Cookie policy
Art. 22.2 of Spanish Law 34/2002 (LSSI-CE) · AEPD cookie guidance
1. What cookies are
A cookie is a small file a website stores on your device when you visit. Spanish law applies the same test to equivalent storage technologies, such as the browser's local storage (localStorage), which is what we use for basic functions.
2. What this site uses
2.1. Necessary (no consent required)
These are essential for the site to work or to provide a service you have expressly requested, and are exempt from consent under art. 22.2 LSSI.
| Name | Type | Purpose | Duration | Owner |
|---|---|---|---|---|
roda-lang | Local storage | Remember the language you chose so we don't ask again. | Until you clear your browser data | First party |
roda-cookies | Local storage | Remember your decision on this policy (accept or reject), so the notice isn't shown every visit. | Until you clear your browser data | First party |
2.2. Analytics (only if you accept)
These help us understand, in aggregate, how the site is used. They are not activated unless you press “Accept” in the cookie notice: until then no analytics resource is loaded and nothing is written to your device.
| Name | Tool | Purpose | Duration | Owner |
|---|---|---|---|---|
_ga | Google Analytics 4 | Distinguish visitors in order to measure site usage. | 2 years | Google (third party) |
_ga_DPNG2BMJB5 | Google Analytics 4 | Maintain the measurement session state. | 2 years | Google (third party) |
They are loaded through Google Tag Manager (container GTM-WQ4N395N), which does not itself store information on your device: it only fires the Google Analytics 4 tag (measurement ID G-DPNG2BMJB5). We do not use advertising pixels or social media tools.
In Google Analytics we have set event-data and user-data retention to 2 months, the shortest period the tool allows, applying the data-minimisation principle.
These cookies do not fall under the audience-measurement exemption in the AEPD's guidance (January 2024), because the provider may process the data for its own purposes, they allow cross-site tracking and there is disclosure to a third party. That is why we ask for prior consent.
International transfers: Google may process this data outside the European Economic Area, under the safeguards in Chapter V GDPR. See Google's privacy policy.
2.3. Fonts and site resources
Fonts and all other site resources are served from our own domain. We do not load fonts or libraries from third-party servers, so your browser does not disclose your IP address to any external provider simply by visiting us.
2.4. Card payments
When you pay for a booking we take you to Stripe's secure gateway, hosted on their own domains, which uses their cookies (necessary to process the payment and prevent fraud) under their own policy. We have no access to them.
3. How to accept, reject or change your mind
On your first visit you will see a notice where you can accept or reject analytics cookies, equally easily in both cases. Rejecting them does not limit your use of the site.
You can change your decision at any time from the “Cookie settings” link in the footer of any page. If you withdraw consent we stop loading analytics and delete the measurement cookies we are able to remove from the browser.
4. Deleting them in your browser
You can also block or delete cookies from your browser settings:
Note that clearing local storage also erases your language preference and your cookie decision, so the notice will appear again.
5. Personal data and changes
Any personal data arising from these technologies is explained in the privacy policy, which also covers how to exercise your rights and how to complain to the Spanish Data Protection Agency. We may update this policy if the tools we use change; the version in force is the one published on this page.