Cookie Policy
Last Updated: June 2026
What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember your preferences and improve your browsing experience.
This Cookie Policy explains how Rocklab One, operated by the établissement public Centre de Musiques Amplifiées - Rockhal ("we", "us", or "our"), uses cookies and similar technologies on our membership portal at one.rocklab.lu. This Cookie Policy should be read together with our Privacy Policy.
Legal Basis for Cookie Processing
We process cookies based on the following legal grounds under the General Data Protection Regulation (GDPR):
Strictly Necessary Cookies: Legitimate interests (Article 6(1)(f) GDPR) - necessary for the provision of our online service and security
Functional Cookies: Your explicit consent (Article 6(1)(a) GDPR)
Analytics & Performance Cookies: Your explicit consent (Article 6(1)(a) GDPR)
Marketing & Advertising Cookies: Your explicit consent (Article 6(1)(a) GDPR)
Types of Cookies We Use
1. Strictly Necessary CookiesAlways Active
Legal Basis: Legitimate interests (GDPR Art. 6(1)(f))
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
2. Functional CookiesOptional
Legal Basis: Your consent (GDPR Art. 6(1)(a))
These cookies enable enhanced functionality by allowing third-party media players to be embedded directly in the platform. Without these cookies, embedded players will not load and you will need to follow external links to listen or watch content. You can withdraw your consent at any time.
3. Analytics & Performance CookiesOptional
Legal Basis: Your consent (GDPR Art. 6(1)(a))
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. You can withdraw your consent at any time.
4. Marketing & Advertising CookiesOptional
Legal Basis: Your consent (GDPR Art. 6(1)(a))
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers. You can withdraw your consent at any time.
Detailed Cookie List
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| next-auth.session-token | Authentication session | 7 days (28 days with “Remember me”) | Necessary |
| next-auth.csrf-token | Protects against cross-site request forgery attacks | Session | Necessary |
| rocklab_cookie_consent | Stores cookie preferences | 1 year | Necessary |
| csrf_token | CSRF protection (double-submit pattern) | 24 hours | Necessary |
| theme | Dark/light mode preference | Persistent | Preference |
| rocklab_cookie_preferences | Stores per-category consent choices | 1 year | Necessary |
| rocklab_cookie_consent_date | Records when consent was last given | 1 year | Necessary |
| _ga (planned) | Google Analytics tracking | 2 years | Analytics |
How to Manage Your Cookie Preferences
On Our Website
You can manage your cookie preferences at any time by:
In Your Browser
Most web browsers allow you to control cookies through their settings. Here's how to manage cookies in popular browsers:
- •Chrome: Settings → Privacy and security → Cookies and other site data
- •Firefox: Settings → Privacy & Security → Cookies and Site Data
- •Safari: Preferences → Privacy → Cookies and website data
- •Edge: Settings → Cookies and site permissions → Cookies and site data
Note: Blocking or deleting necessary cookies may affect the functionality of our website, and some features may not work properly.
Third-Party Cookies
We may use third-party services that set their own cookies. These services include:
- •Sentry: Error monitoring and application reliability. Always active. No named cookie - uses internal SDK state. Data processed in Germany (EU).
- •Butterfly (Rockhal): Image hosting and content delivery
- •Ticketmatic: Ticket purchasing (members are redirected to apps.ticketmatic.com; cookies are set on their domain, not ours)
- •YouTube (Google): Embedded video players (requires functional cookies consent)
- •Spotify: Embedded audio players (requires functional cookies consent)
- •SoundCloud: Embedded audio players (requires functional cookies consent)
These third parties have their own cookie policies which we recommend reviewing.
International Data Transfers
Some cookies set by third-party services may transfer your data outside the European Economic Area (EEA):
- •YouTube (Google): May transfer data to the United States. Google relies on Standard Contractual Clauses (SCCs) and participates in the EU-US Data Privacy Framework. Learn more
- •Spotify (Sweden / USA): Spotify is headquartered in Sweden (EEA) but may process data in the United States. Transfers are covered by Standard Contractual Clauses. Learn more
- •SoundCloud (Germany / USA): SoundCloud is headquartered in Germany (EEA) but may process data in the United States under Standard Contractual Clauses. Learn more
- •Analytics Services (if enabled): Analytics data may be processed in the United States under appropriate safeguards
All international data transfers are protected by appropriate safeguards as required by GDPR Chapter V. You can manage or withdraw consent for these cookies at any time through your cookie preferences or browser settings.
Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy.
Contact Information
If you have questions about this Cookie Policy or how we use cookies, please contact us:
Data Controller: établissement public Centre de Musiques Amplifiées - Rockhal
Email: mydata@rockhal.lu
Phone: (+352) 24 555-611
Address: 5, Avenue du Rock 'n' Roll, L-4361 Esch/Alzette, Luxembourg