From e5c69503b04ffef48a3b74056ee7411866c50516 Mon Sep 17 00:00:00 2001
From: svarona <sarai.var.fer@gmail.com>
Date: Fri, 26 Jun 2026 16:18:54 +0200
Subject: [PATCH 1/4] Added cookie consent banner

---
 conf/template_settings.py                     |   1 +
 core/config.py                                |   5 +
 .../static/core/custom/css/cookie_consent.css | 264 ++++++++++++++++++
 core/static/core/custom/img/GDPR.jpg          | Bin 0 -> 4690 bytes
 core/templates/core/base.html                 | 112 ++++++++
 core/urls.py                                  |   1 +
 core/utils/generic_functions.py               |  13 +
 core/views.py                                 |  36 +++
 8 files changed, 432 insertions(+)
 create mode 100644 core/static/core/custom/css/cookie_consent.css
 create mode 100644 core/static/core/custom/img/GDPR.jpg

diff --git a/conf/template_settings.py b/conf/template_settings.py
index 0cafdf0a..d822775f 100644
--- a/conf/template_settings.py
+++ b/conf/template_settings.py
@@ -62,6 +62,7 @@
                 "django.contrib.auth.context_processors.auth",
                 "django.contrib.messages.context_processors.messages",
                 "docs.utils.context_processors.docs_current_path",
+                "core.utils.generic_functions.cookie_consent",
             ],
         },
     },
diff --git a/core/config.py b/core/config.py
index 975badb7..87404ccc 100644
--- a/core/config.py
+++ b/core/config.py
@@ -161,3 +161,8 @@
     "Submitter": "submitting_institution",
     "Collector": "lab_code_1",
 }
+
+# Cookie consent
+COOKIE_CONSENT_NAME = "relecovCookieConsent"
+COOKIE_CONSENT_MAX_AGE = 60 * 60 * 24 * 365
+COOKIE_CONSENT_VALUES = {"all", "necessary_only"}
diff --git a/core/static/core/custom/css/cookie_consent.css b/core/static/core/custom/css/cookie_consent.css
new file mode 100644
index 00000000..e09f726a
--- /dev/null
+++ b/core/static/core/custom/css/cookie_consent.css
@@ -0,0 +1,264 @@
+.cookie-consent,
+.cookie-modal {
+    font-family: var(--font-primary);
+}
+
+.cookie-consent-hidden {
+    display: none !important;
+}
+
+.cookie-consent {
+    position: fixed;
+    right: 24px;
+    bottom: 24px;
+    left: 24px;
+    z-index: 1200;
+}
+
+.cookie-consent-content {
+    display: flex;
+    gap: 24px;
+    align-items: center;
+    max-width: 1180px;
+    margin: 0 auto;
+    padding: 24px;
+    color: var(--color-default);
+    background: var(--color-white);
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.25);
+    border-radius: 8px;
+    box-shadow: 0 12px 40px rgba(var(--color-black-rgb), 0.22);
+}
+
+.cookie-consent h2,
+.cookie-modal h2 {
+    margin: 0 0 12px;
+    color: var(--color-primary);
+    font-weight: 700;
+}
+
+.cookie-consent p,
+.cookie-modal p {
+    margin: 0 0 10px;
+    line-height: 1.55;
+}
+
+.cookie-consent-actions,
+.cookie-modal-actions {
+    display: flex;
+    gap: 12px;
+    flex-shrink: 0;
+    justify-content: flex-end;
+}
+
+.cookie-consent-actions form,
+.cookie-modal-actions form {
+    margin: 0;
+}
+
+.cookie-btn {
+    display: inline-flex;
+    min-width: 128px;
+    min-height: 46px;
+    align-items: center;
+    justify-content: center;
+    padding: 11px 18px;
+    border: 1px solid var(--color-primary);
+    border-radius: 6px;
+    font-weight: 700;
+    text-align: center;
+    text-decoration: none;
+    transition: background-color 0.2s ease, color 0.2s ease, border-color 0.2s ease;
+}
+
+.cookie-btn-primary,
+.cookie-btn-secondary:hover,
+.cookie-btn-outline:hover {
+    color: var(--color-white);
+    background: var(--color-primary);
+}
+
+.cookie-btn-secondary {
+    color: var(--color-primary);
+    background: var(--color-secondary);
+}
+
+.cookie-btn-primary:hover,
+.cookie-btn-secondary:hover,
+.cookie-btn-outline:hover {
+    text-decoration: none;
+}
+
+.cookie-btn-outline {
+    color: var(--color-primary);
+    background: var(--color-white);
+}
+
+.cookie-modal {
+    position: fixed;
+    inset: 0;
+    z-index: 1250;
+}
+
+.cookie-modal-backdrop {
+    position: absolute;
+    inset: 0;
+    background: rgba(var(--color-black-rgb), 0.72);
+}
+
+.cookie-modal-panel {
+    position: relative;
+    display: grid;
+    grid-template-columns: 38% 62%;
+    width: min(1170px, calc(100vw - 36px));
+    min-height: 600px;
+    margin: 54px auto;
+    overflow: hidden;
+    background: var(--color-white);
+    border-radius: 6px;
+    box-shadow: 0 24px 70px rgba(var(--color-black-rgb), 0.35);
+}
+
+.cookie-modal-close {
+    position: absolute;
+    top: 0;
+    right: 0;
+    display: inline-flex;
+    width: 60px;
+    height: 60px;
+    align-items: center;
+    justify-content: center;
+    color: var(--color-white);
+    background: var(--color-primary);
+    border: 0;
+    border-bottom-left-radius: 30px;
+    font-size: 22px;
+    text-decoration: none;
+    z-index: 2;
+}
+
+.cookie-modal-sidebar {
+    padding: 44px 60px;
+    background: var(--color-white);
+}
+
+.cookie-modal-logo {
+    width: 150px;
+    height: auto;
+    margin-bottom: 28px;
+}
+
+.cookie-tab {
+    display: block;
+    width: 100%;
+    margin-bottom: 14px;
+    padding: 14px 20px;
+    color: var(--color-primary);
+    text-align: left;
+    text-decoration: none;
+    text-transform: uppercase;
+    background: var(--color-white);
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.35);
+    border-radius: 5px;
+    font-weight: 700;
+}
+
+.cookie-tab.active {
+    background: #f0f0f0;
+}
+
+.cookie-modal-body {
+    display: flex;
+    flex-direction: column;
+    padding: 44px 60px 38px;
+    background: #f7f7f7;
+}
+
+.cookie-tab-panel {
+    display: none;
+}
+
+.cookie-tab-panel.active {
+    display: block;
+}
+
+.cookie-table-wrapper {
+    margin-top: 20px;
+    overflow-x: auto;
+}
+
+.cookie-table {
+    width: 100%;
+    color: var(--color-default);
+    background: var(--color-white);
+    border-collapse: collapse;
+    font-size: 0.92rem;
+}
+
+.cookie-table th,
+.cookie-table td {
+    padding: 10px 12px;
+    border: 1px solid rgba(var(--color-secondary-rgb), 0.25);
+    text-align: left;
+    vertical-align: top;
+}
+
+.cookie-table th {
+    color: var(--color-primary);
+    font-weight: 700;
+}
+
+.cookie-toggle-row {
+    display: flex;
+    gap: 12px;
+    align-items: center;
+    margin-top: 24px;
+    color: #70b77e;
+}
+
+.cookie-toggle {
+    position: relative;
+    display: inline-block;
+    width: 52px;
+    height: 30px;
+    background: #8c8c8c;
+    border-radius: 999px;
+}
+
+.cookie-toggle::after {
+    position: absolute;
+    top: 2px;
+    right: 2px;
+    width: 26px;
+    height: 26px;
+    content: "";
+    background: var(--color-white);
+    border-radius: 50%;
+    box-shadow: 0 1px 4px rgba(var(--color-black-rgb), 0.3);
+}
+
+.cookie-modal-actions {
+    margin-top: auto;
+    padding-top: 32px;
+    border-top: 1px solid rgba(var(--color-gray-rgb), 0.35);
+}
+
+@media (max-width: 991px) {
+    .cookie-consent-content,
+    .cookie-consent-actions,
+    .cookie-modal-actions {
+        flex-direction: column;
+        align-items: stretch;
+    }
+
+    .cookie-modal-panel {
+        display: block;
+        max-height: calc(100vh - 36px);
+        margin: 18px auto;
+        overflow-y: auto;
+    }
+
+    .cookie-modal-sidebar,
+    .cookie-modal-body {
+        padding: 28px;
+    }
+}
diff --git a/core/static/core/custom/img/GDPR.jpg b/core/static/core/custom/img/GDPR.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..8be61b8e1302666c0030e39e457c453c6650e02c
GIT binary patch
literal 4690
zcmZ`+cQoAH*8YuQ^fDN|3o%MWuZcFpXo*e)(Gxw|h!#DDLG(`a-V<fC=)DBdOM+L4
z2th=N#C6|$*In!V*7}}5&N<K7d!N1cA7|~ouNSTl0172rH)}h<whI6N(DgD94&eO{
z;F}W||7Hc_6X5?F1Q3G10f7(_5)l$Yh>1x^h>6Mm2@n_zCcq~khCqnPNr_3xDJgD1
zN%^<Ze>bxKuz%Y9k6m{GP$EDS2nB<n03H+shJvp9fC>P>0}+5gpqoJd3qlA!0TD3?
z2#j}giwFLPi~s_{Cj=AWQ2_wtCL%mM2!!-+Gtj@Yfe_xf;H0Jzq2(f0g3YEHGg^sq
zr_j;shNyTYzx&weBP|03Zr%ms5s^W_|8e(k7f^goY62065?4V3jlQS2u9dr}vR>l!
z1}%&(#M-0BmcHJ`;Ccxl1K%h^!B9W}7-4yRa!-@pR$!KF0d-ucQK#NbR(iz1dGNBv
ztI$mfyVox#pL_pc?Zl;XIj$9!x_&hV9iN$zQz=h;HwG&9<c}CQWhf2^gn6_?Z!fDn
zG*nTL><a=W&+_gM&&{9CAIq>a9sTN9Mg9B(+u2@t{h9I455h&+AanN18%f~WL6LtD
z$=Qjs+IO;Rzz@8iqfqlcVd#A3;LMwQ`CRv+iTfN9)B*bW;LZG#p}ztg&iq>wzFi3@
zoVN{$9_zCXJ;CZRS>Da@BtF%BgC7~x?7A2vmCoF>+_vJfyg1`#(OUZTQfj&eU*=>s
zf40QDC|a+ytMo^p{vH%};jx7_HEIXVF5I(AxD3-9nt~Q^BUCZ5P$n*M#52qdy`zKU
zz6Pw`)?S6!T?1b3wfSBT)(Pz=o|z?H1MQ=ipC<TeUUTlzF~=Z~d(+~rg<*VRbc&ke
z--Z(HbpXxI^)=2V2ws*I)w!DP@@CmyCOSoEAjRp#$E8$_!WlQ3&D?w(mLB?8hmzs>
z{ujErGkPJru~*XLj*2y1+VUmI3@oT_6x^d_F5jt<2VGU2B%nBZWrjDND#o4R$=(wa
zqKHL@An$Jm`w(Msh*x09Wz?FB!V8HU$=M~l8Rt8mgM#_v)G@*K-W_I3+vBQfcI4hH
zY}3<p+d21QQ^rEkUSpu{QfTZmR*lQXUMAUB?WUF9$~aVd<r5wusn_dSf~4YeCG#W8
zLo^f!EpIBVjpqxB;ne#sO*FKt1MI=*Gpxy+V50zoprD_>LoTwf_~PZGbctF|6>Y~I
zdl@I4c_{%Tn|zgE)lPH9@pz(Y9JhncX5377LnL_(zVWy~7wd2I0p%QUNob5m3xE82
zqeiW6gEFneXSh*(vC^h!Tzf>Nlp`V4QQ%gOn5Cg8s~AH^AkbZN@BQ!JIq5qx7CtI%
zqf0LbgqtYGgTz^m;`SJ=b4VkC!h}l9_LVMfG0Po^`&IJ%nh{6=-ZK#{m;G1>QZ3tC
zc#|%doFT{MnU%ouB3FZ|<&3Vk=4Vr(Q8W*iU6LnLLcrGy&-krxUL~K2BP~8@w<h=s
zjA-ReZi|?1Ov9Cf1bLkJwd4%OX&E2NSm($C0&k?Lz#~z9FRlUO=ciu_;0odwsm)AS
zWd7!*&xwGnT_n;$r6hguI~7GebAk^KN~8R$l7&WHl-R$I@+j?XIdy1t&_#uj5bgXU
zN(vk7tnwu9Y|1NM(5{#-2{tL1)sDr#SVOPCyl()`La5z=AVg^XiWImgcip~kwW+{f
z=-#lqIS`RzU0vSxE?JD4lYQ&JT*{IJz8zp5Tprom@*7-mo01(@nrya{<gTA;GAGAm
ze|s$EPue}aifHADB1H0I+YlrRnk0%VAM@O#Uj*Y7W01l})n`%|iAy?xP1O0SZejP*
zbGu2SieN5cct@4nlWTakx|Z7IpmW-7Q3niUkH&qMiL2fAF!PRzXWy918xcDr3X*xa
zzYlVVN*`6rHB1=G-Ej?giY3^WQdeX~@v$!dJR>G-Yi>tnx(D=Zl~7JH_&_~2*``+J
zJ&Qs`BuJ}a#vFWd=3b_RzVwfD49W$!0G$FvA5p3AgTOX?tg9^77C14`mpCWv<rGVZ
zEx<l48V5-J=?EmxKVyD5p8WwQbmo_K`aat*jMD<^?)DJNq@^t}ODDW1RT}GR^i@F?
z58!X-pvsAcDe8L=_UMYV0*4hpcU{Y;*nJfy#=Vwte&`>y!p=&6Vt7lcgof2F`ovvG
zR7^gOFI&e>NyJ6rv>|#AV0QpAb=VQL-X~)TNITUEzU-^@ru7fr@y{AE=ryPA81BhC
z(qf`Vyo@+0_B`M?efi9av@!j55tI&psC88y6`|FEOlQcf7~02RH*J2V^`}#q&uuO4
zl>Qz_SUg6Fw+a~OIp!B_Z0GmX`}haF#@j?!hgc~dXLkC^&Pd^tjB~zCa}8|0hQDv0
zyawX2vuZ)Ve#wbUc;u{7911)9Vo1&=Hjeq2iDnp<%5_+9NaK@wxT^7aN0Q3T0`cc!
z1I|?m(#)sRLg6~^mq_`{RLC~*7D*y2j|8@pa`$D%H{OldTURsuSWXIu$-x4rHqA;r
z8Aa2T?#dxQh;-qTl%pm4**<es_er5Fw65mY?DiF((#b!Kg^#?=#=U?c3rfWur@llh
zmlJXR_53f5bOykH-;qy|nm!P!e&330>wEKE>E<zYj8sxfZc&!T?0BzugjI~JFdKYJ
zBoG+k=CI+y<ABI=S!`g^5IPi3PnZmvS=?T15{fZv%)5$;+&z}|AP*(M*~dq}vOpSU
zb9od0#n#sk)938!oq4_jV0Sb|(mzpNE#dAt4xdSnNO=3<HkUOu%5D<xPpB<JkXXVy
z#h_wYHLD~F54EA@MR%TGEnK9oXBm-mN3FOFmc65IwJng;g*dWS9I}Qw<mhn5WLEO4
zegT3RHn(+(MUgbSSmqa;;W*OFuK|$}eP%ItU?rVznIw;>W0c)i-V3}-6HcLL9p=Y`
zDqFuC*CV<HP|i$TxdDCW>kl`YDel_COWu3)M~MpHoX8_~sjx%CxEO<IoUFqYaR@4d
zhEwI`G*uq2NV5#4$l22F`J1sPw0)j;PQ<bbifoqQgV}FIt?bxFkljC>y%(rP3Xn7}
z@G!w}94##iyLFU5s+DYtUO;95tz0{zg|my&DOc~ZT|C>T$n&8Y32)fpW9fXw_pLrS
zQ04i&mwgJPIv*<#tfl`Lvj!m)SOATva`rl*`j}v&PkeYv^1c+FWC>ud*dE-6uCwry
zCesh;qxIK3#A(uf{g>eCQs$~^)~h2(4ley>RCm3K?HRROi`&XQGUnX_aZ}i<T=8l;
zv^sfK41yTHHg<OGG54#Pfjo4tR^d2@vs1xO^-k+=5jDvM2KsktT>=6azJJ!+G3J4^
zLjm$WG;j)?LsylYjPmN0TQ}JFzVKe(m5Q{>wXXbmTm9*6t*wQ}GCF`p?(P9R*c<HQ
z$AIs<)r4*H8#rclT(ci7GrhaqBC5DOK*XD<x^#4YuHI$Jj7?XpAN47F^krjC6-rhr
zJtjGwMVXTKS}2gey6vh{w@A2mEZHo1PGSorAis15IU$CkA+J>>?-}-wXwde{0L4%$
zDptkAYar;Uz08E(a{lVpHw7CSi~8{M6JbsehXsCLx6y4Qw^NCfRoBj>fsMM5MDwdB
zFXW%4`(e^U^JRT$Zd)wfd^&s0`21~~QKKhEA6J5_bc^Y&B!oDoZ<$KQt5~<Ga@eJy
zCX5mNw6nDSC_=vCEt=#lILwasSMX6p5KZ4^v>t7AoLRaLJ?$DDjIZQq+68Jdn(9yo
zgE8|NE@M@qhHPM6DPrF`KO;s*>06Py)f$c7;d&qA4C?C3)aIz|la5>DLxYiY=+FT?
zf7Pw?d6{6v{5oeFhGJ?#`{=5pNxDU0dQ&%Qt4(fq=ZYA?3^o!vnpF`)$oQI!$5j3U
zN_iBtTgx3092jlINnYoQnARtD4-;8BG$P)o*M7HXWB0h>%{$F*wKh|vp$+4GWH$>#
zG^-w|k2)=x73fQI9<Uqj9&1}~XkYu{sanN=jRsmYBOyBX*>IRi6LC31sHTh;VhNxb
z+?1w#5zK&Q?M3Jas)<EZNIR~k9--MKWn&<TVm|yV&SHGSCv6yYLyFm%TeSH7i<l>i
z@q4F-ceeSM5ynn$v&l2u4OK7v3RP{F1jEh?yVWKT1*b-CJZpv2c!g>as{~mUpY@+B
z0kVOm9Fgw+UP$s0yO5!uM6wX|4V!?}^#<yO<ZGZNwfY_+mXUw<ZSe<s*YI7E+%0nK
z5}xJh?+4+JLT=he-&=ru#6;Kquz0~dh4vMvT^F+Ho|S8$`ldAT{Gr$T)9e|YUo(Uo
zrHe)y^V!zd8s=rP$%^*!DwnOnL*bwh90ETlLJC6yk<PMl>HM`<ShYBayL9>XGos|j
znO-~U+(zb!yI8gwDqw$taoE$8Nz+M7Rdi1Dx8AergPmb!RUPfS<O~#KC`Pro=tYzM
z)XLS|Nt3)=DUFUj!nuMMJk-zB1k=;i5A?Y94wuS;(U8q%cmMD_xv&0apE|^Re*Aj;
z&3s_7nIbl%NLG2+4z|0pEtz6j<EgaW#^+9JVdO_UKToaVsM0IO^pT{oBxK=REv;40
zXL+X`-LhF{38(#)+21)97Byqoxv!OZ{N>_hQ88YRvuXJlx|A6tfn6?rSDr7mYu^tk
zic9v4=$e`+TcX#u-fFNWn>GXUL!|0pv5@j5a7I{}k@)ZXOa8t^sg{HFjZP0s9*jA?
z8eyTh;}&c3)D_)^@OI_zm)$m%%$r#-Txhw=5W^Iu&sPxF1zv7Ip04=$?HOyVc8ICx
zZus*tv!n@6ie>WIC)UV(x@b9AREitfcz19rfGrV~u`pZcXQBl1*gu2L30hp~^tavG
znMWG^_E5OoK-ZV;a`c4wQ(jw1FVY+&bd`3MYiyM`@BZLpc3%OT?fkdyHXcO!q`mtc
z^O&OcX+=cBn79g`oRhynX6$rQnOyM8u-y<7MOyKMu{TW!3})Y(q#on8A5*fm7FQkR
z8+Vw%U_>w>GNd~*l?1!Uu&f!%r@B-pWtN&u3z!`xFyZ=4QIGjt^oWLt52^TxC?4gR
zAiP<hy>gW+FVs^FXQxbdUZnPzHJ4EvrewB`HHkItd{m#T4I5L`+Ftkt^CZ@=Ay(``
za(ljR@FOeOXM}ovlN|c$BH9RS3(|Ubc<}d)k4%rI^*sb<P%@g`!wXKhs}&AT4_`sm
zQb`v$e!ZPzy>FDoipJV^;LaN9P*S$)s@#kWNPk<h;I{8F)T|N&Fwz#E_!41rsD%Li
zUhe%)yIoRv5oh+u@*`njCH`2W*)YBfA%WPfTCBj3SbAx_QMuyM1ueTk1#Jb+;0x`M
z*h0(IdX~y`yX3Ugc>5n!G*x2Aq`^J@3cUF9PbpNkxq}o(Cd))2<n^$L9Z*7L;SiCp
zD$(S?wppOC5VgdBFsPMIx@_HY9XBnKO(ekaaXdm8BR96H2+&aK@yFCYXq?R!3(^gb
zuQTxID9Nin#=8f4WTHMW109LE(7m%P>5<4LL-FBvMzq?!4l@Q+?pv}a@N7P6c*FA|
zPe<<@LOmX>o={D}OR8aBZ$M7NCiE$FaNGug<XTt(?-~a8V?2Omi~POF7S=9^DdCDd
zb6rM&=-1aW+xBrbg-5ouM-@LJZ@W`~m#l*$^Il!<`&pcRsWVk!-YU!-2o-I6_Ka}K
zZ2Lr|Bj8x3{v&-$%;UO5wW3sov`L}Cc^J*v5BkgBZojvRy;stHRX*9J|7{HKJg&0o
zs<G`a^Da1AI&$JmFDe+@j~`+g#so*<4-X|H3OJb40wY~p=UdlYD8A&s#Wetq;7!l2
z`*jo!j1kY#Q(elZShbJqx9Y>G;bEC~f2PoH9gVtXSts|p27}}XJ}3-+eR?P)T=Uoa
zRf{J|@AoF(ee!+zUO3n6<=+u4F%7QC8k-LXwZ2h&zlYO4OZ_ZOkMUrG_0qru(*W4;
znbF|1%L2HmRxYz@DiNVSG;WwgJ`vUH`t8!so7^+-@MHDi!SXGNu@7AW$|9AoiP)&B
o+nQ}8iiDl3M>O|D2+68h@V|$?wJ|ib`p205f2Q{Thh8uK3l5h_V*mgE

literal 0
HcmV?d00001

diff --git a/core/templates/core/base.html b/core/templates/core/base.html
index 2c1acde1..7cb40e19 100644
--- a/core/templates/core/base.html
+++ b/core/templates/core/base.html
@@ -26,6 +26,7 @@
 
         <!-- Template Main CSS File -->
         <link href="{% static 'core/main_style/css/main.css' %}" rel="stylesheet">
+        <link href="{% static 'core/custom/css/cookie_consent.css' %}" rel="stylesheet">
         <style>
           table.dataTable thead tr:first-child th {
             position: relative;
@@ -132,6 +133,117 @@
 
                 {% endblock %}
 
+{% if show_cookie_banner %}
+<div id="cookieConsentBanner" class="cookie-consent" role="dialog" aria-live="polite" aria-labelledby="cookieConsentTitle">
+    <div class="cookie-consent-content">
+        <div>
+            <h2 id="cookieConsentTitle">Your privacy is important to us</h2>
+            <p>
+                We use strictly necessary first-party cookies for security, session management and the correct operation of this website. These cookies are associated only with the browser you are using.
+            </p>
+            <p>
+                If you select "Accept all", you accept strictly necessary cookies and any optional third-party or analytics cookies where they are used. If you select "Reject", only strictly necessary first-party cookies will be used. You can also manage your preferences. See the
+                <a href="{% url 'cookie_policy' %}">Cookie Policy</a>
+                and the
+                <a href="https://relecov.isciii.es/politica-de-privacidad/" target="_blank" rel="noopener noreferrer">Privacy Policy</a>.
+            </p>
+        </div>
+        <div class="cookie-consent-actions">
+            <form method="post" action="{% url 'cookie_consent' %}">
+                {% csrf_token %}
+                <input type="hidden" name="value" value="all">
+                <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
+            </form>
+            <form method="post" action="{% url 'cookie_consent' %}">
+                {% csrf_token %}
+                <input type="hidden" name="value" value="necessary_only">
+                <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                <button type="submit" class="cookie-btn cookie-btn-secondary">Reject</button>
+            </form>
+            <a class="cookie-btn cookie-btn-outline" href="?cookie_settings=privacy">More information</a>
+        </div>
+    </div>
+</div>
+{% endif %}
+
+{% if show_cookie_settings %}
+<div id="cookieSettingsModal" class="cookie-modal" role="dialog" aria-modal="true" aria-labelledby="cookieSettingsTitle">
+    <a class="cookie-modal-backdrop" href="{{ cookie_consent_next }}" aria-label="Close cookie settings"></a>
+    <div class="cookie-modal-panel">
+        <a class="cookie-modal-close" href="{{ cookie_consent_next }}" aria-label="Close cookie settings">
+            <i class="bi bi-x-lg"></i>
+        </a>
+        <aside class="cookie-modal-sidebar">
+            <img src="{% static 'core/custom/img/GDPR.jpg' %}" alt="eu_gdpr_compliant" class="cookie-modal-logo">
+            <a class="cookie-tab {% if cookie_settings_tab == 'privacy' %}active{% endif %}" href="?cookie_settings=privacy">Privacy overview</a>
+            <a class="cookie-tab {% if cookie_settings_tab == 'necessary' %}active{% endif %}" href="?cookie_settings=necessary">Strictly necessary cookies</a>
+        </aside>
+        <section class="cookie-modal-body">
+            <div class="cookie-tab-panel {% if cookie_settings_tab == 'privacy' %}active{% endif %}">
+                <h2 id="cookieSettingsTitle">Privacy overview</h2>
+                <p>
+                    This website has a public area and an authenticated area. In both areas, strictly necessary first-party cookies may be used for security. In the authenticated area, a session cookie is also used to keep the user signed in. Optional third-party or analytics cookies are only allowed when the selected preference is "Accept all".
+                    <a href="{% url 'cookie_policy' %}">See the Cookie Policy</a>.
+                </p>
+            </div>
+            <div class="cookie-tab-panel {% if cookie_settings_tab == 'necessary' %}active{% endif %}">
+                <h2>Strictly necessary cookies</h2>
+                <p>
+                    These cookies are necessary for the website to function correctly and cannot be disabled in our systems. They are set in response to actions made by the user, such as saving cookie preferences, protecting forms, signing in, or keeping an authenticated session active.
+                </p>
+                <div class="cookie-table-wrapper">
+                    <table class="cookie-table">
+                        <thead>
+                            <tr>
+                                <th>Name</th>
+                                <th>Purpose</th>
+                                <th>Area</th>
+                            </tr>
+                        </thead>
+                        <tbody>
+                            <tr>
+                                <td>csrftoken</td>
+                                <td>Protects forms and POST requests against cross-site request forgery.</td>
+                                <td>Public and authenticated</td>
+                            </tr>
+                            <tr>
+                                <td>relecovCookieConsent</td>
+                                <td>Stores the user's cookie preference.</td>
+                                <td>Public and authenticated</td>
+                            </tr>
+                            <tr>
+                                <td>sessionid</td>
+                                <td>Keeps the user signed in after login.</td>
+                                <td>Authenticated only</td>
+                            </tr>
+                        </tbody>
+                    </table>
+                </div>
+                <div class="cookie-toggle-row">
+                    <span class="cookie-toggle" aria-hidden="true"></span>
+                    <strong>Enabled</strong>
+                </div>
+            </div>
+            <div class="cookie-modal-actions">
+                <form method="post" action="{% url 'cookie_consent' %}">
+                    {% csrf_token %}
+                    <input type="hidden" name="value" value="all">
+                    <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                    <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
+                </form>
+                <form method="post" action="{% url 'cookie_consent' %}">
+                    {% csrf_token %}
+                    <input type="hidden" name="value" value="necessary_only">
+                    <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                    <button type="submit" class="cookie-btn cookie-btn-secondary">Reject all</button>
+                </form>
+            </div>
+        </section>
+    </div>
+</div>
+{% endif %}
+
         {% include "core/footer.html" %}
         <!--end Footer-->
 
diff --git a/core/urls.py b/core/urls.py
index 109c5d4f..3d6c3c15 100644
--- a/core/urls.py
+++ b/core/urls.py
@@ -19,6 +19,7 @@
         name="assign_samples_to_user",
     ),
     path("Contact", core.views.contact, name="contact"),
+    path("cookie-consent/", core.views.cookie_consent, name="cookie_consent"),
     path("intranet/", core.views.intranet, name="intranet"),
     path(
         "laboratoryContact/",
diff --git a/core/utils/generic_functions.py b/core/utils/generic_functions.py
index c2e5c8ae..31764b75 100644
--- a/core/utils/generic_functions.py
+++ b/core/utils/generic_functions.py
@@ -110,3 +110,16 @@ def get_user_role(user):
 def get_user_lab_field(user):
     user_group = get_user_role(user)
     return core.config.INSTITUTION_FIELD_MAPDICT.get(user_group)
+
+
+def cookie_consent(request):
+    settings_tab = request.GET.get("cookie_settings")
+    show_cookie_settings = settings_tab in {"privacy", "necessary"}
+    has_cookie_consent = core.config.COOKIE_CONSENT_NAME in request.COOKIES
+    show_cookie_banner = not has_cookie_consent and not show_cookie_settings
+    return {
+        "show_cookie_banner": show_cookie_banner,
+        "show_cookie_settings": show_cookie_settings,
+        "cookie_settings_tab": settings_tab or "privacy",
+        "cookie_consent_next": request.path,
+    }
diff --git a/core/views.py b/core/views.py
index e9cbe2e3..e7c4411c 100644
--- a/core/views.py
+++ b/core/views.py
@@ -6,6 +6,9 @@
 from django.http import JsonResponse
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.models import Group
+from django.utils import timezone
+from django.utils.http import url_has_allowed_host_and_scheme
+from django.views.decorators.http import require_POST
 
 # Local imports
 import core.models
@@ -120,6 +123,39 @@ def index(request):
     )
 
 
+def cookie_policy(request):
+    return render(request, "core/cookiePolicy.html")
+
+
+def _get_cookie_consent_redirect(request):
+    next_url = request.POST.get("next") or "/"
+    if url_has_allowed_host_and_scheme(
+        next_url,
+        allowed_hosts={request.get_host()},
+        require_https=request.is_secure(),
+    ):
+        return next_url
+    return "/"
+
+
+@require_POST
+def cookie_consent(request):
+    consent_value = request.POST.get("value")
+    if consent_value not in core.config.COOKIE_CONSENT_VALUES:
+        return JsonResponse({"ok": False, "error": "Invalid consent value"}, status=400)
+
+    response = redirect(_get_cookie_consent_redirect(request))
+    response.set_cookie(
+        core.config.COOKIE_CONSENT_NAME,
+        f"{consent_value}|{timezone.now().isoformat()}",
+        max_age=core.config.COOKIE_CONSENT_MAX_AGE,
+        path="/",
+        samesite="Lax",
+        secure=request.is_secure(),
+    )
+    return response
+
+
 @login_required
 def assign_samples_to_user(request):
     if request.user.username != "admin":

From 531e4c6c6e88595dbd2d50d5933518dff423477a Mon Sep 17 00:00:00 2001
From: svarona <sarai.var.fer@gmail.com>
Date: Fri, 26 Jun 2026 16:19:16 +0200
Subject: [PATCH 2/4] added cookie policy documentation

---
 core/templates/core/cookiePolicy.html         | 113 ++++++++++++++++++
 core/urls.py                                  |   1 +
 docs/markdown_files/index.md                  |   4 +
 docs/templates/docs/documentationSideBar.html |  13 ++
 4 files changed, 131 insertions(+)
 create mode 100644 core/templates/core/cookiePolicy.html

diff --git a/core/templates/core/cookiePolicy.html b/core/templates/core/cookiePolicy.html
new file mode 100644
index 00000000..97fbcbef
--- /dev/null
+++ b/core/templates/core/cookiePolicy.html
@@ -0,0 +1,113 @@
+{% extends "core/base.html" %}
+
+{% block content %}
+<section class="hero-animated d-flex font-primary">
+    <div class="container position-relative pt-5 pb-5">
+        <div class="row pt-4">
+            <div class="col-lg-10 mx-auto">
+                <h1>Cookie Policy</h1>
+                <p class="text-muted">Last updated: June 2026</p>
+
+                <p>
+                    This Cookie Policy explains how the RELECOV Platform uses cookies and similar technologies. The platform is operated by the Instituto de Salud Carlos III (ISCIII) for viral sequencing and variant evolution monitoring.
+                </p>
+
+                <h2>What Are Cookies?</h2>
+                <p>
+                    Cookies are small pieces of information stored in your browser when you visit a website. They can help a website work correctly, remember user actions or preferences, protect forms, or keep an authenticated session active.
+                </p>
+
+                <h2>Types Of Cookies</h2>
+                <p>
+                    Cookies may be classified by who manages them in:
+                </p>
+                <ul>
+                    <li><strong>First-party cookies:</strong> cookies set from the RELECOV Platform domain.</li>
+                    <li><strong>Third-party cookies:</strong> cookies set from a domain managed by another provider.</li>
+                </ul>
+                <p>
+                    According to how long they remain stored in:
+                </p>
+                <ul>
+                    <li><strong>Session cookies:</strong> cookies used while the user is accessing the service.</li>
+                    <li><strong>Persistent cookies:</strong> cookies stored for a defined period or until deleted by the user.</li>
+                </ul>
+                <p>
+                    According to their purpose:
+                </p>
+                <ul>
+                    <li><strong>Strictly necessary cookies:</strong> cookies required for security, session management, preference storage, or requested services.</li>
+                    <li><strong>Analytics cookies:</strong> cookies that may be used to understand how users interact with the website. The RELECOV Platform does not currently set optional analytics cookies through the consent banner.</li>
+                </ul>
+
+                <h2>Cookies Used By This Platform</h2>
+                <div class="table-responsive">
+                    <table class="table table-bordered align-middle">
+                        <thead>
+                            <tr>
+                                <th>Name</th>
+                                <th>Purpose</th>
+                                <th>Provider</th>
+                                <th>Retention</th>
+                                <th>Type</th>
+                            </tr>
+                        </thead>
+                        <tbody>
+                            <tr>
+                                <td><code>csrftoken</code></td>
+                                <td>Protects forms and POST requests against cross-site request forgery.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 1 year</td>
+                                <td>Strictly necessary</td>
+                            </tr>
+                            <tr>
+                                <td><code>relecovCookieConsent</code></td>
+                                <td>Stores the user's cookie preference.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 1 year</td>
+                                <td>Strictly necessary / preference</td>
+                            </tr>
+                            <tr>
+                                <td><code>sessionid</code></td>
+                                <td>Keeps authenticated users signed in while using the private area of the platform.</td>
+                                <td>RELECOV Platform</td>
+                                <td>Up to 15 days or until the user logs out.</td>
+                                <td>Strictly necessary</td>
+                            </tr>
+                        </tbody>
+                    </table>
+                </div>
+
+                <h2>Personal Data</h2>
+                <p>
+                    These cookies do not store directly readable personal information such as name, email address, or contact details. They are associated with the browser being used. In the authenticated area, the session cookie is used only to keep the user signed in.
+                </p>
+
+                <h2>Consent</h2>
+                <p>
+                    When you first visit the platform, a cookie notice is shown. If you select <strong>Accept</strong>, you accept strictly necessary cookies and any optional third-party or analytics cookies where they are used. If you select <strong>Reject all</strong>, only strictly necessary first-party cookies will be used.
+                </p>
+                <p>
+                    Strictly necessary cookies cannot be disabled from the platform because they are required for security, authentication, and requested services. You can delete or block cookies from your browser settings, although some parts of the platform may stop working correctly.
+                </p>
+
+                <h2>Third-Party Scripts</h2>
+                <p>
+                    Some authenticated pages may load third-party scripts or stylesheets to provide interactive spreadsheet or table functionality. These resources are scripts or stylesheets, not cookies by themselves. If a third-party provider were to set cookies in the future, those cookies should be reviewed and documented here.
+                </p>
+
+                <h2>How To Manage Cookies</h2>
+                <p>
+                    You can manage, delete, or block cookies through your browser settings. Blocking strictly necessary cookies may affect login, form submission, preference storage, or other essential features of the platform.
+                </p>
+
+                <h2>Privacy Policy</h2>
+                <p>
+                    For more information about privacy and data protection, please see the
+                    <a href="https://relecov.isciii.es/politica-de-privacidad/" target="_blank" rel="noopener noreferrer">Privacy Policy</a>.
+                </p>
+            </div>
+        </div>
+    </div>
+</section>
+{% endblock %}
diff --git a/core/urls.py b/core/urls.py
index 3d6c3c15..5283bf00 100644
--- a/core/urls.py
+++ b/core/urls.py
@@ -20,6 +20,7 @@
     ),
     path("Contact", core.views.contact, name="contact"),
     path("cookie-consent/", core.views.cookie_consent, name="cookie_consent"),
+    path("cookie-policy/", core.views.cookie_policy, name="cookie_policy"),
     path("intranet/", core.views.intranet, name="intranet"),
     path(
         "laboratoryContact/",
diff --git a/docs/markdown_files/index.md b/docs/markdown_files/index.md
index ea2978a0..8b771bcc 100644
--- a/docs/markdown_files/index.md
+++ b/docs/markdown_files/index.md
@@ -38,3 +38,7 @@
 
 - **FAQs**
     - [Create new users](create_new_user.md)
+
+- **Legal**
+    - [Cookie Policy](/cookie-policy/)
+
diff --git a/docs/templates/docs/documentationSideBar.html b/docs/templates/docs/documentationSideBar.html
index fa18107f..f817bd38 100644
--- a/docs/templates/docs/documentationSideBar.html
+++ b/docs/templates/docs/documentationSideBar.html
@@ -183,6 +183,19 @@
         </a>
     </li>
 
+    <br>
+    <!-- Divider -->
+    <hr class="sidebar-divider">
+    <div class="sidebar-heading">
+        <i class="bi bi-shield-check"></i> Legal
+    </div>
+    <li class="nav-item {% if '/cookie-policy' in docs_current_path %}active{% endif %}">
+        <a class="nav-link" href="/cookie-policy/">
+            <i class="bi bi-shield-lock"></i>
+            <span>Cookie Policy</span>
+        </a>
+    </li>
+
     <!-- Sidebar Toggler (Sidebar) -->
     <div class="text-center d-none d-md-inline">
         <button class="rounded-circle border-0" id="sidebarToggle">

From ef45a6fd420e3bef6bdf8c554b1238487c49d3f0 Mon Sep 17 00:00:00 2001
From: svarona <sarai.var.fer@gmail.com>
Date: Fri, 26 Jun 2026 16:22:40 +0200
Subject: [PATCH 3/4] added some test

---
 core/tests.py | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/core/tests.py b/core/tests.py
index 876a13ec..9368c27b 100644
--- a/core/tests.py
+++ b/core/tests.py
@@ -34,6 +34,7 @@
 import core.utils.schema
 import core.utils.variants
 from core.templatetags.user_groups import has_group
+from core.utils.generic_functions import cookie_consent
 from core.views import (
     _get_search_sample_rows_for_user,
     _get_sort_value,
@@ -5534,6 +5535,36 @@ def test_index_renders_sample_count_and_nextstrain_url(
             },
         )
 
+    def test_cookie_consent_context_shows_banner_without_cookie(self):
+        request = self.factory.get("/")
+
+        context = cookie_consent(request)
+
+        self.assertEqual(
+            context,
+            {
+                "show_cookie_banner": True,
+                "show_cookie_settings": False,
+                "cookie_settings_tab": "privacy",
+                "cookie_consent_next": "/metadataForm",
+            },
+        )
+
+    def test_cookie_consent_sets_necessary_only_cookie(self):
+        request = self.factory.post(
+            "/cookie-consent/",
+            {"value": "necessary_only", "next": "/"},
+        )
+
+        response = core.views.cookie_consent(request)
+
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response["Location"], "/")
+        consent_cookie = response.cookies["relecovCookieConsent"]
+        self.assertTrue(consent_cookie.value.startswith("necessary_only|"))
+        self.assertEqual(consent_cookie["max-age"], 60 * 60 * 24 * 365)
+        self.assertEqual(consent_cookie["samesite"], "Lax")
+
     @patch("core.views.redirect")
     def test_assign_samples_redirects_non_admin(self, redirect):
         request = self.factory.get("/assignSamples")

From b61853e5c2d616b4e35d92eb0b37088bc394903c Mon Sep 17 00:00:00 2001
From: svarona <sarai.var.fer@gmail.com>
Date: Fri, 26 Jun 2026 16:36:48 +0200
Subject: [PATCH 4/4] Made the banner smoother not loading page every time

---
 .../static/core/custom/css/cookie_consent.css |  21 +--
 core/templates/core/base.html                 | 158 ++++++++++--------
 core/utils/generic_functions.py               |   9 +-
 3 files changed, 96 insertions(+), 92 deletions(-)

diff --git a/core/static/core/custom/css/cookie_consent.css b/core/static/core/custom/css/cookie_consent.css
index e09f726a..98b8df30 100644
--- a/core/static/core/custom/css/cookie_consent.css
+++ b/core/static/core/custom/css/cookie_consent.css
@@ -93,27 +93,19 @@
     background: var(--color-white);
 }
 
-.cookie-modal {
-    position: fixed;
-    inset: 0;
-    z-index: 1250;
-}
-
-.cookie-modal-backdrop {
-    position: absolute;
-    inset: 0;
-    background: rgba(var(--color-black-rgb), 0.72);
+.cookie-modal .modal-dialog {
+    max-width: min(1170px, calc(100vw - 36px));
 }
 
 .cookie-modal-panel {
     position: relative;
     display: grid;
     grid-template-columns: 38% 62%;
-    width: min(1170px, calc(100vw - 36px));
+    width: 100%;
     min-height: 600px;
-    margin: 54px auto;
     overflow: hidden;
     background: var(--color-white);
+    border: 0;
     border-radius: 6px;
     box-shadow: 0 24px 70px rgba(var(--color-black-rgb), 0.35);
 }
@@ -162,6 +154,10 @@
     font-weight: 700;
 }
 
+.cookie-tab:hover {
+    color: var(--color-primary);
+}
+
 .cookie-tab.active {
     background: #f0f0f0;
 }
@@ -253,7 +249,6 @@
     .cookie-modal-panel {
         display: block;
         max-height: calc(100vh - 36px);
-        margin: 18px auto;
         overflow-y: auto;
     }
 
diff --git a/core/templates/core/base.html b/core/templates/core/base.html
index 7cb40e19..b14f35b8 100644
--- a/core/templates/core/base.html
+++ b/core/templates/core/base.html
@@ -161,85 +161,84 @@ <h2 id="cookieConsentTitle">Your privacy is important to us</h2>
                 <input type="hidden" name="next" value="{{ cookie_consent_next }}">
                 <button type="submit" class="cookie-btn cookie-btn-secondary">Reject</button>
             </form>
-            <a class="cookie-btn cookie-btn-outline" href="?cookie_settings=privacy">More information</a>
+            <button type="button" class="cookie-btn cookie-btn-outline" data-bs-toggle="modal" data-bs-target="#cookieSettingsModal">More information</button>
         </div>
     </div>
 </div>
-{% endif %}
 
-{% if show_cookie_settings %}
-<div id="cookieSettingsModal" class="cookie-modal" role="dialog" aria-modal="true" aria-labelledby="cookieSettingsTitle">
-    <a class="cookie-modal-backdrop" href="{{ cookie_consent_next }}" aria-label="Close cookie settings"></a>
-    <div class="cookie-modal-panel">
-        <a class="cookie-modal-close" href="{{ cookie_consent_next }}" aria-label="Close cookie settings">
-            <i class="bi bi-x-lg"></i>
-        </a>
-        <aside class="cookie-modal-sidebar">
-            <img src="{% static 'core/custom/img/GDPR.jpg' %}" alt="eu_gdpr_compliant" class="cookie-modal-logo">
-            <a class="cookie-tab {% if cookie_settings_tab == 'privacy' %}active{% endif %}" href="?cookie_settings=privacy">Privacy overview</a>
-            <a class="cookie-tab {% if cookie_settings_tab == 'necessary' %}active{% endif %}" href="?cookie_settings=necessary">Strictly necessary cookies</a>
-        </aside>
-        <section class="cookie-modal-body">
-            <div class="cookie-tab-panel {% if cookie_settings_tab == 'privacy' %}active{% endif %}">
-                <h2 id="cookieSettingsTitle">Privacy overview</h2>
-                <p>
-                    This website has a public area and an authenticated area. In both areas, strictly necessary first-party cookies may be used for security. In the authenticated area, a session cookie is also used to keep the user signed in. Optional third-party or analytics cookies are only allowed when the selected preference is "Accept all".
-                    <a href="{% url 'cookie_policy' %}">See the Cookie Policy</a>.
-                </p>
-            </div>
-            <div class="cookie-tab-panel {% if cookie_settings_tab == 'necessary' %}active{% endif %}">
-                <h2>Strictly necessary cookies</h2>
-                <p>
-                    These cookies are necessary for the website to function correctly and cannot be disabled in our systems. They are set in response to actions made by the user, such as saving cookie preferences, protecting forms, signing in, or keeping an authenticated session active.
-                </p>
-                <div class="cookie-table-wrapper">
-                    <table class="cookie-table">
-                        <thead>
-                            <tr>
-                                <th>Name</th>
-                                <th>Purpose</th>
-                                <th>Area</th>
-                            </tr>
-                        </thead>
-                        <tbody>
-                            <tr>
-                                <td>csrftoken</td>
-                                <td>Protects forms and POST requests against cross-site request forgery.</td>
-                                <td>Public and authenticated</td>
-                            </tr>
-                            <tr>
-                                <td>relecovCookieConsent</td>
-                                <td>Stores the user's cookie preference.</td>
-                                <td>Public and authenticated</td>
-                            </tr>
-                            <tr>
-                                <td>sessionid</td>
-                                <td>Keeps the user signed in after login.</td>
-                                <td>Authenticated only</td>
-                            </tr>
-                        </tbody>
-                    </table>
+<div class="modal fade cookie-modal" id="cookieSettingsModal" tabindex="-1" aria-labelledby="cookieSettingsTitle" aria-hidden="true">
+    <div class="modal-dialog modal-xl modal-dialog-centered">
+        <div class="modal-content cookie-modal-panel">
+            <button type="button" class="cookie-modal-close" data-bs-dismiss="modal" aria-label="Close cookie settings">
+                <i class="bi bi-x-lg"></i>
+            </button>
+            <aside class="cookie-modal-sidebar" role="tablist" aria-label="Cookie settings sections">
+                <img src="{% static 'core/custom/img/GDPR.jpg' %}" alt="eu_gdpr_compliant" class="cookie-modal-logo">
+                <button type="button" class="cookie-tab active" id="cookiePrivacyTab" data-bs-toggle="tab" data-bs-target="#cookiePrivacyPanel" role="tab" aria-controls="cookiePrivacyPanel" aria-selected="true">Privacy overview</button>
+                <button type="button" class="cookie-tab" id="cookieNecessaryTab" data-bs-toggle="tab" data-bs-target="#cookieNecessaryPanel" role="tab" aria-controls="cookieNecessaryPanel" aria-selected="false">Strictly necessary cookies</button>
+            </aside>
+            <section class="cookie-modal-body tab-content">
+                <div class="cookie-tab-panel tab-pane fade show active" id="cookiePrivacyPanel" role="tabpanel" aria-labelledby="cookiePrivacyTab" tabindex="0">
+                    <h2 id="cookieSettingsTitle">Privacy overview</h2>
+                    <p>
+                        This website has a public area and an authenticated area. In both areas, strictly necessary first-party cookies may be used for security. In the authenticated area, a session cookie is also used to keep the user signed in. Optional third-party or analytics cookies are only allowed when the selected preference is "Accept all".
+                        <a href="{% url 'cookie_policy' %}">See the Cookie Policy</a>.
+                    </p>
                 </div>
-                <div class="cookie-toggle-row">
-                    <span class="cookie-toggle" aria-hidden="true"></span>
-                    <strong>Enabled</strong>
+                <div class="cookie-tab-panel tab-pane fade" id="cookieNecessaryPanel" role="tabpanel" aria-labelledby="cookieNecessaryTab" tabindex="0">
+                    <h2>Strictly necessary cookies</h2>
+                    <p>
+                        These cookies are necessary for the website to function correctly and cannot be disabled in our systems. They are set in response to actions made by the user, such as saving cookie preferences, protecting forms, signing in, or keeping an authenticated session active.
+                    </p>
+                    <div class="cookie-table-wrapper">
+                        <table class="cookie-table">
+                            <thead>
+                                <tr>
+                                    <th>Name</th>
+                                    <th>Purpose</th>
+                                    <th>Area</th>
+                                </tr>
+                            </thead>
+                            <tbody>
+                                <tr>
+                                    <td>csrftoken</td>
+                                    <td>Protects forms and POST requests against cross-site request forgery.</td>
+                                    <td>Public and authenticated</td>
+                                </tr>
+                                <tr>
+                                    <td>relecovCookieConsent</td>
+                                    <td>Stores the user's cookie preference.</td>
+                                    <td>Public and authenticated</td>
+                                </tr>
+                                <tr>
+                                    <td>sessionid</td>
+                                    <td>Keeps the user signed in after login.</td>
+                                    <td>Authenticated only</td>
+                                </tr>
+                            </tbody>
+                        </table>
+                    </div>
+                    <div class="cookie-toggle-row">
+                        <span class="cookie-toggle" aria-hidden="true"></span>
+                        <strong>Enabled</strong>
+                    </div>
                 </div>
-            </div>
-            <div class="cookie-modal-actions">
-                <form method="post" action="{% url 'cookie_consent' %}">
-                    {% csrf_token %}
-                    <input type="hidden" name="value" value="all">
-                    <input type="hidden" name="next" value="{{ cookie_consent_next }}">
-                    <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
-                </form>
-                <form method="post" action="{% url 'cookie_consent' %}">
-                    {% csrf_token %}
-                    <input type="hidden" name="value" value="necessary_only">
-                    <input type="hidden" name="next" value="{{ cookie_consent_next }}">
-                    <button type="submit" class="cookie-btn cookie-btn-secondary">Reject all</button>
-                </form>
-            </div>
-        </section>
+                <div class="cookie-modal-actions">
+                    <form method="post" action="{% url 'cookie_consent' %}">
+                        {% csrf_token %}
+                        <input type="hidden" name="value" value="all">
+                        <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                        <button type="submit" class="cookie-btn cookie-btn-primary">Accept all</button>
+                    </form>
+                    <form method="post" action="{% url 'cookie_consent' %}">
+                        {% csrf_token %}
+                        <input type="hidden" name="value" value="necessary_only">
+                        <input type="hidden" name="next" value="{{ cookie_consent_next }}">
+                        <button type="submit" class="cookie-btn cookie-btn-secondary">Reject all</button>
+                    </form>
+                </div>
+            </section>
+        </div>
     </div>
 </div>
 {% endif %}
@@ -261,5 +260,18 @@ <h2>Strictly necessary cookies</h2>
         <!-- Template Main JS File -->
         <script src="{% static 'core/main_style/js/main.js' %}"></script>
 
+        <script>
+            const cookieSettingsModal = document.getElementById("cookieSettingsModal");
+            const cookieConsentBanner = document.getElementById("cookieConsentBanner");
+            if (cookieSettingsModal && cookieConsentBanner) {
+                cookieSettingsModal.addEventListener("show.bs.modal", function () {
+                    cookieConsentBanner.classList.add("cookie-consent-hidden");
+                });
+                cookieSettingsModal.addEventListener("hidden.bs.modal", function () {
+                    cookieConsentBanner.classList.remove("cookie-consent-hidden");
+                });
+            }
+        </script>
+
     </body>
 </html>
diff --git a/core/utils/generic_functions.py b/core/utils/generic_functions.py
index 31764b75..6515c56e 100644
--- a/core/utils/generic_functions.py
+++ b/core/utils/generic_functions.py
@@ -113,13 +113,10 @@ def get_user_lab_field(user):
 
 
 def cookie_consent(request):
-    settings_tab = request.GET.get("cookie_settings")
-    show_cookie_settings = settings_tab in {"privacy", "necessary"}
     has_cookie_consent = core.config.COOKIE_CONSENT_NAME in request.COOKIES
-    show_cookie_banner = not has_cookie_consent and not show_cookie_settings
     return {
-        "show_cookie_banner": show_cookie_banner,
-        "show_cookie_settings": show_cookie_settings,
-        "cookie_settings_tab": settings_tab or "privacy",
+        "show_cookie_banner": not has_cookie_consent,
+        "show_cookie_settings": False,
+        "cookie_settings_tab": "privacy",
         "cookie_consent_next": request.path,
     }