The main obligations regarding cookies are set out below such as; informing the website user of the types of cookies used by the website, their purposes, user consent, ways of requesting consent, legal notice, cookie policy, etc.

1. Concept of Cookies

Cookies are files that are stored on the user’s computer browsing the Internet and that, in particular, contain a number that allows the user’s computer to be uniquely identified, even if it changes location or IP address.

Cookies are installed during Internet browsing, either by the websites the user visits or by third parties with which the website interacts, and allow it to learn about their activity on the same site or on others with which it relates, for example: the place from which they access, connection time, the device from which they access (desktop or mobile), the operating system and browser used, the most visited pages, the number of clicks made and data regarding the user’s behavior on the Internet.

The website is accessible without cookies being enabled, although disabling them may prevent it from functioning correctly.

2. Types of Cookies

2.1. Existing Types of Cookies

Cookies can be classified according to the entity that manages them, according to the time they remain active on the terminal equipment and according to their purpose.

The main obligation for companies or service providers in the information society or the Internet, through means such as web pages, platforms or software applications is established by art. 22.2 of the LSSI which states:

“Service providers may use devices for storage and retrieval of data on recipients’ terminal equipment, provided that they have given their consent after having been supplied with clear and complete information about their use, in particular, about the purposes of the data processing (…)”.

Likewise, cookies used for any of the following purposes are exempt from compliance with the obligations established in article 22.2 of the LSSI:

  • Allow only communication between the user’s device and the network.
  • Strictly provide a service expressly requested by the user.

In this regard, the cookies that would be exempt from the obligations set out in art. 22.2 are those that have the following purposes:

  • User input cookies.
  • User authentication or identification cookies (session only).
  • User security cookies (erroneous and repeated login attempts).
  • Media player session cookies.
  • Session cookies for load balancing.
  • User interface personalization cookies.
  • Plugin cookies to exchange social contents.

These cookies are excluded from the scope of application of art. 22.2 of the LSSI, and therefore it would not be necessary to inform or obtain consent for their use. Conversely, it would be necessary to inform and obtain consent for the installation and use of any other type of cookies, both first- and third-party, session or persistent, being subject to the scope of application of Article 22.2 of the LSSI, for which the guidance in this document will be useful.

Cookies according to the entity that manages them can be:

  • First-party cookies: Those that are sent to the user’s terminal equipment from a computer or domain managed by the publisher itself and from which the service requested by the user is provided.
  • Third-party cookies: Those that are sent to the user’s terminal equipment from a computer or domain that is not managed by the publisher, but by another entity that processes the data obtained through the cookies.

Cookies according to the period of time they remain active on the terminal equipment can be distinguished as:

  • Session cookies: A type of cookie designed to collect and store data while the user accesses a web page.
  • Persistent cookies: A type of cookie in which the data remain stored on the terminal and can be accessed and processed for a period defined by the cookie owner, which may range from a few minutes to several years.

Cookies according to their purpose can be:

  • Technical cookies: Those that allow the user to navigate through a web page, platform or application and to use the different options or services that exist in it such as, for example, controlling traffic and data communication, identifying the session, accessing restricted access areas, remembering the elements that make up an order, carrying out the purchase process of an order, submitting a registration or participation request for an event, using security elements during navigation, storing content for video or audio distribution or sharing contents through social networks.
  • Personalization cookies: Those that allow the user to access the service with some predefined general characteristics on the user’s terminal based on a series of criteria such as, for example, language, the type of browser through which the service is accessed, the regional configuration from where the service is accessed, etc.
  • Analytics cookies: Those that allow their controller to monitor and analyze the behavior of users of the websites to which they are linked. The information collected through this type of cookies is used in measuring the activity of the websites, application or platform and for the elaboration of navigation profiles of the users of said sites, applications and platforms, in order to introduce improvements based on the analysis of the usage data made by the service users.
  • Advertising cookies: Those that allow the management, as efficiently as possible, of the advertising spaces that, where appropriate, the publisher has included on a web page, application or platform from which the requested service is provided based on criteria such as the edited content or the frequency with which the ads are shown.
  • Behavioral advertising cookies: Those that allow the management, as efficiently as possible, of the advertising spaces that, where appropriate, the publisher has included on a web page, application or platform from which the requested service is provided. These cookies store information about users’ behavior obtained through continuous observation of their browsing habits, which allows the development of a specific profile to display advertising based on it.

2.2. Types of Cookies used on the WWW.CORREDURIADRG.COM Website

This website owned by DAVID RIVAS GONZÁLEZ uses the following cookies:

3. Information on legal obligations in the use of Cookies

The legal obligations imposed by the regulations are two: the duty to inform and obtaining consent.

First, the first thing to do is to identify the cookies that are being installed or used, analyzing whether they are first- or third-party cookies, session or persistent, and specifying their function in order to decide whether they fall within the scope of application of Article 22.2.

Paragraph two of Article 22 of the LSSI establishes that clear and complete information must be provided to users about the use of devices for storage and retrieval of data and, in particular, about the purposes of the data processing, in accordance with the provisions of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights.

Therefore, the information about cookies provided at the time of requesting consent must be sufficiently complete to allow users to understand the purpose for which they were installed and to know the uses that will be made of them.

In the event that a user gives their consent to the use of cookies, information on how to revoke consent and delete cookies must be made available to them in an accessible and permanent manner.

Mandatory information may be provided by multiple systems. As we will see later, with these means not only will the necessary information be supplied, but consent may also be requested for the installation of the devices.

Among the most common methods are:

  • Providing the information via a header bar or in the footer, in a sufficiently visible way.
  • When requesting registration in a service, or before downloading a service or an application, this information may be provided together with the privacy policy, or in the terms and conditions of use of the service.

Likewise, information should be provided on how to disable or delete the listed cookies through the functionalities provided by the publisher, as well as on how to revoke consent already given.

4. Authorization for the use of cookies

In accordance with the cookie notice that appears on the website page, the user or visitor thereof accepts that, by browsing it, they expressly consent to the use of cookies as described below, except to the extent that they have modified their browser settings to reject their use.

5. Browser configuration

The Owner reminds its users that the use of cookies may be subject to their acceptance during the installation or update of the browser used by them.

This acceptance may be revoked through the content and privacy configuration options available in it. The Owner recommends that its users consult their browser help or access the help web pages of the main browsers:

Firefox: http://support.mozilla.org/es/kb/cookies-informacion-que-los-sitios-web-guardan-en-
Chrome: http://support.google.com/chrome/bin/answer.py?hl=es&answer=95647
Safari: http://support.apple.com/kb/ph5042
Explorer: http://windows.microsoft.com/es-es/windows7/how-to-manage-cookies-in-internet-explorer-9

If the user wishes to make any inquiry about the Website’s Cookie Policy, they may contact the Owner through the following address: info@correduriadrg.com indicating in the subject “Cookie Policy”.