Cookie Policy / GDPR Compliance
Rivera Spain SL Cookie Policy
Last updated: July 16, 2025
1. Who is Responsible?
ELISA RIVERA SLU
Madrid Avenue, 13 – 28750 - San Agustín de Guadélix - Madrid
ESB44845527
info@elisarivera.com
Registration in the Commercial Registry of Madrid: volume 8699, folio 198, section 8, page no. M-140001, entry 1
2. Regulatory scope
-
We apply Regulation (EU) 2016/679 (GDPR), the LSSI-CE and the LOPDGDD .
-
For users in territories with specific laws (e.g. CPRA/CCPA in California or LGPD in Brazil) we provide a “Do Not Sell or Share My Personal Information” link, accessible from the cookie banner or the Compliance section, as applicable.
3. What are cookies and similar technologies?
Small text files, beacons, pixels, or local storage that your browser saves when you visit our site. They are used to remember you, measure website usage, or show you relevant advertising.
4. Consent management
Our banner offers, in the first layer , “Accept”, “Reject” and “Configure” buttons at the same visual level , in accordance with the AEPD Cookies Guide (July 2023).
The Consent Management Platform (CMP) records the timestamp of your choice, the current version of this policy, and a unique consent identifier.
When our integration with the IAB Transparency & Consent Framework (TCF v2.x) standard is enabled, this identifier includes the TCF string, which is shared with our advertising partners. This allows us to verify your consent in accordance with Art. 7 GDPR.
5. Types of cookies we use
| Category | Supplier | Primary name(s) | Duration* | Purpose / Legal Basis |
|---|---|---|---|---|
| Strictly necessary | Shopify | _secure_session_id, cart, cart_currency, cart_sig, cart_ts, checkout_token, storefront_digest, secure_customer_sig, _tracking_consent, _shopify_m, _shopify_tm, _shopify_tw, cookieconsent_preferences_disabled | 24 h – 1 year | Maintain session, cart, and preferences. Legitimate interest . |
| Functional / Preferences | Shopify | keep_alive (30 min), localization (1 year), dynamic_checkout_shown_on_cart (24 h), _secure_account_session_id (session) | Remember language, currency, and experience. Legitimate interest . | |
| Analytics | Google Analytics 4 | _ga, ga <id>, _gid | 24 h – 2 years | Measure audiences and performance. Consent . |
| Shopify Analytics | _shopify_y, _y (1 year), _shopify_s, _shopify_sa_t, _shopify_sa_p (30 min), _landing_page, _orig_referrer (2 weeks) | Internal navigation and attribution metrics. Consent . | ||
| Microsoft Clarity | _clck (1 year), _clsk (24 h), CLID (1 year), MR (7 days), SM (session), ANONCHK (10 min) | Heat maps and anonymous recordings. Consent . | ||
| Advertising / Marketing | Meta Pixel | _fbp (3 months) | Remarketing and measurement. Consent . | |
| Google Ads | _gcl_au (3 months) | Optimize ads. Consent . | ||
| Microsoft (Bing) | MUID (1 year), SRM_B (1 year) | Advertising identifier. Consent . |
* The period is renewed if you visit the website again; see section 6.
6. Storage period
Cookies are retained until their expiration date, unless you delete them or change your settings. For example, the _ga identifier is renewed for up to two years from the last visit.
7. How to revoke or modify consent
-
Click “Configure cookies” (footer) and adjust your preferences.
-
Or delete cookies in your browser:
Chrome · Firefox · Edge · Safari . -
California users: Use the “Do Not Sell or Share” link.
8. International transfers
-
Google LLC and Microsoft Corp. participate in the EU-US Data Privacy Framework (EC Decision 10-7-2023).
-
If the supplier is not listed in the DPF, Standard Contractual Clauses (SCC 2021/914/EU) apply.
-
Shopify Inc. operates from Canada (appropriate country) and the USA (SCC).
-
For the United Kingdom we use the UK International Data Transfer Addendum .
9. User rights
EU/EEA: access, rectification, erasure, objection, portability, restriction of processing, and withdrawal of consent. Complaints to the AEPD .
California (CPRA): Access, Deletion, Correction, Opt-Out of Data Sale/Sharing .
Brazil (LGPD): confirmation, access, correction, anonymization, blocking, portability and revocation.
Request them by writing to info@elisarivera.com.
10. Minors
We do not direct our products to children under 14 years of age (or the applicable age in your country). If you are a minor, please ask your guardian to manage cookies.
11. Changes in policy
We review this policy at least every 12 months , or when regulations or the cookies we use change. We will post the new version with a clear update date.
Cancellation form
You can use this page to inform Rivera of your decision to cancel an online purchase, within the legal period of 14 calendar days from the receipt of the order.
The use of this form is not mandatory. You can also exercise your right of withdrawal by any other unequivocal statement sent to our customer service by email or by postal mail.
If the order has already been shipped, you can still exercise the right of withdrawal within the legal period. In that case, you must return the product to us once received, following the instructions we provide.
Information for processing the withdrawal:
Submitting this form generates an email acknowledgment. Please keep this email as proof of your communication.
You can also exercise your right of withdrawal by sending an unequivocal communication to info@eduardorivera.es or by postal mail to ELISA RIVERA, S.L.U., Avenida de Madrid, 13, 28750 San Agustín de Guadalix, Madrid.
Use of this form is not mandatory.