Cookie policy
1- INTRODUCTION
In accordance with article 22.2 of Law 34/2002, as drafted by section five of the second final provision of Law 9/2014 of 9 May, the General Telecommunications Act (Spanish Official State Gazette of 10 May; corrigendum in the Official State Gazette of 17 May), in force since 11 May 2014: “Service providers may use data storage and retrieval devices (known as cookies) on recipients’ terminal equipment, provided that the recipients have given their consent after being provided with clear and complete information about their use, in particular about the purposes of the data processing, in accordance with the provisions of Organic Law 3/2018 on the protection of personal data.” However, and in accordance with the third paragraph of article 22.2, “The foregoing shall not prevent any possible storage or access of a technical nature for the sole purpose of carrying out the transmission of a communication over an electronic communications network or, to the extent strictly necessary, for the provision of an information society service expressly requested by the recipient”. This last point refers to what are known as technical cookies.
Below we explain, in clear layers, how we inform you about cookies and how you can accept or reject them (except for strictly necessary technical cookies).
2- HOW TO INFORM AND OBTAIN INFORMED CONSENT
In its transparency guidelines, WP29 recommends the use of layered privacy statements or notices, that is, notices that present the information in layers so that the user can go to those aspects of the statement or notice that are of greatest interest to them, thereby avoiding information fatigue, without prejudice to all the information being available in a single place or in a complete document that can be easily accessed should the data subject wish to consult it in full.
This system consists of displaying the essential information in a first layer together with 3 buttons: ACCEPT, REJECT (only technical cookies are authorised) and MORE INFORMATION. In practice, this first layer takes the form of a banner or a tab displayed when the web page or application is accessed, and is then supplemented by a second layer, in the form of a page offering more detailed and specific information about cookies (usually called the cookie policy page).
The first layer, which for greater clarity may be identified under a commonly used term (such as, for example, “cookies”), would include the following information:
a) Identification of the publisher responsible for the website. The company name will not be required, provided that its full identifying details appear in other sections of the website (legal notice, privacy policy, etc.) and its identity can be clearly inferred from the website itself (for example, when the domain itself corresponds to the name of the publisher or the brand by which it identifies itself to the public, or when that name or brand appears clearly on the website).
b) Identification of the purposes of the cookies that will be used.
c) Information on whether the cookies are first-party (belonging to the website controller) or also third-party cookies associated with it, without the need to identify the third parties in this first layer.
d) Generic information on the type of data that will be collected and used in the event that user profiles are created (for example, when behavioural advertising cookies are used).
e) How the user can accept, configure and reject the use of cookies.
f) A clearly visible link to a second information layer containing more detailed information, using, for example, the term “Cookies”, “Cookie policy” or “More information, click here”.
This information will be provided before the cookies are used, including, where applicable, before they are installed, in a format that is visible to the user and that must be maintained until the user performs the action required to obtain consent or to reject it (in the meantime, technical cookies may be installed on the user’s device, e.g. PHPSESSID, ASPNET_SESSION and similar).
3- TEXT OF THE "COOKIE POLICY" PAGE
1 - BACKGROUND
In accordance with the Spanish regulations governing the use of cookies in relation to the provision of electronic communications services, set out in article 22.2 of Law 34/2002 of 11 July on information society services and electronic commerce, we hereby inform you about the cookies used on the website of PERLAS ORQUIDEA S.A and the reason for their use.
2- WHAT ARE COOKIES?
A cookie is a file that is downloaded onto your computer when you access certain web pages. Cookies allow a web page, among other things, to store and retrieve information about a user’s browsing habits or about their device and, depending on the information they contain and the way the device is used, they may be used to recognise the user. Cookies are associated solely with an anonymous user and their computer or device and do not provide references that would reveal their personal data.
3- TYPES OF COOKIES
3.1.- According to the entity that manages them
a.- First-party cookies: These are cookies sent to the user’s terminal equipment from a device or domain managed by the publisher itself and from which the service requested by the user is provided.
b.- Third-party cookies: These are cookies sent to the user’s terminal equipment from a device or domain that is not managed by the publisher, but by another entity that processes the data obtained through the cookies.
3.2.- According to their purpose
There are many purposes for the use of cookies. Depending on the purpose for which the data obtained through cookies is processed, some of the purposes may be:
a) Technical cookies: these are cookies that allow the user to browse a website, platform or application and to use the various options or services available on it, including those that the publisher uses to enable the management and operation of the website and to enable its functions and services, such as, for example, controlling traffic and data communication, identifying the session, accessing restricted-access areas, remembering the items that make up an order, carrying out the purchase process for an order, managing payment, controlling fraud linked to service security, submitting a request to register for or take part in an event, counting visits for the purpose of billing software licences with which the service operates (website, platform or application), using security features while browsing, storing content for the broadcasting of video or sound, enabling dynamic content (for example, a loading animation for text or an image) or sharing content through social networks.
Technical cookies will be exempt from compliance with the obligations set out in article 22.2 of the LSSI when they enable the service requested by the user to be provided, as is the case with the cookies listed in the preceding paragraphs. However, if these cookies are also used for non-exempt purposes (for example, for behavioural advertising purposes), they will be subject to those obligations.
b) Preference or personalisation cookies: these are cookies that make it possible to remember information so that the user accesses the service with certain characteristics that may differentiate their experience from that of other users, such as, for example, the language, the number of results to be displayed when the user performs a search, the appearance or content of the service depending on the type of browser through which the user accesses the service or the region from which they access the service, etc.
If it is the user themselves who chooses these characteristics (for example, if they select the language of a website by clicking on the icon of the corresponding country flag), the cookies will be exempt from the obligations of article 22.2 of the LSSI as they are considered a service expressly requested by the user, provided always that the cookies serve exclusively the selected purpose.
c) Analysis or measurement cookies: these are cookies that allow the party responsible for them to monitor and analyse the behaviour of the users of the websites to which they are linked, including the quantification of the impact of advertisements. The information collected through this type of cookie is used to measure the activity of the websites, application or platform, with the aim of introducing improvements based on the analysis of the usage data of the service’s users.
d) Behavioural advertising cookies: these are cookies that store information on users’ behaviour obtained through the continuous observation of their browsing habits, which makes it possible to develop a specific profile in order to display advertising based on it.
3.3.- According to how long they remain active
a) Session cookies: these are cookies designed to collect and store data while the user accesses a web page. They are usually used to store information that only needs to be kept in order to provide the service requested by the user on a single occasion (for example, a list of purchased products) and they disappear when the session ends.
b) Persistent cookies: these are cookies in which the data remains stored on the device and can be accessed and processed for a period defined by the party responsible for the cookie, which may range from a few minutes to several years.
4- LIST OF COOKIES USED BY THIS WEBSITE
The use of cookies offers advantages in the provision of services within what is known as the information society, since it makes it easier for the user to browse and access the various services offered by this website; it saves the user from having to configure the predefined general settings each time they access the website; and it helps improve the operation and the services provided through this website, following the corresponding analysis of the information obtained through the cookies installed.
Specifically, this website uses the following cookies:
|
Name |
Entity |
Expiry |
Purpose |
|
localization |
First-party (Shopify) |
1 year |
Localises the cart and the store to the country. |
|
cart_currency |
First-party (Shopify) |
14 days |
Remembers the cart currency (EUR). |
|
_shopify_essential |
First-party (Shopify) |
1 year |
Essential operation: session, checkout and anti-tampering data. HttpOnly; does not appear in document.cookie. |
|
_shop_app_essential |
Third-party (Shopify (Shop / Shop Pay)) |
1 year |
Essential operation of Shop.app (Shop Pay login, email capture, secure session). |
|
_shop_app_essential |
Third-party (Shopify (Shop Pay)) |
1 year |
Essential session for the Shop Pay payment flow. |
|
cart |
First-party (Shopify) |
91 days |
Cart identifier (token + key). |
|
_shopify_y |
First-party (Shopify Analytics (Trekkie / web pixels)) |
1 year |
Persistent visitor identifier for Shopify analytics. |
|
_shopify_s |
First-party (Shopify Analytics (Trekkie / web pixels)) |
30 minutes |
Shopify analytics session identifier. |
|
_shopify_analytics |
First-party (Shopify) |
1 year |
Shopify analytics HttpOnly token (not accessible by JavaScript). |
|
_shopify_marketing |
First-party (Shopify) |
1 year |
Shopify marketing HttpOnly token (pixels / attribution). |
|
shopify_client_id |
First-party (Shopify) |
1 year |
First-party copy of the Shopify customer/visitor ID (matches the value of _shopify_y). |
|
_gcl_au |
First-party (Google Ads (Conversion Linker), via Shopify pixel / GTM) |
90 days |
First-party attribution of Google Ads conversions (Conversion Linker). |
|
_fbp |
First-party (Meta (Facebook Pixel)) |
90 days |
First-party identifier of the Meta pixel for ad measurement. |
|
__cf_bm |
Third-party (Cloudflare / hCaptcha) |
30 minutes |
Cloudflare bot management for the hCaptcha widget used at checkout / Shop verification. |
|
NID |
Third-party (Google (Google Pay)) |
6 months |
Google cookie associated with the Google Pay iframe. Google uses it for preferences and advertising on its domains. |
5- WITHDRAWAL AND DELETION OF COOKIES
You may access your browser settings at any time to accept or reject all cookies, or to select which cookies you allow to be installed and which you do not, following the procedures specific to the browser you use.
6- THIRD-PARTY SERVICE PROVIDERS
The third-party service providers with which we have contracted a service requiring the use of cookies are listed below:
|
Provider |
Purpose of the Service and of the Cookie |
Provider Information |
|
Shopify |
• First-party copy of the Shopify customer/visitor ID (matches the value of _shopify_y). |
https://www.shopify.com/legal/privacy |
|
Shopify (Shop / Shop Pay) |
• Essential operation of Shop.app (Shop Pay login, email capture, secure session). |
https://www.shopify.com/legal/privacy |
|
Shopify (Shop Pay) |
• Essential session for the Shop Pay payment flow. |
https://www.shopify.com/legal/privacy |
|
Shopify Analytics (Trekkie / web pixels) |
• Persistent visitor identifier for Shopify analytics. |
https://www.shopify.com/legal/privacy |
|
Google Ads (Conversion Linker), via Shopify pixel / GTM |
• First-party attribution of Google Ads conversions (Conversion Linker). |
https://policies.google.com/privacy |
|
Meta (Facebook Pixel) |
• First-party identifier of the Meta pixel for ad measurement. |
https://www.facebook.com/privacy/policy/ |
|
Cloudflare / hCaptcha |
• Cloudflare bot management for the hCaptcha widget used at checkout / Shop verification. |
https://www.cloudflare.com/privacypolicy/ |
|
Google (Google Pay) |
• Google cookie associated with the Google Pay iframe. Google uses it for preferences and advertising on its domains. |
https://policies.google.com/privacy |