Free shipping on orders over €100 (Peninsula)

Cookie Policy / GDPR Compliance

Rivera Spain SL Cookie Policy

Last updated: July 16, 2025

1. Who is Responsible?

ELISA RIVERA SLU

Madrid Avenue, 13 – 28750 - San Agustín de Guadélix - Madrid

ESB44845527

info@elisarivera.com

Registration in the Commercial Registry of Madrid: volume 8699, folio 198, section 8, page no. M-140001, entry 1

2. Regulatory scope

  • We apply Regulation (EU) 2016/679 (GDPR), the LSSI-CE and the LOPDGDD .

  • For users in territories with specific laws (e.g. CPRA/CCPA in California or LGPD in Brazil) we provide a “Do Not Sell or Share My Personal Information” link, accessible from the cookie banner or the Compliance section, as applicable.

3. What are cookies and similar technologies?

Small text files, beacons, pixels, or local storage that your browser saves when you visit our site. They are used to remember you, measure website usage, or show you relevant advertising.

4. Consent management

Our banner offers, in the first layer , “Accept”, “Reject” and “Configure” buttons at the same visual level , in accordance with the AEPD Cookies Guide (July 2023).

The Consent Management Platform (CMP) records the timestamp of your choice, the current version of this policy, and a unique consent identifier.
When our integration with the IAB Transparency & Consent Framework (TCF v2.x) standard is enabled, this identifier includes the TCF string, which is shared with our advertising partners. This allows us to verify your consent in accordance with Art. 7 GDPR.

5. Types of cookies we use

Category Supplier Primary name(s) Duration* Purpose / Legal Basis
Strictly necessary Shopify _secure_session_id, cart, cart_currency, cart_sig, cart_ts, checkout_token, storefront_digest, secure_customer_sig, _tracking_consent, _shopify_m, _shopify_tm, _shopify_tw, cookieconsent_preferences_disabled 24 h – 1 year Maintain session, cart, and preferences. Legitimate interest .
Functional / Preferences Shopify keep_alive (30 min), localization (1 year), dynamic_checkout_shown_on_cart (24 h), _secure_account_session_id (session) Remember language, currency, and experience. Legitimate interest .
Analytics Google Analytics 4 _ga, ga <id>, _gid 24 h – 2 years Measure audiences and performance. Consent .
Shopify Analytics _shopify_y, _y (1 year), _shopify_s, _shopify_sa_t, _shopify_sa_p (30 min), _landing_page, _orig_referrer (2 weeks) Internal navigation and attribution metrics. Consent .
Microsoft Clarity _clck (1 year), _clsk (24 h), CLID (1 year), MR (7 days), SM (session), ANONCHK (10 min) Heat maps and anonymous recordings. Consent .
Advertising / Marketing Meta Pixel _fbp (3 months) Remarketing and measurement. Consent .
Google Ads _gcl_au (3 months) Optimize ads. Consent .
Microsoft (Bing) MUID (1 year), SRM_B (1 year) Advertising identifier. Consent .

* The period is renewed if you visit the website again; see section 6.

6. Storage period

Cookies are retained until their expiration date, unless you delete them or change your settings. For example, the _ga identifier is renewed for up to two years from the last visit.

7. How to revoke or modify consent

  • Click “Configure cookies” (footer) and adjust your preferences.

  • Or delete cookies in your browser:
    Chrome · Firefox · Edge · Safari .

  • California users: Use the “Do Not Sell or Share” link.

8. International transfers

  • Google LLC and Microsoft Corp. participate in the EU-US Data Privacy Framework (EC Decision 10-7-2023).

  • If the supplier is not listed in the DPF, Standard Contractual Clauses (SCC 2021/914/EU) apply.

  • Shopify Inc. operates from Canada (appropriate country) and the USA (SCC).

  • For the United Kingdom we use the UK International Data Transfer Addendum .

9. User rights

EU/EEA: access, rectification, erasure, objection, portability, restriction of processing, and withdrawal of consent. Complaints to the AEPD .
California (CPRA): Access, Deletion, Correction, Opt-Out of Data Sale/Sharing .
Brazil (LGPD): confirmation, access, correction, anonymization, blocking, portability and revocation.
Request them by writing to info@elisarivera.com.

10. Minors

We do not direct our products to children under 14 years of age (or the applicable age in your country). If you are a minor, please ask your guardian to manage cookies.

11. Changes in policy

We review this policy at least every 12 months , or when regulations or the cookies we use change. We will post the new version with a clear update date.