Cookie policy

COOKIE POLICY

BODEGAS ELIAS MORA SLU (the "Data Controller"), tax ID (CIF) B47464045, registered office at C/Juan Mora, s/n, 47530 San Román de la Hornija (Valladolid, Spain), uses cookies and similar technologies on the website https://bodegaseliasmora.com/ (the "Website"). This Cookie Policy informs users clearly about which cookies are used, for what purpose, who manages them, and how the user can accept, reject or configure them, in compliance with Article 22.2 of the Spanish Information Society Services Act (LSSICE), Regulation (EU) 2016/679 (GDPR), and the ePrivacy Directive as implemented in the countries where the Website sells its products.

1. What are cookies?

Cookies are small text files that a website stores on a user's browser or device when visiting it. They allow, among other things, the storage and retrieval of information about the user's or their device's browsing habits and, depending on the information they contain and how the device is used, may be used to recognise the user.

2. Types of cookies by purpose

Strictly necessary/technical cookies. Essential for the Website and the purchase process to function: maintaining the session, shopping cart contents, customer account, or country/language selection. These are native to the PrestaShop platform on which the store is built. No prior consent is required under Article 22.2 LSSICE.

Analytics cookies. Allow the number of users to be quantified and the use of the Website to be statistically analysed, in order to improve products and services.

Payment cookies. Installed by payment gateways to process transactions securely and prevent fraud.

Email marketing cookies. Allow the Website to identify whether a visitor is subscribed to the newsletter, link anonymous browsing to a contact in the email marketing database once identified, and personalise commercial communications.

Advertising and remarketing cookies. Not currently installed or active on the Website. Should they be introduced in the future, this policy will be updated before their activation.

3. Cookies currently used on this Website

Cookie Owner / Provider Purpose Type Duration Legal basis
ga Google LLC (via Google Tag Manager / Google Analytics 4) Distinguishes unique users by assigning an identifier to measure sessions and interactions for statistical purposes Analytics, third-party 2 years Consent
ga_MDG87BKRHL Google LLC (Google Analytics 4) Records session state and page interactions for the Website's GA4 property (measurement ID G-MDG87BKRHL) Analytics, third-party 2 years Consent
gid Google LLC Distinguishes users and stores information on how they browse the Website Analytics, third-party 24 hours Consent
gat / _gat_gtag* Google LLC Limits the rate of data-collection requests on high-traffic sites Analytics, third-party 1 minute Consent
Redsys/CaixaBank session cookies Redsys Servicios de Procesamiento, S.L. Secure management of the card payment gateway during checkout Technical/payment, third-party Session Performance of a contract
PayPal session cookies PayPal (Europe) S.à r.l. et Cie, S.C.A. Secure management of PayPal payments and fraud prevention Technical/payment, third-party Session / up to 12 months depending on purpose Performance of a contract
mc_user_optin The Rocket Science Group LLC (Mailchimp) Identifies whether the visitor has accepted or declined the newsletter subscription via the Mailchimp pixel Marketing, third-party Up to 12 months Consent
sib_cuid Sendinblue SAS (Brevo) Contact identifier linking browsing behaviour to the Brevo email marketing database and automations Marketing, third-party Up to 12 months Consent
oscd (get.brevo.com) Sendinblue SAS (Brevo) Support cookie for Brevo's newsletter/form-capture script Marketing, third-party Up to 12 months Consent
PHPSESSID BODEGAS ELIAS MORA SLU (PrestaShop platform) Maintains the browsing session while the user navigates the Website Technical, first-party Session No consent required
PrestaShop-[hash] BODEGAS ELIAS MORA SLU (PrestaShop platform) Maintains the shopping cart contents and, where applicable, the authenticated customer account session Technical, first-party Persistent (up to 12 months) No consent required
country BODEGAS ELIAS MORA SLU (PrestaShop platform) Remembers the shipping country selected by the user, relevant since the Website only ships to certain EU countries Technical/personalisation, first-party Persistent No consent required

Note on email marketing provider migration: the Data Controller is in the process of gradually migrating from Mailchimp to Brevo as its email marketing platform. During this transition period, cookies from both providers may coexist. This table will be updated to reflect the complete removal of the Mailchimp pixel once the migration is finalised.

4. Advertising and remarketing cookies (planned, currently inactive)

The Data Controller may in the future incorporate Google Ads, Meta Pixel (Facebook/Instagram), or other advertising platform cookies for remarketing and campaign measurement purposes. As of this publication date, such cookies are not installed or active on the Website. Should they be activated in the future, this Cookie Policy will be updated before deployment and prior consent will be requested from the user via the consent management panel.

5. Managing consent

The Data Controller is implementing a consent management panel (CookieYes) which, once live, will display a banner to users accessing the Website allowing them to:

  • Accept all cookies.

  • Reject all non-essential cookies.

  • Configure in detail which categories of cookies to accept (technical, analytics, marketing).

While this panel is being completed, the Data Controller limits the use of non-essential cookies to what is strictly necessary for the Website to function, and recommends users configure their preferences directly from their browser (see section 6). Once the consent panel is live, users may change their choice at any time via the "Cookie settings" link in the Website's footer.

6. How to delete or block cookies from your browser

Users may also delete, block or configure cookies directly from their browser:

7. International transfers

Google Analytics and Mailchimp cookies involve data transfers to the United States, carried out under the EU-US Data Privacy Framework, an adequacy mechanism recognised by the European Commission. PayPal cookies may also involve transfers to the United States under the same framework or via Standard Contractual Clauses. Brevo cookies (Sendinblue SAS, a French company) do not, in principle, involve transfers outside the European Economic Area.

8. Updates to this policy

The Data Controller may amend this Cookie Policy to reflect new legal requirements, completion of the Mailchimp-to-Brevo migration, activation of the CookieYes consent panel, or new cookies incorporated into the Website. Users are advised to review this page periodically.

Last updated: August 2026.