Skip to main content
JEBREX JEBREX
EN ES
Get in Touch
LEGAL

Cookie Policy

Last updated: August 2026

1. Introduction and Scope

Jebrex Tech, S.L. ("JEBREX", "we", "us" or "our") is a technology company based in Barcelona, Spain, that designs and operates software-as-a-service products, including BizzOS, MedLocal, TMS, FMS, SPE, 3alTari2 and PUSH. This Cookie Policy explains how we use cookies and similar technologies on our website, the purposes they serve, the legal grounds on which they are placed, and the control you have over them.

We use these technologies in accordance with Article 22.2 of Spanish Law 34/2002 of 11 July on information society services and electronic commerce (the "LSSI"), which transposes Article 5(3) of the ePrivacy Directive (Directive 2002/58/EC, as amended by Directive 2009/136/EC) into Spanish law, and with the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"). The LSSI governs the act of storing information on your device or gaining access to information already stored there; the GDPR governs any personal data that results from it.

This Policy should be read together with our Privacy Policy, which describes what personal data we collect, why we collect it, who we share it with, how long we keep it and the rights available to you. Where cookies lead to the processing of personal data, that processing is governed as described in our Privacy Policy, and this Policy does not repeat it.

This Policy applies to our website and to the JEBREX pages that link to it. Technologies used inside our products are limited to what is necessary to maintain sessions and protect access, together with any measurement described in the documentation and contractual terms applicable to those products, and are not otherwise covered by this Policy. Where a business customer configures additional technologies inside its own workspace, that customer acts as the data controller for them and is responsible for informing its users and for obtaining any consent required.

2. What Cookies and Similar Technologies Are

A cookie is a small text file that a website asks your browser to store on your device. On later page views or visits, the browser returns the file to the site that placed it, allowing the site to recognise the browser, maintain a session, or recall a setting. A cookie placed by the site you are visiting is called a first-party cookie; one placed by another domain whose content or service is loaded into the page is called a third-party cookie.

Several other technologies achieve comparable results and are treated identically in this Policy, because Article 22.2 of the LSSI applies to any storage of information on, or access to information held in, a user's terminal equipment, whatever the technical means used. Where this Policy refers to cookies, it refers to all of them.

The main examples are local storage and session storage, which are browser storage areas in which a site can keep values such as a saved preference or an interface state until they are cleared; pixels, also called web beacons or clear GIFs, which are small images or fragments of code loaded from a server so that the display of a page or the opening of a message can be recorded, usually in combination with a cookie; scripts and software development kits embedded in a page or application; and identifiers derived from device or browser characteristics.

Cookies are not programs, cannot execute code on your device, and cannot read the files held on it. They can, however, be used to build a record of activity over time, which is why the categories described below are subject to consent.

3. Why JEBREX Uses Cookies

We use cookies for a limited set of purposes connected with operating our website reliably, keeping it secure, respecting the choices you make, and understanding in aggregate how it performs. We do not sell personal data collected in this way. The safeguards applying to any personal data resulting from these technologies are set out in our Privacy Policy.

The purposes for which we use cookies and similar technologies are:

  • Delivering the website and its basic functions, including routing requests, balancing load between servers, and maintaining the continuity of a session as you move between pages.
  • Protecting the website and its users, including security measures strictly necessary to deliver the site safely and, subject to consent where they go beyond that, broader measures to detect and prevent fraud, abuse, automated attacks and unauthorised access.
  • Recording the choices you make, including your cookie preferences, so that we do not ask you the same question repeatedly and so that we can demonstrate the consent we have obtained.
  • Remembering settings that make the site easier to use, such as language, region or display preferences, and the state of interface elements between visits.
  • Measuring in aggregate how the website performs, including which pages are viewed, how visitors arrive, where errors or slow responses occur, and which content is useful, so that we can diagnose problems and improve the design and reliability of what we publish.
  • Measuring the effectiveness of our campaigns and, where applicable, presenting information about our products on other platforms to people who have consented to that use.

4. Categories of Cookies We Use

We group the technologies used on our website into the standard categories set out below. We describe categories, purposes and typical behaviour rather than publishing a fixed list of individual identifiers, because the technologies present on a page depend on the features loaded and change as the website evolves. You may ask us at any time, at hello@jebrex.com, for information about the technologies in use at that time.

Not every category is active on every page or at every moment. Categories other than strictly necessary cookies are present only where you have given consent for them.

  • Strictly necessary cookies: these make the website work and cannot be switched off in our systems. They support session management, load balancing, network routing, security measures strictly necessary to deliver the site safely, such as detecting repeated failed access attempts and protecting forms against automated submission, and the storage of the cookie choices you have made. Without them, pages cannot be served reliably or securely.
  • Functional and preference cookies: these remember choices you make in order to give you a more consistent experience, such as language or region, display and accessibility settings, interface states you have previously selected, and content embedded from third parties such as media players or maps. If they are refused, the website still works, but it will not remember these choices.
  • Analytics and performance cookies: these help us understand how the website is used in aggregate, including which pages are visited, how visitors reach and move through the site, how long pages take to load, and where errors occur. We use the results to measure performance and improve content and reliability, not to build individual profiles.
  • Marketing and advertising cookies: where these are used, they measure the effectiveness of our campaigns and may allow information about our products to be shown to you on other platforms, or the frequency of such information to be limited. They are never placed without your prior consent.

5. Legal Basis for Each Category

Two sets of rules apply in parallel. Article 22.2 of the LSSI requires your consent before information is stored on your device or accessed from it, subject to a narrow exception for storage or access carried out for the sole purpose of transmitting a communication over an electronic communications network, or, to the extent strictly necessary, for providing a service of the information society that you have expressly requested. Separately, where the resulting information constitutes personal data, we must have a legal basis under Article 6 of the GDPR.

On that basis, the position for each category is as follows:

  • Strictly necessary cookies: exempt from the consent requirement under the exception in Article 22.2 of the LSSI, because they are required to deliver the service you have requested. Under the GDPR, any associated personal data is processed on the basis of our legitimate interest in operating our website securely and reliably (Article 6(1)(f)).
  • Functional and preference cookies, analytics and performance cookies, and marketing and advertising cookies where used: placed only with your consent under Article 22.2 of the LSSI, with any associated personal data processed on the basis of that consent (Article 6(1)(a) of the GDPR).

6. How Consent Is Requested

Consent must be freely given, specific, informed and unambiguous, and it must be expressed through a clear affirmative action. Continuing to browse, scrolling down a page, remaining inactive, closing a notice without choosing, and pre-ticked boxes are not valid consent, and we do not treat them as such.

Where we request consent, it is requested by category and is not bundled. Accepting one category does not imply acceptance of another, refusing one category does not affect the others, and refusing every non-essential category does not deny you access to the information and services on our website. We do not make access conditional on the acceptance of cookies that are not strictly necessary.

Refusing must be as straightforward as accepting. Wherever a choice is presented, the option to reject non-essential cookies is offered at the same level and with the same ease as the option to accept them, and withdrawing consent afterwards is made as easy as giving it in the first place, as described in section 8.

Until consent is given, only strictly necessary technologies are used. Where consent is obtained, we keep a record of it, including the categories accepted and the date, so that we can honour your choices and demonstrate compliance.

7. How Long Cookies Last

Cookies are either session cookies, which exist only while your browsing session lasts and are deleted when you close the browser, or persistent cookies, which remain on your device until they reach the expiry date set when they were created or until you delete them. Local storage has no built-in expiry and remains until the site removes it or you clear the data held for that site.

The periods below are typical and indicative rather than guaranteed. An individual cookie may be shorter-lived, and a cookie may be refreshed or replaced during a later visit, which restarts its lifetime. The expiry of a cookie does not by itself delete information already collected through it; the retention of that information follows the periods described in our Privacy Policy.

  • Session cookies: deleted when you close the browser or when the session ends after a period of inactivity. Used mainly for session continuity, load balancing and security.
  • Short-lived persistent cookies: from a few minutes to a few days, typically to preserve a step in a form, to limit repeated requests, or to carry a setting across a small number of visits.
  • Functional and preference cookies: generally from a few weeks up to around twelve months, so that a setting survives between visits without persisting indefinitely.
  • Analytics and performance cookies: generally from a few days up to around twenty-six months, depending on whether the purpose is measuring a single visit or comparing behaviour across returning visits.
  • Marketing and advertising cookies, where used: generally up to twelve months, and only for as long as the consent on which they rely remains valid.
  • The record of your cookie choices: normally no longer than twenty-four months, after which you are asked again so that your consent remains current.

8. Managing and Withdrawing Your Consent

You may change your mind at any time, and withdrawing consent is as easy as giving it. Withdrawal takes effect for the future: it does not affect the lawfulness of processing carried out on the basis of your consent before you withdrew it, and it does not affect strictly necessary technologies, which do not rely on consent. Withdrawing consent stops any further use of the technologies concerned; cookies already stored on your device can be removed using the browser controls described below.

You can control cookies in the following ways, each of which works independently of the others:

  • Cookie settings on our website: if a cookie banner or preference tool is offered on the site, it lets you accept or reject each non-essential category and can be reopened at any time to review or change what you chose, including rejecting a category you previously accepted. Where no such tool is offered, nothing beyond strictly necessary technologies is placed, and the browser controls below remain available to you.
  • Browser controls: every major browser allows you to block all cookies, to block third-party cookies only, to delete cookies already stored, to clear all site data including local storage, and to browse in a private window in which storage is discarded when the window is closed. These settings are usually found in the browser menu under Settings, then Privacy and Security or Site Permissions, and each browser publishes help pages describing the exact steps. Browser controls remain available to you whether or not any settings are offered on our site.
  • Device and application settings: mobile operating systems provide their own controls for resetting or limiting advertising identifiers, and those controls apply across the applications installed on the device.
  • Writing to us: you may contact us at hello@jebrex.com to ask which technologies we use, to withdraw a consent you have given, or to record an objection, and we will act on your request and confirm what we have done.

9. What Happens If You Refuse Cookies

Refusing non-essential cookies does not prevent you from using our website. The content of the site, information about our products, and the channels through which you can contact us all remain available, and we do not restrict access, withhold content, or repeat the request in a way that pressures you to change a refusal.

Strictly necessary technologies continue to operate whatever you choose, because the site cannot be delivered securely without them. What changes is the additional functionality that depends on the categories you have refused.

In practice, refusing means that settings such as language, region or display preferences are not remembered between visits and may need to be selected again; that information may need to be re-entered where a form spans several steps; that content embedded from third parties, such as media players or maps, may not display until the relevant category is accepted; and that our measurement of how the site performs becomes less accurate.

Because your choices are themselves stored on your device, clearing your cookies or browsing privately removes the record of what you decided, and you may be asked again on your next visit. Choices are also specific to each browser and each device, so a preference set on a laptop does not carry over to a phone.

10. Third-Party Cookies and Similar Technologies

Some technologies on our website are set by third parties whose services we integrate, such as hosting and content delivery infrastructure, security and anti-abuse services, analytics providers, and embedded content such as media players or maps. These are set under domains we do not operate, and the information they generate is accessible to the provider concerned as well as to us.

Where a provider processes data on our behalf and only on our documented instructions, it acts as our processor within the meaning of Article 28 of the GDPR, and we enter into a written data processing agreement with it containing the safeguards set out in our Privacy Policy. Where a provider determines its own purposes for the data it collects, it acts as an independent controller, its own policies govern that processing, and we encourage you to review them before consenting to the category concerned.

No third-party technology outside the strictly necessary category is loaded before you have consented to the category it belongs to. Content embedded from third parties may therefore appear as a placeholder, or may not load at all, until the relevant consent has been given.

Providers acting as independent controllers generally offer their own opt-out mechanisms, and the browser controls described in section 8 apply to third-party cookies as well.

11. International Data Transfers

We seek to keep information generated through cookies within the European Economic Area (EEA) wherever practicable. Some of the providers whose technologies appear on our website may, however, process data outside the EEA.

Where such a transfer takes place, we ensure that an appropriate transfer mechanism under Chapter V of the GDPR is in place. This may be an adequacy decision of the European Commission covering the destination country, or the Standard Contractual Clauses adopted by the European Commission, supplemented where necessary by additional technical, contractual and organisational measures identified through a transfer impact assessment, as described in our Privacy Policy.

You may request further information about the transfers relevant to you, and a copy of the relevant safeguards, by contacting us at hello@jebrex.com.

12. Changes to This Policy and Contact Details

We may update this Cookie Policy from time to time to reflect changes in the technologies we use, in the design of our website, or in applicable law and regulatory guidance. The current version is always published on our website, and the date at the top indicates when it was last revised. We recommend that you review it periodically.

Where a change introduces a new purpose or a new category of technology, your existing consent does not extend to it. In those cases we will make the updated information available and request your consent again before the change takes effect. Where a change materially affects how we use these technologies, we will provide notice by appropriate means, such as a notice on our website, before it applies.

If you have questions about this Policy, about the technologies used on our website, or about the choices available to you, please contact us using the details below. We ask that you make clear in your message that your enquiry relates to cookies or data protection so that we can route it appropriately and respond within the applicable time limits.

If you consider that our use of these technologies infringes data protection law, you may lodge a complaint with the Agencia Espanola de Proteccion de Datos (AEPD), as described in our Privacy Policy. We would appreciate the opportunity to address your concerns directly before you approach the authority.