performance measurement;
• usability improvements;
• product usage insights;
• marketing or advertising features;
• social media integrations;
• other optional functionality that is not strictly necessary for providing the requested services.

Optional cookies are activated only after the user has provided the required consent through the Vergabo cookie preferences.

Users may:

• accept all optional cookies;
• reject all optional cookies;
• allow only selected categories of optional cookies;
• withdraw or modify their consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Declining optional cookies will not prevent users from accessing or using the core functionality of the Vergabo platform. However, certain optional features or future enhancements may not be available or may operate with reduced functionality.

As Vergabo evolves, additional optional technologies may be introduced. When this occurs, this Cookie Policy and the cookie preference interface will be updated accordingly.

7. Third-Party Services

Vergabo relies on selected third-party service providers to operate, secure, and maintain the platform. Some of these providers may use cookies or similar technologies where necessary to deliver their services.

At the time of this Policy, Vergabo uses or may use trusted service providers including:

• Supabase for authentication, database services, secure file storage, and platform infrastructure;
• Resend for transactional email delivery, including account verification, password reset, and service notifications;
• Lovable for application development and hosting-related platform services.

These providers process information only to the extent necessary to deliver the requested services and in accordance with applicable contractual, technical, and organizational safeguards.

Where required by applicable law, optional technologies provided by third parties are activated only after obtaining the user's consent.

As the Vergabo platform evolves, additional trusted service providers may be introduced to support optional functionality. Examples may include:

• website analytics services;
• user experience and performance monitoring tools;
• payment service providers;
• customer communication platforms;
• fraud prevention and security services;
• other infrastructure providers necessary to operate the platform.

Examples of future services may include, but are not limited to:

• Google Analytics;
• Microsoft Clarity;
• Stripe.

The use of any additional third-party technologies will be subject to applicable legal requirements, including consent where required, and this Cookie Policy will be updated accordingly.

For information about how third-party providers process personal data, please refer to their respective privacy policies and applicable documentation.

8. Managing Cookie Preferences

Vergabo is committed to providing users with clear and meaningful control over the use of cookies and similar technologies.

Where required by applicable law, users may manage their cookie preferences through the cookie preference interface provided on the Vergabo website.

Depending on the technologies in use, users may be able to:

• accept all optional cookies;
• reject all optional cookies;
• enable or disable individual categories of optional cookies;
• withdraw previously granted consent;
• update cookie preferences at any time.

Changes to cookie preferences apply prospectively and do not affect processing that was lawfully carried out before consent was withdrawn.

In addition to the cookie preference interface, most web browsers allow users to control cookies through browser settings. Depending on the browser, users may be able to:

• view stored cookies;
• delete existing cookies;
• block cookies from specific websites;
• block all cookies;
• configure notifications before cookies are stored.

Please note that disabling or deleting essential cookies may affect the availability, security, or proper functioning of certain features of the Vergabo platform. In particular, users may need to sign in again, restore preferences, or reconfigure certain settings after deleting cookies.

For more information about managing cookies, please refer to the documentation provided by your browser or device manufacturer.

9. Cookie Retention

The retention period for cookies depends on their purpose and technical function.

In general, Vergabo may use the following categories of cookie retention:

Session Cookies

Session cookies are temporary cookies that exist only for the duration of your browser session.

They are automatically deleted when you close your browser and are typically used for authentication, secure navigation, and maintaining an active user session.

Persistent Cookies

Persistent cookies remain on your device for a defined period or until they are manually deleted.

They may be used to remember user preferences, language settings, localization, cookie preferences, or other functionality intended to improve the user experience across future visits.

Persistent cookies are retained only for as long as reasonably necessary for their intended purpose.

Cookie Consent Preferences

Where applicable, Vergabo stores your cookie consent preferences so that your choices can be remembered during future visits.

These preferences are retained for an appropriate period or until:

• you withdraw or modify your consent;
• the consent expires under applicable legal requirements;
• you delete the relevant cookies from your browser.

When consent expires or is withdrawn, Vergabo may ask you to review your cookie preferences again during a future visit.

Vergabo periodically reviews cookie retention practices to ensure that cookies are not retained longer than necessary for their intended purposes or as required by applicable law.

10. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in:

• applicable laws or regulatory requirements;
• the cookies or similar technologies used by Vergabo;
• platform functionality;
• third-party service providers;
• security practices;
• operational or business requirements.

When material changes are made, we will update the "Last updated" date at the beginning of this Cookie Policy and, where required by applicable law, provide appropriate notice through the Vergabo website or other reasonable communication channels.

The most current version of this Cookie Policy will always be available on the Vergabo website.

Your continued use of Vergabo after the effective date of an updated Cookie Policy constitutes your acknowledgment of the revised Policy, except where applicable law requires additional consent.

11. Contact

If you have any questions about this Cookie Policy, the use of cookies or similar technologies, or your privacy choices, please contact us:

Ecom Systems GmbH

Dombühl, Bavaria, Germany

Privacy & Legal

legal@vergabo.com

General Information

info@vergabo.com

Customer Support

support@vergabo.com

If you wish to exercise your rights regarding cookies or personal data, or if you have questions about your consent preferences, please contact legal@vergabo.com.

Additional information about how Vergabo processes personal data is available in our Privacy Policy.