Cookie policy
WHAT A COOKIE IS
A cookie is a small file that a website stores in your browser when you visit it. It lets the website remember things from one page to the next or from one visit to the next: that you are signed in to your account, what you decided about cookies or, if you agree, how you use the website and which ads you have seen. Some cookies make it possible to recognise your browser, which is why they affect your privacy even though they do not contain your name.
FIRST-PARTY AND THIRD-PARTY COOKIES
First-party cookies are set by LayosCamp from its own website. Third-party cookies are set by another company (here, Google or Meta) when the website uses one of its services. Some last only while your browser is open and others stay for a while: how long each one lasts is shown below.
HOW TO CHOOSE AND DELETE COOKIES
There are two ways. The first is this website’s cookie panel, which we explain below. The second is your browser: in its settings you can block or delete cookies. If you block them all, some parts of the website, such as your family account, will stop working.
- Google Chrome (computer, Android, iPhone and iPad)
- Safari: on Mac · on iPhone and iPad
- Mozilla Firefox
- Microsoft Edge
If you use another browser, search for “cookies” in its help pages.
The section above explains what cookies are in general. What follows is what we actually use, and it matches one by one the four groups you see in the cookie panel. You can go back to that panel whenever you like from the “Cookie policy” link in the notice itself.
1. ESSENTIAL
These are the only ones set without asking you, because the website does not work without them. The law does not require consent for them (Art. 22.2 of Spanish Law 34/2002, LSSI); it only requires us to inform you, which is what we do here.
| Cookie | Set by | What it is for | How long it lasts |
|---|---|---|---|
| cookiesjsr | LayosCamp | Stores what you decided about cookies so we do not ask again on every page | 1 year |
| SSESS… | LayosCamp | Keeps you signed in if you log in to your family account | About 3 weeks, or until you sign out |
| _GRECAPTCHA | Google (google.com) | Protects the contact form from automated submissions (spam). Only on the contact page | 6 months |
| _grecaptcha (browser local storage, not a cookie) | Same as above | Until you clear this website’s data in your browser |
About reCAPTCHA. On the contact page we use reCAPTCHA, from Google Ireland Limited, to check that whoever sends the form is a person and not a program sending spam. To do this, Google receives your IP address, information about your browser and how you use the page, and stores the two items in the table. We do not ask for your permission because it is necessary for what you are asking us to do, which is to send the form (Art. 22.2 LSSI), and we do it on the basis of our legitimate interest in keeping the form free of spam (Art. 6(1)(f) GDPR). Google also uses this data to improve reCAPTCHA and for the security of its services, as set out in its privacy policy and terms. Part of the processing takes place in the United States, under the EU-US Data Privacy Framework and the Standard Contractual Clauses. If you would rather not use it, write to us directly at info@layoscamp.com.
And one campaign cookie of our own. If you arrive from an ad or from a link with campaign tags, we store in lc_utm, for 7 days, which campaign you came from, so we know which campaigns bring bookings. Without your permission it stores only that: not your IP address, not the page you came from and no Google or Meta identifier, and it is not shared with anyone. If you accept advertising, it also stores the ad’s click identifier (see section 3). It never contains any data about your child.
If you reject everything, the only items left in your browser are cookiesjsr, which remembers precisely that you said no; lc_utm without any identifier, if you came from a campaign; and the reCAPTCHA ones, if you have opened the contact page.
2. MEASUREMENT
These are not switched on unless you accept them. With Google Analytics we count visits and see which pages are viewed and at which step of the booking people get stuck, so we can improve the website. This is not anonymous information: Google stores an identifier in your browser that allows it to be recognised on later visits. Accepting measurement does not switch on advertising.
| Cookie | Set by | What it is for | How long it lasts |
|---|---|---|---|
| _ga | Tells one browser from another to count visitors | 2 years | |
| _ga_N835YDYFYH | Keeps the state of the visit so it is counted correctly | 2 years |
Who processes the data: Google Ireland Limited. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI).
3. ADVERTISING
These are not switched on unless you accept them either. They do two things: show you LayosCamp ads on Google, Facebook and Instagram after you have visited the website, and tell us which ads bring us visits, enquiries and bookings, so we do not spend on the ones that do not work.
What Google and Meta receive. The identifiers in the cookies below, your IP address and browser, the pages you view, whether you contact us, whether you start or complete a booking and, if so, the amount. Through this channel they never receive the name of the camp, the location, the age or any data about your child or their health, and we do not pass on what you type into forms.
Who processes the data. Google Ireland Limited (Google Ads) and Meta Platforms Ireland Limited (the Facebook and Instagram pixel). We are joint controllers with Meta, under Article 26 GDPR and Meta’s joint controller addendum (facebook.com/legal/controller_addendum).
Legal basis. Your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI). If you do not give it, you will still see ads online, just not based on your visit.
| Cookie | Set by | What it is for | How long it lasts |
|---|---|---|---|
| _gcl_au | Links your visits to the Google ads you have seen or clicked | 90 days | |
| _gcl_aw | Stores the click identifier if you arrive from a Google ad | 90 days | |
| IDE | Google (doubleclick.net) | Used to show you our ads on other websites and to know whether you have seen or clicked them | 13 months |
| _fbp | Meta | Identifies your browser to measure and show our ads on Facebook and Instagram | 90 days |
| _fbc | Meta | Stores the click identifier if you arrive from a Facebook or Instagram ad | 90 days |
| fr | Meta (facebook.com) | Set by Meta on its own domain if you have an account; used to show and measure ads | 90 days |
| lc_utm | LayosCamp | Adds to our campaign cookie the ad’s click identifier (Google’s gclid, Meta’s fbclid), your IP address and the page you came from, so we know which ad brought the booking | 30 days |
International transfer (measurement and advertising). Part of this processing takes place in the United States, under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and the Standard Contractual Clauses approved by Decision (EU) 2021/914.
What does not depend on these options. When someone books and pays on the website, we tell Meta and Google so we know which ads work. We send Meta the amount, an order number and your email address in hashed form, never in clear text; we send Google the click identifier if you arrived from one of its ads and accepted advertising. The name of the camp, the location, the age and any data about your child or their health are never sent. We do this on the basis of our legitimate interest (Art. 6(1)(f) GDPR), not with cookies, and you can object at any time by writing to info@layoscamp.com with the subject “No advertising measurement”.
4. VIDEOS
The videos on the camp pages are hosted on YouTube (Google Ireland Limited). They are not loaded until you accept this group: until then, a notice appears in the video’s place with a button to accept just that, without having to accept advertising. When you accept, Google receives your IP address and may store cookies on your device from its own domain. We use the youtube-nocookie.com version, which reduces that tracking but does not remove it.
HOW TO CHANGE OR WITHDRAW YOUR DECISION
At any time, without giving reasons. Open the cookie panel from the link in the notice, change the switches you want and press “Save”. You can also delete cookies from your browser settings. Withdrawing consent does not affect anything processed while it was given.
If you do not accept measurement or advertising, the website works exactly the same.
WHO IS RESPONSIBLE AND HOW TO EXERCISE YOUR RIGHTS
Controller: Castillo de Layos, S.L., tax ID B-78583366, calle Garza 11, 28023 Madrid (Spain). Data Protection Officer: dpo@layoscamp.com (registered with the Spanish Data Protection Agency under code REGAGE26e00052733552).
You can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to info@layoscamp.com or to the postal address above. For what Google or Meta do with the data for their own purposes, those rights are exercised before them (Google’s policy · Meta’s policy). And if you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the supervisory authority of the country where you live.