Cookie Policy

This Cookie Policy explains what cookies and similar technologies are, how Xtampa uses them across its ecosystem of websites, for what purposes and how you can manage your consent. It is governed by:

• Directive 2002/58/EC (ePrivacy Directive) and its transposition into Spanish law.
• Article 22.2 of Law 34/2002 (LSSI-CE), on the use of data storage and retrieval devices.
• Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), where cookies process personal data.
• The Guide on the use of cookies issued by the Spanish Data Protection Agency (AEPD).

Cookies are small text files that are placed on your device (computer, tablet or mobile) when you visit a website. They are widely used to make websites work more efficiently, remember your preferences and provide information to the owners of the site.

In addition to cookies, this policy covers similar technologies for storing and retrieving data, such as:

• Local storage and session storage: browser local storage (HTML5) that allows data to be saved on your device.
• Pixel tags or web beacons: small invisible images that allow browsing activity to be recorded.
• Browser fingerprinting: techniques that collect device configuration information to identify it.

All these technologies are subject to the aforementioned regulations when they store or retrieve information on your device.

The controller responsible for the use of cookies and for the processing of any data derived from them is Xtampa (owner: Ángel López Romero, Tax ID ES48430998J, registered address C/ Cerámica Galindo, 2, 30820 Alcantarilla, Murcia). You can consult the full identifying details in the Legal Notice. For any question about cookies or privacy, you can write to [email protected].

In the Xtampa ecosystem of websites we use the following cookies and similar technologies (including browser local storage):

The consent manager on this site is our own banner accessible from the footer ("Configure Cookies"), not CookieYes.

The lawful basis for using cookies depends on their type:

• Technical or necessary cookies: based on the need to provide the service expressly requested by the user (Art. 22.2 LSSI-CE) and, where they process personal data, on the performance of the relationship with the user or Xtampa's legitimate interest in ensuring the security of the site (Art. 6.1.b and 6.1.f GDPR).
• Preference, analytics and marketing cookies: require your prior, freely given, specific, informed and unambiguous consent (Art. 22.2 LSSI-CE and Art. 6.1.a GDPR). This consent is requested on a granular basis, so you can accept or reject each category separately.

Consent is understood to be validly given when you take a clear affirmative action (for example, clicking "Accept" or configuring your preferences). Non-necessary cookies are not installed through pre-ticked boxes or by merely continuing to browse.

When you first visit the website, a banner informs you about the use of cookies and allows you to:

• Accept all cookies.
• Reject non-necessary cookies.
• Configure your preferences by category (necessary, preferences, analytics, marketing).

Necessary cookies cannot be rejected because they are essential for the operation of the website. You can modify or withdraw your consent at any time through the "Configure Cookies" link available in the footer of all Xtampa microsites.

In addition to the site's configuration panel, you can configure your browser to block, reject or delete installed cookies. Please note that blocking all cookies may affect the functioning of some websites. Check your browser's instructions:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Some cookies are managed by third-party providers who act, where applicable, as processors or controllers of the data they collect. In particular:

• Google (Analytics / Tag Manager): when you accept analytics cookies, Google may collect browsing data for statistical purposes. Google is responsible for its own processing in accordance with its privacy and cookie policies.

Xtampa does not control the information collected by these third parties or the use they make of it. We recommend that you consult each provider's privacy and cookie policies for detailed information.

Some third-party cookies (for example, Google Analytics) may involve the international transfer of data to the United States or other countries outside the European Economic Area. These transfers are covered by appropriate safeguards under the GDPR, such as:

• The Standard Contractual Clauses approved by the European Commission.
• The EU-U.S. Data Privacy Framework, where the recipient is certified.

You can obtain more information in the privacy policies of the relevant providers.

If you reject or delete analytics cookies, the website will continue to function normally, but we will not be able to collect information to improve the user experience. If you disable preference cookies, the site will not remember your choices (language, theme). If you block technical or necessary cookies, some features of the website may not work correctly.

We keep a record of your consent (acceptance, rejection or configuration) for a maximum period of 1 year, after which we will request it again, in accordance with AEPD recommendations. The anonymous session identifier allows us to audit that consent was validly given, without being linked to additional identifying data.

Where cookies process personal data, you can exercise your rights of access, rectification, erasure, restriction, objection and portability, as well as withdraw the consent given, under the terms set out in our Privacy Policy. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing does not comply with the regulations.

This cookie policy may be updated to reflect changes in the cookies used, in the services offered or in the applicable legislation. When significant changes occur, we will inform you through the consent banner. We recommend that you review it periodically. The last update date is indicated in the header of this page.