Cookie and Similar Technologies Policy

1. General Provisions

This Cookie Policy (the “Cookie Policy”) governs the use of cookies and similar technologies on the Platform.

This Policy has been developed in accordance with:

• Regulation (EU) 2016/679 (GDPR);
• Directive 2002/58/EC (ePrivacy Directive);
• applicable national legislation;
• guidance issued by supervisory authorities, including the Spanish Data Protection Agency (AEPD).

The Platform uses cookies and similar technologies in accordance with this Cookie Policy.

Cookies and similar technologies that are not strictly necessary are deployed only after obtaining the User’s consent through the preference management interface.

1.1 Use of Similar Technologies in Mobile Applications

The Platform may be accessed both through a website and through mobile applications.

Traditional browser cookies are primarily used in the web version of the Platform. Mobile applications may instead rely on technically different technologies that perform similar functions.

Such technologies may include application storage, secure authentication storage, device identifiers and software development kits (SDKs) necessary for the operation of particular application features.

These technologies may be used for purposes such as maintaining User sessions, storing User preferences, ensuring security and enabling core functionalities of the Platform.

Where such technologies involve the processing of personal data, such processing shall be carried out in accordance with the Platform’s Privacy Policy and applicable law.

2. What Are Cookies and Similar Technologies

A cookie is a small file or piece of information stored on or accessed from a User’s device when visiting a website.

Cookies may be used for purposes such as:

• ensuring proper functioning of the website;
• maintaining sessions;
• remembering settings and preferences;
• ensuring security;
• analysing website usage, where enabled;
• measuring advertising performance, where enabled.

The Platform may also use similar browser-based technologies, including:

• local storage;
• session storage;
• tracking pixels, where enabled;
• tags and scripts, where enabled;
• technical identifiers.

3. Categories of Cookies and Similar Technologies

3.1 Strictly Necessary Technologies

Strictly necessary technologies are required for the operation, security and delivery of the Platform and its core services.

They may be used for purposes including:

• authentication and session management;
• security and protection against unauthorised access;
• fraud and abuse prevention;
• maintaining essential technical settings;
• storing and respecting cookie consent preferences;
• providing core Platform functionality.

These technologies are not used for behavioural advertising.

Legal basis: performance of a contract and/or legitimate interest in providing, operating and securing the Platform, as applicable.

User consent is not required for strictly necessary technologies where permitted by applicable law.

3.2 Functional Technologies

Functional technologies may be used to remember settings or choices selected by the User, such as language or display preferences.

Where a technology is strictly necessary to provide functionality expressly requested by the User, consent may not be required.

Where such technology is not strictly necessary, it will only be used with the User’s consent where required by applicable law.

3.3 Analytics Technologies

The Platform may use analytics technologies to understand how the website is used and to improve its operation.

Such technologies may be used for:

• measuring visits and website usage;
• analysing website performance;
• understanding interactions with pages and features;
• identifying technical issues;
• improving the service;
• producing aggregated statistics.

Legal basis: User consent where consent is required by applicable law.

Non-essential Analytics technologies are activated only after the User has consented to the Analytics category.

If no optional analytics technology is enabled, no technology will be activated under this category.

3.4 Advertising and Marketing Technologies

The Platform may use advertising and marketing technologies to measure advertising performance, attribute conversions and optimise marketing campaigns.

Where implemented, such technologies may process information such as:

• pages visited;
• URLs and referral information;
• interactions with pages or features;
• advertising and conversion events;
• browser and device information;
• IP address and related technical information;
• technical identifiers used for advertising measurement.

Legal basis: User consent.

Advertising and marketing technologies that are not strictly necessary are activated only after the User has consented to the Advertising category.

If no advertising or marketing technology is enabled, no technology will be activated under this category.

3.5 Meta Pixel

The Platform uses Meta Pixel, an advertising and measurement technology provided by Meta Platforms Ireland Limited.

Meta Pixel may be used for purposes including:

• measuring advertising performance;
• conversion tracking and attribution;
• measuring interactions with the Platform;
• optimising advertising campaigns.

Meta Pixel may process information such as pages visited, referral information, browser and device information, IP address, technical identifiers and configured conversion or interaction events.

Legal basis: User consent.

Meta Pixel is activated only after the User has consented to the Advertising category.

ProfyMe does not currently use Meta Advanced Matching to intentionally provide contact or profile information such as email addresses, telephone numbers, names, dates of birth, gender or postal address to Meta for matching purposes.

4. User Consent

4.1 Consent to Optional Technologies

Cookies and similar technologies that are not strictly necessary are used only after obtaining the User’s consent through the cookie preference interface.

The User may:

• accept all optional technologies;
• reject optional technologies;
• manage preferences and select individual categories.

The option to reject optional technologies is presented with a level of visibility comparable to the option to accept them.

Non-essential Analytics or Advertising technologies are not activated merely because the User continues browsing the Platform.

4.2 Refusal of Non-Essential Technologies

Refusal of non-essential technologies does not restrict access to the core functionalities of the Platform.

4.3 Withdrawal and Modification of Consent

The User may withdraw or modify their consent at any time through the "Cookie Settings" interface available on the Platform.

The Platform provides a persistent access point to Cookie Settings so that the User can review and update their choices at any time.

Changes to consent preferences shall apply to future processing.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Where consent for Analytics or Advertising technologies is withdrawn, the Platform will cease activating the relevant optional technologies for future processing from that browser, subject to applicable technical limitations and processing already performed by third-party providers.

5. Cookie and Similar Technology Management

The Platform provides a persistent access point to cookie preferences, allowing the User to review and update their choices at any time.

The User may also use browser controls to:

• inspect or delete cookies;
• clear local or session storage;
• block certain cookies;
• restrict website storage.

Blocking or deleting strictly necessary technologies may cause certain Platform functions, including authentication or preference persistence, to operate incorrectly.

6. Retention Periods

Cookies and similar technologies may be:

• session-based, meaning that they expire when the browser session ends; or
• persistent, meaning that they remain for a defined period or until deleted.

Retention periods depend on the technology, its purpose and, where applicable, the relevant provider.

Further information about technologies currently identified by the Platform is provided in Section 10 below.

7. Third-Party Providers and International Transfers

Certain optional technologies may involve third-party service providers.

Depending on the particular processing activity and contractual framework, a third-party provider may act as a data processor, independent controller, joint controller or in another role recognised under applicable data protection law.

Where personal data is transferred outside the European Economic Area, the Platform will rely, where required, on an applicable transfer mechanism under Chapter V of the GDPR, such as:

• an adequacy decision;
• Standard Contractual Clauses (SCCs);
• or another legally recognised transfer mechanism.

Information about third-party providers will be updated where relevant technologies are introduced or changed.

Further information regarding the processing of personal data is available in the Platform’s Privacy Policy.

8. Updates to the Cookie Policy

8.1 Updates

We reserve the right to update this Cookie Policy to reflect changes in technologies, service providers, Platform functionality, or applicable legal and regulatory requirements.

The current version shall be published on the Platform.

8.2 Versions and Change Log

Each version of this Cookie Policy shall identify its version number and last updated date.

Amendments may also be recorded in a centralized Change Log (Legal Updates & Version History) available on the Platform. The Change Log may include the update date, version number and a general description of the amendments introduced.

Where changes materially affect technologies or processing activities based on consent, the Platform may request renewed consent where required by applicable law.

9. Contact Information

For questions regarding cookies, similar technologies or the processing of personal data in connection with them, the User may contact us using the contact details provided in the Privacy Policy.

10. List of Cookies and Similar Storage Technologies

Additional optional cookies or similar technologies may be introduced in the future. Where required by applicable law, such technologies will only be activated after obtaining the User’s consent.

Optional cookies (such as analytics or advertising technologies) may be introduced in the future. Where required by applicable law, such technologies will only be activated after obtaining user consent.