01
Cookies are small files that a website may store on a user’s browser or device. Gatavia may also use similar technologies, such as local storage, session identifiers, pixels or technical tags.
These technologies enable us to provide essential functions, maintain user sessions, remember preferences, manage purchases and subscriptions, enhance security and, where consent has been given, measure usage of the website and the app.
02
Esta Política se aplica a gatavia.es y app.gatavia.com, including the shop, the user account, the Library, the forms, the purchase process, the app and its public and private pages.
Browsing external services, such as the Stripe payment page or websites linked from Gatavia, may be subject to the cookie and privacy policies of their respective owners.
03
They enable navigation, security, authentication, session management, shopping basket, checkout, subscription, basic preferences and consent management. They are used without consent when they are essential to provide a requested service.
It remembers settings such as language, interface configuration or certain functional preferences. These will be processed in accordance with technical necessity or, where applicable, with your consent.
They provide insights into visits, pages viewed, conversion funnels and user behaviour to help improve Gatavia. Non-essential analytics tools are only activated when the user gives their consent.
These may be used to measure the effectiveness of campaigns or to display more relevant communications. They will only be installed once these tools have been incorporated and the user has given their express consent.
04
| Provider or environment | Purpose | Category | Approximate duration |
|---|---|---|---|
| WordPress and WooCommerce | Navigation, account, basket, checkout, digital products and security. | Essential and practical. | A session or timeframe defined by the function. |
| Consent Manager | Remember whether the user accepts, rejects or configures categories. | Required. | Depending on the manager’s settings, this is usually several months. |
| Supabase and the Gatavia App | Authentication, login, security and account management. | Required. | For the duration of the session or until termination, expiry or revocation. |
| Stripe | Processing payments, subscriptions, invoicing, security and fraud prevention. | Required for booking and payment. | Subject to Stripe’s policy. |
| Google Analytics 4 | Track visits, browsing, registrations, checkout starts, trials and purchases. | Analytics; consent required. | Depending on the settings applied, with a standard maximum of up to two years for certain identifiers. |
| Forms and email | Submit forms, prevent abuse and manage requested communications. | Essential, functional or consent-based, as applicable. | A session or timeframe defined by the tool. |
The exact names and duration of certain cookies or technologies may change when providers update their services. The consent panel and browser tools allow you to view and delete the identifiers present at any given time.
05
Non-essential cookies or technologies must not be enabled until the user has given their consent. The banner offers the following options: Accept, decline y, cuando proceda, configure.
The ‘accept’ and ‘decline’ options must be presented in an accessible and visible manner, and it must not be more difficult to decline than to accept.
A lack of consent does not prevent you from using the basic functions, although certain optional features provided by third parties may not be available.
06
Consent may be withdrawn or amended at any time via the link or button Manage consent Available at gatavia.es and via the banner or relevant settings on app.gatavia.com.
Cookies and stored data can also be deleted via your browser settings. Blocking strictly necessary technologies may affect login, your account, your basket, the payment process or security.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
07
Web browsers allow you to view, delete or block cookies via their privacy settings. Instructions may vary depending on the version you are using.
08
Some technology providers may process identifiers or technical data outside the European Economic Area.
Where applicable, the processing will be based on mechanisms recognised by the regulations, such as compliance decisions, standard contractual clauses or other valid safeguards offered by the provider.
09
This Policy may be updated should there be changes to the tools, cookie categories, providers, consent settings or applicable regulations.
Last updated: 28 July 2026.
To view this Policy or report an issue relating to consent:
info@gatavia.com