Cookie Policy
Last updated: 28 May 2026 · Version: v2.0
This Cookie Policy applies to Easy210Spain as part of the Easy Legal Spain group, operated by Expat Abogados (Juan Bertomeu Vallés, ICALI #4643, since 1991).
Our approach
We use cookies and similar technologies to make this site work, to understand how it is used, and — with your permission — to measure the effectiveness of our communications. You decide what you allow. You can change your preferences at any time using the link at the bottom of this page.
Banner specification — Three equal-prominence buttons
On your first visit (or when consent expires after 24 months), you see a cookie banner with three buttons of equal prominence:
- Accept all — enable all categories
- Reject all — only strictly necessary cookies
- Configure — choose per category
Rejecting cookies is as easy as accepting. No non-technical cookies fire before you give consent. There are no pre-checked toggles in the configuration panel.
This banner specification follows the EDPB Guidelines 03/2022 (deceptive design patterns), EDPB Guidelines 2/2023 v2.0 on cookies (7 October 2024), and AEPD Guía sobre el uso de cookies v.11 julio 2023. The "Aceptar / Configurar" pattern without a reject button on the first layer was confirmed invalid by the Audiencia Nacional ruling of 17 June 2024 against Iberia (€30,000 sanction).
Legal basis
We rely on (a) the strictly necessary exemption under Article 22 of Spain's Law 34/2002 (LSSI-CE) for essential cookies, and (b) your consent under Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679 for analytics and marketing cookies. Consent is logged with a timestamp and the country derived from your IP address, as evidence of compliance with Article 7 GDPR. Your IP address itself is never stored.
Categories we use
Strictly necessary
Always onRequired for the site and your client portal to function: authentication, security, and remembering form progress. These cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Supabase authentication session | Session |
| sb-refresh-token | Session refresh | 7 days |
| easygroup:cookie-consent:v1 | Remembers your cookie choice | 1 year (localStorage) |
| easygroup:anon-id:v1 | Anonymous identifier linking your consent record | 1 year (localStorage) |
Analytics
With your consentHelp us understand how visitors use the site so we can improve it. Data is aggregated and not used for advertising.
No analytics cookies are currently active. When activated, PostHog (EU region) will be the provider.
Marketing
With your consentUsed to measure the performance of our communications across platforms (such as Meta/Facebook campaigns) and to deduplicate events between browser and server. Strictly limited to event measurement — we do not sell or share data with third parties beyond the providers listed.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Meta Pixel — visitor identification for ad measurement | 3 months |
| _fbc | Meta Pixel — click identifier from Meta ads | 3 months |
Custom Audiences — Separate consent required
If you also wish your hashed email/phone to feed Meta Custom Audiences for personalised advertising, that requires a separate explicit consent (not bundled with the marketing cookie category). See our Privacy Policy section 6.1 for full details on the joint controllership arrangement (Article 26 GDPR) and how to withdraw at any time.
Third-party providers
When you allow the marketing category, we share event data with Meta Platforms Ireland Ltd. through both browser-side Pixel and server-side Conversions API. Both share the same event_id for deduplication. Personally identifying fields (email, phone) are hashed with SHA-256 server-side before transmission.
Payments are processed by Stripe, which may set its own cookies during checkout for fraud prevention. Stripe's privacy practices are governed by its own policies.
Your rights and how to change preferences
Under the GDPR you have the right to withdraw consent at any time, to request access to or deletion of your personal data, and to lodge a complaint with the Spanish Data Protection Agency (AEPD).
You can change your cookie preferences at any time:
Contact
Questions about this policy or your data? Contact us at legal@expatabogados.com.