Cookie Policy
02.10.2026
1. Controller
The owner of this website and data controller is Spain Costas Exclusive Properties, S.L.U., NIF B72417397, registered address: Calle Guatemala, no. 19, ground-floor premises, door 6, 08018 Barcelona (Barcelona), Spain. Contact: info@spain-costas.com.
2. What cookies and similar technologies are
Cookies are small files or identifiers that a website can store on or read from a user's device. Similar technologies include browser storage and connections to external services. They can be used for technical operation, remembering preferences, measuring website usage and loading third-party content.
Optional cookies and similar technologies are used only after consent. Technologies that are strictly necessary to securely provide a service requested by the user may operate without separate consent.
3. Strictly necessary cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
cc_cookie | Spain Costas | Stores the choice made in the cookie panel. | 180 days |
*_session | Spain Costas / Laravel | Technical session and secure website operation. | Session; 120 minutes of inactivity by default |
XSRF-TOKEN | Spain Costas / Laravel | Protection against CSRF requests. | Tied to the session |
4. Analytics
This category is enabled only after consent. Google Analytics is loaded through gtag.js to produce usage statistics. Advertising storage and advertising-personalisation signals are disabled in the website configuration.
The first-party entry_params cookie is used to attribute an enquiry to its visit source and stores only permitted campaign parameters, the entry path and the entry time.
| Name | Provider | Purpose | Typical duration |
|---|---|---|---|
entry_params | Spain Costas | Campaign and enquiry attribution. | 30 days |
_ga | Google Analytics | Distinguishes users for statistics. | Up to 2 years |
_ga_* | Google Analytics | Persists Analytics session state. | Up to 2 years |
_gid | Google Analytics, where applicable | Short-term user distinction. | Up to 24 hours |
This Google Analytics configuration is not used for behavioural advertising or ad personalisation: ad_storage, ad_user_data and ad_personalization remain denied.
More information: Google Analytics cookie usage and Google Privacy Policy.
5. External content and maps
The “External content” category remains disabled until the user accepts it. Only then can YouTube, Google Maps and the external infrastructure used by the dedicated map page load.
YouTube. Videos are loaded from youtube-nocookie.com. Once external content is enabled, Google/YouTube may use cookies or equivalent technologies. Cookies currently documented by Google for YouTube include __Secure-YNID —up to 6 months—, __Secure-YENID —up to 13 months— and PREF —up to 8 months—. The exact set may vary according to browser, account and Google settings.
Google Maps. Property-page maps are loaded through the Google Maps JavaScript API only after consent. Google receives technical data needed to provide the service, including the IP address, and may use its own storage technologies under its policies.
MapLibre, UNPKG and CARTO. The /properties/map page uses MapLibre GL, downloads the library from unpkg.com, and loads map resources from CARTO. These connections are blocked until External content is accepted. They transmit technical data needed to deliver files and map resources, including the IP address, even where no separate cookie is set.
6. Accepting, rejecting and withdrawing consent
The first layer provides equally accessible “Accept all”, “Reject all” and “Manage preferences” actions. Optional categories are disabled by default, and continuing to browse is not treated as consent.
You can change or withdraw consent at any time through “Cookie settings” in the footer or with the button below. Withdrawal applies to future processing.
The website stores your selection for 180 days. We may request a new choice earlier if the purposes, providers or configuration change materially.
You can also delete cookies and site data through your browser settings. This can remove third-party cookies that Spain Costas cannot delete directly. See the instructions for Chrome, Firefox, Safari or Edge.
7. Third parties and international transfers
Google Analytics, YouTube and Google Maps are Google services. For users in the EEA, Google Ireland Limited normally provides Google's services; certain processing may involve Google LLC or other group entities. Google states that it uses recognised international-transfer mechanisms, including the EU-U.S. Data Privacy Framework where applicable and Standard Contractual Clauses.
CARTO is operated by CartoDB Inc., a US company. CARTO states that it is certified under the EU-U.S. Data Privacy Framework and relies on Standard Contractual Clauses where that framework does not apply.
8. Changes and review
Third-party providers may change cookie names, purposes or retention periods. We review this information periodically. If a change materially affects consent already given, this policy will be updated and a new choice will be requested where required.
9. Further information and rights
For more information about personal-data processing, see our Privacy Policy. You can contact info@spain-costas.com and, where applicable, lodge a complaint with the Spanish Data Protection Agency (AEPD).
