Cookies Policy
The Website (https://andreu.shop/), owned by ESTABLIMENTS ANDREU, S.L. (hereinafter, ESTABLIMENTS ANDREU), and its domains use first-party and third-party tracking technologies (small information files that the server sends to the computer of the person accessing the page) that store and retrieve information when you browse, for the purpose of analysing interaction with the portal and advertisements, maintaining and improving services, sending personalised advertising based on a profile, ensuring the security of the web portal and personalising the way in which content is displayed.
The ESTABLIMENTS ANDREU website uses the following cookies and tracking technologies:
COOKIES:
- Technical or necessary cookies, which allow the user to browse the portal and use the different options or services available on it. They are not subject to consent.
- Session cookies, which are not stored beyond the duration of the user’s session, or persistent cookies, which are stored beyond the user’s session.
- First-party cookies, which are those for which the website publisher itself is responsible, that is, ESTABLIMENTS ANDREU, and which are sent to the user’s terminal equipment, generally through a domain managed by the publisher.
- Third-party cookies, for which an entity other than the publisher is responsible, for example Google, Meta or Microsoft, and which are sent to the user’s terminal equipment, generally through a domain managed by that third party.
Google cookies or tracking technologies
The ESTABLIMENTS ANDREU website uses tracking technologies from Google Ireland Limited (Google), with registered office at Gordon House, Barrow Street, Dublin 4 – Ireland and email address dpo-google@google.com, in order to use its advertising services and analyse website traffic.
Google uses the information it collects through websites and applications for the following purposes:
- to provide, maintain and improve its services
- to protect users against fraud and/or abuse
- to measure the effectiveness of advertising
- to develop new features in its services
- to personalise the content and advertisements that appear on Google or on the websites and applications of its partners.
Among the data that Google may collect through the ESTABLIMENTS ANDREU website, this may include a unique advertising identifier, as well as the IP address to, among other things, identify the user’s general location, measure the effectiveness of advertisements and, depending on the user’s settings, improve the relevance of the advertisements they see. Likewise, Google may read cookies and tracking technologies that are previously stored in the user’s browser.
For more information, you can consult the following links: https://policies.google.com/technologies/partner-sites, https://policies.google.com/technologies/cookies?hl=es-419 and https://business.safety.google/adscookies/.
When ESTABLIMENTS ANDREU uses Google tracking technologies for its own purposes, Google will act as a data processor. You can consult the data processing agreement at: https://business.safety.google/adsprocessorterms/.
For the processing carried out by Google for its own purposes based on the tracking technologies that ESTABLIMENTS ANDREU uses on its website, the provisions of Google’s cookie policy shall apply: https://policies.google.com/technologies/cookies?hl=es and its privacy policy: https://policies.google.com/privacy?hl=es.
The following agreement shall apply to the communication of data made by ESTABLIMENTS ANDREU to Google through its tracking technologies: https://support.google.com/analytics/answer/9012600?hl=en
Microsoft cookies or tracking technologies
The ESTABLIMENTS ANDREU website uses Clarity tracking technologies, that is, technologies from Microsoft Ireland Operations Limited, with registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, DPO contact telephone number: +353 1 706 3117 and contact form: https://account.microsoft.com/privacy/privacy-request-signedout, to analyse web traffic.
Microsoft records the information it collects through Clarity in order to:
- record user interactions on the website,
- record how the page is displayed,
- record user actions, such as mouse movements, clicks, scrolling, etc.[A1.1]
You can consult more information about the data processing carried out by Microsoft through Clarity cookies at:
For more information, you can consult the following links: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-cookies, https://learn.microsoft.com/en-us/clarity/faq and https://clarity.microsoft.com/terms
Meta (Facebook) cookies or tracking technologies:
The ESTABLIMENTS ANDREU website uses tracking technologies from Meta Platforms Ireland Limited, with registered office at Block J, Serpentine Avenue, Dublin 4, Ireland and contact form: https://help.meta.com/support/privacy/, for advertising and analytics purposes.
Meta records the information it collects through these tracking technologies in order to offer advertising, measurement, marketing and analytics services.[A2.1]
For more information, you can consult the following links:
When ESTABLIMENTS ANDREU uses Meta cookies for its own purposes, Meta will act as a data processor. You can consult the data processing agreement at: https://www.facebook.com/legal/terms/dataprocessing
For the processing carried out by Meta for its own purposes based on the cookies or tracking technologies that ESTABLIMENTS ANDREU uses on its website, the provisions of Meta’s cookie policy shall apply: https://www.facebook.com/privacy/policies/cookies/?locale=es_ES and its privacy policy: https://www.facebook.com/privacy/policy/?locale=es_ES
The following agreement shall apply to the communication of data made by ESTABLIMENTS ANDREU to Meta through its tracking technologies: https://www.facebook.com/legal/controller_addendum
- Multipurpose cookies, which are those that allow more than one purpose, for example Google, Meta or Microsoft cookies.
- Analytics or performance cookies, which allow the portal owner or third parties to monitor and analyse user behaviour within the portal. The information collected through them is used to introduce improvements based on the analysis of the usage data made by users of the service.
- Advertising cookies, which are those that store information obtained from user behaviour based on continuous observation of their browsing habits, allowing a specific profile to be developed in order to display advertising according to the characteristics of that profile.
- Security cookies, used to detect repeated failed attempts to connect to a website, or other similar mechanisms to protect the connection system against abuse.
- Preference cookies, which are those that allow information to be remembered so that the user can access the service with certain characteristics that may differentiate their experience from that of other users, such as language, the number of results to display when the user performs a search, the appearance or content of the service depending on the type of browser through which the user accesses the service or the region from which they access the service, etc.
OTHER TRACKING TECHNOLOGIES:
- Local storage: a mechanism that allows data to be stored permanently in the user’s browser, even after closing the page or the browser, always by the domain that served the cookie.
- Session storage: a web storage mechanism that allows websites to temporarily save data in the user’s browser while the browsing session lasts, always by the domain that served the cookie.
Specifically, we inform you that we use the following cookies or tracking technologies:
COOKIES:
| Cookie | Type | Ownership | Purpose | Duration |
|---|---|---|---|---|
| pc_popup_session | Technical | Establiments Andreu | Manages the display of the pop-up during the user’s session. Allows verification of whether the user has recently interacted with a banner or pop-up. | Session |
| PHPSESSID | Technical | Establiments Andreu | Assigns a unique identifier to the user to allow the session to remain active while browsing a website. | 1 year and 1 month |
| cookieyes-consent | Technical | Establiments Andreu | Remembers the user’s cookie consent status and identifies the user for consent record purposes. | 1 year |
| PrestaShop-*** | Technical | Establiments Andreu | Identifies the user’s session and maintains the browsing status during their visit, for example, the items in the cart and the purchase process. Additionally, it allows the interface configuration choices made by the user to be remembered, such as language, currency or the number of results to display, so that the user can access the service with those characteristics during browsing. | 20 days |
| apc_popup_session | Technical | Establiments Andreu | Stores the user’s interaction status with pop-up elements on the website during the active session. | Session |
| sib_cuid | Advertising | Establiments Andreu | Uniquely identifies the user to manage marketing actions. | 6 months |
| _clck | Analytics | Microsoft | Allows a unique user identifier to be persistently stored on the website, as well as their preferences, allowing the user to be recognised on subsequent visits. | 1 year |
| _clsk | Analytics | Microsoft | Allows the different pages viewed by the same user during a session to be grouped together in order to analyse their browsing journey within the website. | 1 day |
| _fbp | Advertising Analytics | Meta | Allows browsers to be identified in order to provide website analytics and advertising services. Allows content, including advertisements, to be personalised, advertisements to be measured, analytics to be generated and a safer experience to be provided. | 3 months |
| _gcl_au | Analytics Advertising Preferences Security | Stores and tracks conversions from Google ads, measuring the advertising effectiveness of the website. | 3 months | |
| _gcl_ag | Analytics Advertising Preferences Security | Identifies and associates the user’s advertising interactions with Google Ads campaigns for analysis, tracking and optimisation of advertising performance. | 3 months | |
| _gcl_gs | Analytics Advertising Preferences Security | Stores session information associated with the ad click to complement the attribution carried out by the _gcl_aw cookie. | 3 months | |
| _ga_* | Analytics Advertising Preferences Security | Collects information about user behaviour to improve the way content is displayed and the user experience. | 1 year and 1 month | |
| AEC | Analytics Advertising Preferences Security | Ensures that requests made in a browsing session come from the legitimate user, preventing information theft and fraudulent access. | 6 months | |
| SOCS | Analytics Advertising Preferences Security | Stores the user’s consent status regarding the use of cookies in Google services. | 1 year and 1 month | |
| DV | Analytics Advertising Preferences Security | Identifies the user’s browser to record interactions with advertisements and optimise advertising delivery. | 8 minutes | |
| GCL_AW_P | Analytics Advertising Preferences Security | Used to track ad clicks and associate them with conversions, such as sales, registrations or downloads, made on a web page. | 3 months | |
| __Secure-ENID | Analytics Advertising Preferences Security | Used to remember your preferences and other information, such as your preferred language, the number of results you want to be displayed on each search results page, for example, 10 or 20, and whether you want Google SafeSearch to be enabled or disabled. It is also used on YouTube for analytics purposes. | 1 year and 1 month | |
| _ga | Analytics Advertising Preferences Security | Calculates visitor, session and advertising campaign data, to track website usage and improve the way content is displayed. This cookie is multipurpose, so, as indicated, it may have other purposes for Google. |
1 year and 1 month | |
| test_cookie | Analytics Advertising Preferences Security | Checks whether the user’s browser supports cookies. | 15 minutes |
SESSION STORAGE:
| Tracking technology | Type | Ownership | Purpose | Duration |
|---|---|---|---|---|
| RcAttributionList | Analytics | Establiments Andreu | Records a unique user identification that is used to measure the number of unique visits and recognise returning users. | Session |
| RcProductList | Analytics | Establiments Andreu | Stores the list of products viewed / interacted with by the user for analytics purposes. | Session |
| _cltk | Analytics | Microsoft | Collects information about how the user interacts with the website for analytics purposes. | Session |
LOCAL STORAGE:
| Tracking technology | Type | Ownership | Purpose | Duration |
|---|---|---|---|---|
| _gcl_ls | Analytics Advertising Preferences Security | Stores information about ad clicks in the browser’s local storage. | Persistent | |
| lastExternalReferrer | Advertising | Meta | Records the URL of the last external website from which the user arrived at the site, in order to know the origin of the visit. | Persistent |
| lastExternalReferrerTime | Advertising | Meta | Records the moment, timestamp, when a visitor arrived from another website. | Persistent |
For more information about the cookies or tracking technologies used by ESTABLIMENTS ANDREU, please send an email to info@andreu.cat.
HOW CAN I ACCEPT, REJECT OR CUSTOMISE THE SELECTION OF COOKIES?
When you visit our portal for the first time, a banner will open through which you can manage cookies, that is, you can accept them by clicking “Accept all”, in which case the banner will not appear again and all cookies and tracking technologies used by this portal will be installed; you can reject them by clicking “Reject all”, in which case only those cookies or tracking technologies necessary for the operation of the portal will be downloaded and installed; or you can configure them granularly by clicking “Customise”, according to their purpose, accepting or rejecting them.
Likewise, once you have accepted or rejected the use of any non-necessary cookie or tracker, you may, while browsing the website, withdraw or give your consent at any time by clicking the icon that will be displayed in the lower left corner of your screen, or accept or reject cookies according to their type, in a granular manner.
Please note that you can also delete cookies or technologies from your browser options. To delete them from your browser, depending on the browser, you must access one of the following links:
- Microsoft Edge: https://support.microsoft.com/es-ES/edge/microsoft-edge-browsing-data-and-privacy
- FireFox: https://support.mozilla.org/es/kb/Borrar%20cookies
- Chrome: https://support.google.com/chrome/answer/95647?hl=%22es
- Safari: https://support.apple.com/es-es/guide/safari/sfri11471/mac
If you use a browser other than those listed above, please consult its privacy and security settings to delete your browsing history.
To remove from your devices other tracking technologies downloaded in the Local Storage section, you can do so by following these steps:
1) Google Chrome / Microsoft Edge
To delete a specific website
- Open the website.
- Press F12 or right-click → Inspect.
- Go to Application.
- In the left panel: Storage → Local Storage.
- Select the domain and right-click → Clear.
Delete “site data” for that domain
- Open the website.
- Press F12 or right-click → Inspect.
- Go to Application.
- In the left panel: Storage → Local Storage.
- Click on the domain.
- Delete the tracker you want from the list by right-clicking → Clear.
Delete all browsing data
- Settings → Privacy and security → Clear browsing data.
- Select Cookies and other site data and/or Cached images and files.
2) Mozilla Firefox
- Open the website.
- F12 → Storage tab.
- Local Storage → the domain.
- Right-click → Delete all or delete specific keys.
Alternative:
- Settings → Privacy and security → Cookies and site data → Manage data… → search for the domain → Remove.
3) Safari (macOS)
- Safari → Settings/Preferences → Privacy.
- Manage Website Data…
- Search for the domain → Remove, or Remove all.
Alternative:
- Access the domain.
- Right-click → Inspect element.
- Storage.
- Local Storage.
- Select the domain.
- Right-click on the tracker → delete key.
- Safari → Settings → Advanced → Show Develop menu.
LEGAL BASES FOR PROCESSING:
For those cookies or tracking technologies that are classified exclusively as technical and whose purposes are set out in the table above, the legal basis for processing the data originating from website users and which, where applicable, may be collected, shall be the legitimate interest of the controller (GDPR, art. 6.1.f) in making the website functional.
For the rest of the cookies or tracking technologies that are not technical, or that have a technical purpose but also other additional purposes, and whose purposes are set out in the table above, the legal basis is the consent of the data subject (GDPR, art. 6.1 a).
DATA DISCLOSURES:
The data collected through cookies or other tracking technologies will be disclosed to:
Data processors:
- Google Ireland Limited (Google), with registered office at Gordon House, Barrow Street, Dublin 4 – Ireland and email address dpo-google@google.com, as a provider of tracking technologies.
- Meta Platforms Ireland Limited, with registered office at Block J, Serpentine Avenue, Dublin 4, Ireland and contact form: https://help.meta.com/support/privacy/, as a provider of tracking technologies.
- Microsoft Ireland Operations Limited, with registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, DPO contact telephone number: +353 1 706 3117 and contact form: https://account.microsoft.com/privacy/privacy-request-signedout, as a provider of tracking technologies.
- Sendinblue, with registered office at 9-17, rue Salneuve 75017 Paris and DPO email address: dpo@brevo.com, as a provider of tracking technologies.
Joint controllers:
- Google Ireland Limited (Google), with registered office at Gordon House, Barrow Street, Dublin 4 – Ireland and email address dpo-google@google.com, regarding the purposes of collecting and communicating by transmission the data collected through tracking technologies.
- Meta Platforms Ireland Limited, with registered office at Block J, Serpentine Avenue, Dublin 4, Ireland and contact form: https://help.meta.com/support/privacy/, regarding the purposes of collecting and communicating by transmission the data collected through tracking technologies.
Independent controllers:
- Google Ireland Limited (Google), with registered office at Gordon House, Barrow Street, Dublin 4 – Ireland and email address dpo-google@google.com, when Google uses the data obtained through its trackers for its own purposes, in accordance with what is stated in this policy.
- Meta Platforms Ireland Limited, with registered office at Block J, Serpentine Avenue, Dublin 4, Ireland and contact form: https://help.meta.com/support/privacy/, when Meta uses the data obtained through its trackers for its own purposes in accordance with what is stated in this policy.
INTERNATIONAL DATA TRANSFERS
Likewise, we inform you that, through the use of cookies or tracking technologies from the following providers, the following data transfers may take place:
GOOGLE:
Google Ireland Limited (Google), with registered office at Gordon House, Barrow Street, Dublin 4 – Ireland and email address dpo-google@google.com, may carry out international transfers of personal data to servers located outside the European Economic Area (EEA). The legal mechanisms used to protect such transfers are based on:
- Adequacy decisions, for transfers to those countries that have been recognised by the European Commission as providing an adequate level of protection for personal data. The following link is provided below: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
- Google is certified under the Data Privacy Framework (DPF), so this will apply to data transfers to the USA. You can verify the company’s certification under the Data Privacy Framework at the following link: https://www.dataprivacyframework.gov/s/participant-search.
- For data transfers carried out from the EEA to third countries where the aforementioned adequacy decisions do not apply, Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission. You can consult more information about this legal mechanism at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?hl=es.
.
MICROSOFT:
Microsoft Ireland Operations Limited, with registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, DPO contact telephone number: +353 1 706 3117 and contact form: https://account.microsoft.com/privacy/privacy-request-signedout, may carry out international transfers of personal data to servers located outside the European Economic Area (EEA). The legal mechanisms used to protect such transfers are based on:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
You can consult more information about this legal mechanism at the following links:
https://learn.microsoft.com/en-us/clarity/faq
https://clarity.microsoft.com/terms
https://business.safety.google/adsprocessorterms/.
META:
Meta Platforms Ireland Limited, with registered office at Block J, Serpentine Avenue, Dublin 4, Ireland and contact form: https://account.microsoft.com/privacy/privacy-request-signedout, may carry out international transfers of personal data to servers located outside the European Economic Area (EEA). The legal mechanisms used to protect such transfers are based on:
- Adequacy decisions, for transfers to those countries that have been recognised by the European Commission as providing an adequate level of protection for personal data. The following link is provided below: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en..
Meta is certified under the Data Privacy Framework (DPF), so this will apply to data transfers to the USA. You can verify the company’s certification under the Data Privacy Framework at the following link: https://www.dataprivacyframework.gov/s/participant-search.
- For data transfers carried out from the EEA to third countries where the aforementioned adequacy decisions do not apply, Meta relies on Standard Contractual Clauses (SCCs) approved by the European Commission.
BREVO
Sendinblue, with registered office at 9-17, rue Salneuve 75017 Paris and DPO email address: dpo@brevo.com, as a provider of BREVO tracking technologies, may communicate data to third-party sub-processors that may be located outside the EEA. Consequently, international transfers may take place. These transfers are based on:
- Adequacy decisions, for transfers to those countries that have been recognised by the European Commission as providing an adequate level of protection for personal data. The following link is provided below: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en..
For certain communications, the Data Privacy Framework (DPF) shall apply, so this will apply to data transfers to the USA.
- For data transfers carried out from the EEA to third countries where the aforementioned adequacy decisions do not apply, Meta relies on Standard Contractual Clauses (SCCs) approved by the European Commission.
- Notwithstanding the above, Binding Corporate Rules shall also apply in certain cases.
You can consult more information in the data processing agreement: https://www.brevo.com/legal/termsofuse/#annex.
MORE INFORMATION
Additionally, ESTABLIMENTS ANDREU may be present on third-party portals and services for which, if you wish to know the privacy and cookie use conditions, you must consult the policies provided by those third parties.
You can obtain more information about the identifying details of the data controller and about the exercise of rights in our Privacy Policy. Likewise, you can consult more information not related to cookies or tracking technologies in our Legal Notice.