1. Data Controller

Data processing activities arising from the use of cookies on this site are jointly determined, pursuant to Art. 26 GDPR, by the four companies of the Apipana.io Group (HOLDING MARCUS BRACKELMANNS, S.L.U., SECRETARYBIRDS, S.L.U., APIPANA OPERATIONS, S.L.U., and APIPANABIRDS SEVILLA, S.L.U.), identified in further detail in our Privacy Policy. For these purposes, SECRETARYBIRDS, S.L.U., Tax ID B-70688361, Plaza Isabel la Católica, nº 7, 2º dcha., 18009 Granada acts as the single point of contact. Contact: dpo@apipana.io.

2. What Are Cookies

A cookie is a small file or text file that is downloaded and stored on your browser, IT equipment, or device (for example, computer, smartphone, or tablet) when accessing certain web pages, allowing the storage and retrieval of information about your browsing habits or your device. Under this term, we also include other technologies with equivalent purposes (tracking pixels, tags, local storage, fingerprinting), which are subject to the same regulatory framework as cookies themselves.

Cookies allow, among other functions, the storage and retrieval of technical browsing data, remembering your personal preferences, personalizing displayed content, producing website usage statistics, facilitating interaction with social media, and, where applicable, managing access to your user account.

3. Typology of Cookies

The categories of cookies recognized under the Spanish Data Protection Agency (AEPD) Guide on the use of cookies are set out below, regardless of whether all of them are used on this website (the specific details of the cookies actually installed on apipana.io are listed in Section 6):

According to the entity managing them

• First-party cookies: those sent to the user’s terminal equipment from a domain managed by the Apipana.io Group itself and from which the requested service is provided.
• Third-party cookies: those sent to the user’s terminal equipment from a domain not managed by the Group, but by another entity that processes data collected through them (for example, web analytics or social media providers).

According to their purpose

• Technical or necessary cookies: those that allow the user to browse a website, platform, or application and utilize the different options or services available therein, including those used by the publisher to enable operational management of the website and activate its functions and services, such as controlling data traffic and communication, identifying the session, accessing restricted access areas, remembering order items, processing payments, controlling fraud, completing event registration or participation forms, utilizing security features during browsing, and storing content for video or audio dissemination.
• Preference or personalization cookies: those that allow information to be remembered so that the user accesses the service with specific characteristics that can differentiate their experience from that of other users, such as language, the number of results to display, or the appearance or content of the service depending on browser type or geographic access region.
• Analytics or measurement cookies: those that allow the party responsible for them to track and analyze user behavior on linked websites, including quantifying ad impressions. The collected information is used to statistically analyze website activity in order to introduce improvements based on usage data analysis.
• Behavioral advertising cookies: those that store user behavior information obtained through ongoing observation of browsing habits, allowing the development of a specific profile to deliver targeted advertising based on it, with the objective of showing ads relevant to the user.

According to the retention period

• Session cookies: designed to collect and store data while the user accesses the website; they are erased once the session ends or the browser is closed.
• Persistent cookies: data remains stored on the terminal for a period defined by the cookie controller, which can range from a few minutes to several years, and is accessed and processed upon each visit to the website until expiration or manual deletion.

4. Legal Basis

• Technical or strictly necessary cookies: exempt from the consent requirement pursuant to Art. 22.2 LSSI-CE, as they are essential to provide the service requested by you.
• Remaining cookies (analytics, personalization, advertising, and third-party): require your prior, free, specific, informed, and unambiguous consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE).

We do not install non-necessary cookies before you accept them, and rejecting them does not restrict access to the site or its content.

5. How to Grant, Manage, or Withdraw Your Consent

When accessing the website for the first time, you will see a banner containing two buttons of equal visual hierarchy: Accept and Reject. Through the «settings» link within the banner, you can access the configuration panel, where you can separately enable or disable each category of non-necessary cookies. These categories are disabled by default. Rejecting cookies does not restrict your access to the site or its content.

You can modify or withdraw your consent at any time, with the same ease with which you granted it, using the floating cookie settings button located in the bottom-left corner of the screen. When you withdraw your consent, we will stop using the relevant cookies from that moment forward. Third-party cookies already installed on your device can be removed via your browser settings, as explained in Section 7. Withdrawal of consent does not affect the lawfulness of processing carried out prior to it.

Your choice is saved for 12 months. After this period, we will request your consent again.

6. Cookies Used on This Site

6.1. Technical cookies (do not require consent)

6.2. Analytics cookies (require consent)

Note: Google Analytics 4 processes online identifiers that are considered personal data; this does not constitute anonymous information.

6.3. Advertising and social media cookies (require consent)

International transfers: the identified third-party cookies entail transfers to the USA, covered under the EU-U.S. Data Privacy Framework adequacy decision of July 10, 2023, valid and confirmed at first instance by the EU General Court on September 3, 2025 (with an appeal pending before the Court of Justice of the EU), where the provider is certified and active, and, subsidiarily, under Standard Contractual Clauses (Decision 2021/914) with a transfer impact assessment. You may request information regarding these safeguards at dpo@apipana.io.

7. Browser Configuration

Independently of our panel, you can configure your browser to block or delete cookies. This option does not replace our consent panel, but complements it:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge
• Opera

8. Unidentified Third-Party Cookies

Despite our periodic reviews, we do not always possess complete information regarding cookies that third parties may install through embedded elements. If you detect any cookie not covered by this policy, please notify us at dpo@apipana.io and we will incorporate it.

9. Your Rights

You may exercise your rights of access, rectification, erasure, restriction, portability, and objection, as well as withdraw your consent, under the terms detailed in Section 7 of our Privacy Policy, by writing to dpo@apipana.io or to any of the joint controller companies identified therein, and lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Updates

We review this policy at least annually and each time a cookie is added or removed. You can consult official information in the Guide on the use of cookies from the Spanish Data Protection Agency (January 2024 edition), which incorporates the European Data Protection Board criteria on dark patterns, “cookie walls,” and consent-or-pay models, at www.aepd.es.

We review this policy at least once a year and each time a cookie is added or removed. You can consult official information in the Guide on the use of cookies from the Spanish Data Protection Agency (updated in July 2023 and enforceable since January 11, 2024), which incorporates the European Data Protection Board criteria on dark patterns, “cookie walls,” and consent-or-pay models, available at www.aepd.es.

Last updated: September 15, 2026