1. Controller and general information
This Cookie Policy explains what cookies are, which ones this website uses, for what purpose, and how you can control them at any time. Together with the Legal Notice and the Privacy Policy, it forms part of the information we make available to you.
Data controller: Inversiones ENOSIS
Tax ID (NIF/CIF): [PENDING]
Address: Avda. de Torre Pacheco, 8 bajo · 30709 Roldán (Murcia), Spain
Contact email: info@enosis.es
This policy has been drafted in accordance with article 22.2 of Spanish Act 34/2002 on Information Society Services (LSSI-CE), Regulation (EU) 2016/679 (GDPR), Spanish Organic Act 3/2018 (LOPDGDD) and the Guidance on the use of cookies issued by the Spanish Data Protection Agency (AEPD).
2. What are cookies?
Cookies are small text files that a website stores in your browser when you visit it. They make it possible to remember information about your visit — such as your chosen language or the state of your session — and, in some cases, to obtain usage statistics or display advertising.
In this policy we use the term "cookies" in a broad sense: it also covers other technologies for storing and retrieving data on the user's device, such as browser local storage (localStorage), tracking pixels and web beacons, since the law treats them in the same way.
3. Legal basis: when we ask for your permission
Technical or necessary cookies are exempt from the duty to obtain consent under article 22.2 of the LSSI-CE, because without them the site cannot work or provide the service you have requested.
All other cookies — analytics and marketing — are only installed if you give your prior, freely given, specific, informed and unambiguous consent (article 6.1.a GDPR), which you provide through a clear affirmative action in our cookie panel.
Until you accept, no third-party script is loaded: it is not that they are downloaded and left inactive — they are never sent to your browser at all. Rejecting is as easy as accepting and does not restrict your access to any content.
4. Technical or necessary cookies (no consent required)
These are essential for site security, to maintain your session and to remember your basic preferences. They are all first-party cookies: they are set from our own domain and are not shared with any third party.
| Cookie | Owner | Purpose | Duration |
|---|---|---|---|
| XSRF-TOKEN | First party | Protection against cross-site request forgery (CSRF) attacks on forms. | Session |
| enosis_session | First party | Keeps your browsing session identified while you use the site. | 2 hours |
| enosis_locale | First party | Remembers the language you chose so we do not ask again. | 1 year |
| enosis_consent | First party | Stores which cookie categories you accepted or rejected, so we respect your decision and do not show the notice again. | 6 months |
The enosis_consent cookie is the record of your decision and is therefore itself a technical cookie: storing it is precisely what allows us not to install the others.
5. Analytics cookies (your consent required)
These let us understand, in aggregate form, how the site is used — which pages are visited most, how long people stay, from which devices — in order to improve the content and the browsing experience.
No third-party analytics cookie is currently active. If we activate Google Analytics or a similar tool in the future, it will be expressly declared in this table, this policy will be updated, and consent will be requested again from all users before installation.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics (Google Ireland Ltd.) | Distinguishes users in order to produce usage statistics. Not yet active. | 2 years |
| _ga_<ID> | Google Analytics (Google Ireland Ltd.) | Maintains the measurement session state. Not yet active. | 2 years |
6. Marketing and advertising cookies (your consent required)
These are used to measure the effectiveness of our campaigns and to show you advertising matched to your interests on third-party platforms, as well as to avoid showing you the same advert repeatedly.
No marketing cookie is currently active. If we activate the Meta pixel (Facebook and Instagram), Google Ads or other tools in the future, they will be declared here and your consent will be requested again.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta Platforms Ireland Ltd. | Identifies browsers in order to measure conversions and target advertising. Not yet active. | 3 months |
| _gcl_au | Google Ireland Ltd. | Attributes conversions to Google Ads adverts. Not yet active. | 3 months |
7. Cookieless visit measurement
Regardless of what you decide about cookies, we compile our own visit statistics using a system that uses neither cookies nor any other technology that stores data on your device. It therefore falls outside article 22.2 of the LSSI-CE and requires no consent.
The system works as follows: we do not store your IP address. It is used only during the request itself to derive an approximate country and city and to compute a pseudonymous identifier, and it is discarded immediately afterwards. That identifier is generated with a key that changes automatically every day, which makes it impossible to recognise you from one day to the next or to build a profile of your browsing over time.
Approximate geolocation is resolved on our own server against a local database, so your IP address is never disclosed to any third party.
The legal basis for this processing is our legitimate interest (article 6.1.f GDPR) in understanding, in aggregate form, how our site is used so that we can improve it. Given the pseudonymous and short-lived nature of the data, the impact on your privacy is minimal. The data is kept for a maximum of 400 days and is then deleted automatically.
8. International data transfers
The technical cookies and the cookieless measurement described above are processed entirely on servers located in the European Union. They involve no international data transfer.
Analytics and marketing cookies, once activated, are managed by providers that may process data in the United States. These companies are certified under the EU-U.S. Data Privacy Framework, found adequate by the European Commission Implementing Decision of 10 July 2023, which constitutes a valid safeguard for such transfers. You can consult their policies here:
By accepting the relevant categories, you also consent to those international transfers.
9. How to withdraw or change your consent
You can change your decision at any time, and just as easily as you made it, without affecting your access to the site:
Your consent is valid for a maximum of 6 months, in line with the AEPD recommendation. After that period we will ask you again. We will also ask again if we add any new purpose or provider.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
10. How to manage cookies from your browser
In addition to our panel, you can configure your browser to accept, reject or delete cookies that are already installed. Here are the instructions for the most common browsers:
Please note that if you block technical cookies from your browser, some parts of the site may stop working correctly.
11. Your data protection rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent at any time, by writing to info@enosis.es, stating the right you wish to exercise.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid.
More detailed information about how we process your data is available in our Privacy Policy.
12. Updates to this policy
Inversiones ENOSIS may amend this Cookie Policy to adapt it to legislative developments, to the criteria of the Spanish Data Protection Agency, or to changes in the services we use.
Where the change affects the purposes or the providers of cookies subject to consent, your consent will be requested again before they are installed. We recommend reviewing this page periodically.