A cookie is a small text file that a website stores in the user’s browser. It makes it possible to remember information about the visit (the chosen language, the currency, the contents of the basket) and makes the next visit more useful.
Alongside cookies, equivalent technologies such as local storage, session storage or tracking pixels may be used. Everything stated here applies equally to them.
Essential for the Site to work. They do not require consent under article 22.2 LSSI. They enable browsing, session maintenance, the basket, the purchase process, the language and the currency.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
woocommerce_cart_hash | WooCommerce | Contents of the shopping basket | Session |
woocommerce_items_in_cart | WooCommerce | Number of items in the basket | Session |
wp_woocommerce_session_* | WooCommerce | Customer session identifier | 48 hours |
woocommerce_recently_viewed | WooCommerce | Recently viewed products | Session |
wordpress_logged_in_* | WordPress | Keep the session logged in | Session |
wordpress_sec_* | WordPress | Secure authentication in private areas | Session |
wp-settings-* | WordPress | Interface preferences of the registered user | 1 year |
pll_language | Polylang Pro | Remember the selected language | 1 year |
wmc_current_currency | CURCY Multi Currency | Remember the selected currency | 30 days |
wmc_current_currency_old | CURCY Multi Currency | Detect currency changes between visits | 30 days |
| PHPSESSID | WordPress / PHP | Server session identifier | Session |
| breakdance_view_count | Breakdance | Page view counter, used by the builder display conditions | Session |
| breakdance_session_count | Breakdance | Session counter, used by the builder display conditions | Session |
| breakdance_last_session_id | Breakdance | Identifier of the last session, used by the display conditions | Session |
| cmplz_banner-status | Complianz | Remember whether the consent panel has already been shown | 365 days |
| cmplz_saved_categories / cmplz_saved_services / cmplz_consented_services | Complianz | Store the categories and services you have accepted or rejected | 365 days |
| cmplz_policy_id / cmplz_id | Complianz | Version of the accepted policy, to renew consent when it changes | 365 days |
These cookies are installed by the mere use of the Site. Blocking them in the browser will prevent the basket and the purchase process from working correctly.
They make it possible to measure and analyse use of the Site in aggregate form in order to improve it. They require prior consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 (Google Ireland Ltd.) | Distinguish unique users | 2 years |
_ga_<ID> | Google Analytics 4 | Maintain session state | 2 years |
_gid | Google Analytics 4 | Distinguish users | 24 hours |
It is recommended to enable IP anonymisation and to disable the use of the data for Google advertising purposes, in order to reduce the privacy impact.
They make it possible to measure campaigns and display relevant advertising. They require prior consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Platforms Ireland Ltd. | Facebook and Instagram pixel: campaign measurement | 3 months |
fr | Meta Platforms Ireland Ltd. | Targeted advertising on Facebook | 3 months |
_ttp / _tt_enable_cookie | TikTok Technology Ltd. | TikTok pixel: conversion attribution | 13 months |
_scid / sc_at | Snap Inc. | Snapchat pixel: measurement and remarketing | 13 months |
_gcl_au | Google Ireland Ltd. | Google Ads: conversion attribution | 3 months |
VISITOR_INFO1_LIVE / YSC | Google Ireland Ltd. (YouTube) | Embedded videos: preferences and statistics | Up to 6 months / session |
For embedded videos, YouTube’s enhanced privacy mode (youtube-nocookie.com) will be used, which does not install cookies until the user plays the video.
When a payment is initiated, the relevant gateway may install its own cookies needed to prevent fraud and complete the transaction. They are necessary for the payment to operate.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid / __stripe_sid | Stripe Payments Europe Ltd. | Payment fraud prevention | 1 year / 30 minutes |
ts / ts_c / LANG | PayPal (Europe) S.à r.l. | Payment security and operation | Session to 3 years |
The enabled payment gateways are Stripe, PayPal and Redsys. The Stripe and PayPal cookies are detailed in the table above. Redsys, the card payment platform of the Spanish banks, installs its own technical cookies during the payment process for the same purpose of security and fraud prevention; they are activated only when a card payment is started and are not used for advertising or analytics purposes.
Some of the above providers are companies whose parent is outside the European Economic Area (Google, Meta, TikTok, Snap, Stripe, PayPal). Where an international transfer takes place, it will rely on the EU-US Data Privacy Framework, on Standard Contractual Clauses or on another appropriate safeguard under chapter V of the GDPR.
You can consult each provider’s policies on their respective websites before giving your consent.
On your first visit a panel is shown that lets you accept all, reject all or configure by category.
In accordance with the AEPD Guide on the use of cookies:
You can change or withdraw your consent at any time, as easily as you gave it, from this button:
Consent management is handled by Complianz, which blocks non-necessary cookies until your authorisation is obtained.
Disabling technical cookies will prevent the basket and the purchase process from working.
This policy may be updated because of regulatory or technical changes, or when plugins and services are added or removed. Significant changes will be notified through the Site banner. For any question: privacy@vitall.es
