Privacy & Cookies

Cookie Policy

Last updated: October 2026 · Fisify Technology, S.L.

1

Introduction

In compliance with article 22.2 of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE) and Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Fisify Technology, S.L. ("Fisify") informs the users of its website www.fisify.com about its use of cookies and similar technologies.

Fisify Technology, S.L., with tax ID B02789527 and registered office at Calle Máximo Aguirre, 21, 48011 Bilbao (Bizkaia), Spain, is the controller of the personal data obtained through cookies that are subject to the user's consent.

2

What is a cookie?

A cookie is a small text file that a website stores in the user's browser when they visit it. Cookies allow the website to remember information about the visit, such as language or privacy preferences, making browsing easier and the site more useful.

In addition to cookies, similar technologies such as tracking pixels, local storage (localStorage) or web beacons may be used. They work in a similar way and are subject to the same consent rules. Section 8 describes the cookieless statistical measurement that Fisify carries out through Google Analytics when the user does not accept analytics cookies.

3

Types of cookies used

The following categories of cookies are used on www.fisify.com:

3.1 Essential or necessary

They are essential for the website to work and cannot be disabled. They are only set in response to actions taken by the user, such as setting privacy preferences or secure browsing. They do not store personally identifiable information.

No prior consent required

3.2 Performance or analytics

They collect anonymous or pseudonymous information about how visitors use the website in order to analyse traffic and improve how it works. Approved third parties that carry out analytics on our behalf may not use this data for their own purposes. If the user does not accept them, they are not set, although Google Analytics may send cookieless signals as described in section 8.

Prior consent required

3.3 Functional

They allow the website to remember the choices made by the user and provide enhanced, more personalised features, such as playing embedded videos.

Prior consent required

3.4 Advertising

They are used by Fisify or by approved advertising partners to offer personalised content or measure the effectiveness of communication actions. If the user does not enable these cookies, they may see less relevant content.

Prior consent required

4

List of active cookies

Below are all the cookies active on www.fisify.com, including those set by approved third parties:

Name Domain Purpose Duration Category
Session security_cfuvid fisify.com Maintains session consistency and optimises the user experience. Session Necessary
Bot protection__cf_bm Cloudflare (multiple subdomains) Detects and blocks malicious automated traffic to protect the site. 1 hour Necessary
Privacy preferencesVISITOR_PRIVACY_METADATA youtube.com Stores the user's cookie consent status on YouTube. 6 months Necessary
Visitor analytics_ga fisify.com Assigns an anonymous identifier to distinguish unique visitors and calculate usage statistics. 13 months Analytics
Page view counter_ga_* fisify.com Records the number of page views per session for Google Analytics reports. 13 months Analytics
Visit tracking__hstc fisify.com Main HubSpot cookie. Records the first visit, last visit and session number. 6 months Analytics
Contact identifierhubspotutk fisify.com Identifies the visitor when they complete a form in order to deduplicate contacts in HubSpot. 6 months Analytics
New session detection__hssrc fisify.com Detects whether the visitor has restarted the browser to start a new session. Session Analytics
Session counter__hssc fisify.com Tracks the number of page views in the current session to update __hstc. 1 hour Analytics
Video player, sessionYSC youtube.com Records views of YouTube videos embedded on the site. Session Analytics
Player qualityVISITOR_INFO1_LIVE youtube.com Measures available bandwidth to show the most suitable video quality. 6 months Functional
Last results viewedytidb::LAST_RESULT_ENTRY_KEY youtube.com Stores the last search made on YouTube to improve future results. Persistent Functional
Account security__Secure-YNID youtube.com Protects the user's account and prevents fraud when signing in to Google. 6 months Advertising
Feature testing__Secure-ROLLOUT_TOKEN youtube.com Controls which new features or interface changes are shown to the user. 6 months Advertising
Player preferences__Secure-YEC youtube.com Saves the user's personal YouTube video player preferences. Variable Advertising

The technical name of each cookie appears in grey under its descriptive name. Transfers to US providers (Google, HubSpot, Cloudflare) are made under the EU-US Data Privacy Framework.

The cookieless measurement described in section 8 is not listed in this table because it does not set or read any cookie on the user's device.

5

Third-party cookie providers

Third-party cookies set on www.fisify.com are managed by the following providers, which also process data under their own privacy policies:

5.1 Google LLC (Google Analytics and YouTube)

Google Analytics is used for statistical analysis of web traffic. YouTube sets cookies associated with the videos embedded on the site. Google LLC, based in the United States, is certified under the EU-US Data Privacy Framework (DPF), which provides adequate safeguards for international transfers of personal data from the European Union.

On www.fisify.com, Google Analytics runs with Google Consent Mode in its advanced mode, described in section 8. For statistical measurement, Google acts as Fisify's data processor under the data processing terms accepted by Fisify in its Google Analytics account.

Google privacy policy →

5.2 HubSpot, Inc.

HubSpot is used as a tool for analysing user behaviour and managing business contacts. HubSpot cookies link browsing history to the user's identity when they complete a form. HubSpot, Inc., based in the United States, is also certified under the EU-US Data Privacy Framework (DPF).

HubSpot privacy policy →

5.3 Cloudflare, Inc.

Cloudflare provides security, performance and protection against malicious automated traffic (bot management). Cloudflare cookies are technical and do not require consent. Cloudflare processes data under the safeguards of the EU-US Data Privacy Framework (DPF).

Cloudflare privacy policy →
6

International data transfers

The use of Google, HubSpot and Cloudflare cookies may involve transfers of personal data to servers located in the United States. These transfers are made under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), which guarantees a level of protection equivalent to that required by the GDPR. This includes the technical data that Google Analytics receives through the cookieless signals described in section 8.

If the adequacy decision ceased to apply, transfers would be based on the standard contractual clauses approved by the European Commission, included in the data processing agreements with each provider.

For more information on the safeguards applicable to each provider, please see their respective privacy policies listed in the previous section.

7

Consent management

When accessing www.fisify.com for the first time, a cookie preferences panel is shown that allows the user to:

  • Accept all cookies.
  • Reject all optional cookies, keeping only the essential ones.
  • Configure their preferences by category, independently enabling or disabling analytics, functional and advertising cookies.

Cookies subject to consent are not set until the user has expressed their choice freely, specifically, informed and unambiguously, in accordance with article 7 GDPR. Until the user has made a choice, or if they reject analytics cookies, Google Analytics may only send the cookieless signals described in section 8, which the user can object to from the same panel.

The user can change their preferences at any time through the "Cookie preferences" link in the website footer.

The consent given is recorded with date and time for audit and regulatory compliance purposes.

8

Cookieless statistical measurement (Google Consent Mode)

On www.fisify.com Fisify uses Google Consent Mode in its advanced mode. This system adapts how Google Analytics works to the choice the user makes in the cookie preferences panel:

If the user accepts analytics cookies

Google Analytics works normally and sets the _ga and _ga_* cookies described in section 4.

If the user rejects them or has not yet chosen

No Google Analytics cookie is set or read on their device. The Google tag still loads and sends Google a cookieless signal for each page visited and for each measured interaction (for example, submitting a form).

8.1 What the cookieless signals contain

Each signal contains only technical information about the visit: the address of the page visited (including, where applicable, campaign parameters) and of the referring page, the type of interaction measured, the date and time, the browser type, its language and screen resolution, the user's consent status and a random number generated on each page load. Due to the very nature of an internet connection, Google also receives the device's IP address.

The signals do not contain persistent user or device identifiers, do not allow different visits by the same person to be linked to each other, and are not used to build profiles or to personalise advertising. According to information provided by Google, the IP address is used only to estimate approximate location (country or region) and is not stored.

8.2 What they are used for

Google uses these signals to estimate, through statistical models, the volume of visits and interactions of users who have not accepted analytics cookies. When Fisify runs advertising campaigns on Google Ads, Google may also use these signals, in aggregate form, to estimate the effectiveness of those campaigns. Fisify only receives aggregated, estimated results, never individual information about those users.

8.3 Legal basis and right to object

This processing is based on Fisify's legitimate interest in knowing the aggregate volume of visits to its website in order to size and improve it (art. 6.1.f GDPR). Fisify has balanced this interest against users' rights, taking into account that no cookies are set, that the user is not identified or tracked between visits, and that results are only obtained in aggregate form.

The user may object to the sending of these signals at any time:

  • by disabling the "Cookieless statistical measurement" option in the "Cookie preferences" link in the footer; or
  • by writing to privacidad@fisify.com with the subject "Objection to cookieless measurement".

Once the objection has been exercised, the Google Analytics tag no longer loads in the user's browser.

10

Legal basis for processing

The processing of personal data resulting from the use of cookies is based on the following legal grounds:

11

User rights

Users may exercise the following rights regarding their personal data at any time:

  • AccessKnow what personal data Fisify processes.
  • RectificationRequest the correction of inaccurate data.
  • ErasureRequest the deletion of their data.
  • Restriction of processingRequest that the use of their data be restricted.
  • PortabilityReceive their data in a structured, readable format.
  • ObjectionObject to processing based on legitimate interest. This includes the cookieless statistical measurement described in section 8.
  • Withdrawal of consentWithdraw the consent given for optional cookies at any time.

To exercise these rights, users can contact Fisify Technology, S.L. by email at privacidad@fisify.com, with the subject "Exercise of GDPR rights".

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with applicable law.

12

Policy updates

Fisify reserves the right to modify this Cookie Policy to adapt it to legislative or regulatory changes or to instructions issued by the Spanish Data Protection Agency. Any change will be published on this page with the date of the update.

Users are advised to review this policy periodically. In the event of substantial changes, Fisify will inform registered users by email.

13

Contact

Any questions?

For any question about the use of cookies or the processing of your personal data, write to us.

privacidad@fisify.com

Fisify Technology, S.L. · Calle Máximo Aguirre, 21, 48011 Bilbao (Bizkaia), Spain
Controller contact: Egoitz Lazkano Juaristi (Data Protection Officer)

This is an English translation for information purposes. In case of discrepancy, the Spanish version prevails.