In brief. By default this site loads only strictly necessary technical cookies. The measurement cookies of Google Analytics 4 and Microsoft Clarity load only if you accept them in the banner, always run under Consent Mode v2 and strict masking, and can be withdrawn at any time. We never use advertising or profiling cookies, and rejecting the measurement cookies changes nothing about how the site works for you.
1. What are cookies?
A cookie is a small text file that a website downloads to your browser (computer, mobile phone, tablet) when you visit it. It is used to remember information about your visit: your chosen language, whether you have accepted the legal notice, anonymised usage metrics, etc. Some cookies are essential for the website to work (they cannot be rejected). Others are only used if you authorise them.
In this policy we use the term «cookies» in a broad sense, including other equivalent technologies (such as localStorage or sessionStorage entries) when used for similar purposes.
2. Applicable legal framework
- Article 22.2 of Spanish Law 34/2002 on Information Society Services (LSSI): the use of non-strictly-necessary cookies requires informed, free, specific, unambiguous and revocable consent.
- Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD): when cookies process personal data, the principles and rights of the GDPR apply alongside consent.
- AEPD Cookie Guidelines (current version): specific criteria on the consent banner, the equivalence between accepting and rejecting, the maximum validity period of consent (24 months) and the minimum information.
The controller of the data associated with cookies is Manuel Navarro Rajoy (LegalData.pro). The designated Data Protection Officer is the same controller, with individual DPO certification under the AEPD-DPO Scheme, registry A2025166DPD. More information in the Privacy Policy.
3. Types of cookies by purpose
- Technical or strictly necessary cookies. They allow the site to work (remember language, manage the consent banner, maintain a secure session). They do not require consent, in line with Article 22.2 LSSI in fine.
- Measurement or analytics cookies. They allow us to know how many visits we have, which pages are read and how the site is browsed. They are loaded only if the user consents in the banner.
- Personalisation or advertising cookies. We do not use them. If we activate them in the future, this policy will be updated and consent will be requested again.
4. Cookies used by this site
Below we detail every cookie effectively used at the time of the last update of this policy. If a cookie not listed here is activated at any time, the table will be updated and consent will be requested again where applicable.
4.1. Technical cookies (always present)
| Name | Owner | Purpose | Type | Retention |
|---|---|---|---|---|
consent_mode | LegalData.pro (first-party) | Stores the user's decision on cookie usage (accept all, essential, custom) so the banner is not shown again at every visit. | Technical | 12 months |
LANG_REDIRECTED | LegalData.pro (first-party) | Marks that the automatic redirection to the browser language has already taken place to prevent redirect loops. | Technical | Session / 30 days |
JSESSIONID | LegalData.pro (first-party) | Maintains a secure session during navigation. Only set if the server opens a session (for example, when submitting the contact form). | Technical | Session (deleted on browser close) |
4.2. Measurement cookies (only with your consent)
If you authorise measurement cookies in the banner, we load Google Tag Manager (GTM-WJZMX5NJ) and, through it, Google Analytics 4 with IP anonymisation and Microsoft Clarity (heatmaps and session recording). The cookies that may be set are:
| Name | Owner | Purpose | Type | Retention |
|---|---|---|---|---|
_ga | Google Ireland Ltd. (Google Analytics 4) | Anonymously identifies unique users to know how many distinct people visit the site. | Measurement · third-party | 2 years |
_ga_<ID> | Google Ireland Ltd. (Google Analytics 4) | Maintains the session state for the site's specific GA4 container. | Measurement · third-party | 2 years |
_gid | Google Ireland Ltd. (Google Analytics) | Distinguishes users for analysis over 24 hours. Only loaded if the GA property is configured to use it. | Measurement · third-party | 24 hours |
_dc_gtm_<ID> | Google Ireland Ltd. (Google Tag Manager) | Throttles requests to Google Analytics. | Measurement · third-party | 1 minute |
_clck | Microsoft Ireland Operations Ltd. (Microsoft Clarity) | Keeps an anonymous Clarity identifier and the user's preferences across visits. | Measurement · third-party | 1 year |
_clsk | Microsoft Ireland Operations Ltd. (Microsoft Clarity) | Groups the page views of a single session for the recording. | Measurement · third-party | 1 day |
CLID | Microsoft Ireland Operations Ltd. (Microsoft Clarity) | Identifies the browser the first time Clarity records it. | Measurement · third-party | 1 year |
ANONCHK | Microsoft Corporation | Checks the validity and use of the MUID identifier; helps apply rate limits. | Measurement · third-party | 10 minutes |
MUID | Microsoft Corporation | Microsoft user identifier that recognises the browser across Microsoft domains. | Measurement · third-party | 1 year |
We configure Google Analytics 4 with IP anonymisation and disable personalised advertising features and marketing identifiers. We apply Consent Mode v2: until the user consents, measurement tags do not send identifying data. Microsoft Clarity loads only with your consent and is configured in strict masking mode, so it does not capture the text shown or the text you enter (for example, in forms); nor do we use it for advertising purposes.
4.3. International transfers of data associated with cookies
Google Ireland Ltd. (Google Analytics) and Microsoft Ireland Operations Limited / Microsoft Corporation (Microsoft Clarity), as processors for measurement cookies, may process part of the data on servers located in the United States. These transfers are covered by:
- The EU-US Data Privacy Framework (Adequacy Decision 2023/1795 of the European Commission), as Google and Microsoft are certified under this framework.
- Standard Contractual Clauses approved by the European Commission as an additional mechanism.
5. Legal basis for each type of cookie
| Type of cookie | GDPR legal basis | LSSI framework |
|---|---|---|
| Strictly necessary technical cookies | Art. 6(1)(b) GDPR (necessary to provide the requested service). | Exempt from consent under Art. 22.2 in fine LSSI. |
| Measurement / analytics | Art. 6(1)(a) GDPR (explicit, informed, revocable consent). | Prior consent required under Art. 22.2 LSSI. |
6. How to give or withdraw your consent
The first time you visit the site, a banner appears at the bottom of the screen with three options of equivalent visibility and ease:
- Accept all — you authorise technical and measurement cookies.
- Reject — only strictly necessary cookies are loaded.
- Preferences — you choose which categories you accept.
Until you decide, no measurement cookies are loaded. Your decision is stored in the technical cookie consent_mode for a maximum of 12 months; once that period has elapsed, we will ask you again.
Withdraw consent at any time
- You can change your preferences by reopening the panel from the «Cookie preferences» link in the footer.
- You can delete all cookies directly from your browser. This will reset your consent and the banner will reappear.
7. How to manage cookies in each browser
In addition to the site's consent banner, you can configure your browser to block, delete or be notified about the use of cookies. Each browser has its own system:
Bear in mind that if you block all cookies, some site features may not behave correctly. We do not block content nor penalise you in any way for rejecting measurement cookies.
8. What we do with the information cookies collect
Measurement cookies are used exclusively to understand how the site is used and to improve its content. Specifically:
- We do not sell or share the information with third parties other than the measurement tool providers (Google and Microsoft).
- We do not perform user profiling.
- We do not make automated decisions with effects on individuals (Art. 22 GDPR).
- The reports we receive are aggregated (totals, percentages), not associated with an identified person.
Full details of associated processing (controller, processors, retention periods, rights) are in the Privacy Policy.
9. Changes to this policy
If we change the services or tools we use, we will update this policy and, where the change affects cookies that require consent, we will ask you again before loading them. The current policy version and date are at the top of the document.
10. Contact
If you have any questions about cookies or wish to exercise rights over your personal data, write to the DPO:
- Email: info@legaldata.pro
- Postal: C. Miquel Servet 149, 08912 Badalona - Barcelona (España)
- Supervisory authority: Spanish Data Protection Agency
I want to change my cookie preferences now.
Press the button to reopen the preferences panel and change your decision.
Frequently asked questions
Do I have to accept cookies to browse this site?
No. By default the site loads only the strictly necessary technical cookies. If you reject the measurement cookies the site keeps working exactly the same, nothing is blocked and you are not penalised in any way. Only your language, your consent choice and the secure session are remembered.
Which third parties can receive data through the cookies on this site?
Only two, and only if you give your consent. Google Ireland Ltd. through Google Analytics 4 and Google Tag Manager, and Microsoft Ireland Operations Ltd. and Microsoft Corporation through Microsoft Clarity. We do not use advertising, personalisation or profiling cookies from anyone.
Is my data sent outside the European Union through these cookies?
Part of the measurement data may be processed on servers in the United States by Google and Microsoft. Those transfers rely on the EU-US Data Privacy Framework, under which both companies are certified, reinforced with Standard Contractual Clauses. No special category data is collected through cookies.
What is Consent Mode v2 and how does it affect me?
Until you give your consent, the Google Analytics 4 and Microsoft Clarity tags run without setting identifying cookies and without sending identifiers. When you accept, they activate. When you reject, they stay off. Microsoft Clarity also runs in strict masking mode, so it never captures the text you see or the text you type.
How long does my choice last and how can I change it?
Your decision is stored in the technical cookie consent_mode for a maximum of 12 months, after which we ask you again. You can change it whenever you want by reopening the Cookie preferences panel from the footer, or by deleting the cookies in your browser, which resets the banner.
How do these cookies relate to my data protection rights?
The data linked to the measurement cookies is handled by the same controller and Data Protection Officer as the rest of the site. You can withdraw your consent whenever you want and exercise your rights of access, erasure or objection by writing to the DPO. The full detail is in the Privacy Policy.
