Cookie policy
What this site stores in your browser, and why.
Only what the site needs to work is stored without your consent. Everything else waits for your choice, which you can change at any time.
No advertising
No advertising cookie, no social-network pixel, no cross-site tracking, no profiling. We never sell or rent data.
Your choice first
Only cookies strictly necessary to the site are set without your consent. Refusing is as easy as accepting.
Cookieless statistics
Audience measurement uses no cookie and no persistent identifier. It produces aggregate statistics only.
Inventory
What is stored in your browser
| Name | Purpose | Category | Duration |
|---|---|---|---|
| session_id | Keeps your browsing session and protects forms against request forgery (CSRF). Not readable by scripts (HttpOnly). | Strictly necessary | 7 days of inactivity |
| website_cookies_bar | Records your choice (all cookies or essential cookies only) and its date. | Strictly necessary | 6 months |
| frontend_lang | Remembers the language you selected: English, French or German. | Strictly necessary | 12 months |
| tz | Displays dates and appointment slots in your time zone. | Strictly necessary | End of browsing session |
| presence.lastPresence, presence.focus | Local storage used by the Odoo platform to know whether a tab of the site is active, in order to manage its real-time connection. Contains only a timestamp, no personal data. | Strictly necessary | Until deleted by your browser |
| odoo_utm_campaign, odoo_utm_source, odoo_utm_medium | When you arrive through a tagged link (trade show, LinkedIn post, e-mail), links your request for quotation to that channel, so that we know which channels bring relevant requests. | Optional, set only after “Allow all cookies” | 31 days |
All these cookies are first-party: they are set by www.esm.com.tn itself, through our Odoo website platform. None is shared with an advertising network.
Audience measurement
Statistics without cookies
We measure the number of visits, the pages viewed, the referring site, the country and the type of device with the cookieless audience-measurement tool built into Odoo (Plausible Analytics technology). It sets no cookie, stores no IP address and uses no persistent identifier: a visitor cannot be recognised from one day to the next, nor across websites.
These statistics are used only to improve the site and to know which content is useful to buyers, quality engineers and candidates. They are never cross-referenced with your form data.
Third-party content
Nothing loads from third parties without your consent
The site currently embeds no third-party content: no video player, no map, no social-network button. Our fonts are hosted on our own platform. If such content is added, it will remain blocked until you choose “Allow all cookies”.
Your choice
Accept, refuse, change your mind
On your first visit, a window offers two buttons of equal weight: “Allow all cookies” and “Only allow essential cookies”. Until you make a choice, no optional cookie is set. Your choice is kept for 6 months, then we ask again.
You can withdraw or change your choice at any time, as easily as you gave it, with the button below or the “Cookies” link at the bottom of every page. Your browser settings also let you block or delete cookies; blocking strictly necessary cookies may prevent forms from working.
Security
Cookies designed not to expose anything
The site is served exclusively over HTTPS; http:// addresses are redirected. The session cookie cannot be read by scripts. No cookie contains technical data, drawings, prices or customer information. Access to the website administration is restricted to named ESM staff, by role. Every change of tracker is reviewed before going live, in line with the commitments described on our Information security page.
Legal framework
The rules we apply
ESM is established in Tunisia and works for European customers, so several texts apply at the same time:
- Tunisia: Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data and its implementing texts, under the supervision of the INPDP (Instance Nationale de Protection des Données Personnelles), and any text that amends or replaces it.
- European Union: Regulation (EU) 2016/679 (GDPR) and Article 5(3) of Directive 2002/58/EC (ePrivacy), as transposed in each member state.
- France: Article 82 of the French Data Protection Act (Loi Informatique et Libertés) and the CNIL guidelines and recommendation on cookies and other trackers.
- Germany: Section 25 of the TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz).
Your rights
Who to contact
The controller is ESM — Engineering Solution and Machining, Bâtiment industriel N°4, Cité El Mzoughi, Z.I. Bir El Kassaâ, 2059 Ben Arous, Tunisia. For any question or to exercise your rights (access, rectification, objection and, under the GDPR, erasure, restriction and withdrawal of consent), write to contact@esm.com.tn. We reply within one month.
You may also lodge a complaint with the INPDP in Tunisia or, if you are in the European Union, with your national supervisory authority. Our privacy policy describes the data collected through our forms, retention periods and transfers.
Document control
Version and review
| Version | Date | Change |
|---|---|---|
| 1.0 | 7 October 2026 | First issue: cookie inventory, consent kept for 6 months, cookieless statistics, withdrawal button. |
Owner: ESM management. Reviewed at least once a year and before any new cookie or tracker is introduced. The French version prevails in case of discrepancy.
