Last updated: 28 May 2026 · Version: v2.0
This Cookie Policy applies to Easy Tourist License Spain as part of the Easy Legal Spain group, operated by Expat Abogados (Juan Bertomeu Vallés, ICALI #4643, since 1991).
We use cookies and similar technologies to make this site work, to understand how it is used, and, with your permission, to measure the effectiveness of our communications. You decide what you allow. You can change your preferences at any time using the link at the bottom of this page.
On your first visit (or when consent expires after 24 months), you see a cookie banner with three buttons of equal prominence:
Rejecting cookies is as easy as accepting. No non-technical cookies fire before you give consent. There are no pre-checked toggles in the configuration panel.
This banner specification follows the EDPB Guidelines 03/2022 (deceptive design patterns), EDPB Guidelines 2/2023 v2.0 on cookies (7 October 2024), and AEPD Guía sobre el uso de cookies v.11 julio 2023. The "Aceptar / Configurar" pattern without a reject button on the first layer was confirmed invalid by the Audiencia Nacional ruling of 17 June 2024 against Iberia (€30,000 sanction).
We rely on (a) the strictly necessary exemption under Article 22 of Spain's Law 34/2002 (LSSI-CE) for essential cookies, and (b) your consent under Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679 for analytics and marketing cookies. Consent is logged with a timestamp and the country derived from your IP address, as evidence of compliance with Article 7 GDPR. Your IP address itself is never stored.
Required for the site and your client portal to function: authentication, security, and remembering form progress. These cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Supabase authentication session | Session |
| sb-refresh-token | Session refresh | 7 days |
| easygroup:cookie-consent:v1 | Remembers your cookie choice | 1 year (localStorage) |
| easygroup:anon-id:v1 | Anonymous identifier linking your consent record | 1 year (localStorage) |
Help us understand how visitors use the site so we can improve it. Data is aggregated and not used for advertising.
No analytics cookies are currently active. When activated, PostHog (EU region) will be the provider.
Used to measure the performance of our communications across platforms (such as Meta/Facebook campaigns) and to deduplicate events between browser and server. Strictly limited to event measurement, we do not sell or share data with third parties beyond the providers listed.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Meta Pixel, visitor identification for ad measurement | 3 months |
| _fbc | Meta Pixel, click identifier from Meta ads | 3 months |
If you also wish your hashed email/phone to feed Meta Custom Audiences for personalised advertising, that requires a separate explicit consent (not bundled with the marketing cookie category). See our Privacy Policy section 6.1 for full details on the joint controllership arrangement (Article 26 GDPR) and how to withdraw at any time.
When you allow the marketing category, we share event data with Meta Platforms Ireland Ltd. through both browser-side Pixel and server-side Conversions API. Both share the same event_id for deduplication. Personally identifying fields (email, phone) are hashed with SHA-256 server-side before transmission.
Payments are processed by Stripe, which may set its own cookies during checkout for fraud prevention. Stripe's privacy practices are governed by its own policies.
Under the GDPR you have the right to withdraw consent at any time, to request access to or deletion of your personal data, and to lodge a complaint with the Spanish Data Protection Agency (AEPD).
You can change your cookie preferences at any time:
Questions about this policy or your data? Contact us at legal@expatabogados.com.