contents
18 November, 2025
Cookies Policy
1 COOKIE POLICY (POLÍTICA DE COOKIES)
1.1 This Cookies Policy describes how Prestige Expo S.L. uses cookies and similar technologies on this website, in accordance with:
Regulation (EU) 2016/679 (GDPR)
Directive 2002/58/EC (ePrivacy Directive)
Spanish Law 34/2002 on Information Society Services (LSSI-CE)
AEPD “Guía sobre el uso de las cookies” (2023 update)
EDPB Guidelines on valid consent (05/2020)
Use of cookies requires the user’s informed, explicit and granular consent, except for those that are strictly necessary for the operation of the site.
2 What Are Cookies?
2.1
Cookies are small files stored on the user’s device (computer, smartphone, tablet) when browsing a website. They contain technical or behavioural information that allows:
- remembering user settings
- enabling technical website functions
- analysing website usage
- measuring performance
- personalising content
- enabling advertising and remarketing functions
This definition follows Article 22 LSSI-CE and the AEPD Cookie Guidelines, which treat cookies as data processing when linked to identifiable users.
3 Types of Cookies Used
3.1
Prestige Expo uses several categories of cookies in accordance with the AEPD classification.
3.2 A. Technical / Strictly Necessary Cookies
(Exempt from consent under Art. 22 LSSI and AEPD guidelines)
These cookies are essential for the operation of the website:
- Page navigation
- Security layers
- Load balancing
- Session identification
- CookieScript consent panel functionality
Examples:
- CookieScriptConsent (CookieScript)
- __cf_bm (Cloudflare bot management)
- Hostinger server cookies
These cookies cannot be disabled in our systems.
3.3 B. Preference / Personalization Cookies
(Store user choices)
These cookies allow the website to remember:
- Selected language
- Regional configuration
- Interface customization
- Whether the cookie banner has already been displayed
Consent required.
3.4 C. Analytics Cookies
(Require explicit consent — per AEPD and CNIL rulings)
Used to understand how users interact with the website.
Google Analytics 4 (GA4)
Google Analytics uses first-party cookies to gather anonymised information such as:
- page visits
- session duration
- interaction events
- device/browser info
Configuration implemented under:
- IP anonymization
- EU Data Processing Addendum
- Google’s Standard Contractual Clauses (SCCs)
Without user consent, GA4 cookies cannot load.
3.5 D. Advertising & Remarketing Cookies
(Consent mandatory under GDPR + ePrivacy)
These cookies track the user across sites to measure conversions or show personalised adverts.
Meta Pixel (Facebook/Instagram)
Used for:
- retargeting
- ad performance
- conversion measurement
Meta is considered a joint controller for certain processing operations (ECJ “Fashion ID” ruling).
LinkedIn Insight Tag
Used for:
- ad analytics
- conversions
- audience insights
Google Ads / Google Marketing Platform
Used for:
- remarketing
- ad conversion tracking
- performance attribution
Advertising cookies cannot load before user consent.
3.6 E. Third-Party Cookies
These cookies come from integrated services:
HubSpot Tracking Cookies
Used for:
- identifying returning visitors
- CRM analytics
- email click/open interaction
- session tracking for form submissions
HubSpot cookies are not strictly necessary; they require consent (AEPD ruling 2023).
YouTube / Vimeo Video Embeds
These may set cookies for:
- video playback
- recommendations
- performance metrics
We use YouTube’s Privacy-Enhanced Mode where possible.
Cloudflare Security Cookies
Used for:
- bot mitigation
- security threat detection
- load balancing
These are classified as strictly necessary.
CookieScript
Used to:
- store user consent
- manage cookie categories
- ensure compliance with Article 22 LSSI
4 Cookie Table
4.1
Prestige Expo uses CookieScript to automatically scan, identify, and display all cookies used by the website.
The dynamically generated table includes:
- cookie name
- provider
- type/category
- purpose
- duration
- storage location
- whether it is first-party or third-party
This table is updated automatically whenever the CookieScript scanner detects changes.
5 Cookie Management
5.1
Users can manage cookie preferences at any time through:
5.2 A. CookieScript Consent Panel
You can:
- Accept all cookies
- Reject all non-essential cookies
- Enable/disable categories (analytics, preferences, marketing)
- Withdraw consent at any time
5.3 B. Browser Settings
Users may delete or block cookies in:
- Chrome
- Safari
- Firefox
- Edge
- Opera
Blocking cookies may affect website functionality.
5.4 C. Revoking Consent
Under Article 7(3) GDPR, users can withdraw consent at any time from the CookieScript panel.
6 Consent Rules
6.1
In compliance with AEPD and EDPB:
- Consent must be informed, explicit, granular, and revocable
- “By continuing to browse” is not valid consent
- Reject option must be displayed at the same level as accept
- No pre-ticked boxes
- Consent renewal period is set to:
➡ 12 months (AEPD recommendation)
6.2 Soft Opt-In (Applicable situations)
When a returning user:
has previously given valid consent, and
fills a form again
Cookies may load according to stored preferences.
Consent is never forced or assumed.
7 Third-Party Services
7.1
The website integrates services that may deploy cookies when enabled by user consent:
Advertising / Retargeting
- Meta Pixel
- LinkedIn Insight Tag
- Google Ads
Analytics
- Google Analytics 4
- HubSpot Analytics
Functional
- YouTube (Google LLC)
- Vimeo
- CookieScript
- Cloudflare
- Hostinger
Each provider operates under its own privacy policy:
(official sources)
- Google Policies: https://policies.google.com
- Meta Privacy Center: https://www.facebook.com/privacy
- LinkedIn Privacy: https://www.linkedin.com/legal/privacy-policy
- HubSpot Privacy: https://legal.hubspot.com/privacy-policy
- Cloudflare Privacy: https://www.cloudflare.com/privacypolicy/
- CookieScript: https://cookie-script.com/privacy-policy
Prestige Expo is not responsible for third-party policies or future changes.
8 International Data Transfers
8.1
Some third-party providers operate outside the EEA.
Transfers occur under:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Supplementary technical measures
Providers:
- Google LLC
- Meta Platforms Inc.
- Microsoft
- HubSpot Inc.
No cookies load before consent, so no personal data is transferred internationally until accepted.
9 Updates to the Cookie Policy
9.1
Prestige Expo may update this Cookies Policy in accordance with:
- Regulatory changes
- AEPD interpretations
- Platform updates (Google, Meta, LinkedIn, HubSpot…)
- New features implemented on the website
When changes are material, the user will be prompted to renew cookie consent.