Cookie Policy
1. What are cookies?
Cookies are small text files that are stored on your device when you visit a website. They help us ensure the website's functionality and improve your browsing experience.
2. What cookies do we use?
2.1 Strictly Necessary Technical Cookies
These cookies are essential for the website's operation and do not require your consent according to article 22.2 of the LSSI-CE and the EU ePrivacy Directive.
Purpose: Ensure security, basic functionality and protection against attacks Legal basis: Legitimate interest (necessary for the requested service) Provider: Web infrastructure services
| Type | Purpose | Duration | Legal basis |
|---|---|---|---|
| Security | Protection against bots and DDoS attacks | 30 min - 1 year | Art. 22.2 LSSI-CE |
| Functional | Load balancer and performance | Session - 30 days | Legitimate interest |
| Technical | Basic website operation | Variable | Strictly necessary |
2.2 Browser Local Storage
We use local storage to improve your experience. This data is NOT cookies and is not transmitted to our servers.
- Language preference: Remember your selected language
- Shopping cart: Keep selected products
- Navigation position: Restore position when returning to pages
Important note: This information remains only on your device.
2.3 Anonymous Analysis (No Personal Data)
We use analysis tools that process only anonymous data in accordance with Recital 26 of the GDPR.
Analysis features:
- ✅ No personal identification - We cannot identify you
- ✅ No cross-site tracking - Only this website
- ✅ No user profiles - We do not create profiles
- ✅ Aggregated data - Only general statistics
- ✅ GDPR compliant without need for additional consent
Legal basis: Legitimate interest for service improvement (Art. 6.1.f GDPR) Data processed: Page views, visit time, country of origin (without complete IP)
3. Why don't we show a cookie banner?
3.1 Legal Foundation
According to Spanish and European regulations:
LSSI-CE Article 22.2:
"Consent shall not be necessary when storage or access is strictly necessary for the provision of a service expressly requested by the user"
EU ePrivacy Directive:
Technically necessary cookies are exempt from the consent requirement
3.2 Our Compliance
- ✅ Technical cookies: Strictly necessary for operation
- ✅ Anonymous analysis: Without identifiable personal data
- ✅ No advertising: We do not use advertising cookies
- ✅ No tracking: We do not perform cross-site tracking
4. Cookie control
4.1 Management through browser
You can control cookies directly from your browser:
Google Chrome:
- Settings → Privacy and security → Cookies
- You can block all third-party cookies
- Manage specific sites
Mozilla Firefox:
- Options → Privacy and security
- Configure protection level
- Manage exceptions
Safari:
- Preferences → Privacy
- Manage cookies and website data
- Configure tracking prevention
Microsoft Edge:
- Settings → Cookies and site permissions
- Manage and delete cookies
- Configure exceptions
4.2 Impact of disabling cookies
- Technical cookies disabled: The site may not work properly
- Analysis disabled: Does not affect site functionality
- Local storage cleared: You will lose personal preferences
4.3 Privacy tools
You can use additional tools:
- Privacy-focused browsers (Brave, DuckDuckGo)
- Blocking extensions (uBlock Origin, Privacy Badger)
- Private/incognito mode of the browser
5. International data transfers
5.1 Data location
Data is processed in:
- EU servers: Direct GDPR compliance
- Providers with adequacy decision: United Kingdom, EEA
- Contractual guarantees: Standard clauses approved by the European Commission
5.2 Applied protections
- Encryption in transit: All communications protected
- Data minimization: Only strictly necessary data
- Limited retention: Minimum retention periods
6. Your rights under the GDPR
6.1 Applicable rights
For data that constitutes personal information:
- Access: Know what data we have
- Rectification: Correct incorrect data
- Deletion: Request elimination
- Opposition: Object to processing
- Portability: Obtain your data in standard format
6.2 Exercise of rights
Contact: info@yarr-rally.com Response time: 30 calendar days Required documentation: Valid identification
6.3 Supervisory authority
You can file complaints with: Spanish Data Protection Agency (AEPD)
- Web: www.aepd.es
- Phone: 912 663 517
- Address: C/ Jorge Juan, 6 - 28001 Madrid
7. Minors
- Our services are not directed to minors under 14 years of age
- We do not knowingly collect data from minors
- If we detect data from minors, we delete it immediately
- Parents can request information about their children's data
8. Security and data protection
8.1 Technical measures
- SSL/TLS encryption: All communications protected
- Restricted access: Only authorized personnel
- Regular audits: Periodic security reviews
- Backups: Protection against data loss
8.2 Organizational measures
- Staff training: In data protection
- Security policies: Documented procedures
- Impact assessments: For high-risk processing
9. Changes to this policy
9.1 Change notification
- Important changes will be notified on the website
- Minor changes will be reflected in the update date
- You can subscribe to policy change notifications
9.2 Version history
We maintain a record of significant changes available upon request.
10. Contact and additional information
10.1 Contact information
For cookie inquiries:
- Email: info@yarr-rally.com
- Postal address: [FULL ADDRESS]
- Hours: Monday to Friday, 9:00-18:00
10.2 Additional resources
- AEPD guide on cookies: www.aepd.es
- Complete GDPR regulation: eur-lex.europa.eu
- Digital rights: www.agpd.es
Transparency statement: This policy has been drafted in accordance with Spanish (LSSI-CE) and European (GDPR, ePrivacy Directive) regulations to ensure maximum transparency and legal compliance.
Last updated: 7/8/2026