Heuristik

Cookie Policy

HEURISTIK TECHNOLOGIES, S.L. · CIF: B95977351

Version 1.1 · October 8, 2026

1. Introduction and scope

This Cookie Policy elaborates on the information that HEURISTIK TECHNOLOGIES, S.L. (hereinafter, "Heuristik") provides to users of its corporate website in compliance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), Article 22.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), and the Guide on the Use of Cookies issued by the Spanish Data Protection Agency (AEPD) in its current version.

This policy applies to the corporate domain heuristik.com and to subdomains accessible to the general public. It is supplemented by the Heuristik Privacy Policy, available at https://heuristik.com/en/privacy-policy.

2. Data Controller

  • Corporate name: HEURISTIK TECHNOLOGIES, S.L.
  • CIF: B95977351
  • Registered office: Calle Buensuceso, 40 — 18002 Granada (Spain)
  • General contact: info@heuristik.com
  • Data Protection Officer (DPO): EUROPEAN DATA PROTECTION OFFICERS, S.L. — dpo@heuristik.com

3. What are cookies?

Cookies are small data files that a web server sends to a user's device (computer, mobile phone, tablet) when they visit a website. They allow the storage and retrieval of information about browsing activity, user preferences, or the device itself, and can be used to recognize the user on subsequent visits. In a broader sense, other technologies with equivalent purpose and function (pixels, web beacons, browser local storage, device identifiers) are considered equivalent to cookies.

4. Types of cookies used

Heuristik uses the following types of cookies on its website, grouped by purpose:

4.1. Technical or necessary cookies

These are cookies strictly necessary for browsing, accessing restricted areas of the site, and using services expressly requested by the user, as well as those used for platform security (session identification, protection against attacks, load balancing, and managing cookie consent). These cookies are EXEMPT from prior consent in accordance with Article 22.2 of the LSSI-CE (Spanish Law on Information Society Services and Electronic Commerce).

4.2. Preference or personalization cookies

They allow the service to remember information so that the user can access it with specific characteristics that differentiate their experience (for example, language, access region, or presentation format). They require user consent.

4.3. Analytics or measurement cookies

They allow us to quantify the number of users and statistically analyze site usage, with the aim of introducing improvements based on the aggregated browsing analysis. They require user consent. Specifically, Heuristik uses Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which is only activated if the user accepts analytics cookies. It installs the cookies _ga (distinguishes users; duration of 2 years) and _ga_[identifier] (maintains the session state; duration of 2 years). Google Analytics 4 does not log or store IP addresses. Google may process this data in the United States with the safeguards described in section 9; Google LLC participates in the EU-US Data Privacy Framework. More information at https://policies.google.com/privacy and https://business.safety.google/adscookies/.

4.4. Advertising and marketing cookies

They allow us to manage the site's advertising spaces and to show users promotional content based on their browsing habits or on previously compiled profiles. They require user consent.

Each of the above categories may include first-party cookies (managed directly by Heuristik) and third-party cookies (managed by providers specializing in hosting, content distribution, web analytics, marketing automation, or digital advertising). The individual list, updated in real time, is available to the user in the Preference Center, accessible from the website footer.

5. Storage period

Depending on the length of time they remain active on the user's device, cookies can be:

  • Session cookies: collect and store data only during the active session; they disappear when the browser is closed.
  • Persistent: the data remains stored on the terminal for a defined period, from minutes up to a maximum of 24 months, after which the user's consent will be requested again.

6. Legal basis for the processing

The processing of personal data through cookies is based on the following legal grounds: (i) for technical or necessary cookies, the exemption provided for in article 22.2 of the LSSI-CE; (ii) for the rest of the cookies (preferences, analysis, advertising and marketing), the free, specific, informed and unambiguous consent of the user, given through the cookie banner and the Preference Center, in accordance with articles 6.1.a and 7 of the GDPR and article 22.2 of the LSSI-CE.

7. How to provide, configure and withdraw consent

7.1. Providing consent

Before activating any non-essential cookies, Heuristik displays a notice ("banner") to the user on their first visit to the site, with three options of equal hierarchy and visual prominence:

  • "ACCEPT ALL" — activation of all cookies (technical, preferences, analysis and advertising/marketing).
  • "REJECT ALL" — only strictly necessary cookies are activated.
  • "CONFIGURE" — opening the Preference Center with granular activation or deactivation by category.

The three options are presented with the same visual prominence (same size, color, and hierarchical level), without pre-ticked boxes, dark design patterns, or conditioning access to site content on the acceptance of cookies ("cookie walls").

7.2. Withdrawal of consent

Withdrawing consent is as straightforward as providing it. At any time, users can access the Preference Center via the "Configure cookies" link in the website footer to modify their choices. Withdrawal takes immediate effect for non-essential cookies and does not affect the lawfulness of any processing carried out prior to the withdrawal.

7.3. Renewal of consent

Consent is renewed at least every 24 months. It is also requested again when the cookies used, their purposes, or the categories of providers are substantially modified, when the user has deleted cookies from their browser, or when a new, non-essential cookie is added.

7.4. Proof of consent

Heuristik maintains an anonymized record of consents given, which includes, at a minimum, a pseudonymized user identifier, the date and time, the version of the policy accepted, and the categories accepted or rejected. This record is kept as evidence, so that compliance can be demonstrated under Article 5.2 of the GDPR (accountability), for the time necessary to respond to requests or complaints from supervisory authorities.

8. Managing cookies from your browser

In addition to the site's Preference Center, users can restrict, block, or delete cookies using their browser settings. The process varies between browsers; the "Help," "Privacy," or "Settings" function in each browser will show the steps to follow. The main browsers also provide a direct link to their official documentation on cookie management:

The user can also configure in their browser the "Global Privacy Control" (GPC) or "Do Not Track" signal, which Heuristik interprets as a manifestation of the will not to consent to unnecessary cookies, provided that said signal is sent with the corresponding HTTP headers.

9. International Transfers

Some of the technology providers that Heuristik uses for the purposes described may process personal data associated with cookies outside the European Economic Area, particularly in the United States. These international transfers are carried out with the enhanced safeguards required by Chapter V of the GDPR: (i) Standard Contractual Clauses of Decision (EU) 2021/914; (ii) EU-US Data Privacy Framework (Decision (EU) 2023/1795) for certified recipients; (iii) additional technical, organizational, and contractual measures appropriate to the risk.

10. Exercise of rights

The user may exercise at any time their rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent with respect to personal data processed through cookies, by contacting the Data Protection Officer of Heuristik:

The response time is one month from the receipt of the request, extendable by two additional months in cases of particular complexity. The user may, in any case, file a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the competent supervisory authority in their jurisdiction.

11. Modifications to this policy

Heuristik may modify this Cookie Policy when required by a regulatory change, a ruling from the competent supervisory authority, or a substantial modification of the cookies or technologies used. Modifications will be published at https://heuristik.com/en/cookies-policy and, when they involve a change in purpose or provider categories, user consent will be requested again before continuing processing.