Cookie Policy
1. WHAT ARE COOKIES?
A cookie is a small text file that a website sends to the user’s browser and which is stored on their device (computer, tablet or mobile phone). On subsequent visits, the browser sends this data back to the originating server, allowing the website to “remember” information about the user’s activity.
Cookies may be first-party cookies (set by the website’s own domain) or third-party cookies (set by external domains). Depending on their duration, they may be session cookies (deleted when the browser is closed) or persistent cookies (which remain on the device for a specific period of time). Depending on their purpose, they are classified as technical, analytical, advertising/marketing and functionality cookies.
2. LEGAL FRAMEWORK
This Cookie Policy has been prepared in compliance with the applicable legislation currently in force:
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), insofar as cookies involve the processing of personal data.
• Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).
• Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), Article 22.2, as amended by Law 9/2014.
• The Guide on the Use of Cookies issued by the Spanish Data Protection Agency (AEPD), in its current version.
3. COOKIES THAT REQUIRE CONSENT AND EXEMPT COOKIES
In accordance with Article 22.2 of the LSSICE and the AEPD Guide on cookies, technical cookies that are strictly necessary for the operation of the website or for the provision of a service expressly requested by the user are exempt from the requirement to obtain prior consent, although users must still be informed about them.
Analytical, advertising and third-party cookies (YouTube, Google, Meta) require the user’s prior, freely given, specific, informed and unambiguous consent, which is collected through the cookie consent management tool (CookieYes) integrated into the website.
4. COOKIES USED ON WWW.HOTELSONE2020.COM
The following section lists all cookies installed by https://hotelsone2020.com/:
4.1 Technical cookies (exempt from consent)
These cookies are essential for the correct operation of the website. Their installation does not require consent, although transparent information must be provided.
| TECHNICAL COOKIES - Exempt from consent | ||||
|---|---|---|---|---|
| Name | Purpose | Provider | Duration | Legal basis |
| pll_language | Stores the language selected by the user during the session and subsequent visits. | First-party (www.hotelsone2020.com) | Persistent (1 year) | Technical exemption |
| cookieyes-consent | Stores the user's cookie consent preferences to avoid repeatedly displaying the banner. | First-party (www.hotelsone2020.com) / CookieYes | Persistent (1 year) | Technical exemption |
4.2 Analytical cookies (consent required)
These cookies enable the monitoring and statistical analysis of user behaviour on the website in order to improve the service. They involve the transfer of data to Google LLC (USA), covered by Google LLC’s certification under the EU-US Data Privacy Framework (DPF), adopted by the European Commission on 10 July 2023.
| ANALYTICAL COOKIES - Consent required | ||||
|---|---|---|---|---|
| Name | Purpose | Provider | Duration | Legal basis |
| _ga | Records a unique identifier for each visitor in order to track how the website is used. The data is used to compile usage statistics. | Google LLC (Google Analytics) google.com | Persistent (2 years) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| _ga_PBC0ZBT42T | Cookie specific to this website's Google Analytics 4 property. Stores and updates a unique value for each page visited. | Google LLC (Google Analytics 4) google.com | Persistent (2 years) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
4.3 Advertising and marketing cookies (consent required)
These cookies allow personalised advertising to be displayed and campaign effectiveness to be tracked. They involve the transfer of data to Meta Platforms, Inc. (USA), which is certified under the EU-US Data Privacy Framework (DPF).
| ADVERTISING / MARKETING COOKIES - Consent required | ||||
|---|---|---|---|---|
| Name | Purpose | Provider | Duration | Legal basis |
| _fbp | Installed by Meta (Facebook Pixel). Identifies browsers in order to provide personalised advertising and marketing services and measure campaign effectiveness. | Meta Platforms, Inc. (Facebook) facebook.com | Persistent (3 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
4.4 Third-party cookies – YouTube / Google (consent required)
These cookies are generated when the user accesses or plays embedded YouTube multimedia content or interacts with Google services. All of them involve the transfer of data to Google LLC (USA), covered by certification under the EU-US Data Privacy Framework (DPF).
| THIRD-PARTY COOKIES - YouTube / Google - Consent required | ||||
|---|---|---|---|---|
| Name | Purpose | Provider | Duration | Legal basis |
| YSC | Records a unique identifier to maintain statistics on YouTube videos viewed by the user. | Google LLC / YouTube youtube.com | Session | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| VISITOR_INFO1_LIVE | Checks the user's bandwidth and collects data on the use of YouTube features, including video player quality. | Google LLC / YouTube youtube.com | Persistent (6 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| VISITOR_PRIVACY_METADATA | Tracks and manages the user's privacy settings on YouTube. Allows Google to apply privacy preferences when playing content. | Google LLC / YouTube youtube.com | Persistent (6 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| __Secure-YEC | YouTube security cookie used to manage authenticated sessions and protect against CSRF attacks. | Google LLC / YouTube youtube.com | Persistent (13 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| __Secure-ROLLOUT_TOKEN | Used for the gradual rollout of YouTube features and version management. Security cookie with the Secure attribute. | Google LLC / YouTube youtube.com | Persistent (6 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| SID / HSID / SSID | Google security and session authentication cookies. They allow users to be authenticated on Google services and protect account data against unauthorised access. | Google LLC google.com / google.es | Persistent (2 years) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| SAPISID / APISID | Create a user profile to personalise Google services, including advertising. They record preferences and activity in order to provide relevant content. | Google LLC google.com / google.es | Persistent (2 years) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
| NID | Stores user preferences and other information such as preferred language, the desired number of search results and whether Google SafeSearch is enabled. | Google LLC google.com / google.es | Persistent (6 months) | Consent (Art. 6.1(a) GDPR + Art. 22.2 LSSICE) |
5. COOKIE HOSTING AND LOCATION
5.1 First-party cookies
| Domain | www.hotelsone2020.com |
|---|---|
| Hosting provider | Raiola Networks |
| Server location | Tier III Data Centre in Madrid |
5.2 Cookies de terceros
Las cookies de terceros se almacenan en los dominios de los proveedores externos:
| Google LLC / YouTube |
Domains: www.google.com; www.google.es; www.youtube.com Location: Google LLC's global infrastructure (mainly USA and EU). Transfer safeguard: EU-US Data Privacy Framework (DPF). Privacy Policy: https://www.policies.google.com/privacy |
|---|---|
| Meta Platforms, Inc. |
Domain: www.facebook.com Location: Meta Platforms, Inc.'s global infrastructure (USA / EU). Transfer safeguard: EU-US Data Privacy Framework (DPF). Privacy Policy: https://www.facebook.com/privacy/policy/ |
6. CONSENT MANAGEMENT
The website www.hotelsone2020.com uses a cookie consent management tool (CookieYes) that allows users to accept or reject non-technical cookies on a granular basis (by category) during their first visit.
Users may review and modify their preferences at any time by accessing the management option through the blue banner located at the bottom left: “Customise consent preferences”.
Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal (Art. 7.3 GDPR).
| Google Chrome | https://support.google.com/chrome/answer/95647?hl=ca |
|---|---|
| Mozilla Firefox | https://support.mozilla.org/ca/kb/activa-i-desactiva-les-galetes |
| Safari (Mac / iOS) | https://support.apple.com/ca-es/guide/safari/sfri11471/mac |
| Microsoft Edge | https://www.support.microsoft.com/ca-es/microsoft-edge/elimina-les-galetes-a-microsoft-edge |
| Opera | https://www.help.opera.com/en/latest/web-preferences/#cookies |
HOTELS ONE 2020 warns that disabling technical cookies may affect the correct operation of the website and prevent access to certain features.
8. INTERNATIONAL DATA TRANSFERS
Analytical cookies (Google Analytics), advertising cookies (Meta Pixel) and YouTube/Google cookies involve the transfer of data to servers located in the United States of America. This transfer is covered by the European Commission Adequacy Decision of 10 July 2023 concerning the EU-US Data Privacy Framework (DPF), under which Google LLC and Meta Platforms, Inc. are certified.
Users may consult the DPF certifications in the official register of the US Department of Commerce: https://www.dataprivacyframework.gov/
9. RIGHTS OF DATA SUBJECTS
Insofar as cookies involve the processing of personal data, users may exercise the rights of access, rectification, erasure, restriction, portability and objection provided for in Articles 15 to 21 of the GDPR by contacting:
In writing: HOTELS ONE 2020, S.A.U. – C/ Joan Fuster no. 15, Polígono Industrial Mas de les Ànimes, 43206 Reus (Tarragona), Spain – enclosing a photocopy of their national ID card or equivalent identification document.
By email: [email protected] (signed with an electronic signature or accompanied by a copy of the identification document).
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with the applicable legislation.
| In writing | HOTELS ONE 2020, S.A - C/ Joan Fuster no. 15, Polígono Industrial Mas de les Ànimes, 43206 Reus - Enclosing a photocopy of the national ID card (DNI) or equivalent identification document |
|---|---|
| By email | [email protected] (signed with an electronic signature or attaching a copy of the identification document) |
Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with the applicable regulations.
10. UPDATES TO THIS POLICY
HOTELS ONE 2020 reserves the right to amend this Cookie Policy in order to adapt it to legislative changes, changes in AEPD criteria or changes to the technologies used on the website. Where appropriate, any amendment will be notified to the user through the cookie consent management tool on their next visit.