Cookie Policy
Last updated: July 2026
Information about Cookies
Cookies and other similar technologies such as local storage, session storage, local shared objects or pixels, are tools used by web servers to store and retrieve information about their visitors, as well as to ensure the correct functioning of the site.
Through the use of these devices, the web server is allowed to remember some data concerning the user, such as their session, their preferences for viewing the pages of this server, or the state of a form they are completing.
Cookies Affected by the Regulation and Exempted Cookies
In accordance with Law 34/2002, dated July 11, on Information Society Services and Electronic Commerce (LSSI), in relation to Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016, General Data Protection (GDPR) and Organic Law 3/2018, dated December 5, on Data Protection and Guarantee of Digital Rights (LOPDGDD), it is mandatory to obtain the express consent of the user of all web pages that use dispensable cookies, before they browse them.
According to the EU directive, the cookies that require informed consent from the user are analytical cookies and advertising and affiliation cookies, while technical cookies and those necessary for the operation of the website or the provision of services expressly requested by the user are exempted.
Types of Cookies
According to purpose
- Technical and functional cookies: these are those that allow the user to navigate through a web page, platform or application and use the different options or services available.
- Analytical cookies: these are those that allow the controller of the same to monitor and analyse the behaviour of the users of the websites to which they are linked.
- Advertising cookies: these are those that allow the management, in the most efficient way possible, of the advertising spaces that, where appropriate, the publisher has included on a web page, application or platform.
- Behavioural advertising cookies: they collect information about the user's preferences and personal choices (retargeting) to allow the management of advertising spaces in a more efficient way.
According to ownership
- Own cookies: these are those that are sent to the user's terminal equipment from a computer or domain managed by the publisher itself and from which the service requested by the user is provided.
- Third-party cookies: these are those that are sent to the user's terminal equipment from a computer or domain that is not managed by the publisher, but by another entity that processes the data obtained through the cookies.
According to retention period
- Session cookies: these are a type of cookies designed to collect and store data while the user accesses a web page.
- Persistent cookies: these are a type of cookies in which the data remains stored in the terminal and can be accessed and processed for a period defined by the cookie controller.
What Lumio CRM Uses
Lumio CRM uses only technical and functional devices, which are exempt from the consent requirement because they are strictly necessary to provide the service you have requested. Specifically:
- Session and authentication (own, technical). When you log in, your session is kept in your browser's local storage so that you remain signed in between pages and visits. Clearing it signs you out.
- Application state (own, technical). Data such as the details of a purchase you are part way through, or interface preferences, are held in your browser's session or local storage so that a page reload does not lose your work. Session storage is discarded when you close the tab.
- Payment security (third party, technical). On the checkout page only, and only when you proceed to payment, our payment provider Stripe loads its own script and sets its own cookies for fraud prevention and to process the payment securely. These are governed by Stripe's own privacy and cookie policies.
Lumio CRM does not use analytical, advertising, behavioural advertising or affiliation cookies, and does not share browsing data with advertising networks. Because we set no dispensable cookies, no consent banner is presented.
How to Manage or Disable Cookies
You can configure your browser to be alerted to the receipt of cookies, to block them, or to delete cookies and stored data already on your device. Please consult the instructions of your browser for details. Bear in mind that because the devices we use are strictly necessary, blocking or deleting them will sign you out and may prevent parts of the platform from working, including completing a payment.
Personal Data Processing
Lumio CRM S.L. is the Data Controller of the personal data of the Data Subject and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, dated April 27, 2016 (GDPR).
- Purpose of processing: as specified in the section on what Lumio CRM uses, above.
- Legitimisation of processing: the performance of the service requested by the user and our legitimate interest in the security and correct operation of the platform (Art. 6.1 GDPR). No processing here relies on consent, because no dispensable devices are used.
- Data retention criteria: session storage is discarded when the tab is closed; authentication data is retained until you sign out or clear your browser; third-party payment cookies are retained according to the provider's own policy.
- Data communication: data will not be communicated to third parties, except in the case of the third-party payment cookies described above or by legal obligation.
Rights of the Data Subject
- Lumio CRM S.L.
- Tax ID: B88953534
- Address: Avda. Emilio Castelar 10, 30740 San Pedro del Pinatar (Murcia), Spain
- E-mail: hello@lumiocrm.com
- Right to withdraw consent at any time.
- Right of access, rectification, portability and erasure of their data and to the limitation or objection to their processing.
- Right to lodge a complaint with the Supervisory Authority (www.aepd.es) if they consider that the processing does not comply with current regulations.