Cookie policy

A cookie is a small file that a website stores in your browser when you visit it. On your next visit the browser sends it back to the site. This lets the site remember, for example, that you are signed in or which language you chose.

This policy also covers similar technologies, such as the browser's local storage (localStorage or sessionStorage). BuenSpot does not use that storage today.

There are two kinds, depending on who manages them:

• First-party cookies: BuenSpot sends and manages them from its own domain (buenspot.com). The technical cookies in the first table in section 3 are first-party cookies.
• Cookies managed by third parties: another company manages them. The Google Analytics cookies (section 3) are stored on our domain, but Google's code creates and reads them, and Google processes that data for us. They are only set if you accept them. See also section 4 on paying with Stripe.

Technical cookies (always on). They are strictly necessary. They are not used to build a profile of you or to show you ads.

The sde_locale and sde_audience cookies are only stored when you make a choice on the welcome screen or in the menu. If you choose nothing, they are not stored.

Analytics cookies (only with your consent). Google Analytics 4 sets them through Google Tag Manager, and only after you click "Accept all" or switch on "Analytics" under "Settings". In aggregate figures they tell us which pages are visited, on what kind of device and how visitors reach the site, so we can improve it.

Google Tag Manager is the tool that loads Google Analytics. It stores no cookies itself. Until you accept, we load neither Google Tag Manager nor Google Analytics: your browser does not contact Google and no analytics cookie is stored or read.

The "Marketing" category in the banner is off by default. Today we use no advertising cookies. If we ever do, it will only be with your consent and after adding them to this table.

• Paying with Stripe. To pay, we send you to Stripe's payment page (checkout.stripe.com). On that domain Stripe sets its own cookies, among other things to prevent fraud and process the payment securely. Stripe Payments Europe Ltd. is responsible for those cookies. You can find Stripe's cookie policy on its website. BuenSpot does not receive that data or your full card details.
• Map. On the page with the map of nearby deals we load map tiles from OpenFreeMap's servers. That service sets no cookies, but it does receive your IP address, like any server your browser asks for an image. Your browser may keep those tiles in its normal cache.
• Sample photos. Some photos load from images.unsplash.com. That server receives your IP address to deliver the image. BuenSpot does not ask it to set cookies.
• Location. If you use "my location" on the map, your browser asks for permission. The position is only used in your browser to calculate distances. It is not stored in a cookie or on our servers.
• Google Analytics and Google Tag Manager. Only if you accept analytics cookies. The provider is Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), which processes the data as a processor on behalf of BuenSpot. Google receives your IP address, which Google Analytics 4 does not store, and data about how the site is used. Google may transfer data to Google LLC in the United States; that transfer relies on the EU-US Data Privacy Framework, under which Google LLC is certified, and on standard contractual clauses. More information at policies.google.com/privacy and policies.google.com/technologies/partner-sites. You can prevent analytics by rejecting these cookies in the banner.

Article 22.2 of Spanish Law 34/2002 (LSSI) requires your consent to store cookies, except where they are strictly necessary to provide a service you have expressly requested or to transmit a communication. The Guía sobre el uso de las cookies of the Spanish Data Protection Agency (AEPD) places session, shopping cart, security and preference cookies such as the language the user chooses within that exception. That is why technical cookies need no consent, and analytics cookies do.

On your first visit we show a banner with the buttons Reject all, Accept all and Settings:

• Rejecting is as easy as accepting: both buttons have the same size and look and sit in the first layer of the banner.
• Under "Settings" you choose per category (Analytics and Marketing). No box is ticked in advance.
• Until you accept, no analytics cookie is stored. Continuing to browse does not count as consent, and the site works just the same if you reject.
• We keep your choice in the bs_consent cookie for 13 months. After that, or if we change the cookies we use, we ask again.

You can withdraw or change your consent at any time with the Cookie settings link, in the footer and at the top of this page. If you withdraw consent for analytics, we delete the _ga cookies from your browser. Withdrawing does not affect the lawfulness of processing before it.

If we ever want to use other analytics, personalisation or advertising cookies, we commit to the following:

• We will update this policy with the name, provider, purpose and duration of each new cookie before using it.
• If the cookie needs consent, we will ask again in the banner before storing it, with the same guarantees as in section 5.

You can view, block and delete cookies in your browser settings. These are the official help pages of the most common browsers:

• Google Chrome: support.google.com/chrome/answer/95647
• Mozilla Firefox: support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Safari (Mac): support.apple.com/guide/safari/sfri11471/mac
• Safari (iPhone and iPad): support.apple.com/105082
• Microsoft Edge: support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

If you use another browser, search for "cookies" or "privacy" in its help menu.

For analytics cookies you do not need your browser: the Cookie settings link from section 5 is enough.

• If you delete sde_session, you are signed out and need to sign in again.
• If you delete sde_cart, your cart is empty. Paid purchases and your vouchers are not lost: they are in your account.
• If you delete sde_locale or sde_audience, we ask again for your language and whether you live here or are on holiday.
• If you delete bs_consent, we show the cookie banner again.
• If you reject or delete the analytics cookies, the site works exactly the same.

If you block all cookies from buenspot.com, you cannot sign in or buy. You can still browse the deals.

We update this policy when the cookies we use or the rules change. At the top you see the date of the last change and the version. If we add cookies that need your consent, we will ask for it before using them, as explained in sections 5 and 6.

The controller for the cookies on buenspot.com, analytics cookies included, is [to be completed]. Google Ireland Ltd. processes the Google Analytics data as a processor.

Questions about this policy? Email the contact form or use the contact form.

To learn how we handle your personal data and what rights you have, read our privacy policy.