{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"Cookie policy (law of 30 July 2018, art. 10/2) - Belgium","description":"The cookie and similar-technology policy a Belgian controller publishes on its website or app: the controller, the sites covered, the categories with their legal basis, consent and profiling answers and the cookie table, how consent is given and withdrawn. It informs; it is not the consent mechanism itself.","type":"object","required":["policy","controller","websites","categories"],"additionalProperties":false,"properties":{"policy":{"type":"object","required":["updated_on"],"additionalProperties":false,"properties":{"version":{"type":"string","description":"Internal version of this policy."},"updated_on":{"type":"string","format":"date","description":"Date of this version of the policy."}}},"controller":{"type":"object","required":["name","enterprise_number","address","contact"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"enterprise_number":{"type":"string","pattern":"^[01][0-9]{3}\\.[0-9]{3}\\.[0-9]{3}$","description":"Belgian enterprise number (KBO/BCE), written 0123.456.789."},"address":{"type":"string","minLength":1},"contact":{"type":"string","minLength":1,"description":"Contact details (e-mail address, telephone or postal address) as they should be printed."},"dpo_contact":{"type":"string","description":"Contact details of the data protection officer, where one is designated."},"representative":{"type":"object","description":"The controller's representative in the Union, where the controller is not established in the Union.","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"contact":{"type":"string"}}}}},"websites":{"type":"array","minItems":1,"items":{"type":"string","minLength":1},"description":"The websites or apps this policy applies to."},"categories":{"type":"array","minItems":1,"items":{"type":"object","required":["type","description","legal_basis","consent_required","cookies"],"additionalProperties":false,"properties":{"type":{"type":"string","enum":["strictly_necessary","functional","analytics","marketing","other"]},"other_label":{"type":"string","minLength":1,"description":"The name of the category when its type is other."},"description":{"type":"string","minLength":1},"legal_basis":{"type":"string","enum":["consent","contract","legitimate_interests","legal_obligation"],"description":"The legal basis of the category, as the controller states it."},"consent_required":{"type":"boolean","description":"Whether the category is placed only with the visitor's consent, as the controller states it."},"profiling":{"type":"boolean","description":"Whether the category serves to build a profile of the visitor, as the controller states it."},"cookies":{"type":"array","minItems":1,"items":{"type":"object","required":["name","provider","purpose","retention"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"provider":{"type":"string","minLength":1,"description":"Who places the cookie (the controller or a third party, which one)."},"purpose":{"type":"string","minLength":1},"retention":{"type":"string","minLength":1,"description":"How long the cookie stays on the device, in the controller's words."},"third_party":{"type":"boolean"},"transfer":{"type":"string","description":"Whether the data of this cookie leave the Union, where to and under which safeguard."}}}}},"allOf":[{"if":{"properties":{"type":{"const":"other"}},"required":["type"]},"then":{"required":["other_label"]}}]}},"consent_mechanism":{"type":"object","description":"How the visitor gives and withdraws consent. Absent for a site whose cookies are all exempt.","required":["how_given","how_withdrawn"],"additionalProperties":false,"properties":{"how_given":{"type":"string","minLength":1},"how_withdrawn":{"type":"string","minLength":1},"preferences_url":{"type":"string","format":"uri"}}},"browser_settings_note":{"type":"string","description":"How the visitor can manage cookies in the browser."},"supervisory_authority":{"type":"object","description":"The Data Protection Authority: its address and website as the controller gives them.","additionalProperties":false,"properties":{"address":{"type":"string"},"website":{"type":"string"}}}}}