Cookie Policy
COOKIE POLICY
eu.hurley.com Last updated: April 2026
-
PURPOSE
This Cookie Policy informs you about the use of cookies and similar technologies on eu.hurley.com (the "Website"), in compliance with applicable Spanish and European privacy and electronic communications legislation.
The Website is the official direct-to-consumer channel for the Hurley® brand in Europe, commercially managed by HURLEY 999, S.L. The transactional infrastructure (checkout and order operations) is operated by Velara Brands, S.L. in its capacity as registered seller (Merchant of Record).
For data protection purposes, HURLEY 999, S.L. and Velara Brands, S.L. act as data controllers, each within the scope of their respective purposes, as described in this Policy and in the Privacy Policy.
-
WHAT IS A COOKIE
A cookie is a small text file that a website stores on your device when you browse. In addition to cookies, we may use tracking pixels, web beacons, device identifiers and browser local storage, all of which are subject to the same legal framework.
-
TYPES OF COOKIES
|
Category |
Description |
Controller |
Consent |
|---|---|---|---|
|
Strictly necessary |
Website operation: cart, checkout, session, security. |
Velara Brands, S.L. |
No (necessary) |
|
Preferences |
Remember language, country and currency. |
Velara Brands, S.L. |
Yes |
|
Analytics |
Statistical analysis of Website usage. Data held in HURLEY 999 accounts. |
HURLEY 999, S.L. |
Yes |
|
Advertising and marketing |
Ad personalisation (Meta, Google, TikTok). Data held in HURLEY 999 accounts. |
HURLEY 999, S.L. |
Yes |
-
CONSENT MANAGEMENT
Your consent is collected through our Consent Management Platform (CMP), operated by Pandectes GDPR Compliance. On your first visit, the banner offers three options: accept all, reject all (except necessary cookies), or configure by category.
You can change your choice at any time via the "Cookie Settings" link in the website footer or the CMP floating icon. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.
The Website implements Google Consent Mode v2, and the Meta and TikTok platforms are configured to respect the decision transmitted by the CMP.
Strictly necessary cookies are installed without consent because they are essential for the Website to function correctly. Blocking them may prevent the Website from working properly.
-
COOKIE INVENTORY
5.1 Strictly necessary — Velara Brands, S.L.
|
Name |
Owner |
Purpose |
Duration |
Type |
|---|---|---|---|---|
|
_shopify_y |
Shopify |
Persistent identifier for store analytics |
1 year |
First-party |
|
_shopify_s |
Shopify |
Session identifier |
30 min |
First-party |
|
_secure_session_id |
Shopify |
Secure session |
24 h |
First-party |
|
secure_customer_sig |
Shopify |
User authentication |
20 years |
First-party |
|
cart / cart_sig / cart_ts / cart_ver |
Shopify |
Cart management and integrity |
2 weeks |
First-party |
|
checkout_token |
Shopify |
Checkout token |
1 year |
First-party |
|
_tracking_consent |
Shopify |
Consent status (Customer Privacy API) |
1 year |
First-party |
|
_pandectes_gdpr |
Pandectes |
Banner consent status |
1 year |
Third-party |
|
__cf_bm |
Cloudflare |
Anti-bot protection |
30 min |
Third-party |
5.2 Preferences — Velara Brands, S.L.
|
Name |
Owner |
Purpose |
Duration |
Type |
|---|---|---|---|---|
|
localization |
Shopify |
Selected country/region |
1 year |
First-party |
|
currency |
Shopify |
Selected currency |
1 year |
First-party |
|
language |
Shopify |
Selected language |
1 year |
First-party |
|
_shopify_country |
Shopify |
Shipping country |
1 year |
First-party |
5.3 Analytics — HURLEY 999, S.L.
|
Name |
Owner |
Purpose |
Duration |
Type |
|---|---|---|---|---|
|
_ga |
Google Analytics 4 |
Unique user identifier |
2 years |
Third-party |
|
_ga_XXXXXXXXXX |
Google Analytics 4 |
GA4 session state |
2 years |
Third-party |
|
_gid |
Google Analytics |
User distinction (daily aggregate) |
24 h |
Third-party |
|
__kla_id |
Klaviyo |
Email behaviour analytics |
2 years |
Third-party |
5.4 Advertising and marketing — HURLEY 999, S.L.
|
Name |
Owner |
Purpose |
Duration |
Type |
|---|---|---|---|---|
|
_gcl_au / _gcl_aw / _gcl_gb |
Google Ads |
Conversion attribution |
3 months |
Third-party |
|
IDE |
Google DoubleClick |
Personalised advertising (display/YouTube) |
13 months |
Third-party |
|
NID |
|
Ad preferences |
6 months |
Third-party |
|
_fbp / _fbc / fr |
Meta (Facebook) |
Identification, attribution and measurement |
3 months |
Third-party |
|
_ttp / ttwid |
TikTok |
TikTok Pixel and cross-site measurement |
1 year |
Third-party |
|
TRADEDOUBLER / TDUIS |
Tradedoubler |
Affiliate sales attribution |
1 year |
Third-party |
We also use server-side mechanisms that do not install cookies but follow the same consent logic: Meta Conversions API, TikTok Events API and Google Consent Mode v2. All operate under HURLEY 999, S.L. accounts.
-
INTERNATIONAL TRANSFERS
The use of cookies from Google, Meta, TikTok and Klaviyo may involve data transfers to the United States, covered by the EU-US Data Privacy Framework adequacy decision (July 2023) where the provider is certified, and in any case by the European Commission's Standard Contractual Clauses. Full details are available in our Privacy Policy.
-
BROWSER SETTINGS
In addition to the CMP banner, you can configure, delete or block cookies from your browser settings (Chrome, Firefox, Safari, Edge, Opera). Blocking necessary cookies may prevent the Website from working properly.
-
AMENDMENTS
This Policy may be updated due to legislative changes, provider updates or changes to the Website itself. The current version will always be the one published on the Website. If changes materially affect the purposes or providers, we will ask for your consent again.