Cookie Policy
Information about the cookies, pixels, tags, identifiers and similar technologies we use to operate the store, manage consent, measure website use, analyse campaigns, improve the experience, send communications and measure conversions.
1Controller and scope of this policy
The controller of the website and of the technologies described in this Cookie Policy is SUNMARKET WELLNESS, S.L.U., with Tax ID B97238372, registered address at Av. Maestro Rodrigo 99, 46015 Valencia, Spain, telephone 961 040 660 and email address [email protected].
This policy applies to the website www.sunmarket.es, its subdomains and the pages, forms, purchase sections, chat, browsing areas, campaigns and digital services linked to Sunmarket's business activity, without prejudice to the additional information contained in the Privacy Policy.
2What cookies are
Cookies are small text files or similar technologies that are stored on the user's device when visiting a website. They allow information to be remembered, recognise a browser or device, keep a session active, store preferences, measure activity, improve security or enable certain functions.
In this policy, the term cookies also includes pixels, tags, scripts, local storage, session storage, SDKs, device or browser identifiers and other similar technologies that can be used for technical, analytical, advertising, behavioural, security or communication purposes.
Some cookies are necessary for the website to work correctly. Others are optional and will only be installed or activated when the user has given the relevant consent, except where the applicable regulations allow their use without consent.
3How we use cookies and similar technologies
Sunmarket uses first-party and third-party cookies to operate the online store, manage session, shopping cart, checkout, security, user preferences, consent, website analytics, advertising campaigns, conversion measurement, digital communications, technical improvements, error detection and optimisation of the shopping experience.
Third-party cookies and technologies may be provided, among others, by CookieYes, Google Analytics, Google Ads, Google Tag Manager, Google Consent Mode, Brevo and other technology providers involved in analytics, advertising, communications, automation, security, technical measurement or website improvement.
- To keep the store, shopping cart, checkout and security systems working correctly.
- To remember essential preferences, such as language, consent choices or session status.
- To measure visits, events, conversions, campaigns and technical performance.
- To improve browsing, product presentation, forms, search, checkout and customer service.
- To send transactional communications, newsletters, commercial campaigns or automations where applicable.
- To measure the performance of Google Ads campaigns and other advertising actions.
- To prevent abuse, fraud, unauthorised access, technical errors or security incidents.
4Consent management through CookieYes
Sunmarket uses CookieYes as a cookie and similar technology consent management platform. Through the banner and settings panel, the user can accept all cookies, reject non-essential cookies or configure preferences by category.
Technical or strictly necessary cookies may be installed without consent when they are essential to provide a service requested by the user or for the basic operation of the website, such as security, shopping cart, checkout, login, session management or retention of essential preferences.
Analytical, advertising, conversion, personalisation, remarketing, advanced measurement, behavioural, heatmap, session recording or similar non-essential technologies will only be installed or activated if the user has given the corresponding consent.
CookieYes is configured to block or prevent the activation of non-essential cookies, scripts and technologies when the user has not given the corresponding consent or has rejected a specific category. Sunmarket periodically reviews the configuration of cookies and providers to keep the consent panel updated and to correct possible unclassified cookies or new technologies that may be incorporated into the website.
Consent may be changed or withdrawn at any time through the cookie settings panel available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
5Categories of cookies we use
Technical or necessary cookies
These cookies are necessary for the website to function correctly and cannot be disabled from our systems. They enable functions such as browsing, security, shopping cart, checkout, login, fraud prevention, retention of essential preferences and consent management.
Preference or functionality cookies
These cookies allow the website to remember user choices, such as language, region, currency, display, browsing preferences or site settings. Some may be considered necessary if expressly requested by the user; others may require consent when they are not essential.
Analytical and measurement cookies
These cookies allow us to understand how the website is used, measure visits, page views, events, technical errors, performance, browsing, products viewed, checkout steps and conversions. We may use tools such as Google Analytics, Google Tag Manager, Google Consent Mode, CookieYes and our own measurement systems.
Advertising cookies, Google Ads and conversion measurement
These cookies allow us to measure the effectiveness of advertising campaigns, attribute conversions, analyse commercial results, optimise ads, avoid repetitive impacts and, where the user consents, carry out remarketing, audiences or advertising personalisation.
Marketing and communication cookies
These technologies may be used to manage newsletters, campaigns, automations, cart recovery, after-sales follow-up, measurement of email openings and clicks, commercial segmentation and improvement of communications sent through Brevo or equivalent providers.
Own behavioural analytics systems
Sunmarket may use proprietary or internal systems to improve browsing, detect errors, optimise forms, improve checkout, understand interaction with menus, products, search or pages, analyse conversions and improve the shopping experience. When these systems involve individual tracking, persistent identifiers, heatmaps, session recordings or non-essential technologies, they will only be activated with consent.
6Google Analytics, Google Ads, Consent Mode and conversions
Sunmarket may use Google Analytics, Google Ads, Google Tag Manager, Google Consent Mode and conversion measurement systems to understand website use, measure the performance of advertising campaigns, attribute conversions and analyse relevant actions such as visits, forms, purchases, carts, calls, requests for information, clicks or contacts.
These tools may process online identifiers, device or browser identifiers, pages visited, browsing events, products viewed, source of visit, date and time, device, browser, approximate location, consent status, conversion events and technical data required for measurement and security.
When Google tags are used for measurement or advertising in the European Economic Area, Sunmarket will endeavour to transmit the user's consent preferences to Google through Google Consent Mode or equivalent solutions, so that the tags adapt their behaviour to the consent granted or rejected.
If Sunmarket enables functions such as enhanced conversions, conversion imports, server-side measurement, customer lists, audiences or advanced Google Ads integrations, the corresponding legal bases, safeguards, minimisation and consents will be applied. Sunmarket will not deliberately send Google full bank details, passwords, identity documents, health data or unnecessary sensitive information.
7Brevo, digital communications and automations
Sunmarket may use Brevo or equivalent providers to manage communications by email, SMS or other digital channels, including newsletters, commercial campaigns, transactional emails, order confirmations, payment notices, shipping communications, abandoned cart recovery, quotations, reminders, after-sales follow-up, satisfaction surveys, basic segmentation and automations linked to user activity.
Through these tools, data such as name, email address, telephone number, language, country, company, purchase history, products viewed or purchased, commercial preferences, subscription status, email openings, link clicks, unsubscribes, bounces, automation events and technical data necessary for delivery, security and traceability of communications may be processed.
When these technologies are used for commercial communications, open tracking, click tracking, commercial segmentation, cart recovery or non-essential automations, they will be based on the user's consent or another valid legal basis where applicable, always providing unsubscribe or objection mechanisms in commercial communications.
8Own behavioural analytics systems
Sunmarket may use proprietary or internal behavioural analytics systems on the website to understand how users browse the site, improve the shopping experience, detect technical errors, optimise forms, improve product presentation, analyse conversions, measure performance, improve checkout and support the ongoing improvement of the online store.
These systems may process data such as pages visited, duration of visit, clicks, scrolling, interaction with menus, use of search, products viewed, browsing errors, checkout steps, purchase events, source of visit, device, browser, language, approximate country, technical identifiers and consent preferences.
When session recording, heatmap or advanced interaction analysis tools are used, Sunmarket will apply masking, blocking or exclusion measures for sensitive fields, forms, payment data, passwords, identity documents, special category data and any other information that should not be captured.
These analyses will not be used to make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect the user.
9Data processed, purposes and legal bases
The use of cookies may involve the processing of technical data, online identifiers, browsing data, consent data, purchase events, conversions, communication openings, clicks and other data linked to the user's interaction with the website and Sunmarket communications.
| Purpose | Examples of data | Legal basis |
|---|---|---|
| Technical operation of the website | Session, cart, checkout, security, language, essential preferences, technical logs | Provision of the requested service, performance of the contract and legitimate interest in security and operation |
| Consent management | Accepted or rejected preferences, date, time, banner version, technical consent identifier | Legal compliance and legitimate interest in evidencing consent |
| Analytics and measurement | Pages visited, events, device, browser, source, approximate location, online identifiers | Consent, except for technical, aggregated or exempt measurements where legal requirements are met |
| Advertising and conversions | Conversion events, clicks, campaign source, products viewed, carts, purchases, forms | Consent for advertising, remarketing, advanced measurement and non-essential technologies |
| Communications and automations | Openings, clicks, unsubscribes, bounces, subscription status, email events or cart recovery | Consent, contractual performance or legitimate interest depending on the type of communication |
| Security, fraud and abuse prevention | IP, logs, technical events, access attempts, anomalous patterns, session data | Legitimate interest, legal compliance and contractual performance |
10International transfers and third-party providers
The use of providers such as Google, Brevo, CookieYes or other technology providers may involve data processing by entities located inside and outside the European Economic Area, including the United States or other third countries.
Where international transfers take place, Sunmarket will apply or require appropriate safeguards under the GDPR, including adequacy decisions, Standard Contractual Clauses approved by the European Commission, data processing agreements, additional contractual, technical and organisational measures or other valid mechanisms under applicable law.
Sunmarket selects providers that offer appropriate safeguards regarding security, confidentiality, consent management and data protection. When a provider processes data on behalf of Sunmarket, it will act as a processor under the applicable agreements. Where it determines its own purposes and means, it may act as an independent controller for certain processing activities.
11How to manage or withdraw consent
The user can accept, reject or configure non-essential cookies from the CookieYes banner. The user can also change or withdraw consent at any time by accessing the cookie settings panel available on the website.
If the user rejects or withdraws consent for certain categories, some analytics, advertising, conversion, personalisation, remarketing, open tracking or advanced measurement functions may be limited or disabled.
Where the website displays a "Cookie settings", "Manage consent" or equivalent button or link, the user can reopen the CookieYes panel to review their preferences. Sunmarket recommends periodically reviewing preferences if browser settings are changed, the device is changed or cookies are deleted.
12Browser settings and deletion of cookies
In addition to the CookieYes panel, the user can block, limit or delete cookies from the browser settings. Each browser offers different options to view, block, delete or limit cookies.
- Chrome: browser privacy and security settings.
- Safari: privacy preferences and website data management.
- Firefox: privacy, cookies and site data options.
- Microsoft Edge: cookies and site permissions settings.
- Mobile devices: browser or operating system privacy settings.
Blocking all cookies may affect the functioning of the website, especially the cart, checkout, login, preferences, security or forms.
13Indicative table of cookies and technologies
The following table summarises the main categories and tools that may be used by Sunmarket. The exact list of cookies may vary depending on technical configuration, country, language, consent granted, active campaigns, browser, device and enabled modules. The CookieYes panel and periodic scans must be kept as the updated reference for detected cookies.
| Category | Provider or example | Purpose | Activation | Indicative duration |
|---|---|---|---|---|
| Necessary technical cookies | PrestaShop, server, session, cart, checkout, security | Browsing, session, cart, purchase, security, essential preferences and store operation | Always active where essential | Session or required technical period |
| Consent | CookieYes, for example cookieyes-consent or equivalent technical consent cookies | Store preferences, accepted or rejected categories, banner version and consent evidence | Necessary to manage consent | According to the consent panel configuration |
| Analytics | Google Analytics, for example _ga, _ga_*, _gid or equivalent identifiers | Measurement of visits, events, pages, performance, browsing, conversions and website improvement | Only with analytics consent, except applicable technical or exempt cases | According to Google configuration and defined retention |
| Advertising and conversions | Google Ads, Google Tag Manager, Google Consent Mode, conversion tags, for example _gcl_au or other identifiers | Measure campaigns, attribute conversions, optimise advertising, remarketing and personalisation where applicable | Only with advertising or marketing consent where applicable | According to Google Ads configuration and applicable tags |
| Email marketing and automation | Brevo, open pixels, tagged links, campaign identifiers, possible web tracking such as sib_cuid if enabled | Measure opens, clicks, unsubscribes, automations, cart recovery, segmentation and commercial follow-up | According to the consent or legal basis applicable to the specific communication | According to Brevo configuration and campaign purpose |
| Own behavioural analytics | Internal systems, logs, own events, UX tools, heatmaps or recordings if enabled | Improve browsing, detect errors, optimise forms, checkout, search and shopping experience | Consent when involving non-essential tracking, persistent identifiers or recordings | According to purpose, configuration and defined retention periods |
| Security and fraud | Security tools, technical logs, anti-fraud systems, abuse control | Protect the website, prevent abuse, detect errors, avoid unauthorised access and secure checkout | Technical activation when necessary for security or compliance | For the required technical or legal period |
14Updates, technical review and contact
Sunmarket may update this Cookie Policy to adapt it to legal, technical or commercial changes, changes in providers, new tools, new advertising campaigns, modifications to the CookieYes panel or changes in the cookies detected by the website.
Sunmarket periodically reviews the configuration of cookies, tags, scripts, providers and categories in the consent panel. The installation of new modules, marketing tools, campaigns, integrations or analytics systems may require an additional review of this policy and the CookieYes panel.
For any questions about this Cookie Policy or about the processing of personal data linked to cookies and similar technologies, the user may contact Sunmarket at [email protected] or the external Data Protection Officer at [email protected].
Back to topAv. Maestro Rodrigo 99, 46015 Valencia, Spain
[email protected] · 961 040 660 · www.sunmarket.es