This policy explains which cookies and similar technologies we use on this site, what they are for and how you can control them. It is drafted in accordance with article 22.2 of the Spanish LSSI-CE, with the GDPR and with the Guide on the use of cookies of the Spanish Data Protection Agency (AEPD) of January 2024.
What cookies are
A cookie is a small text file that a website stores in your browser when you visit it. They are used for the site to work properly, to remember your preferences or to measure how it is used.
In addition to cookies, there are other similar technologies (tracking pixels, local storage, web beacons) that perform similar functions. For the purposes of this policy, when we say "cookies" we refer to any of these technologies.
Types of cookies we use
We distinguish two main groups, following the AEPD’s own classification:
Technical cookies (no consent required)
These are essential for the site to work or to provide a service you have requested. They do not require your consent (article 22.2 LSSI-CE, exception). You cannot reject them via the banner because the site cannot operate without them.
They cover:
- The record of your own consent or refusal for non-technical cookies (so we do not ask you on every page).
- Keeping your session in the booking form.
- Basic security functions, such as automated-attack prevention.
Non-technical cookies (your consent required)
They are only loaded if you accept them via the cookie banner. We divide them into two subcategories:
- Analytics: used to measure how many people visit the site, where they come from and how they move around. The data is used in aggregate form to improve the website.
- Marketing: they allow us to show more relevant advertising on other websites to people interested in bike rental for the Senda del Oso, and to measure the performance of our Google Ads campaigns.
Detailed cookie table
Below you will find the specific cookies that may be installed by the site. The list is updated whenever we change tools or providers.
Technical cookies (exempt)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
consent-v2 | bicisendadeloso.es (first-party) | Stores your decision on cookies so we do not have to ask again | 12 months |
astro-* | bicisendadeloso.es (first-party) | Session identifier for the booking form | Session |
Analytics cookies (consent required)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC (third-party) | Distinguishing unique users for Google Analytics 4 | 24 months |
_ga_<id> | Google LLC (third-party) | Keeping session state in GA4 | 24 months |
_clck, _clsk | Microsoft Corp (third-party) | Behaviour analysis (Microsoft Clarity) | 12 months / 1 day |
Marketing cookies (consent required)
| Name | Owner | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google LLC (third-party) | Store and track Google Ads conversions | 90 days |
IDE | Google LLC (third-party) | Personalised advertising on the Google network (when you are signed in to Google) | 13 months |
test_cookie | Google LLC (third-party) | Checks whether your browser supports cookies | 15 minutes |
If we find any additional cookies not listed here, we will update the table as soon as we detect them.
Third parties, international transfers and Consent Mode v2
Several third-party providers have their parent entity outside the European Union, mainly in the United States. Transfers take place under the EU–US Data Privacy Framework where the provider is enrolled and, subsidiarily, under Standard Contractual Clauses approved by the European Commission.
Links to the third parties’ policies:
- Google: https://policies.google.com/privacy.
- Microsoft Clarity: https://learn.microsoft.com/privacy/ · https://clarity.microsoft.com/terms.
- Meta (if you arrive from a Facebook/Instagram link): https://www.facebook.com/policy.php.
Google Consent Mode v2: since March 2024, Google requires advertisers in the European Economic Area to integrate Consent Mode v2 in order to use Google Ads and Analytics. This site has it integrated. Until you accept the corresponding cookies in the banner, Google scripts receive pings in "consent denied" mode: no cookies or identifiers are stored, and Google only uses aggregate and modelled data (non-personal) for its conversion metrics.
How to accept, reject or change your preferences
The first time you enter the site, you will see a cookie banner with three clearly distinct options, displayed with the same level of prominence:
- Accept all → all cookies are installed (technical, analytics and marketing).
- Reject all → only essential technical cookies are installed. Analytics and marketing cookies are blocked.
- Customise → you can choose individually which categories you accept (analytics yes, marketing no; or vice versa).
Your decision is stored so that we do not have to repeat it on every page.
You can change your decision at any time by clicking the "Cookie preferences" button available at the footer. Clicking it re-opens the banner so you can update your preferences or revoke them completely.
How to disable cookies from your browser
In addition to the site’s banner, you can configure your browser to block or delete cookies globally. Each browser does this differently:
- Google Chrome: support.google.com/chrome/answer/95647.
- Mozilla Firefox: support.mozilla.org.
- Safari (macOS / iOS): support.apple.com.
- Microsoft Edge: support.microsoft.com.
- Opera: help.opera.com.
Blocking cookies from the browser may affect the operation of some parts of the site, particularly those relying on a session (for example, the booking form).
Consequences of rejecting cookies
If you reject non-technical cookies:
- The site works the same for you: you can browse, check rates, read the FAQs and book your bike normally.
- We will not collect analytics data from your visit and we cannot show you personalised ads on other sites.
- No content is blocked as a result of rejecting cookies. We do not use "cookie walls" or penalties on user experience.
This complies with the principle of granularity and freedom required by the AEPD: accepting or rejecting must be equally simple actions and must have no negative consequences.
Changes to this policy
We may update this policy when we change tools, purposes or whenever required by law. The version in force will always be the one published at this URL, stating its last update date.
If the change entails a new processing activity that requires consent, we will ask you again via the banner. Prior consent does not automatically extend to new categories.