Brytspace Cookie Policy

1. Data controller and scope

• Legal name: BrytSpace SL
• Tax ID (NIF): B21978127
• Registered address: Calle Eduardo Dato 2, 5B, 28010 Madrid, Spain
• Trade name: Brytspace
• Domains: brytspace.com and app.brytspace.com
• Primary email: technology@brytspace.com
• Alternative email: carlota@brytspace.com

This Cookie Policy applies to brytspace.com, app.brytspace.com, and the pages, forms, and features associated with both domains.

Brytspace may manage preferences for both domains together, provided that users are clearly informed of the domains, categories, and purposes included.

2. What cookies and similar technologies are

Cookies are small files or storage mechanisms placed on a user's device when visiting a website or using a digital service. They can be used to remember a session, maintain authentication, store preferences, protect security, measure use of the service, or manage advertising.

In this policy, the term cookies also includes, where applicable, pixels, tags, identifiers, local storage, session storage, and equivalent technologies.

3. Who uses cookies

3.1. First-party cookies

These are managed through domains or systems under Brytspace's responsibility and are used, for example, for authentication, security, form functionality, and storing preferences.

3.2. Third-party cookies

These are managed by external entities that provide analytics, advertising, payment, communications, support, embedded content, or other services and functionalities.

Third parties currently used or expected to be used include Google, Meta, and LinkedIn.

4. Types of cookies based on duration

• Session cookies: Deleted when the browser is closed or the session ends.
• Persistent cookies: Remain on the device for the period specified for each cookie or until the user deletes them.

5. Categories and purposes

5.1. Technical or strictly necessary cookies

These cookies are necessary to transmit communications or provide a service requested by the user. They may be placed without consent where they are strictly necessary.

They may be used to:

• Manage login and keep the user's account authenticated.
• Apply security measures and prevent fraud.
• Store consent preferences.
• Temporarily retain information entered in forms or purchasing processes.
• Process payments or bookings requested by the user.
• Distribute traffic and maintain service stability.

5.2. Preference or personalization cookies

These cookies allow the website or application to remember language, region, visual settings, filters, or other preferences.

Where a preference has been expressly selected by the user and the cookie is necessary to remember that choice, it may be considered a technical cookie.

Where the cookie is used for additional purposes, consent will be requested.

5.3. Analytics or measurement cookies

These cookies allow Brytspace to measure visits, sessions, pages viewed, user journeys, errors, conversions, and service performance.

Brytspace uses Google Analytics or equivalent tools.

These cookies will only be activated after the user provides consent, unless they are configured in a manner that satisfies all requirements for any applicable legal exemption.

5.4. Advertising and behavioral advertising cookies

These cookies may be used to attribute visits to campaigns, measure conversions, create audiences, limit the repetition of advertising, and display advertising related to users' interests.

Brytspace uses technologies such as Meta Pixel and LinkedIn Insight Tag.

These cookies require prior consent.

5.5. Embedded content and functionality

Maps, videos, forms, calendars, design tools, social networks, payment systems, electronic signature services, or chat tools may place third-party cookies.

Where these technologies are not strictly necessary, the integration must remain blocked until the user accepts the corresponding cookie category.

6. Legal basis

Strictly necessary technical cookies are used to provide the service requested by the user.

Analytics, advertising, behavioral advertising, and non-essential personalization cookies are used on the basis of the user's consent.

Consent must be given in advance, informed, freely given, specific, and expressed through an affirmative action.

Inactivity, continuing to browse, or closing the cookie notice will not be considered consent.

7. Cookie banner and consent management

On the user's first visit, Brytspace will display a notice allowing the user to:

• Accept all cookies.
• Reject all non-essential cookies.
• Configure cookies by category.
• Access this Cookie Policy.

In addition:

• The options to accept and reject cookies will be displayed at the same time, at the same level, and with equivalent visibility.
• Non-essential categories will be disabled by default.
• Acceptance of the Terms, Privacy Policy, or account registration will not be combined with cookie consent.
• Google Analytics, Meta Pixel, LinkedIn Insight Tag, and other non-essential technologies will not be loaded before the user makes an affirmative choice.
• Evidence of the user's choice will be retained.

8. Preference center

Users may change their decision at any time through a permanent Cookie settings link available in the website or application's footer or another clearly visible location.

Through the preference center, users may:

• Review their current settings.
• Accept or reject cookie categories.
• Withdraw previously given consent.
• Review the inventory of cookies and third parties.

Withdrawing consent will be as easy as giving it.

Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

9. Service providers and international data transfers

Google, Meta, LinkedIn, and other service providers may process information outside the European Economic Area or allow access to information from third countries.

Where an international data transfer takes place, Brytspace must verify that the transfer is based on a valid mechanism, such as:

• An adequacy decision.
• Participation in the EU-U.S. Data Privacy Framework.
• Standard Contractual Clauses.
• Other safeguards recognized under applicable data protection law.

The cookie inventory must identify the relevant third party, its purpose, and provide access to its privacy information.

10. Cookie inventory

The following list describes the technologies currently known at a category level.

It does not replace the technical inventory of cookie names, domains, and durations, which must be generated through an actual technical scan.

• Brytspace — Necessary. Session management, authentication, security, and service functionality. Activated automatically where strictly necessary.
• Consent management platform — Necessary. Stores the user's cookie preferences. Activated automatically.
• Google Analytics — Analytics. Measures usage, performance, and conversions. Activated only with consent.
• Meta Pixel — Advertising. Measurement, attribution, and audience creation. Activated only with consent.
• LinkedIn Insight Tag — Advertising. Measures campaigns and professional audiences. Activated only with consent.
• Payment provider — Necessary or functional. Processes payments and helps prevent fraud. Activated when the requested action is initiated or according to consent requirements.
• Embedded content — Variable. Maps, videos, electronic signatures, chat, or other functionality. Activated according to the relevant category and the user's choice.

At a minimum, the technical cookie inventory must include:

• Technical cookie name.
• Provider and domain.
• Specific purpose.
• Category.
• Duration or expiration condition.
• Whether it is a first-party or third-party cookie.
• Country or international transfer information, where applicable.
• Link to the third party's policy.

11. Duration and renewal of consent

The specific duration of each cookie will be stated in the inventory available through the preference center.

Brytspace will limit the duration of cookies to the period necessary for the stated purpose.

As a good practice, the user's preferences will not be retained for more than 24 months without requesting renewal, unless the purposes, third parties, or configuration change before then. In such cases, the user will be asked to make a new choice where necessary.

12. Managing cookies through your browser

Users may delete or block cookies through their browser's privacy, security, cookie, and site data settings.

The specific steps depend on the browser and device being used.

Blocking all cookies may affect authentication, security, forms, and other necessary functionality.

Deleting cookies through the browser does not necessarily replace withdrawing consent through the preference center. Users are therefore also encouraged to use Cookie settings to manage their preferences.

13. Updates to this Cookie Policy

Brytspace may update this Cookie Policy when new technologies are introduced, service providers or purposes change, configurations are modified, or legal requirements change.

Where a change affects previously accepted purposes or third parties, users will be asked to make a new choice where necessary.

14. Contact

Questions regarding cookies may be sent to technology@brytspace.com.

For information regarding the processing of personal data and the exercise of data protection rights, please refer to the Privacy Policy.