COOKIE POLICY

1. What are cookies?

Cookies are small data files stored on the user’s device when browsing the Website, which allow, among other functions, the user to be recognised on subsequent visits, preferences to be remembered, and information on browsing habits to be obtained.

2. Legal basis and consent

In accordance with Article 22.2 of the LSSI-CE, the installation of non-exempt cookies requires the user’s prior, informed and express consent, obtained through the configuration panel (banner) displayed on first access to the Website. Technical or strictly necessary cookies do not require consent, as they are essential for providing the service requested by the user.

3. Cookies used on the Website

The table below sets out the cookies installed on the Website, together with their category, purpose, controller, duration and type.

Category	Name	Purpose	Controller	Duration	Type
Essential	cookie_consent*	Stores the user’s cookie consent preferences	First party	12 months	HTTP
Functional	pll_language	Remembers the language selected by the user (ES/EN/FR)	First party	12 months	HTTP
Analytics	_ga	Identifies unique users for Google Analytics	Google LLC	24 months	HTTP
Analytics	_ga_[container ID]	Maintains Google Analytics 4 session state	Google LLC	24 months	HTTP
Analytics	_gid	Distinguishes users in Google Analytics (short duration)	Google LLC	24 hours	HTTP
Marketing	mailchimp_landing_site	Identifies the newsletter subscriber and manages the sending of commercial communications	The Rocket Science Group, LLC (Mailchimp)	30 days	HTTP
Marketing	MooTracker (tracker’stechnical cookie)	Identifies the newsletter subscriber and manages the sending of commercial communications	Moosend(Sitecore)	Variable	HTTP

This table reflects the technology identified on the Website (WordPress, Polylang, Google Analytics, a consent management plugin, and the email marketing tools indicated by the client). Should any such pixel be installed in the future, this table must be updated accordingly.

4. Managing and withdrawing consent

Users may accept, reject or granularly configure non-essential cookies upon accessing the Website, and may change their decision at any later time via the “Cookie Settings” link available in the footer.

5. How to disable or delete cookies from your browser

In addition to the Website’s preference panel, users may manage cookies directly through their browser settings. Below are the relevant paths for the most common browsers:

● Google Chrome: Settings > Privacy and security > Cookies and other site data

● Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data

● Apple Safari: Preferences > Privacy > Manage Website Data

● Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

● Opera: Settings > Privacy & security > Cookies

Please note that disabling cookies may affect the proper functioning of certain features of the Website. Third-party cookies may also be managed directly through each provider’s opt-out tools:

● Google Analytics: tools.google.com/dlpage/gaoptout

6. International transfers associated with third-party cookies

Some cookies installed by third parties involve the transfer of data to countries outside the European Economic Area (EEA), primarily the United States. In such cases, the providers guarantee appropriate safeguards through Standard Contractual Clauses (EU Implementing Decision 2021/914), in accordance with Article 46(2)(c) GDPR:

● Google LLC (Google Analytics): data processed in the USA under Standard Contractual Clauses. More information: policies.google.com/privacy

● The Rocket Science Group, LLC (Mailchimp): data processed in the USA, an entity certified under the Data Privacy Framework. More information: mailchimp.com/legal/privacy

● Moosend (Sitecore): an entity based in the European Union; in principle this does not involve an international transfer outside the EEA, without prejudice to any sub-processors it may engage. More information: moosend.com/privacy-policy

Users may request further information on the transfer safeguards applied by each provider by contacting info@brs-mobility.com.

7. User rights

In relation to the processing of personal data arising from the use of cookies, users may exercise their rights of access, rectification, erasure, restriction, portability and objection recognised under Articles 15 to 21 GDPR, and may withdraw consent at any time (Article 7(3) GDPR), by contacting info@brs-mobility.com or BRS’s designated Data Protection Officer (SECUONE AI, S.L.).

If users consider that the processing does not comply with applicable law, they may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

For further information on the processing of personal data, please see BRS’s Privacy Policy.

8. Updates to this policy

BRS reserves the right to modify this Cookie Policy to adapt it to legislative, regulatory or technical developments, or to the tools actually in use. Material changes will be notified via a notice on the Website and, where the change affects previously given consent, users will be asked to provide fresh consent.