contents

18 November, 2025

Cookies Policy

1 COOKIE POLICY (POLÍTICA DE COOKIES)

1.1 This Cookies Policy describes how Prestige Expo S.L. uses cookies and similar technologies on this website, in accordance with:

  • Regulation (EU) 2016/679 (GDPR)

     

  • Directive 2002/58/EC (ePrivacy Directive)

     

  • Spanish Law 34/2002 on Information Society Services (LSSI-CE)

     

  • AEPD “Guía sobre el uso de las cookies” (2023 update)

     

  • EDPB Guidelines on valid consent (05/2020)
     


    Use of cookies requires the user’s informed, explicit and granular consent, except for those that are strictly necessary for the operation of the site.
     

2 What Are Cookies?

2.1

Cookies are small files stored on the user’s device (computer, smartphone, tablet) when browsing a website. They contain technical or behavioural information that allows:

 

  • remembering user settings
  • enabling technical website functions
  • analysing website usage
  • measuring performance
  • personalising content
  • enabling advertising and remarketing functions


This definition follows Article 22 LSSI-CE and the AEPD Cookie Guidelines, which treat cookies as data processing when linked to identifiable users.

3 Types of Cookies Used

3.1

Prestige Expo uses several categories of cookies in accordance with the AEPD classification.

3.2 A. Technical / Strictly Necessary Cookies

(Exempt from consent under Art. 22 LSSI and AEPD guidelines)
These cookies are essential for the operation of the website:

  • Page navigation
  • Security layers
  • Load balancing
  • Session identification
  • CookieScript consent panel functionality

Examples:

  • CookieScriptConsent (CookieScript)
  • __cf_bm (Cloudflare bot management)
  • Hostinger server cookies

These cookies cannot be disabled in our systems.

3.3 B. Preference / Personalization Cookies

(Store user choices)
These cookies allow the website to remember:

  • Selected language
  • Regional configuration
  • Interface customization
  • Whether the cookie banner has already been displayed

Consent required.

3.4 C. Analytics Cookies

(Require explicit consent — per AEPD and CNIL rulings)
Used to understand how users interact with the website.
 

Google Analytics 4 (GA4)

Google Analytics uses first-party cookies to gather anonymised information such as:

  • page visits
  • session duration
  • interaction events
  • device/browser info

Configuration implemented under:

  • IP anonymization
  • EU Data Processing Addendum
  • Google’s Standard Contractual Clauses (SCCs)

Without user consent, GA4 cookies cannot load.

3.5 D. Advertising & Remarketing Cookies

(Consent mandatory under GDPR + ePrivacy)
These cookies track the user across sites to measure conversions or show personalised adverts.

Meta Pixel (Facebook/Instagram)

Used for:

  • retargeting
  • ad performance
  • conversion measurement

Meta is considered a joint controller for certain processing operations (ECJ “Fashion ID” ruling).

LinkedIn Insight Tag

Used for:

  • ad analytics
  • conversions
  • audience insights

Google Ads / Google Marketing Platform

Used for:

  • remarketing
  • ad conversion tracking
  • performance attribution

Advertising cookies cannot load before user consent.

3.6 E. Third-Party Cookies

These cookies come from integrated services:

HubSpot Tracking Cookies

Used for:

  • identifying returning visitors
  • CRM analytics
  • email click/open interaction
  • session tracking for form submissions

HubSpot cookies are not strictly necessary; they require consent (AEPD ruling 2023).

YouTube / Vimeo Video Embeds

These may set cookies for:

  • video playback
  • recommendations
  • performance metrics

We use YouTube’s Privacy-Enhanced Mode where possible.

Cloudflare Security Cookies

Used for:

  • bot mitigation
  • security threat detection
  • load balancing

These are classified as strictly necessary.

CookieScript

Used to:

  • store user consent
  • manage cookie categories
  • ensure compliance with Article 22 LSSI
4 Cookie Table

4.1

Prestige Expo uses CookieScript to automatically scan, identify, and display all cookies used by the website.

The dynamically generated table includes:

  • cookie name
  • provider
  • type/category
  • purpose
  • duration
  • storage location
  • whether it is first-party or third-party

This table is updated automatically whenever the CookieScript scanner detects changes.

5 Cookie Management

5.1

Users can manage cookie preferences at any time through:

5.2 A. CookieScript Consent Panel

You can:

  • Accept all cookies
  • Reject all non-essential cookies
  • Enable/disable categories (analytics, preferences, marketing)
  • Withdraw consent at any time

5.3 B. Browser Settings

Users may delete or block cookies in:

  • Chrome
  • Safari
  • Firefox
  • Edge
  • Opera

Blocking cookies may affect website functionality.

5.4 C. Revoking Consent

Under Article 7(3) GDPR, users can withdraw consent at any time from the CookieScript panel.

6 Consent Rules

6.1

In compliance with AEPD and EDPB:

  • Consent must be informed, explicit, granular, and revocable
  • “By continuing to browse” is not valid consent
  • Reject option must be displayed at the same level as accept
  • No pre-ticked boxes
  • Consent renewal period is set to:
    ➡ 12 months (AEPD recommendation)

6.2 Soft Opt-In (Applicable situations)

When a returning user:

has previously given valid consent, and

fills a form again

Cookies may load according to stored preferences.

Consent is never forced or assumed.

7 Third-Party Services

7.1

The website integrates services that may deploy cookies when enabled by user consent:

Advertising / Retargeting

  • Meta Pixel
  • LinkedIn Insight Tag
  • Google Ads

Analytics

  • Google Analytics 4
  • HubSpot Analytics

Functional

  • YouTube (Google LLC)
  • Vimeo
  • CookieScript
  • Cloudflare
  • Hostinger

Each provider operates under its own privacy policy:
(official sources)

  • Google Policies: https://policies.google.com
  • Meta Privacy Center: https://www.facebook.com/privacy
  • LinkedIn Privacy: https://www.linkedin.com/legal/privacy-policy
  • HubSpot Privacy: https://legal.hubspot.com/privacy-policy
  • Cloudflare Privacy: https://www.cloudflare.com/privacypolicy/
  • CookieScript: https://cookie-script.com/privacy-policy

Prestige Expo is not responsible for third-party policies or future changes.

8 International Data Transfers

8.1

Some third-party providers operate outside the EEA.

Transfers occur under:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)
  • Supplementary technical measures

Providers:

  • Google LLC
  • Meta Platforms Inc.
  • Microsoft
  • HubSpot Inc.

No cookies load before consent, so no personal data is transferred internationally until accepted.

9 Updates to the Cookie Policy

9.1

Prestige Expo may update this Cookies Policy in accordance with:

  • Regulatory changes
  • AEPD interpretations
  • Platform updates (Google, Meta, LinkedIn, HubSpot…)
  • New features implemented on the website

When changes are material, the user will be prompted to renew cookie consent.